Create Interactive Tour

Analysis Report http://o.ss2.us/

Overview

General Information

Sample URL:	http://o.ss2.us/
Analysis ID:	322693
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Startup

System is w10x64

iexplore.exe (PID: 2880 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5952 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2880 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: o.ss2.usConnection: Keep-Alive

Source: edge[1].htm.2.dr	String found in binary or memory: <a itemprop="sameAs" target="_blank" aria-label="Follow this page on Facebook" title="Follow this page on Facebook" href="https://www.facebook.com/microsoftedge"> equals www.facebook.com (Facebook)
Source: new[1].htm.2.dr	String found in binary or memory: <li><a class="youtube" href="https://www.youtube.com/user/firefoxchannel" data-link-type="footer" data-link-name="YouTube (@firefoxchannel)">YouTube<span> (@firefoxchannel)</span></a></li> equals www.youtube.com (Youtube)
Source: new[1].htm.2.dr	String found in binary or memory: <p><a href="https://addons.mozilla.org/firefox/addon/facebook-container/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=firefox-desktop" rel="external noopener" data-cta-type="link" data-cta-text="Download this browser extension" >Download this browser extension</a> to stop Facebook (and Instagram) from tracking you around the web.</p> equals www.facebook.com (Facebook)
Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_map":["list",["map","key","\/firefox\/android\/all\/","value","Systems \u0026 Languages"],["map","key","\/firefox\/android\/notes\/","value","Release notes"],["map","key","https:\/\/support.mozilla.org\/kb\/will-firefox-work-my-mobile-device","value","Supported devices"],["map","key","\/firefox\/sync\/","value","Learn more about Sync"],["map","key","\/firefox\/private-browsing\/","value","Learn more about Private Browsing"],["map","key","https:\/\/support.mozilla.org\/kb\/clear-your-browsing-history-and-other-personal-dat","value","Learn how to clear your history"],["map","key","https:\/\/www.youtube.com\/watch?v=u6Ww0udnVA0\u0026index=16\u0026list=PLA8ABF6B7A66A0C5E","value","Learn how to share your browser"],["map","key","https:\/\/www.youtube.com\/watch?v=a5nNPf-Uosc\u0026index=12\u0026list=PLA8ABF6B7A66A0C5E","value","See how it works - Smarter sharing for all"],["map","key","\/privacy\/websites\/#campaigns","value","Learn more"],["map","key","https:\/\/www.youtube.com\/watch?v=alW2g7Gnh6U\u0026list=PLA8ABF6B7A66A0C5E\u0026index=18","value","See how it works - All your faves, front and center"],["map","key","https:\/\/www.youtube.com\/watch?v=HKvyr0TIKF0\u0026index=14\u0026list=PLA8ABF6B7A66A0C5E","value","Learn more - A touch more personal"],["map","key","https:\/\/support.mozilla.org\/kb\/set-and-manage-default-search-engines-firefox-android","value","See how it works - Any search you like"],["map","key","https:\/\/support.mozilla.org\/kb\/save-web-pages-your-reading-list-firefox-android","value","Learn more about Reading List"],["map","key","https:\/\/support.mozilla.org\/kb\/view-articles-reader-view-firefox-android","value","Learn more about Reader View"],["map","key","https:\/\/support.mozilla.org\/kb\/change-default-language-firefox-android","value","Learn more - Change your language"],["map","key","https:\/\/support.mozilla.org\/kb\/use-firefox-android-send-videos-chromecast","value","Learn more - Take it to the big screen"]] equals www.youtube.com (Youtube)
Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_map":["list",["map","key","\/internet-health\/privacy-security\/#control","value","Anchor: User Control"],["map","key","\/internet-health\/privacy-security\/#security","value","Anchor: Cyber Security"],["map","key","\/internet-health\/privacy-security\/#surveillance","value","Anchor: Government Surveillance"],["map","key","http:\/\/www.pewinternet.org\/2015\/05\/20\/americans-attitudes-about-privacy-security-and-surveillance\/","value","Pew Research Center"],["map","key","https:\/\/support.apple.com\/HT203033","value","User Control - iOS"],["map","key","https:\/\/support.google.com\/googleplay\/answer\/6014972","value","User Control - Android"],["map","key","https:\/\/www.google.com\/ads\/preferences","value","User Control - Google"],["map","key","https:\/\/info.yahoo.com\/privacy\/us\/yahoo\/opt_out\/targeting\/details.html","value","User Control - Yahoo"],["map","key","https:\/\/www.facebook.com\/settings?tab=ads\u0026amp;view","value","User Control - Facebook"],["map","key","\/privacy\/","value","User Control - Privacy Policy"],["map","key","https:\/\/aboutthedata.com\/","value","User Control - Acxiom"],["map","key","https:\/\/en.wikipedia.org\/wiki\/List_of_data_breaches","value","Cyber Security - Data Breaches"],["map","key","https:\/\/support.mozilla.org\/kb\/create-secure-passwords-keep-your-identity-safe","value","Cyber Security - Strong pins"],["map","key","https:\/\/www.wired.com\/2016\/01\/you-need-a-password-manager\/","value","Cyber Security - Password manager"],["map","key","https:\/\/www.lockdownyourlogin.com\/","value","Cyber Security - 2-factor"],["map","key","https:\/\/advocacy.mozilla.org\/encrypt\/codemoji\/","value","Cyber Security - encryption"],["map","key","https:\/\/letsencrypt.org\/","value","Cyber Security - Universal Adoption"],["map","key","\/about\/policy\/lean-data\/","value","Cyber Security - Lean Data"],["map","key","https:\/\/www.cigionline.org\/internet-survey-2016","value","Surveillance - CIGI-Ipsos"],["map","key","http:\/\/www.greenbot.com\/article\/3119449\/android\/the-best-messaging-apps-with-end-to-end-encryption.html","value","Surveillance - Encrypted Apps"],["map","key","https:\/\/support.mozilla.org\/kb\/create-secure-passwords-keep-your-identity-safe?surveillance","value","Surveillance - Strong Passwords"],["map","key","https:\/\/www.wired.com\/2016\/01\/you-need-a-password-manager\/?surveillance","value","Surveillance - Password Manager"],["map","key","https:\/\/blog.mozilla.org\/netpolicy\/2016\/09\/19\/improving-government-disclosure-of-security-vulnerabilities\/","value","Surveillance - Reform at the policy level"],["map","key","https:\/\/blog.mozilla.org\/netpolicy\/2015\/06\/02\/mozilla-applauds-u-s-senates-passage-of-the-usa-freedom-act\/","value","Surveillance - USA freedom act"],["map","key","http:\/\/cyberlaw.stanford.edu\/events\/government-hacking-rule-41","value","Surveillance - Stanford's Center for Internet"],["map","key","https:\/\/internethealthreport.org\/","value","Interne
Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_map":["list",["map","key","\/internet-health\/privacy-security\/#control","value","Anchor: User Control"],["map","key","\/internet-health\/privacy-security\/#security","value","Anchor: Cyber Security"],["map","key","\/internet-health\/privacy-security\/#surveillance","value","Anchor: Government Surveillance"],["map","key","http:\/\/www.pewinternet.org\/2015\/05\/20\/americans-attitudes-about-privacy-security-and-surveillance\/","value","Pew Research Center"],["map","key","https:\/\/support.apple.com\/HT203033","value","User Control - iOS"],["map","key","https:\/\/support.google.com\/googleplay\/answer\/6014972","value","User Control - Android"],["map","key","https:\/\/www.google.com\/ads\/preferences","value","User Control - Google"],["map","key","https:\/\/info.yahoo.com\/privacy\/us\/yahoo\/opt_out\/targeting\/details.html","value","User Control - Yahoo"],["map","key","https:\/\/www.facebook.com\/settings?tab=ads\u0026amp;view","value","User Control - Facebook"],["map","key","\/privacy\/","value","User Control - Privacy Policy"],["map","key","https:\/\/aboutthedata.com\/","value","User Control - Acxiom"],["map","key","https:\/\/en.wikipedia.org\/wiki\/List_of_data_breaches","value","Cyber Security - Data Breaches"],["map","key","https:\/\/support.mozilla.org\/kb\/create-secure-passwords-keep-your-identity-safe","value","Cyber Security - Strong pins"],["map","key","https:\/\/www.wired.com\/2016\/01\/you-need-a-password-manager\/","value","Cyber Security - Password manager"],["map","key","https:\/\/www.lockdownyourlogin.com\/","value","Cyber Security - 2-factor"],["map","key","https:\/\/advocacy.mozilla.org\/encrypt\/codemoji\/","value","Cyber Security - encryption"],["map","key","https:\/\/letsencrypt.org\/","value","Cyber Security - Universal Adoption"],["map","key","\/about\/policy\/lean-data\/","value","Cyber Security - Lean Data"],["map","key","https:\/\/www.cigionline.org\/internet-survey-2016","value","Surveillance - CIGI-Ipsos"],["map","key","http:\/\/www.greenbot.com\/article\/3119449\/android\/the-best-messaging-apps-with-end-to-end-encryption.html","value","Surveillance - Encrypted Apps"],["map","key","https:\/\/support.mozilla.org\/kb\/create-secure-passwords-keep-your-identity-safe?surveillance","value","Surveillance - Strong Passwords"],["map","key","https:\/\/www.wired.com\/2016\/01\/you-need-a-password-manager\/?surveillance","value","Surveillance - Password Manager"],["map","key","https:\/\/blog.mozilla.org\/netpolicy\/2016\/09\/19\/improving-government-disclosure-of-security-vulnerabilities\/","value","Surveillance - Reform at the policy level"],["map","key","https:\/\/blog.mozilla.org\/netpolicy\/2015\/06\/02\/mozilla-applauds-u-s-senates-passage-of-the-usa-freedom-act\/","value","Surveillance - USA freedom act"],["map","key","http:\/\/cyberlaw.stanford.edu\/events\/government-hacking-rule-41","value","Surveillance - Stanford's Center for Internet"],["map","key","https:\/\/internethealthreport.org\/","value","Interne
Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_map":["list",["map","key","\/privacy\/websites\/","value","Website Privacy Notice"],["map","key","http:\/\/www.pewinternet.org\/2015\/05\/20\/americans-attitudes-about-privacy-security-and-surveillance\/","value","(Pew Research Center, May 2015)"],["map","key","\/lightbeam\/","value","Lightbeam"],["map","key","https:\/\/www.google.com\/ads\/preferences","value","Google"],["map","key","https:\/\/info.yahoo.com\/privacy\/us\/yahoo\/opt_out\/targeting\/details.html","value","Yahoo!"],["map","key","https:\/\/www.facebook.com\/settings?tab=ads\u0026amp;view","value","Facebook ads"],["map","key","https:\/\/aboutthedata.com\/","value","edit data that equals www.facebook.com (Facebook)
Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_map":["list",["map","key","\/privacy\/websites\/","value","Website Privacy Notice"],["map","key","http:\/\/www.pewinternet.org\/2015\/05\/20\/americans-attitudes-about-privacy-security-and-surveillance\/","value","(Pew Research Center, May 2015)"],["map","key","\/lightbeam\/","value","Lightbeam"],["map","key","https:\/\/www.google.com\/ads\/preferences","value","Google"],["map","key","https:\/\/info.yahoo.com\/privacy\/us\/yahoo\/opt_out\/targeting\/details.html","value","Yahoo!"],["map","key","https:\/\/www.facebook.com\/settings?tab=ads\u0026amp;view","value","Facebook ads"],["map","key","https:\/\/aboutthedata.com\/","value","edit data that equals www.yahoo.com (Yahoo)
Source: edge[1].htm.2.dr	String found in binary or memory: <html lang="en-us" class="no-js" dir="ltr" xmlns="http://www.w3.org/1999/xhtml" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://www.facebook.com/2008/fbml"> equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: o.ss2.us

Source: edge[1].htm.2.dr	String found in binary or memory: http://aka.ms/arb-agreement-1
Source: edge[1].htm.2.dr	String found in binary or memory: http://aka.ms/exporting
Source: edge[1].htm.2.dr	String found in binary or memory: http://aka.ms/mpegla
Source: edge[1].htm.2.dr	String found in binary or memory: http://aka.ms/thirdpartynotices
Source: new[1].htm.2.dr	String found in binary or memory: http://blog.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav&amp
Source: 50-f1e180[1].js.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: edge[1].htm.2.dr	String found in binary or memory: http://schema.org/Organization
Source: mwf-auto-init-main.var.min[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: W2E70PTY.htm.2.dr	String found in binary or memory: http://www.starfieldtech.com/
Source: new[1].htm.2.dr	String found in binary or memory: https://accounts.firefox.com.cn/
Source: new[1].htm.2.dr	String found in binary or memory: https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_s
Source: new[1].htm.2.dr	String found in binary or memory: https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=
Source: new[1].htm.2.dr	String found in binary or memory: https://accounts.firefox.com/
Source: new[1].htm.2.dr	String found in binary or memory: https://accounts.firefox.com/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_sour
Source: new[1].htm.2.dr	String found in binary or memory: https://accounts.firefox.com/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=moz
Source: new[1].htm.2.dr	String found in binary or memory: https://addons.mozilla.org/firefox/?utm_source=www.mozilla.org&utm_medium=referral&utm_campa
Source: new[1].htm.2.dr	String found in binary or memory: https://addons.mozilla.org/firefox/addon/facebook-container/?utm_source=www.mozilla.org&utm_medi
Source: new[1].htm.2.dr	String found in binary or memory: https://addons.mozilla.org/firefox/extensions/?utm_source=www.mozilla.org&utm_medium=referral&am
Source: gtm[1].js.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: edge[1].htm.2.dr	String found in binary or memory: https://apps.apple.com/app/apple-store/id1288723196?pt=80423&ct=EdgeDownloadPage&mt=8
Source: launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr, RC06c885110f0a48b285d3635c51db10f6-source.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC06c885110f0a48b285d3635c51db10f
Source: RC3832877df1a545d7a1b4ddb8df0b9113-source.min[1].js.2.dr, launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC3832877df1a545d7a1b4ddb8df0b911
Source: launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC4219ad13a91f48d580c6ba0698f5e7d
Source: launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC5237adfb30ed47c09efb9497e0b2ca6
Source: RC8bf86b2e25ad4866a6b1b265d645790e-source.min[1].js.2.dr, launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC8bf86b2e25ad4866a6b1b265d645790
Source: launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC929a5d988f01430b8db16b1888926c4
Source: launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr, RC994583e7d8754405b7f8eff9ecd39653-source.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC994583e7d8754405b7f8eff9ecd3965
Source: RCbbe781f9cd1148bebdaad4990ba9e937-source.min[1].js.2.dr, launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCbbe781f9cd1148bebdaad4990ba9e93
Source: RCc71c68d7b8f049b6a6f3b669bd5d00c1-source.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCc71c68d7b8f049b6a6f3b669bd5d00c
Source: RCd01d50cad19649bf857a22be5995480e-source.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCd01d50cad19649bf857a22be5995480
Source: RCee0d4d5fd4424c8390d703b105f82c31-source.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCee0d4d5fd4424c8390d703b105f82c3
Source: launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.js
Source: launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: new[1].htm.2.dr	String found in binary or memory: https://blog.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=footer
Source: new[1].htm.2.dr	String found in binary or memory: https://blog.mozilla.org/firefox/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaig
Source: new[1].htm.2.dr	String found in binary or memory: https://blog.mozilla.org/press/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=
Source: new[1].htm.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=fo
Source: new[1].htm.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1122305#c8
Source: new[1].htm.2.dr	String found in binary or memory: https://careers.mozilla.org
Source: new[1].htm.2.dr	String found in binary or memory: https://careers.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=foo
Source: new[1].htm.2.dr	String found in binary or memory: https://careers.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav
Source: edge[1].htm.2.dr	String found in binary or memory: https://channel9.msdn.com/
Source: new[1].htm.2.dr	String found in binary or memory: https://commonvoice.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://content.secureserver.net/promobanner/
Source: new[1].htm.2.dr	String found in binary or memory: https://developer.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=n
Source: new[1].htm.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Tools/?utm_source=www.mozilla.org&utm_medium=referral&utm
Source: new[1].htm.2.dr	String found in binary or memory: https://donate.mozilla.org/en-US/?presets=50
Source: stub-attribution.8015cb233077[1].js.2.dr	String found in binary or memory: https://download.mozilla.org
Source: new[1].htm.2.dr	String found in binary or memory: https://download.mozilla.org/?product=firefox-stub&os=win&lang=en-US
Source: new[1].htm.2.dr	String found in binary or memory: https://firefox.com/set_hsts.gif
Source: new[1].htm.2.dr	String found in binary or memory: https://foundation.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=
Source: new[1].htm.2.dr	String found in binary or memory: https://foundation.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=footer
Source: new[1].htm.2.dr	String found in binary or memory: https://fpn.firefox.com/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav&amp
Source: new[1].htm.2.dr	String found in binary or memory: https://getpocket.com/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=sticky-pr
Source: new[1].htm.2.dr	String found in binary or memory: https://getpocket.com/firefox_learnmore/?utm_source=www.mozilla.org&utm_medium=referral&utm_
Source: gtm[1].js.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: mwf-auto-init-main.var.min[1].js.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: new[1].htm.2.dr	String found in binary or memory: https://hubs.mozilla.com/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav&am
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4DnuZ
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Dnv6
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Dnwt
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4DsDH
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GeFi?ver=4447
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GhRT?ver=5f90
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GhRY?ver=52e8
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GiCD
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GpKa
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Gphi?ver=6f6a
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Gphj?ver=01c0
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GsBq
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GsBr
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GuOc
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Gy6e
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4IFFu
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4IMai
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4IQAK
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4IwKm
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4n1yl
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4n4cm
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ncJ7
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ncJa
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ncJa?ver=adbf
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4nqTh
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tG3O
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tIoW
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tMOD
Source: edge[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tQVa
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/Sitecore/5/8/starfield-logo.png
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/Sitecore/A/0/mrq-green-100-desktop-520.jpg"
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/Sitecore/A/8/mrq-orange-200-mobile-inline.jpg"
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/Sitecore/A/C/mrq-green-100-mobile-inline.jpg"
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/Sitecore/B/8/mrq-green-100-tablet-440.jpg"
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/Sitecore/B/D/mrq-orange-200-tablet-440.jpg"
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/Sitecore/F/7/mrq-orange-200-desktop-520.jpg"
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/cms/sales/css/sales-cms-ewtNlWg8O33qZvle1pz3ooMlkzDbdGZb7fUBNSNQE7Y1.min.css
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/cms/sales/js/auth-v8.min.js
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img1.wsimg.com/cms/sales/js/sales-cms-m5dfhHAYxYelydH0TOQilVeHUgw_6MEeM366phtlfb01.min.js
Source: upgrade-your-browser[1].htm.2.dr	String found in binary or memory: https://img1.wsimg.com/wrhs/browser-deprecation-warning/Chrome.png
Source: upgrade-your-browser[1].htm.2.dr	String found in binary or memory: https://img1.wsimg.com/wrhs/browser-deprecation-warning/Firefox.png
Source: upgrade-your-browser[1].htm.2.dr	String found in binary or memory: https://img1.wsimg.com/wrhs/browser-deprecation-warning/Safari.png
Source: upgrade-your-browser[1].htm.2.dr	String found in binary or memory: https://img1.wsimg.com/wrhs/browser-deprecation-warning/style-pl-ltr.css
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img6.wsimg.com/wrhs/a3ccccf352c3f2eca28b9efead3483d2/uxcore2.min.css
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img6.wsimg.com/wrhs/d6c7b1acb132140b70d61ad9ce6bc527/heartbeat.min.js
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://img6.wsimg.com/wrhs/e099922f63ddb7a5d4027821f53ee78f/tcc.min.js
Source: new[1].htm.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/firefox-private-safe-browser/id989804926
Source: new[1].htm.2.dr	String found in binary or memory: https://labs.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav&am
Source: new[1].htm.2.dr	String found in binary or memory: https://mixedreality.mozilla.org/firefox-reality/?utm_source=www.mozilla.org&utm_medium=referral
Source: mwf-auto-init-main.var.min[1].js.2.dr	String found in binary or memory: https://modernizr.com/download/?-eventlistener-picture-printshiv-setclasses
Source: new[1].htm.2.dr	String found in binary or memory: https://monitor.firefox.com/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav
Source: new[1].htm.2.dr	String found in binary or memory: https://monitor.firefox.com/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=sti
Source: new[1].htm.2.dr	String found in binary or memory: https://mozilla.design/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=footer&u
Source: edge[1].htm.2.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: edge[1].htm.2.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: gtm[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: new[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=cn.mozilla.firefox&referrer=utm_source%3Dmozilla%2
Source: edge[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.microsoft.emmx&referrer=utm_source%3DAnaheimUpsell
Source: new[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dmozilla%
Source: edge[1].htm.2.dr	String found in binary or memory: https://products.office.com/en-us/academic/compare-office-365-education-plans
Source: new[1].htm.2.dr	String found in binary or memory: https://relay.firefox.com/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav&a
Source: new[1].htm.2.dr	String found in binary or memory: https://research.mozilla.org/webassembly/?utm_source=www.mozilla.org&utm_medium=referral&utm
Source: new[1].htm.2.dr	String found in binary or memory: https://schema.org/
Source: mwf-auto-init-main.var.min[1].js.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://ssl-ccp.secureserver.net/repository?origin=CALLISTO
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=foo
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/firefox-fire-tv
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/get-started-firefox-lite
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/products/firefox
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop?utm_source=www.mozilla.o
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/kb/firefox-screenshots?utm_source=www.mozilla.org&utm_medium=referra
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/products/firefox/?utm_source=www.mozilla.org&utm_medium=referral&amp
Source: new[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/products/firefox?utm_source=www.mozilla.org&utm_medium=referral&
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/godaddy/godaddy/prod/utag.js
Source: new[1].htm.2.dr	String found in binary or memory: https://twitter.com/firefox
Source: edge[1].htm.2.dr	String found in binary or memory: https://twitter.com/microsoftedge
Source: new[1].htm.2.dr	String found in binary or memory: https://twitter.com/mozilla
Source: new[1].htm.2.dr	String found in binary or memory: https://vpn.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=nav&amp
Source: new[1].htm.2.dr	String found in binary or memory: https://vpn.mozilla.org/?utm_source=www.mozilla.org&utm_medium=referral&utm_campaign=sticky-
Source: upgrade-your-browser[1].htm.2.dr	String found in binary or memory: https://www.apple.com/safari/
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: gtm[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: upgrade-your-browser[1].htm.2.dr	String found in binary or memory: https://www.google.com/chrome/
Source: gtm[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: new[1].htm.2.dr	String found in binary or memory: https://www.instagram.com/firefox/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.instagram.com/mozilla/
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.microsoft.
Source: edge[1].htm.2.dr	String found in binary or memory: https://www.microsoftedgeinsider.com
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.mozilla.or
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.mozilla.orer.net/upgrade-your-browser
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxandroid
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxbeta
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxbrowser
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxdeveloper
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxenterprise
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxfiretv
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxios
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxlinux
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxlite
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxmac
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxnightly
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#firefoxwindows
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/#organization
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/an/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/be/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ca/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/contribute
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/cs/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/cy/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/da/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/de/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/el/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-CA/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/channel/desktop/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/developer/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/enterprise/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/linux/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/mac/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/mobile/
Source: ~DF255C6DA31BAAD1E7.TMP.1.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/new/
Source: ~DF255C6DA31BAAD1E7.TMP.1.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/new/owser
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/notes/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/windows/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/es-AR/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/es-CL/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/es-ES/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/es-MX/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/eu/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/fi/firefox/new/
Source: upgrade-your-browser[1].htm.2.dr, new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/fr/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/fy-NL/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/gl/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/gn/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/hr/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/hu/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/hy-AM/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ia/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/id/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/it/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ja/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ka/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ko/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/lt/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/css/BUNDLES/common-old-ie.6de913db6352.css
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/css/BUNDLES/common.ed203610d03a.css
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/css/BUNDLES/firefox_desktop_download.ed849a028caf.css
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/css/BUNDLES/firefox_desktop_download_ie8.8554bbb6d565.css
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/css/BUNDLES/firefox_desktop_download_ie9.22b60e973632.css
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/favicons/firefox/browser/apple-touch-icon.79c2abeb4e35.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.pngr
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/favicons/firefox/browser/favicon.f093404c0135.ico
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/block-high-res.085eae976c77.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/block.fd6f14710ab5.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/contain.9667c4e6bde3.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/customize.23a30bdf3e96.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/dark-mode.403c31d1d417.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/devices-high-res.f9183504362a.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/devices.837eed3af485.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/etp.9ddd58011b0e.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/everyone.439ffb0518fa.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/goog.f3fc73ae38d8.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/highlights.5c0ee4d4d464.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/icon-check.1616bea349b4.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/icon-dash.ef660bd874fc.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/contain.41609482b85d.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/customize.c7c7ea078776.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/dark-mode.1c68a7642490.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/etp.7eb15e0dc639.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/everyone.dcedbb8ac2c1.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/goog.27ed69741426.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/highlights.e07971ba2884.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/icon-check.c91a6f8e4717.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/icon-dash.d80e28605027.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/lock.b92c7e55bd98.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/passwords.a3e9f3026396.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/picture-in-picture.85b50c01d575.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/pinp.1117058dbfcf.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/privacy.6600d165965f.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/screenshots.cb7e42d6640c.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/search.9a8494844596.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/ie8/sync.222890d2637e.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/lock.bfecd7cb7f54.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/passwords.4d86537d5161.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/person-mozilla-high-res.05eb0b11ed9a.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/person-mozilla.5fd76ac595b3.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/person-privacy-high-res.eebf652a59e1.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/person-privacy.02557c8137a2.jpg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/picture-in-picture.e501cd8c6155.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/pinp.4dfcc9fd1d3e.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/privacy.6c972615ac63.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/screen-high-res.76867fcad223.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/screen.19f69ea7f0ea.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/screenshots.cb389796b71b.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/search.4c947088db6f.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/firefox/new/desktop/sync.af5c802470de.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/icons/connection.1f5bf9566286.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/l10n/en-US/firefox/android/btn-google-play-high-res.87d9720bbc8b.p
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/l10n/en-US/firefox/android/btn-google-play.77bdbc935c58.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/l10n/en-US/firefox/ios/btn-app-store.1cfd5dba4a92.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/logos/chrome/logo-chrome.36729db6cd71.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/logos/edge/logo-edge.016a47a7fab3.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/logos/firefox/logo-reality.6bcc5b8e7099.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/logos/safari/logo-safari.2a116a2615e2.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/nav/icons/icon-common-voice.127fa3f5dcb0.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/nav/icons/icon-fpn-beta.9e7bc3a29f6e.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/nav/icons/icon-privacy-promise.eee1662acb03.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/img/nav/icons/icon-relay-beta.acc9d8b3aa68.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/common-ie.09359021b65a.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/common.d920e24f84b3.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/firefox_desktop_download.ba4e97dcd181.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/firefox_new_desktop_join_modal.69e5ca482b50.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/gtm-snippet.9f9cf2026c5f.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/sentry.d4a49ae2b9e1.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/site.c3a28476932c.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/BUNDLES/stub-attribution.8015cb233077.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/js/libs/html5shiv.98460818858d.js
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/browser/developer/logo-sm.d3157a6ac671.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo-lg-high-res.fbc7ffbb50fd.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo-sm.f2523d97cbe0.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo.eb1324e44442.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/browser/og.4ad05d4125a5.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/lockwise/logo.339be800ad8d.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/monitor/logo-sm.0bc3e6ae9d32.png
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/firefox/monitor/logo.d97e5516f9e6.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/mozilla/black.40d1af88c248.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/media/protocol/img/logos/pocket/pocket.f21f7a5dedba.svg
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/mr/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/nb-NO/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/nl/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/nn-NO/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/pa-IN/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/pl/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/pt-BR/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/pt-PT/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ro/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ru/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/sk/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/sl/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/sq/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/sr/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/sv-SE/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/th/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/tr/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/uk/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/ur/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/vi/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/zh-CN/firefox/new/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/zh-TW/firefox/new/
Source: edge[1].htm.2.dr	String found in binary or memory: https://www.onenote.com/
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.secureservech.com/er.net/upgrade-your-browserRoot
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://www.secureserver.net/legal/agreements/privacy-policy?target=_blank&prog_id=504762&pl_id=5047
Source: ~DF255C6DA31BAAD1E7.TMP.1.dr, DER8P7GQ.htm.2.dr	String found in binary or memory: https://www.secureserver.net/upgrade-your-browser
Source: ~DF255C6DA31BAAD1E7.TMP.1.dr	String found in binary or memory: https://www.secureserver.net/upgrade-your-browser&Update
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.secureserver.net/upgrade-your-browserRoot
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.secureserver.net/upgrade-your-browsercom/en-us/edgenew/owserRoot
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.secureserver.net/upgrade-your-browserg/en-US/firefox/new/owserRoot
Source: edge[1].htm.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: DER8P7GQ.htm.2.dr	String found in binary or memory: https://www.starfieldtech.com/
Source: {9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.starfieldtech.com/Root
Source: new[1].htm.2.dr	String found in binary or memory: https://www.wikidata.org/wiki/Q698
Source: edge[1].htm.2.dr	String found in binary or memory: https://www.xbox.com/
Source: new[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/user/firefoxchannel

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: classification engine

Classification label: clean0.win@3/166@12/4

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9B4DDF76-2F85-11EB-90E5-ECF4BB570DC9}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF3195614C07DBC29C.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2880 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2880 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol3	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://o.ss2.us/	1%	Virustotal		Browse
http://o.ss2.us/	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
sni1gl.wpc.gammacdn.net	0%	Virustotal		Browse
o.ss2.us	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_s	0%	URL Reputation	safe
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_s	0%	URL Reputation	safe
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_s	0%	URL Reputation	safe
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_s	0%	URL Reputation	safe
https://www.secureservech.com/er.net/upgrade-your-browserRoot	0%	Avira URL Cloud	safe
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=	0%	URL Reputation	safe
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=	0%	URL Reputation	safe
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=	0%	URL Reputation	safe
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=	0%	URL Reputation	safe
https://accounts.firefox.com.cn/	0%	URL Reputation	safe
https://accounts.firefox.com.cn/	0%	URL Reputation	safe
https://accounts.firefox.com.cn/	0%	URL Reputation	safe
https://accounts.firefox.com.cn/	0%	URL Reputation	safe
https://www.mozilla.or	0%	URL Reputation	safe
https://www.mozilla.or	0%	URL Reputation	safe
https://www.mozilla.or	0%	URL Reputation	safe
https://www.mozilla.or	0%	URL Reputation	safe
https://scottjehl.github.io/picturefill/	0%	Avira URL Cloud	safe
https://www.mozilla.orer.net/upgrade-your-browser	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.microsoft.	0%	URL Reputation	safe
https://www.microsoft.	0%	URL Reputation	safe
https://www.microsoft.	0%	URL Reputation	safe
https://www.microsoftedgeinsider.com	0%	URL Reputation	safe
https://www.microsoftedgeinsider.com	0%	URL Reputation	safe
https://www.microsoftedgeinsider.com	0%	URL Reputation	safe

Domains and IPs Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
sni1gl.wpc.gammacdn.net	152.199.21.175	true	false	0%, Virustotal, Browse	unknown
dzlgdtxcws9pb.cloudfront.net	13.224.96.162	true	false		high
o.ss2.us	13.224.89.84	true	false	1%, Virustotal, Browse	unknown
firefox.com	44.236.72.93	true	false		high
img1.wsimg.com	unknown	unknown	false		high
consentreceiverfd-prod.azurefd.net	unknown	unknown	false		unknown
www.secureserver.net	unknown	unknown	false		high
g.msn.com	unknown	unknown	false		high
www.firefox.com	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
www.starfieldtech.com	unknown	unknown	false		high
dc.services.visualstudio.com	unknown	unknown	false		high
img6.wsimg.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.secureserver.net/upgrade-your-browser	false		high
http://o.ss2.us/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.starfieldtech.com/	DER8P7GQ.htm.2.dr	false		high
https://outlook.live.com/owa/	edge[1].htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCc71c68d7b8f049b6a6f3b669bd5d00c	RCc71c68d7b8f049b6a6f3b669bd5d00c1-source.min[1].js.2.dr	false		high
https://img1.wsimg.com/wrhs/browser-deprecation-warning/Safari.png	upgrade-your-browser[1].htm.2.dr	false		high
https://www.secureserver.net/legal/agreements/privacy-policy?target=_blank&prog_id=504762&pl_id=5047	DER8P7GQ.htm.2.dr	false		high
https://img1.wsimg.com/wrhs/browser-deprecation-warning/Firefox.png	upgrade-your-browser[1].htm.2.dr	false		high
https://www.secureserver.net/upgrade-your-browser&Update	~DF255C6DA31BAAD1E7.TMP.1.dr	false		high
https://img6.wsimg.com/wrhs/e099922f63ddb7a5d4027821f53ee78f/tcc.min.js	DER8P7GQ.htm.2.dr	false		high
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_s	new[1].htm.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.secureservech.com/er.net/upgrade-your-browserRoot	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://img1.wsimg.com/Sitecore/A/0/mrq-green-100-desktop-520.jpg"	DER8P7GQ.htm.2.dr	false		high
https://products.office.com/en-us/academic/compare-office-365-education-plans	edge[1].htm.2.dr	false		high
https://img1.wsimg.com/Sitecore/B/D/mrq-orange-200-tablet-440.jpg"	DER8P7GQ.htm.2.dr	false		high
https://img1.wsimg.com/Sitecore/B/8/mrq-green-100-tablet-440.jpg"	DER8P7GQ.htm.2.dr	false		high
https://accounts.firefox.com.cn/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=	new[1].htm.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://img1.wsimg.com/Sitecore/A/C/mrq-green-100-mobile-inline.jpg"	DER8P7GQ.htm.2.dr	false		high
https://firefox.com/set_hsts.gif	new[1].htm.2.dr	false		high
https://accounts.firefox.com/signup?entrypoint=mozilla.org-firefox-desktop&form_type=button&utm_sour	new[1].htm.2.dr	false		high
https://img6.wsimg.com/wrhs/d6c7b1acb132140b70d61ad9ce6bc527/heartbeat.min.js	DER8P7GQ.htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC4219ad13a91f48d580c6ba0698f5e7d	launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	false		high
https://careers.mozilla.org	new[1].htm.2.dr	false		high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	mwf-auto-init-main.var.min[1].js.2.dr	false		high
https://support.mozilla.org/en-US/kb/get-started-firefox-lite	new[1].htm.2.dr	false		high
https://accounts.firefox.com/signup?entrypoint=mozilla.org-globalnav&form_type=button&utm_source=moz	new[1].htm.2.dr	false		high
https://www.instagram.com/mozilla/	new[1].htm.2.dr	false		high
http://aka.ms/mpegla	edge[1].htm.2.dr	false		high
https://accounts.firefox.com.cn/	new[1].htm.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.secureserver.net/upgrade-your-browsercom/en-us/edgenew/owserRoot	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://github.com/krux/postscribe/blob/master/LICENSE.	gtm[1].js.2.dr	false		high
https://modernizr.com/download/?-eventlistener-picture-printshiv-setclasses	mwf-auto-init-main.var.min[1].js.2.dr	false		high
https://www.starfieldtech.com/Root	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC994583e7d8754405b7f8eff9ecd3965	launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr, RC994583e7d8754405b7f8eff9ecd39653-source.min[1].js.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	analytics[1].js.2.dr	false		high
http://aka.ms/thirdpartynotices	edge[1].htm.2.dr	false		high
https://content.secureserver.net/promobanner/	DER8P7GQ.htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC06c885110f0a48b285d3635c51db10f	launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr, RC06c885110f0a48b285d3635c51db10f6-source.min[1].js.2.dr	false		high
http://github.com/requirejs/almond/LICENSE	50-f1e180[1].js.2.dr	false		high
https://www.mozilla.or	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.secureserver.net/upgrade-your-browserg/en-US/firefox/new/owserRoot	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop?utm_source=www.mozilla.o	new[1].htm.2.dr	false		high
https://img1.wsimg.com/cms/sales/js/auth-v8.min.js	DER8P7GQ.htm.2.dr	false		high
https://img1.wsimg.com/wrhs/browser-deprecation-warning/Chrome.png	upgrade-your-browser[1].htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC5237adfb30ed47c09efb9497e0b2ca6	launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	false		high
https://img1.wsimg.com/cms/sales/css/sales-cms-ewtNlWg8O33qZvle1pz3ooMlkzDbdGZb7fUBNSNQE7Y1.min.css	DER8P7GQ.htm.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	mwf-auto-init-main.var.min[1].js.2.dr	false		high
http://aka.ms/arb-agreement-1	edge[1].htm.2.dr	false		high
https://support.mozilla.org/en-US/products/firefox	new[1].htm.2.dr	false		high
https://www.secureserver.net/upgrade-your-browserRoot	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://accounts.firefox.com/	new[1].htm.2.dr	false		high
https://img1.wsimg.com/Sitecore/F/7/mrq-orange-200-desktop-520.jpg"	DER8P7GQ.htm.2.dr	false		high
https://twitter.com/mozilla	new[1].htm.2.dr	false		high
https://www.skype.com/en/	edge[1].htm.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1122305#c8	new[1].htm.2.dr	false		high
https://scottjehl.github.io/picturefill/	mwf-auto-init-main.var.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://www.mozilla.orer.net/upgrade-your-browser	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC929a5d988f01430b8db16b1888926c4	launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	false		high
https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.js	launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	false		high
https://img1.wsimg.com/wrhs/browser-deprecation-warning/style-pl-ltr.css	upgrade-your-browser[1].htm.2.dr	false		high
https://twitter.com/firefox	new[1].htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC8bf86b2e25ad4866a6b1b265d645790	RC8bf86b2e25ad4866a6b1b265d645790e-source.min[1].js.2.dr, launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	false		high
https://donate.mozilla.org/en-US/?presets=50	new[1].htm.2.dr	false		high
https://www.wikidata.org/wiki/Q698	new[1].htm.2.dr	false		high
https://img1.wsimg.com/Sitecore/5/8/starfield-logo.png	DER8P7GQ.htm.2.dr	false		high
https://ssl-ccp.secureserver.net/repository?origin=CALLISTO	DER8P7GQ.htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCbbe781f9cd1148bebdaad4990ba9e93	RCbbe781f9cd1148bebdaad4990ba9e937-source.min[1].js.2.dr, launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	false		high
http://www.starfieldtech.com/	W2E70PTY.htm.2.dr	false		high
https://onedrive.live.com/about/en-us/	edge[1].htm.2.dr	false		high
https://schema.org/	new[1].htm.2.dr	false		high
https://www.onenote.com/	edge[1].htm.2.dr	false		high
https://support.mozilla.org/en-US/kb/firefox-fire-tv	new[1].htm.2.dr	false		high
https://tags.tiqcdn.com/utag/godaddy/godaddy/prod/utag.js	DER8P7GQ.htm.2.dr	false		high
https://img6.wsimg.com/wrhs/a3ccccf352c3f2eca28b9efead3483d2/uxcore2.min.css	DER8P7GQ.htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCee0d4d5fd4424c8390d703b105f82c3	RCee0d4d5fd4424c8390d703b105f82c31-source.min[1].js.2.dr	false		high
https://img1.wsimg.com/cms/sales/js/sales-cms-m5dfhHAYxYelydH0TOQilVeHUgw_6MEeM366phtlfb01.min.js	DER8P7GQ.htm.2.dr	false		high
https://www.google.%/ads/ga-audiences	analytics[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
https://img1.wsimg.com/Sitecore/A/8/mrq-orange-200-mobile-inline.jpg"	DER8P7GQ.htm.2.dr	false		high
https://www.microsoft.	{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.youtube.com/user/firefoxchannel	new[1].htm.2.dr	false		high
https://twitter.com/microsoftedge	edge[1].htm.2.dr	false		high
https://www.xbox.com/	edge[1].htm.2.dr	false		high
https://www.instagram.com/firefox/	new[1].htm.2.dr	false		high
http://schema.org/Organization	edge[1].htm.2.dr	false		high
https://www.microsoftedgeinsider.com	edge[1].htm.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCd01d50cad19649bf857a22be5995480	RCd01d50cad19649bf857a22be5995480e-source.min[1].js.2.dr	false		high
https://channel9.msdn.com/	edge[1].htm.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC3832877df1a545d7a1b4ddb8df0b911	RC3832877df1a545d7a1b4ddb8df0b9113-source.min[1].js.2.dr, launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js.2.dr	false		high
https://www.secureserver.net/upgrade-your-browser	~DF255C6DA31BAAD1E7.TMP.1.dr, DER8P7GQ.htm.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
44.236.72.93	unknown	United States	16509	AMAZON-02US	false
13.224.89.84	unknown	United States	16509	AMAZON-02US	false
13.224.96.162	unknown	United States	16509	AMAZON-02US	false
152.199.21.175	unknown	United States	15133	EDGECASTUS	false

General Information

Joe Sandbox Version:	31.0.0 Red Diamond
Analysis ID:	322693
Start date:	25.11.2020
Start time:	17:19:55
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://o.ss2.us/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@3/166@12/4
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://www.mozilla.org/firefox/new/ Browsing link: https://www.microsoft.com/edge/
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, MpCmdRun.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe Excluded IPs from analysis (whitelisted): 104.43.139.144, 13.88.21.125, 104.83.120.32, 2.21.57.103, 88.221.227.118, 104.83.102.204, 51.104.144.132, 104.18.165.34, 104.18.164.34, 172.217.168.8, 104.80.28.60, 172.217.168.14, 92.122.145.53, 92.122.213.160, 92.122.213.163, 104.80.28.252, 92.122.213.176, 92.122.213.193, 13.107.246.13, 92.122.213.247, 92.122.213.194, 104.80.29.181, 152.199.19.160, 152.199.19.161, 51.107.59.180, 65.55.44.109, 40.88.32.150, 2.20.142.209, 2.20.142.210, 40.67.251.132, 20.54.26.129, 52.142.114.176 Excluded domains from analysis (whitelisted): mwf-service.akamaized.net, arc.msn.com.nsatc.net, www.mozilla.org.cdn.cloudflare.net, cn-assets.adobedtm.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net, wns.notify.windows.com.akadns.net, e11290.dspg.akamaiedge.net, skypedataprdcoleus15.cloudapp.net, www.microsoft.com-c-3.edgekey.net, db5p.wns.notify.windows.com.akadns.net, star-azurefd-prod.trafficmanager.net, audownload.windowsupdate.nsatc.net, watson.telemetry.microsoft.com, au-bg-shim.trafficmanager.net, www.google-analytics.com, fs.microsoft.com, a1835.g2.akamai.net, db3p-ris-pf-prod-atm.trafficmanager.net, global.vortex.data.trafficmanager.net, ris-prod.trafficmanager.net, swn-breeziest-in.cloudapp.net, skypedataprdcolcus16.cloudapp.net, web.vortex.data.trafficmanager.net, c-s.cms.ms.akadns.net, az416426.vo.msecnd.net, ris.api.iris.microsoft.com, t-0003.t-msedge.net, blobcollector.events.data.trafficmanager.net, c.s-microsoft.com-c.edgekey.net, cs9.wpc.v0cdn.net, au.download.windowsupdate.com.edgesuite.net, e2836.g.akamaiedge.net, e16135.a.akamaiedge.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, g-msn-com-nsatc.trafficmanager.net, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, iecvlist.microsoft.com, par02p.wns.notify.windows.com.akadns.net, go.microsoft.com, www.googletagmanager.com, emea1.notify.windows.com.akadns.net, e8843.dscx.akamaiedge.net, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, wildcard-ipv6.secureserver.net.edgekey.net, statics-marketingsites-neu-ms-com.akamaized.net, client.wns.windows.com, www-google-analytics.l.google.com, cs22.wpc.v0cdn.net, ie9comview.vo.msecnd.net, www-googletagmanager.l.google.com, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, starfieldtech.com.edgekey.net, web.vortex.data.microsoft.com, c.s-microsoft.com, global-wildcard.wsimg.com.edgekey.net, e7808.dscg.akamaiedge.net, go.microsoft.com.edgekey.net, dc.trafficmanager.net, a1963.g2.akamai.net, dc.applicationinsights.microsoft.com, www.mozilla.org, e13678.dscg.akamaiedge.net, az725175.vo.msecnd.net, skypedataprdcolwus15.cloudapp.net, www.microsoft.com, e13678.dspb.akamaiedge.net, wcpstatic.microsoft.com Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\8P7RGF10\www.microsoft[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	modified
Size (bytes):	468
Entropy (8bit):	4.947283922362635
Encrypted:	false
SSDEEP:	12:JUGemKm6Fz50zvsq6a+eOrUGemKm6Fz50zvsq6a+e4:y1mKm6D00afyU1mKm6D00af4
MD5:	FE4630AA2942332D01BA8C38B78E8CE2
SHA1:	3D6676AE261BAFAF2011FC8A06CEC8FD30B998EE
SHA-256:	864EFE3FD3F1EC37DCF3526B018E9BB3AA0F15773DA73E80058C8AFD31A9D579
SHA-512:	FE56F1F6EE27AF8C979329C59E715699D39CA9C21E305D71D936E3CBBA11F809014382D78A38085C037492C94368A5F851BEEFE836602DCC2D0CF0693CBFBE7A
Malicious:	false
Reputation:	low
Preview:	<root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3688453520" htime="30840630" /><item name="ai_session" value="95Yas\|1601476493611.178\|1601476493611.178" ltime="3759173520" htime="30840630" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3688453520" htime="30840630" /><item name="ai_session" value="95Yas\|1601476493611.178\|1601476493611.178" ltime="3759173520" htime="30840630" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9B4DDF76-2F85-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8534914450656743
Encrypted:	false
SSDEEP:	96:rmZJZk2e9Woht2bf3W9KMDVqBvQfvxfGWY6X:rmZJZk2e9Wgt2f3lMwOfJfG8X
MD5:	E83F7F8A08C40A5DBBF276C46B23E516
SHA1:	C152CB11171DD5C4890382A8A7E06E98BB5B86A3
SHA-256:	DC02ACB05EBC9003E300E67032D0B9D4F83F59B8FCFA4952B616257224899BCA
SHA-512:	292172EE87A19B9BF293800A3BECF7C49D498718F8B394BC0FE7DE53C2CC22C69E4AF723467DFE52D17B9C9DB028FEF2A74BB55BFF9338068A3BA8D244587DAD
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9B4DDF78-2F85-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	60052
Entropy (8bit):	2.1780798877882868
Encrypted:	false
SSDEEP:	384:rGeJF4hAw9zB7FWfjRHf6xD0xEtQEzWf4WTj1WM3MlU+ddtvnMi0OscEmMkS0G9J:sER/sDOE2EzY4Aj1WMDqMqhMkI
MD5:	9118E62B02E093E1C188CEB1DC102F61
SHA1:	9640CDA85C36284C6DA9CE7EEE0BFA5FF2B6BDF5
SHA-256:	689F69CC7168B9E1EB3F689014624D91C4A67F8BB182EFFD30549E10C0FC89C6
SHA-512:	4D7E90C16A3CC1541C0113110EBEF0AE7939743A152C14E2721AE06D009C126F12FEF661D0E96AE0CBB04C1D435A3350AECEFED05571169EFF465A48245C4AB4
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9B4DDF79-2F85-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5655683973822905
Encrypted:	false
SSDEEP:	48:IwVhGcprOGwpaNhG4pQbGrapbSqrGQpKrG7HpRZsTGIpG:rVXZmQNz6PBSqFAqTZ4A
MD5:	F568B0498E8F6C3B3F380D3B5FF9A6A5
SHA1:	EF4FD782CF0A18381F9425D68A0295C5BB2B9384
SHA-256:	EE9B3D8C9EFD7808F717CB4B887D0677D896AB892D48D30AA09E44159C7611E0
SHA-512:	02F1ECF8D0F4EDB809D49894866DB2B65AC2933C55220520DB62EBB134BEBF6694337DF5F9FDFAC72473EFFDFE383D6E613A5FD994FBC64A5BE14ACA5D2FC5F6
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	26146
Entropy (8bit):	5.250875261578636
Encrypted:	false
SSDEEP:	192:qgYrZU6AhtZF+g9uEg64W8ACAvQ1aO+ZDLPZNa+0j:q7kGgu+8yvXOePRY/j
MD5:	F4DAD46CEB379F94B51388CDB7482E2A
SHA1:	82CB7AD9B6808E95297910CF09C927EA71D3EFF9
SHA-256:	B7334132905F0E402EC4980746D0C2B206646A675D97591CC58174777FF14B66
SHA-512:	EC3AB428B45EB0F7830CBAA85869DD558E5812D48AB972403C063DD51DCB4E107A2C2FA32D3791A25E7B803C8D3B0678E8F62067A8B878B4282F46309F990015
Malicious:	false
Reputation:	low
Preview:	[.h.t.t.p.s.:././.w.w.w...m.o.z.i.l.l.a...o.r.g./.m.e.d.i.a./.i.m.g./.f.a.v.i.c.o.n.s./.f.i.r.e.f.o.x./.b.r.o.w.s.e.r./.f.a.v.i.c.o.n.-.1.9.6.x.1.9.6...5.9.e.3.8.2.2.7.2.0.b.e...p.n.g.r....PNG........IHDR..............x~Y....PLTE.....?..>..~.N\..C..w..q..q..r..9..o..r..E..E.z9..E..D..H..r..{..q.}8..H..r..G.=...E..q.."..C..G..E..8..H.....7.TK..1.,`..8..;..E.9..i..Z5.]C..8.=.._V..9.~R..E.;...7.M..;.A..C?.J;.=B.O8..J..B..F..l.5G.T6..gY9..2L..>.\0.8E..E.;..b-.0Q..F..q..9.i(.....;....W3.9...6..b..[........3..H..........p$../.......B...+..#.....).E...I.v"..H.>...J.._..:..:..:..A.~6.Y...HmZ.6...9t\.hW...A..9..6.x4ZA...&^P...6\|[.bT.ZK...J..B..L..2.j6..6....U..H...K..5Y<..W..Q.`5...2..C.b8..2.L...MlK.}%...7.>..Z9.q8..3l0.YF...ceE..p2.{.\|S...Ff2..S..Oo9.t...Q..P.M.D.3.e<...1.8...Q.e2sQ.'..2...i..o.D.<.s@.+..{S..Z.#X.M..sU.2..XX..\yD.B..<.\|J./..D[.jV.5...e.,c.aX..J../....:`..%\7...:.,..5Z.O..r.+...)zC...T.UA.r..U.=.UL.e...Q.[.l?.....Uc..^.D..Q..Ns.~..-..h...ew.sb.e.-..H..?..7..,.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7d-3b8b80[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	168619
Entropy (8bit):	5.044040083782762
Encrypted:	false
SSDEEP:	3072:OzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx8:clZAXLkeeds
MD5:	7A091EA3F595695C19CED8B52228FF48
SHA1:	587B8C1FFF5C84755C8BE6C2029FC0B46C0F76B3
SHA-256:	C55B3700FA0698B9F057F40512CFD3B9D6AED620598BACE734338F4F6DAF7A86
SHA-512:	522DC920EDA85D8C7F6FA56E959552C477133E1C5C39939331962A221E5C5AEAEC0643FE8F6AFF4384125B4B58E3930751A21CEB7C60C309AD037ED12865AF8C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/4a-f2fa13/d2-97697e/15-b02cf6/8d-8de298/30-e5ac82/cd-1bda0a/e7-838d86/7d-3b8b80?ver=2.0
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Chrome[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4382
Entropy (8bit):	7.911574758210219
Encrypted:	false
SSDEEP:	96:TBNw7rD/iH57qCD4BmLGryevuaosmhD0BTUahZ:o7rC8q4BQEy4gAlUahZ
MD5:	CA085FA787E0582020DCB817E45A8003
SHA1:	FEDF6CDE9ED9047E7899DD3B4E1B2E75EF6248A2
SHA-256:	C2691B43E248F35F496574DF9EEA8F64843EB335754FFD2F2E2848A12286B494
SHA-512:	0F1B66843EC7025150299D5A8EC307EA15A01A1609E33FBD649A104E503DFBCBB0BA160AD3E2E77540307FE9AD0B0506FE0525DE2C29E80FE3749B9C1291C201
Malicious:	false
Reputation:	low
IE Cache URL:	https://img1.wsimg.com/wrhs/browser-deprecation-warning/Chrome.png
Preview:	.PNG........IHDR.....................PLTE....Z#.Y.m`..A.L=..].t.H;4.c.xo.OB#.a.;..A..V.tk.>.].k..Z..X!.[.@.e[..W.ka.8..V.h].=..G.6.ka.<.F .Z).^.._,.l.ri.oe).c._S.pg..G.A.qg.[O..a.cX.\P..C).k..D,.l5.s.~t.E.<.`U.;..B.=..J..?.M>..K.=..BL....A..]..DI...OC.NA.._.QE.SG..a..b!.d.K>..\..`N..........[..c.L@.I<..=..@.TG..B....RE..D..X..:..?$.f.PC.I;.J<.E7.N@.L?..P..A..V.:....PD.....T..?..=.....S..@.RE.M@.E7..O.:....OB.WK.9..O.K>.J<...=....Q.....X.9....G:.F8...A....?.I:..g...C..j....H..?..:E....J..........aV..U.\Q.:@...8......>4.A3p..........i..Kb..G..,.h..J.PE.8......7.9,.....................O..M.;2..{..`..\.D8.A4.0.....D.`.._..]a\|US.T8.P!.M.yG........l...y7.c..[s.XurQ.\D.H7........b....C.z.yP.W.]T.S@.K;.C6....w..of..X~gJ.....S.........t.d..V..Vs.R.<,.......EtRNS..........A.AA.X.'...XX......C..40!..\|p...po........2...\|............IDATx..1j.@...]..y.a7B.B.D.6Ne..d4....\9!.\..\...s.\g...G.o.V....j...[........C._2.....e...7..C..l..wM.....$K

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\DER8P7GQ.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	51417
Entropy (8bit):	5.097591070946857
Encrypted:	false
SSDEEP:	768:pqPaGcKBIzurNmZ9WrnECIrN2HbIOrCfGMdHwJaDOAasCKTzcVkGWU5MvqxikN83:pWcuxmiDExrNYrC+MdHwJaDOAa31/e
MD5:	7CAADB95A1057E8AE07CFB6C02F9E560
SHA1:	2E7DBC2F333C0AEA4A1E5C5BBB8F9559CA1DCBAD
SHA-256:	57F790B7BCF03112FF44CDB868CDB98A086EDF6EC8D1F351C1D6ED9FA796816E
SHA-512:	F488A7C57C65E0FA859F69B887657F09D2DF7A22D88F425F0DADB522C27E636C97AF17B766BDE2978FB0FBCFCCF095624A1991226F3CF9ABB2015ABCFE256AD2
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>....<html lang="en-US" dir="ltr">....<head>.. <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1" />.. .. ..<title>Starfield Technologies</title>..<meta charset="utf-8" />..<meta name="description" content="" />..<meta name="google-site-verification" content="t7JT1iH2iscenNr74R-kgXPljL_ru6OPiT9RE8zDk04" />..<meta name="msvalidate.01" content="2E3FEEF3C657AC432E75D756D93E3175" />........<link rel="canonical" href="https://www.starfieldtech.com/" />..<meta property="og:title" content="" />..<meta property="og:description" content="" />..<meta property="og:type" content="" />..<meta property="og:url" content="https://www.starfieldtech.com/" />..<meta property="og:image" content="" />..<meta property="og:site_name" content="" />....<meta name="twitter:card" content="summary" />..<meta name="twitter:site" content="@GoDaddy" />..<meta name="twitter:title" content="Starfield Technologies" />..<meta name="twitter:description" content="" />..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Firefox[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5334
Entropy (8bit):	7.838231384483405
Encrypted:	false
SSDEEP:	96:nAu+AHnrY06Ja8iJLaLhXnPjRBlMNhIj9QIWIJplEpf7GF:nAuDHrIJ3NXnPjRMsj93W0R
MD5:	1AA50EE8234957E5B50D71E053281A6A
SHA1:	0B2C40A2898618CBD89F91B410C4F5219659E7AD
SHA-256:	6DF5062B41E82B1990D96B5AA75906011C9792C1B750BD80C1741AA35B14768A
SHA-512:	36207D2F052B933A1F6D9269EB44C139BE4D7490D66FE541A50B90542B52966807E8068F49C77AD4CBF9C436C681DF2ABD1615217A6F6C4BBC8B868026EA8166
Malicious:	false
Reputation:	low
IE Cache URL:	https://img1.wsimg.com/wrhs/browser-deprecation-warning/Firefox.png
Preview:	.PNG........IHDR.....................PLTE........^..q..m.W5..X.S".....o.i...k.(5....q"........g..q. ?..s. C..s.. ..o.......O...X.l...H.......3"h.........R......._...............1.(-.....".J...:..?.\|..V..k..A..N..C.....m....%...L.8$.#2.?!.+.1(.E..W..Q........K......D.....J.]..r...@.......b..!7J.u..G.m.....~..x...............;.}........y...D.i..s..Q...I.f........i.........=....F.....M...A....`.....U...:.\..B.":...T..M..6.d.....m.....Y.....J...P.>.C....^..a...&7.6'.E.y.....i..2.....e..Z.....Q..W..-(4...'...< .......3-...!...,2......v.!D.u...I."?...-.h...............:.y.~..?%..9.q..H.....L"....;,.E'....3.. i.FC.2...z..p.MH...h&d.BW.b/..&........) .OO.()..oS.U:.&.@.i.#E.0.90..J..!#.irv`Lj.0\Q5Z.V0..%.!.s.(..$t..oa.......?...v.6isGP..F.s.............e.....+.\...k=-\.H..v.y.l+....R..L.+..I..E../~..=...=tRNS......%..G..<(.T>...^.`}c..Z..........b;....W.....7....F.....HIDATx..wLSQ.....[..^q.X...@..:P\h...nM.;.Q$j.b..A...B...DQq......gk]x..#9......._.i1...b.5.7.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\MWF_SocialFacebook.png[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	469
Entropy (8bit):	5.368803468427014
Encrypted:	false
SSDEEP:	12:tvG1W3aA/QU2Z9Vflb9WbrCrfdo97LCcnwiA:tu1UQZ9/b9WbejSVwiA
MD5:	58064C0EDB5F8C89D1C066A50AF5ED7D
SHA1:	CB7B81145B59B505B74ED3507464201AB4BFF621
SHA-256:	6CD47E002200FC07167C3D1552C5E84693412784AE15B039383F4607A6DB08E7
SHA-512:	11A214A9A9DF47901D5BE6F867A7A2E739825CE12F98FD28755C16ADF1AEF1783E4082C6F89D9D522823458AFFC9CD60D070C27352E88A0A24F70545C17B340E
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.s-microsoft.com/en-us/CMSImages/MWF_SocialFacebook.png.svg?version=ca2b09b7-dabe-cbfb-0459-457c6ac59270
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><defs><style>.cls-1{fill:none;}.cls-2{fill:#231f20;}</style></defs><title>Facebook-neutral</title><rect class="cls-1" width="32" height="32"/><g id="_Group_" data-name="<Group>"><path class="cls-2" d="M17.53,26H13V16H11V13h2V10.48a4.76,4.76,0,0,1,1.21-3.29A5,5,0,0,1,17.88,6H21V9H18.91a1.5,1.5,0,0,0-1.17.57,3.53,3.53,0,0,0-.2,1.37V13h3.12l-0.36,3H17.53V26Z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\MWF_SocialTwitter.png[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	848
Entropy (8bit):	4.81890078988595
Encrypted:	false
SSDEEP:	12:tvG1W3aA/QvZ2Z9VflbHM/dGmJr41PPhtUBaw7+Us5HQluq4hJ1fJY4fC2m:tu1UFZ9/ba01HIBRXMw4qgJ1fy4tm
MD5:	8724142EB655D2FD1BD91E144CB42B40
SHA1:	69812DA7793FB4D1314DEADB3CC2663E871B5071
SHA-256:	05AC6FDA6095A72ED257E3EB7548D0EADAF95D2BB9632145A03DD1EBC7A0D197
SHA-512:	8435F66F684E50C81E126C52DDDD4DBCA96E148274346021BC92D5A0803D69ED6DE0ABAD010A2D12B23A0EE549DE65D9BE87BDA8030CBB796F667B4363FF3975
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.s-microsoft.com/en-us/CMSImages/MWF_SocialTwitter.png.svg?version=d2323c35-98f8-04ba-427f-b915c18959b7
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><defs><style>.cls-1{fill:none;}.cls-2{fill:#231f20;}</style></defs><title>Twitter-neutral</title><rect class="cls-1" width="32" height="32"/><g id="_Group_" data-name="<Group>"><path class="cls-2" d="M27,9.17a9.37,9.37,0,0,1-2.26,2.34q0,0.32,0,.58a12.7,12.7,0,0,1-3.31,8.66,12.1,12.1,0,0,1-9.52,4.19A12.52,12.52,0,0,1,5,22.9,7.79,7.79,0,0,0,6.08,23,8.79,8.79,0,0,0,11.68,21a4.29,4.29,0,0,1-2.63-.9,4.43,4.43,0,0,1-1.59-2.23,4.64,4.64,0,0,0,.85.08,4.8,4.8,0,0,0,1.2-.15A4.4,4.4,0,0,1,6,13.41V13.35a5.69,5.69,0,0,0,2,.56,4.31,4.31,0,0,1-2-3.75,4.45,4.45,0,0,1,.59-2.28,12.29,12.29,0,0,0,9.28,4.72,5.12,5.12,0,0,1-.11-1,4.51,4.51,0,0,1,4.51-4.51,4.33,4.33,0,0,1,3.29,1.43,9,9,0,0,0,2.87-1.11,4.38,4.38,0,0,1-2,2.51A9.23,9.23,0,0,0,27,9.17Z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Metropolis-Bold.1b5b51bac870[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 17960, version 0.0
Category:	downloaded
Size (bytes):	17960
Entropy (8bit):	7.979393130699797
Encrypted:	false
SSDEEP:	384:ZkDHSauFx/eNN8Me0neS8LOCdeYftH3AruNhD:ZkixGf9iLOCdvSr
MD5:	1B5B51BAC870E5C2645497A16B769BEC
SHA1:	5577FE0C5BCAF247994B0BE1B1D5048B327FC848
SHA-256:	3C10B2E736B2ABA4E1E629B259A474C1523B62B798AEE56BC0CEE667463EED52
SHA-512:	06EFAB531B442A7EC4F8F4F1DCC7563946AF01AF1A5CB0BD676EA64FDF9AF81C24E734CC09FC91051E8E07E37E19CC905EFEF090DC1FE7131F99B474C0DF6F4D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/fonts/Metropolis-Bold.1b5b51bac870.woff
Preview:	wOFFOTTO..F(......_.........................CFF ......8:..D.j...GDEF..A@...z........GPOS..A....]...R...JGSUB..F.............OS/2...h...N...`i..Tcmap.......0....)...head...$...2...6....hhea...H... ...$....hmtx...X........./.maxp.............9P.name...........;....post........... ......P..9..x.c`d`.........\|e`f~...W^.M...5..e..\|......$........x......Q...s..m.)/k..nX.m.UX[am.qm....Y.%.r........5.Q..y....B~"YkW g .i..9....'._....=f.!mQ..H2.""..4.zq..J..{y.....r\.f..M@.B..M..).....(9.z....Y..B.....v.rD...B....f.n..D..k5..d..y."\.A.E...........A.....<=.L[..}K0...h..<c..Z....F~C....-E.\\'.\]QSKB......C...^...pSkPKz..5..\|.w .2.....2..o....V..!U.... Psa. ."d.Z...........c_H....-...$.....2i..&!\..0.MuD[2.....y\|.5_...._....`R.`\|k..c..A.....;!.....:....N.C....iX..p.-h!.x...R/...v5...8]....G.m.y..'.....@..t.....x.c`d``..o...r...D.y@...h.....~x.c`f.e..................D...........@.w...........c..fi......ArL.L......l.w..x.,.a.a........{IE.3.%mV`.&...mY...G...[s.._

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Metropolis-Medium.cce692f84337[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 17708, version 0.0
Category:	downloaded
Size (bytes):	17708
Entropy (8bit):	7.979314948108075
Encrypted:	false
SSDEEP:	384:xH3aHFYew3eqHbA6TPSiStLEirPN2j9KkDyjC+DA:xXScusbDZm3rl2ZKkD+C+U
MD5:	CCE692F84337013497C8C0C9E90F6517
SHA1:	D6A95ACD2C9B10489CE45206938195E999802991
SHA-256:	3C7B11A2AAB87A8F80AEDAD2DE99673BB846BC74240104B600754553995F56F8
SHA-512:	301C442F4FB521B6FA9DDFB1FB5640F1D30BB0F74F4BBC9B9ED6B51C1F23CAE809E8FB71DDFB7C4F19DEF87633C291EAC710C05CA7C5204D796D821499D15301
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/fonts/Metropolis-Medium.cce692f84337.woff
Preview:	wOFFOTTO..E,......]l........................CFF ......7..B..{..GDEF..@D...z........GPOS..@...._...^...2GSUB..E ............OS/2...l...N...`hN.hcmap.......0....)...head...$...1...6....hhea...L... ...$....hmtx...X.........j:-maxp.............9P.name...........yj..&post........... ......P..9..x.c`d`...;.....\|e`f~...W^.M......`)e>..230.D.\|......x......Q.E.u..m.m.m.Q....F.6(..v..g...\|.g.z.>3.>./9RdS.....J.?..e.\4..>...s.D.=.........C.U..9m.....,j.E.~....TIJ..Z.-......1L.T.s)....I.<.:.....!2..Z14.brx.+.hE...J..Lj.s.t.Br.1..%T..M.>.PZ....\....M...:....p......c....".Rg.....1.....u.....:...\^...f..g=..G...}%.Yj.Y.....+.m..............n'5.).;.h.......F+..,@...K......."-.N.@?.}c]..n.e...A'..&QO.yS.a...Tea.J...R....r...{..3.SY.8.R:B.[...'.W:K....A%...;.Nj.....Q!.^*xS5v.%m..-.8..j.7w.h..^i..34.RmVNyQ.Jw.D...A........x.c`d``..o.........R...`...~..dx.c`f.d..................D...........@.w...........c..fi......ArL.L......@....x.L.A.`......].\.\;...m..-.. ...,.>.d.$.!.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4DnuZ[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9906
Entropy (8bit):	7.969755454161603
Encrypted:	false
SSDEEP:	192:m1E8ztxCm7y6Wzv/aKFBRFGYbXfjIn45vSnAEIrxyqLFMSrlFWM:m1vtxCmbWz3bBbFbvM41w2xyoFZrqM
MD5:	31D88F088F3C8CE2A09447FF16D18ABF
SHA1:	93F6A18D02129F9E7C60A503B2E90A7605BE2FF8
SHA-256:	47579D0CC966755F31EC8C86D425A2A1C4993C6AFFBAA8198125626135BA8FDF
SHA-512:	56D091025404C82553ED08D5606C45BD2E2F5C97CB57BF9B8A6B83671E85138C3F6DA24A28D852DC8A9F46D0373AE8FF996162F9CC7955ED13DC87F9DCBFE20F
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4DnuZ
Preview:	.PNG........IHDR...P...P............sRGB.......&lIDATx..y..gu...;.f4.H.6$.m.2....$..c...8im.&p.......6.'..?!.IS...fi.).[HN .I...66P..Py.%Y.h$.fF.........wF....M.w~.....s.}...LC.~B.n"-.Y..\...T....&.u;6[.#....D.lC.M.V.W.. ..t....e.O7...t.lk{.m....V...=.kJ.T.V.4,.w..z..I....F...qf...?Y......Y;,.F..+VkV.T./.f]....5.kC..j....L.n]..-k.;:.U...v}o.m-t.J ....`...J(.f....p....h.;:kO...#.e+...6idF. &w.Ch8.nP#..............b..&....{.....m.-..sQH8^.{....4.!a\.B-?+...x.....p.l..j..2.^ .....'.=....C\|hb.5R.......&..2[A)7.........{`.6......W#}nj<u..py.D....U$.....i...B.....en.K..8p...YY\..5.#(.5.g......8t..3.\.....C.h.....o?..Z...-..p.P..pI.".+......}.....l..-.&. .9.'1;..c./.\|.<..t.{.zv..../J.=.../NT>+s..d*..a..2%..6......{...._Rx......f0Vn.#.3...3.A...Ueps.. .=...HK.%\|..G...FZ..g.m.I..Y...z~]..sY&K..d.....Z..}`..ms{..TE.>.d\|.....u....L&k.w.l.}p..N.e.b...hM.!7!.%.S....F.g..._O.8..m...E@.88.........8.......x9.....c.}d.[......D.....Z....D..z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4Dnv6[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 81 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10493
Entropy (8bit):	7.969703378877857
Encrypted:	false
SSDEEP:	192:LbsikVmy8SiQfLUq5cwGD8BL8HIXNDLMutho0ClDHidju9sFeitlg:LYic80Qq5tGYBL8o1L7tuFOm0/tO
MD5:	D32FFC40E8BE2B880BB79C9FE5A2FCAE
SHA1:	9B405221834A72FA0EFD9D8D2571212C5DFFC261
SHA-256:	502EFD508B3ADFEAC7AB3ACCBB002295A79B4BAAF06373051C44006389A91F16
SHA-512:	E136B3518DC975535875E14DEB55700B0C8D16F3DCB20C039172ED1745BA000FAEB523B3E3BD4B28D97246A205E2B2B9B9EB3453DB82409CA2FA9A6DCB66C00B
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Dnv6
Preview:	.PNG........IHDR...Q...P.....a......sRGB.......(.IDATx..\|..]U.........L2.$.B.....h....(....D.z.E..{-?..pQ....!..E.obA.#.%..H...{.d.....[...I2i.}.f.Yk........?.... ...YM5...^..4.y....NCd4...+2...'.5.uS.n.[.KL<1. ..R..H^..:....1\...`YK...X......Ck.?k........u.h.D......4 ..{.s.w.......5Wv.T.p(..A.Y.....H..tD......gE.t.<N... ....Z.-TK...+L\|.F.....8.......{.;A.[.E.oI.C..f.4D..$b...n...yi....)..'I..].\..yC..+n.l.x...[M.j".............R .._m.M`.).^...X.=M........'I1W%^>.7...../..9.t......\|..).h.....JbP.....N.d.v......P,...+../f......T.o..m....I.s......7.........d..9`X.7..."@Q.#.p...I\@i......G.lO.@.....F.%\...3J....m.jmn.%....H{2..M..t\..O..S;.S...3....2.[...s.b..9}...\|...%..X.j. P.Ry..{q.Fx.PX.u..`..&......).$....:.i.G..x.......O............3.c2..ps...h<R.H.D..3.HM$/...dfd...`..A`%.JY..}..zD.=......i%..=O.................Vi..l........u.0.\|..!."..Z...O........i...xQ...xubz4S.........H...^Q..v.I...8{...x.,.H.z.^.H......H.C.....+}AM.BnZ..}-.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4Dnwt[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 21 x 17, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	490
Entropy (8bit):	6.352466635881193
Encrypted:	false
SSDEEP:	12:6v/7yKBacL5HtcUC0+oYG42YkzDPa52SFd++:MDczHxGvYse9r
MD5:	E5E8039D9FE182D8ED60CF15414BE6DF
SHA1:	41DA378A6D077E0CDCFD6B36578DEEF48CA19857
SHA-256:	87BD20945B1F3D8068E018B07D157364D41E5C7401FF0AA959F76C3DEDE672A0
SHA-512:	6CDB90474C43B5CFDF18E57B103019ECE6B4808DA66C6D7E8F2C18AF6B1560E2EA4A06E8FC7025B8789D6038A63A578E0FD1740C3D216010875B4789D1F8791D
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Dnwt
Preview:	.PNG........IHDR..............X......PLTE....p..q..v..r..s..t..q..r..v..q..u..s..q..q..t..t..r..s..s..r..r..s..r..t..r..s..r..s..t..r..r..t..s..s..t..t..t..s..t..s..s..s..s..s..s..s..s..s..s..s..t..s..s..s..s..s..s..s..s..s..s..s..s....h.S....?tRNS......!$&'-0346BMNPRSW[^abjkoprtuvx............................L......bKGD@..\.....IDAT..e....@.......-.g..+......'9...<.%.............pN..Y...a..d.H..>..-......~9B+.V....y......V...'...%}.q.......ovU..<.5.Z8.r.AW....z.M...TC......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4DsDH[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 34 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	229
Entropy (8bit):	6.679979866612799
Encrypted:	false
SSDEEP:	6:6v/lhPs0RTF6i49KIR6gxqsOC4ceq/SJp:6v/7k0TF6VcxgxHOYi
MD5:	F36D3DEC08CF00ED604C6CB590D31598
SHA1:	6B412FFCD8A37E7779304E965601FF5F9903705C
SHA-256:	40369EB6D15ACC90B7F9AE54C39528FE5C11E0C56693E5287A53B28C50694968
SHA-512:	23340A1D5E40CFA532AA9DE05DAFE104EB5D61AB384AD254E33E4E50EF4600D8205B8786794B0DBC6686DE8BA9926B8718EE8926863FE4C019D18388488C0450
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4DsDH
Preview:	.PNG........IHDR..."... .....w.......sRGB.........IDATX....0.D........=....U.E8....v...249^+jCH.=.iZ.w..Nh.o.f.6.$3...x".E.$\|..O.......i`y.3.+fL....h7#V...L[..{......a3?[...gU.......u&D...u&."Q.O..k....T....w....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4GeFi[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	49125
Entropy (8bit):	7.910616848071549
Encrypted:	false
SSDEEP:	768:86oRtEvHeKyYtIy5hByEePXbjyyf6iZfVBg7yNaemqa7h8v3V/acEnfIW7uvpx:86oROOYtIy5hQ/iluHgkDmph8vF/acC0
MD5:	4F18B01525595EC50611CDF472624BC8
SHA1:	A1176C432DA8898A353DA01F57D96CA512656CE5
SHA-256:	2DA00E118AD3A992943595C39D7B9E1565FD51575B99358C4BD65D10A47AA7C6
SHA-512:	C4E91EFA2A790A211938461C553BAAE2319689C7F2A81D950DD9D2A4429A5028E83B23F8B016C9BD0C188D999342F8029A8FFE4BBBB256DD7F22E131468DD0EE
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GeFi?ver=4447
Preview:	......JFIF........................................................................................................................................................ ....................................................{\|..r...........]..#..v~M..N..........>t.c.d..`S.....?...=.=..8...N.Q....`....4....u<'w..{....7p.{.js.....U^.E..E4..%.x.g7..k.v&........[.......wo.D...........U^.o.9.W....u..?..{...>c.J#W..oU..5^.;.7..p3(....{-..+gsC..j.v.W.......;...Y..%..............LD.]` M5.X...$D...$"bbbPJ../............D..........(.......O.=..5....\|..}....].~.....;..u......?2..5q...u.,...........n.#.....x(.0.............o....?3.(..] .......6...O.t).\|_...........@.......m.\|~i..P.4..f.?48/.>..+..3H..........dl,gW........@.....L.........k.......nOm....;.?3.)..4..............}....gms[U..........@.......m?\|.....,z....... .......6..\...u.W.{W)...#.@~f\|X.&i..........O..yF.....>S/G_.......L.........i............. .......6..^!....}.T.v.........@.......l.}$.......L..........`..8w@..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4GhRT[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 494x278, frames 3
Category:	downloaded
Size (bytes):	17413
Entropy (8bit):	7.863602857822216
Encrypted:	false
SSDEEP:	384:fxPw5c/19PCG1x6iCczTci7k9Avvf8QG5VdA/FNinUhrC7B:pYW/19PjL5uuGW/z5MB
MD5:	AF2DEE5DA564E42955F4E9AD2F1FA2F9
SHA1:	BF47A7372973B922CDA503E1A533C83A39C3F577
SHA-256:	E6A225D0B37B20D4F12FE9348F1EBA7577699391EC19815F0A474857963BBD45
SHA-512:	BE42BC17F1D27A80996F351E77C3453BCB9CD48C46C673C35CA6504FD3ECE60EF50B95A684BF521FCC87CF9F397F256A89C8264D497B1C8FD7BBA31D26800885
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GhRT?ver=5f90
Preview:	......JFIF.......................................................................................................................................................................................................................0.....................(...N...N@....>v){._..5K.5d.....d.....\|.ww..9..T...@F.......c.}..n..W<........;.....UT.k"..;.......b..".0..r.$.......C...../F.....\|.f^.......`....>v;..d.!....v........F.wGc.A.. ........O........T.fL..p........(..Mn....;...QU.f.=.i,...4...jl._{.......~.........W@\|.e[..Uuw[.UD)o.gd].[..;.2.....y...zAq...+.....T...r........w.T.0.....+...t..\..K.\|.W......x....f.n...8v.....z.....ct*...6....;......3g....;..=%.....xA....[.f...m[.N.....7X..H...7...7..>v3.L'.N._r../.!....;...< ...-.j.V.7-.M..m..y#y.7#{\|...;..@.;.... ...0...6..+.6h...EQ....C"..M.!../&#U..\|.g..q...8...6.v.!..0.....;....<e..j..M.Z..l.a...........2e._.....o\Ve.E.'lX.........Q.....9Y.Rq..Wa.,............7...........F<..2d.&.2w......5F.1.2d..O.>v.T

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4GiCD[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	73156
Entropy (8bit):	7.986360409128484
Encrypted:	false
SSDEEP:	1536:QnCIItrmkba6wphpo7cEw3LvsSqT+BlaaAPvHUl3JEchblfaq:QnCII8eBcEisSqaP/APvHUl5hTfB
MD5:	9239E07B78A5B84F8B08B54209550A54
SHA1:	FF4B5ED8F70C5CC6AC89DC1375A8841A1473F084
SHA-256:	F49952A79804E9A5CAF85ED5F4D49370E8A7B2418578424635CF3BB9748EA230
SHA-512:	FD816B56385941FA66672CDBCD1ABC5E613175E7FEE00AECD5793303663EDAF58B63C59EAD0D6F5ABAA3EEB724C3E5D26A4A8F4F4E98612592C1A4CFC4D460EA
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GiCD
Preview:	......JFIF..............................................................................................................................................................................................................{5....q.l.`.1S...A..tQ5..:t....>.P[.]QD:v......_>.j.x...q.W.OfsN'..7.DZ....k...7/iH..#...;...+....R.%.&#A..k..W..2.6..4HmWK....4....W.cG.W9......X..l....hr[....w..X..4L.{...kc..,...".Es....s.j.V+.y.9+.W.<...O......B.Y9..%..@..].o.p....Dns..m..4 1...#....`..Ys...D...ChL}}tH.+......#.a.....5\|Z..e.oz&..;X.Rg....*<.....6.b...-}\|x.SK...1.;....;....&L...%.]..r....{.x..&.9....[q.2d..Yy.......?m..F.L{..`b@...af..X.z.2n.....q.zs..$....v.%.z.4../g...)...\t...#..Y....n.Z...\|a311.#.__.,BN.....f6w..}S..z@..A.M.t.KW5.}..s>..yM.{mu.t...a..:^.(P..t.......6.HF.fc.G....tQ5.:...YU......m{..b._....Y<..E..o.....}'..i...=....H.(...9o...r..G..f&=.z0Q+`G...l.......{..j.{.e.4./i...K.t;.;...uN..T.}...j=zk3.s...y1..Dd....f91q[..U.W...._..R....g....[..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4GpKa[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	169286
Entropy (8bit):	7.984660114217388
Encrypted:	false
SSDEEP:	3072:rz8QmiVqvKUu2/zx1B5Y+3aWpvdeoGY2VtyLQLFGhgZz5:Z/VqvKUN/zx1LYWrplvGN2QLFGhE1
MD5:	25332F74BEEF6E43FD4F09FD0244A63D
SHA1:	5E778978A5318CAD81D1ACFF492C974CC9398245
SHA-256:	67A1172C27647AD25DC3A0DC1603836E1BB358DB5EDA03B0B4C4EC69C46EA2FE
SHA-512:	A6DD80EA74F070B120D488C69F471DE5D53E64D5A123639C508BBC4C09A1B96F86600E351540493526EFAB65A9BD68C0CCB7C92A31E1E69BF392DF0B4FF7835B
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GpKa
Preview:	......JFIF...............................................................................................................................................................................................................5k.d..I.m...$.I$.I$.I$.I$.I$.I$.I$.IN.Op.\..W..N.$.+...r.I$.I$.I$.I$.I$.I$.I$.I$.H8._..3....HF..e...O....I$....$.I$.>...I$.I$.I$.8W....Q..O....2.&l.ow.J.ZR.S...V...t.I$.I$.I$.I$.I$.I$....\.....A....7.@...O.j.O..N.....\.1....s..;.=5.X._....=..q.V.r..._.._i......i....:-q..-.Gt\|....O;..8[..%.zDN;......X&\|H6{V.....G..>..6M....DuV"...o....SV..}.k.<.n.....t..h.sze..&/L....(..C.t.\|m.....Krq.e."..e+.w.b,D:...=L....f...n.E.{H..........\|>..Q...........f..m\.\|...<....V/A$.<.Wu.=.I....Y.p..h\|.*>..._..A..]..q.=k.....t.Wz.kKH.{....R...[... #MhR..m=^.;l.G...3...vF.8TK,.G..zx...N.C.^..C6..]6+!.1u.:0'..>........L#...$.}9K........r..m{."<..r.UI....d...t[.....>..]...S./......'..=.1..v....jky...YLY.$.g.:.\V.n.;w.._:V.(2X..E6tlw>.;..._C......".

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4Gphi[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	64768
Entropy (8bit):	7.914779644414583
Encrypted:	false
SSDEEP:	768:dbmopvKESOPF7+lMG1ASk2Dqp+3vrc96t7YaguCZ9HSYk6Pd8QiPIVIpaTP6jF17:d3IU9+/Qs3vrZt7TK9HSYDPdkgfinT/
MD5:	0847D9DAC4876C1068EF435416FED010
SHA1:	61AA0FE66843C6B1428109981D6DA6970C34D8AC
SHA-256:	6A3AACFF9AA4A7E6EFBB13DAB06C5CF4BF5467B795D496892110460781A1D4BC
SHA-512:	21062523DC6C9699ECDA55ADB83FE0795C027848B188C6CDC7B99EF6BD98788D583946F63085D00B166ABB2C89830A6C23CD90F98B626160B22D427038367B85
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Gphi?ver=6f6a
Preview:	......JFIF........................................................................................................................................................ ........................................................@.e@!{...........@..w:asY.6../R..c9.0.0.........h.....F....p..........@i.4....N.n<.q..8/Q.r.'h.'j......9.M...........8.X..{.k.O..~R...q..{..pR2...k...3X.v.\.?'..uM.].y.......C.{....l.>9...G.............h............V.............h............V..`mnq6..............sO.z...k.^tP......z....V.......Z.-].......].^.}....cH.H.'.j...b6....sD....\|.@.....B...x...%..........z.C...v.cv.A..9\..,...N.....+@.g.......].B..=;...>....<u..2.../?..D.<.O..1r3:.M...;-g..l...+.....B..e.'.e.......c5<.....C.k.Pw.vT.7f........]..p{..%.......j....E...2...m.<....&w!.5..ml..'...3.S.X..:6.G..=...........R._@y....@.....9...>................2.q5..............9}..Rd.#.y@+..O.:....l.L......o.......V..5...,l....,o....cV....B..f.!...........T..h............V..$l.....c........l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4Gphj[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	47345
Entropy (8bit):	7.9167858684650625
Encrypted:	false
SSDEEP:	768:8AC1mh7/QagBvX/Bcyyyyyyyyyyy3xjLMd+yMocqAXNvj1JKMFQ3ONDFu:33hQFBvh4LKqAd68u
MD5:	2E3C790A5A606DEC2639CA5435EC37B0
SHA1:	40455FFAA1002F7B916ABFAFC61FC4B43C7F465D
SHA-256:	18DA8B96AB35681236E4CCBD2B07AB97C9D3D29E5EAED361AEC4DDF735FCE0B1
SHA-512:	2444E1DCAD8FC94A8BE2CF8E1EFB5FCA6FC34F4725FBC337A530EFC2146A8106C0B5C6968212734C271544B51053172D947699A96E3D09EF9106E3AD14979563
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4Gphj?ver=01c0
Preview:	......JFIF........................................................................................................................................................ .....................................................M.o..kX.p..4..........l...-m.^...N}..s.............0..R..@..............M..v.R.~.~.........R..;~.l...t...}.H.!$&...`.........k.O..,SLv......O....kZ...b.....V..:......Z..-..S..... ..........d...D...........1).&..`........D...I.l.T..@........BR..V. @ .J&&&......bP.H..2.2V..D+.D.D..&&...."@.....Jl..!iV".Eb..R+.L......L.LL...).....RX&..kZS,...&...LH..LD.&"A.D.!)..Mt.K..%.h....x.....u.D....r..H!0..L$....M6.o......Ea...2.......:d..........@.Y.M-6..J.V+X...\|.o.................^..6J.kZ."..qy.W...?..........x~.....%fu.k..<.._..^.... ...................k..k..d..+X.i....\|..\|...4.....@s.........\|O...~>O../#..S...?.?.}_;...........O+.O.}...G..~O....._.....?.......^.f.....q.b..p..<...?........o.........g.g..\|>......m.....O..>..o........O.:.3.....8........3._..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4GsBq[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	94744
Entropy (8bit):	7.96596681551361
Encrypted:	false
SSDEEP:	1536:ENe1Ax2T85LsrIXrs2tl+AmpK7TyiP3CmEBwfsh8iqIphaeMVfmU9ECiySJ:ueY2T/rcrTl9mPO7EBwqjkTV+ySJ
MD5:	7CEB530F6D747885CAEA5A9EF5656353
SHA1:	C3D09193A4D0509C28A8657E19AD24BB2F90D8F0
SHA-256:	CDC7DC26CBBD54DEDFE1FC1DC602B77D612F71A8BE0461716D297834C9970B47
SHA-512:	DB9E1999B8C0734A8BFB1DFFAABBA52315EF5178FE9058750B984F1073580BDF47377181409501DA436E265D0E908999307938D0D1D25B690408CED002A5C62B
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GsBq
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164352, 2020/01/30-15:50:38 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e9929d28-239b-4a4b-88a3-49b8c85caf86" xmpMM:DocumentID="xmp.did:2D40763BFC4611EA9AFAD8C39B7D11FA" xmpMM:InstanceID="xmp.iid:2D40763AFC4611EA9AFAD8C39B7D11FA" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e2cbc9f4-1167-4f3a-b3a3-3bfd2a0b83ce" stRef:documentID="xmp.did:e9929d28-239b-4a4b-88a3-49b8c85caf86"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4GsBr[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	97094
Entropy (8bit):	7.952161974285694
Encrypted:	false
SSDEEP:	1536:CHoa7jQkVfm9Pb3EBI8p1xlSoFPX8LwOLCYtt0yFwPFvP4QgzJ042E:EHjQkwcfXdPX8LwOLVz0zNvP4QB4V
MD5:	12E1C41E1A8B4C0B41A38FF0563D79D6
SHA1:	2F1E2B859D0D4C0007DFC0C1EA6B7DC4290543F6
SHA-256:	B58C2AD595D6EFFB430B2FCCA0237E275248E21D0CCF3FB2DB5EE4B9AFB3C056
SHA-512:	20ADF44A217D269BEB320C699EB1AD2AD37E7475318595A77521936AFF3EBB4933F2D004CEDE774AE246501B4CA48443B9871B7B4F4B6AD7AB507F20294EA522
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GsBr
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164352, 2020/01/30-15:50:38 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e9929d28-239b-4a4b-88a3-49b8c85caf86" xmpMM:DocumentID="xmp.did:4730D182FC3C11EA9AFAD8C39B7D11FA" xmpMM:InstanceID="xmp.iid:4730D181FC3C11EA9AFAD8C39B7D11FA" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f10cbb97-2036-4f46-a0c8-cb9d12d1ce8d" stRef:documentID="xmp.did:e9929d28-239b-4a4b-88a3-49b8c85caf86"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4IMai[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 145 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4430
Entropy (8bit):	7.933083406371269
Encrypted:	false
SSDEEP:	96:juVRGu2UrHPzBlnc73gaiC5cp70ejGPcEZuouGgGFXlLuCq:SRF2eLPnc7E7podPcEZXhXpq
MD5:	3AF66FE84DAF0689BEDA3776B70BE583
SHA1:	51EC234E42BFC6D484A72C973915106CA289AC91
SHA-256:	C19EB0313E2CE17312DEACD6BC7910077EE50471A95063821480431513F81DDF
SHA-512:	E313C745A65C5853CFC8083BA4416D8DC03473BC8106B3ECC03B30A14D17B6A51D7EB2BFCBE8C95BDE9AAB802FF4F1F309F181EF2E135827630541104C884884
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4IMai
Preview:	.PNG........IHDR................8....sRGB........DeXIfMM........i........................................................C.i.....IDATh..9.tTE...[zIg_.!f#!.k...@2...#:3..eQ@... ...1(...$*..u.......r.Y.d.....f!Iw..o...P..N'.G..\|.9..{W.w..}.s=>s. .Bs......S\.)7......~"j,.<........1...,.....o..:3..;)..@A..2......M..\&..w...6mi..`.k........].oic.LX..6h...k.k.et.;.E.].R.F7..+.1.`._..]._.8.\|../.....N8B..g....6...'.sp.....?....:X.):..y_.g....$...k..qZ~usu'..$.D\|..0&j........8..j..:.>PQm6....y(..\|tr..J#.qLj....n...VU....Z........Hv.f.7..\|..U.:~...^..[CQ.3....'.w..k6..q..g...Q......),f+....U.>H.(..xt.Y.NT.}.P....Q...EU..FG.......9.!z......j...1:.T5U.....511...e....EEo.9Qy...~.......w.".U..5o;.....J..,...v5qhTP..3..........@x.s...jqV..\|.0......!&..C;.UQ]..@..#+......9\.J-.c......{..u-.j.. ..&....9.(..1.8#.uA\P#b95R.....pS...%...\~d.z..."#.'Y.g..u!b..F;.&\|Q.}T......l+....7..,.5F......".._....q.<.y.%.c.2d....$#.r).uf...$.$I.2-Qu....[.d..../..7.....^......f..~>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4IQAK[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 170 x 31, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3077
Entropy (8bit):	7.873191513853013
Encrypted:	false
SSDEEP:	96:b1/9AW4GjzprfmeiMgyb1lU1lZvYy16CB:d9Tj1uty5likel
MD5:	42390F008AD333ED4025A7352A294F85
SHA1:	C441B311AD903A12D06222DDBC8DF2B4C8EFC766
SHA-256:	9B02D1E11C652045088E7FB3AF91F0AAF1B9A83D8317B5F7C48894933B95C756
SHA-512:	D224F6FE9CE5C480C981B5407F9DE722C9B2891E7199DE5AB70B0529E12199F9CB8F9DB1931D3048672BC430FFB1186C5B2DD8AEC9CB0D7DD78097C0ADBD4D33
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4IQAK
Preview:	.PNG........IHDR.............wqVD....sRGB........DeXIfMM........i.........................................................WY....oIDATx..........W.K.. I.x....(E=. U...j....(}...Q#.S%.2..Q..IB<.E.$.....X.4..w..\.d...w.n6i...N>.?....w~......R..H-.Z .@.X ...........s.,.\|6.,.fF...f...lQ.4.Z.s-P.ZB.PWw.5.....UxjU..} ...W.>m.Z.....l........Q[[...:.Z<.@G-..9Uj.....;.Aw#....R......Y...a.v....]...U.ay6.\|.......z.0..a....2Do........VUa....vu..N.......9j..[.....b...K...4..L......k..I.M.o+.'`.$u..a......<.OC<a...].......@5..m..s...F.'P.....Sa"X.....y.\.B..~...m..Ei...O.......'B.3.u..%.s8...[.oC.....c...G.+...}.6.sx.VB..Q.....a2L......C...p#...a....Lp.j0\...)...5.....pI..._.b..n...k.a..t8..r....!:..H_.n..x..a ...z.<./@{.......'......tT.y9....X..............O./.]........h..j...4...x. ....._r..........Qu.&...^.#..PG:..Z:st..C.\...Yc..t@.p..y..qL.M;.y..w...1o...g.+......#.2...\|..E.Ts!.5....Lk....z/.u`.O!.}.i....s=...:.No.....7.^...Kg...u.%.m....1..{.a.Q..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4n1yl[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	5838
Entropy (8bit):	6.184892689801526
Encrypted:	false
SSDEEP:	96:VJEkNtTk2kCx6uY5Hfpp2URYEYVzKms8Ygh9daGWJjHnAN:fEkN+DCxeVxIURYVljdiHW
MD5:	AB0998F36AA38D63C38E9E5DFA32CD40
SHA1:	B349E754EE90AFFCE2942E711CE297A7F678656D
SHA-256:	B88BFAD9E25DC756883B80646C73CB51C8746B1DF171867FAFA014D596C3569D
SHA-512:	6F21577A09DDC977CDCD039BE038839F27355E2681BF6ACF33F91C3DF6B64762D5762CAF0069D0A0D402028AD7765BCC759751E484181AC4BEADD1583913EA6A
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4n1yl
Preview:	......JFIF..............................................................................................................................................................................................................0..................................................................................................................................................................................................................................................................................................................................................................................................................X..w]..............4.......U.Z.............#..>.c.N@.........-.H.W..+0..t.H. .........[.......2K.Cn...^............R.1t...v.\.u..6.!t............t.-.N.?.!65).Z^m\...........Y.Y+!B...<..C.................k~...;o.k...........=.`..zx..........).p.]...\|..............,..>..@..........%....T~.n=.^..........,.-ZW;..Yc.c....p...........o?.l.RK.............X.....o-.............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4n4cm[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	7131
Entropy (8bit):	6.583993730723623
Encrypted:	false
SSDEEP:	96:VJcgUXUFVk2kCLww3bhPLg6NNuIvALBdzlpIoNuYMMN+C9v7doo9O5AN:fcgkUoDCLwkdp7RvAV9ltuYvoC9J5UQ
MD5:	F157C19A1EC1D9896BF37C2C8FA49609
SHA1:	AAA776374C588DBB90386A07B231D662A81726FA
SHA-256:	7F8886FFDE2D3357D61DEEADBF4C08729FDE7922DA142C3D3EA2F13604053ABB
SHA-512:	18C6F783141AD4568D20DFCBC5E01B25EE6F982FDAB2930C9DE8D5FC26B915601A6C2A313E967A1ADD656B124FF26001222C79434E0057AB87E6664293EE8741
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4n4cm
Preview:	......JFIF..............................................................................................................................................................................................................0..........................................................................................................................................................................................................................................................................................................................................P..o.z....T..........Sc....~.{o.g............\l..,..~....+.)............D^.,.J..Wi..G......@.........8....)...,...}6............~j......c..6..@.............._ ....eLM@.........s.n...L5c>.........../......~.~_..<./fo..........Ddj...l..................."2<&&,..d...&Z1g.6o.............].......?\..1.'6o.............].......?\..q.'6o.............M.......?\....(6n.............I......c....x.m.{............1.v..S{.g...............%.F.y#. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4ncJ7[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	8196
Entropy (8bit):	6.807040871565388
Encrypted:	false
SSDEEP:	192:fyqsDCUlh3Lk2YSUEcmR6wzB73xJpaBDXjO:fyqsD5lBLk2jtcmRt0BDXjO
MD5:	6D1B95C6CFDDC17DE411C2C6E7AF9F51
SHA1:	BBD79FFAC0472964CAA524205017ED8EEF8A2946
SHA-256:	0BBAB1AB5350695F9CDBF23BACD4B0C886A0F4C9E803325554F8DB7597B939D5
SHA-512:	68F3E2EA21251C95FB2F3AADE2DB1E1A8FCF4FFE921688D925FBFAF144EEA81BF4B1553162F69A10DF1263EFA54E7A7F3274C99FCB1056AF0C90CB2C8FD8552A
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ncJ7
Preview:	......JFIF..............................................................................................................................................................................................................0...............................................................................................................................................................................................................................................................................................................................................................................................................).X.yo._@S...d.7...........,7...u,5.N1.w..4...............3e_...`.......,y..............~..._;...H. <.../ .z................<e...R..>.........<.I!............-.U\|......c..{.{....a...............y..VN;..B..r...W.......c..`...........0...>......M.Y}z..K.-6.^\|............./c.R./..{*.C.}.....5.r.@........i:..P.<+.:....-................0.....Z.~.>.{...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4nqTh[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 367 x 309, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24620
Entropy (8bit):	7.968008774461137
Encrypted:	false
SSDEEP:	384:HSMdUe+v6MtCfX85n5aUQ2V8iQ0kgh4zFITc6oQGQhp6i8UaYcAG56GyP:JGv6Mq2aQV8iQudTc6iQ9ax56/
MD5:	D0077B480158CACFD5D9FDE9E295AFEE
SHA1:	1AA78372E940A3E2F4B672360A1775554571D9E4
SHA-256:	5F3D5CACB489878501B33F5C90EE8884CCCCD5F0B5F70C9522CED83E3F710EBB
SHA-512:	8A6C48F6225C9A6EA2FBC4B6B27C73C18A226F098A84E07DA4459746DE21F3A18DB380A5DCDD20938FBF28F8533F70D2CCDEAA3C2726CF6EE9A5B20349D92A26
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4nqTh
Preview:	.PNG........IHDR...o...5.....()a..._.IDATx...A.....@.F.~^2......@8.. o.............. o............7....7...@....@....@.....y....y. o.V....n=s...P...m#V.V.&m~jl.m[gl{...:.].g...#.4....%.7F].]...k..... ...5y.'.9y.r...Gn...B...x.(.j....b4%?...a:....Oc.%t(.n.Q.x..._AT...&..Y.%.9.cxd....W.)E...5f.......J...qF..._&.p..E]r.Q..W.....?.a...?.cQ..d.J..q.PI..>"{.Nl!.qOQ.]y/U.C../0.5..._.Vq...!..{/...u....L..9^...%.J...Q..XQ......X.y.CmU..2d.%>..x..nJ...;.+...5d)....s.....'j..l.m.m.m.m...........\|.W..9..3..qN...u3.z.....[0.x..d....=..-..\.?.6z.<.....G .y..,......'.>...`.......SP0......#...~!....?N...(%E....];....V..yA.x....>...4p]...u...7..v..J6._}.........r...}.Xb..E.?HA......p...`..L.yB.2......g..1J...~.do.~B.1.]....g...._.x8pC@N4.D9C..$.7=.?".........H.....6..8...u....KL.7kE..N..#.t7.j.O......j.t..%.w?C...8.....{../...1..]....D.-_n....C.3.g...n\|.".;,....7...>..5.".n.2....(...op.@...;(8.0Z..,.]...g...4!....{.M...A.O..-.A.k..:8. ......l...(...v......4.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Windows_Cortana_AppStore_img[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 Windows, datetime=2017-05-08T13:01+05:30], baseline, precision 8, 303x90, frames 3
Category:	downloaded
Size (bytes):	14984
Entropy (8bit):	7.909338786513498
Encrypted:	false
SSDEEP:	384:TUnEMF/izFabOzR4Nz+EhoRNLqm2EHDNU66k:TUEKicOzEhoX35Z6k
MD5:	C843BD8FE087CF834754FA771881AA18
SHA1:	B6DA0FB9D8AFD593358520738E7F3C955461F3E8
SHA-256:	B5D49AC945648AB0CB3D40460DE1F57A8EE51609AA4CFCFE2E973F278B6C9D44
SHA-512:	95BED5B70816961ED923EA55A84DC28B7334657E5FC769DA2FB81D668A9992A0E5C982770742940BB3F6893707DFDE9F4EE81F22C1912BB6FA50A32DA06299F8
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.s-microsoft.com/en-us/CMSImages/Windows_Cortana_AppStore_img.jpg?version=b435fb28-7075-160f-377a-1fdf1160e2dd
Preview:	......Exif..II*...........................b...........j...(...........1.......r...2...........i...............`.......`.......Adobe Photoshop CS6 Windows.2017-05-08T13:01+05:30............0220......../...........Z.......Z.........Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:48E74BC833C011E794658E8F355BFA24" xmpMM:InstanceID="xmp.iid:48E74BC733C011E794658E8F355BFA24" dc:format="image/jpeg" xmp:CreateDate="2017-05-08T12:55:25+05:30" xmp:ModifyDate="2017-05-08T13:01+05:30" xmp:MetadataDate="2017-05-08T13:01+05:30" xm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Windows_Cortana_Google_img[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 Windows, datetime=2017-05-08T13:00:53+05:30], baseline, precision 8, 303x90, frames 3
Category:	downloaded
Size (bytes):	16769
Entropy (8bit):	7.931661924655931
Encrypted:	false
SSDEEP:	384:/UnUCdGgSnRVmkn/TjOZq4lJY+uk0UemuQ9EjYxTz:/UUCd0V3638+z5CUFz
MD5:	5688603434D43371BCA9FB35815BBDAC
SHA1:	A829335B37500412D16D404B00717AB7AF31530D
SHA-256:	F0CFA2AA092F2BCDBC66DCE5BCAF4A30554019B85DDCD818E9F6F2CCEBD83C7B
SHA-512:	4C1CA2939166B1F6726AFAA9E6A0C445F4083C524707E53CD0542C319EB57FC1A6C1AEE67F533DE3441DB80FF0209A9DD743618BC86162978C213A18D76083EA
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.s-microsoft.com/en-us/CMSImages/Windows_Cortana_Google_img.jpg?version=64b86184-8fd4-0c60-cc65-28593abecca5
Preview:	......Exif..II*...........................b...........j...(...........1.......r...2...........i...............`.......`.......Adobe Photoshop CS6 Windows.2017-05-08T13:00:53+05:30...........0220......../...........Z.......Z.........Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:44D8DE8A33C011E7B648938718D13067" xmpMM:InstanceID="xmp.iid:44D8DE8933C011E7B648938718D13067" dc:format="image/jpeg" xmp:CreateDate="2017-05-08T12:55:23+05:30" xmp:ModifyDate="2017-05-08T13:00:53+05:30" xmp:MetadataDate="2017-05-08T13:00:53+0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ai.0[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	96705
Entropy (8bit):	5.228470338380378
Encrypted:	false
SSDEEP:	1536:EVpXOWPGHRGUvJEzxPNLgyLuG6XV3yV/QtJ+j1YeO4PFWYit:EVoWPGHRGUvJEzxOMQV3yV/ERaNWYit
MD5:	1DD63DE72CF1F702324245441844BE13
SHA1:	58A8BDCDCB398AF7DB424357DF70DF18E7B30E9D
SHA-256:	5201C813C37A4168CC5C20C701D4391FD0A55625F97EB9F263A74FB52B52FD0E
SHA-512:	532D1E907B433AB97785CF632D9637A957152BAF0BA57879C856CBAA469BFFECA22C4F99485679539944B27068D39E70F7D44282594F999142454DA57329A11B
Malicious:	false
Reputation:	low
IE Cache URL:	https://az416426.vo.msecnd.net/scripts/a/ai.0.js
Preview:	"use strict";var AI,Microsoft,__extends=this&&this.__extends\|\|function(){var i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])};return function(e,t){function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}}();function _endsWith(e,t){var n=e.length,i=n-t.length;return e.substring(0<=i?i:0,n)===t}!function(e){e.ApplicationInsights\|\|(e.ApplicationInsights={})}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){},(e.Telemetry\|\|(e.Telemetry={})).Base=t}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){this.ver=1,this.sampleRate=100,this.tags={}},(e.Telemetry\|\|(e.Telemetry={})).Envelope=t}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Context={})}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Co

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	47051
Entropy (8bit):	5.516264124030958
Encrypted:	false
SSDEEP:	768:ryOveCSBZfsnt5XqY/yPndFTkoWY3SoavqVy2rlebYUDTJC6g0stZm:ryJNDfs5hYdFTwY3SorSg0su
MD5:	53EE95B384D866E8692BB1AEF923B763
SHA1:	A82812B87B667D32A8E51514C578A5175EDD94B4
SHA-256:	E441C3E2771625BA05630AB464275136A82C99650EE2145CA5AA9853BEDEB01B
SHA-512:	C1F98A09A102BB1E87BFDF825A725B0E2CC1DBEDB613D1BD9E8FD9D8FD8B145104D5F4CACA44D96DB14AC20F2F51B4C653278BFC87556E7F00E48A5FA6231FAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self,m=function(a,b){a=a.split(".");var c=l;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},r=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var t=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var u=window,v=document,w=function(a,b){v.addEventListener?v.addEventListener(a,b,!1):v.attachEvent&&v.attachEvent("on"+a,b)};var x={},y=function(){x.TAGGING=x.TAGGING\|\|[];x.TAGGING[1]=!0};var z=/:[0-9]+$/,A=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},D=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\btn-app-store.1cfd5dba4a92[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12224
Entropy (8bit):	4.410899261237186
Encrypted:	false
SSDEEP:	192:SM3CuvPx++hUxi5ceR3GgZppHuI2VXd9YGRKjwrt+bJ05YjXfb0K4DNCqxxI:SM3Cuv7/ObIQYV3NrgM/
MD5:	1CFD5DBA4A9210BCF77F5DBE48EC2E66
SHA1:	B18020F162DECE51251489BE269DB7629A223FCD
SHA-256:	4CFABCFDBEC9A5CD903190F150028743F38C3533B53EA21C6E4DD35A52A80383
SHA-512:	2DA8474456BFDBFDCDA58ECE8FE623886C494B745655BB955175557B446C72C3C7C7F21EF09A8DD9BB0191EAF30AFF606BCDD62D40701A6678FE384B139CE251
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/l10n/en-US/firefox/ios/btn-app-store.1cfd5dba4a92.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="US_UK_Download_on_the" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink".. x="0px" y="0px" width="135px" height="40px" viewBox="0 0 135 40" enable-background="new 0 0 135 40" xml:space="preserve">.<g>..<path fill="#A6A6A6" d="M130.197,40H4.729C2.122,40,0,37.872,0,35.267V4.726C0,2.12,2.122,0,4.729,0h125.468...C132.803,0,135,2.12,135,4.726v30.541C135,37.872,132.803,40,130.197,40L130.197,40z"/>..<path d="M134.032,35.268c0,2.116-1.714,3.83-3.834,3.83H4.729c-2.119,0-3.839-1.714-3.839-3.83V4.725...c0-2.115,1.72-3.835,3.839-3.835h125.468c2.121,0,3.834,1.72,3.834,3.835L134.032,35.268L134.032,35.268z"/>..<g>...<g>....<path fill="#FFFFFF" d="M30.128,19.784c-0.029-3.223,2.639-4.791,2.761-4.864c-1.511-2.203-3.853-2.504

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\circle-bottom.b37cc58e60b7[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	5.009440858168418
Encrypted:	false
SSDEEP:	6:tnrctd4LvKmc4slmLMeIN6u0OBkOUibiOO9FAZSKsKMwebZ8:trctOTKILBIMsrOfAxxMwem
MD5:	B37CC58E60B77C4D44AA44C6BE45C493
SHA1:	F06C98B388B570DB12D6C08549D87F9919B60AD6
SHA-256:	3028638841E7F23D2CEF3E8E6F4FEEF9DE016B07DAD8B801C2C9A3487794E617
SHA-512:	D624E80A0987FEC82F3EEF1EC54BF402CA294340DBEA17F0A4C9A734B91B0EAF8253290679B988CDAE5C9888AF006A5D93E19483DC679899C7D510A38FED0F9D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/mobile/circle-bottom.b37cc58e60b7.svg
Preview:	<svg width="251" height="211" viewBox="0 0 251 211" xmlns="http://www.w3.org/2000/svg"><path d="M250 127c0 69.589-55.74 126-124.5 126C56.74 253 1 196.589 1 127S56.74 1 125.5 1C194.26 1 250 57.411 250 127z" stroke="#20123A" stroke-width="2" fill="none" fill-rule="evenodd" stroke-opacity=".18"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\comparison-noodles.8052c2330d7c[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2022
Entropy (8bit):	4.895936748444847
Encrypted:	false
SSDEEP:	48:cweiaTfVE4pWXUKmQyJsZLRnHwRqxoKlY0E:yENWcHq
MD5:	8052C2330D7C60041489A9E7699C435C
SHA1:	8266875BAB3F40673C612BA53F748FDA140F765B
SHA-256:	2F4126DACE7FA5A2C0BB2A11B9C3D5D5742AFCF0EE2BD618930F1E0AB99A7BC5
SHA-512:	6A73E7AE2F06493F61A6283B4D7F9D611C7E6B382B3E39FE2E20C13452B71D30FF4478BE9ECCDD371D4A6B6EE97CAF3ABE4024F3D84B3C08964B7F522E6B8827
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/comparison-noodles.8052c2330d7c.svg
Preview:	<svg width="405" height="334" viewBox="0 0 405 334" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="1.84%" y1="109.891%" x2="90.061%" y2="-6.22%" id="a"><stop stop-color="#FF661D" offset="0%"/><stop stop-color="#FFA000" offset="100%"/></linearGradient><linearGradient x1="23.806%" y1="66.463%" x2="46.918%" y2="27.946%" id="b"><stop stop-color="#45228F" offset="0%"/><stop stop-color="#AC6BFF" offset="100%"/></linearGradient><linearGradient x1="14.846%" y1="87.694%" x2="39.466%" y2="121.366%" id="c"><stop stop-color="#FFD44E" offset="0%"/><stop stop-color="#FFA000" offset="100%"/></linearGradient></defs><g fill="none" fill-rule="evenodd"><path d="M100.099 316.357c-10.61 11.885-24.992 18.308-39.668 19.084-14.676.776-29.646-4.095-41.43-14.796C7.215 309.945.848 295.44.078 280.64c-.77-14.8 4.06-29.898 14.67-41.783L189.066 43.612c10.612-11.883 24.995-18.303 39.67-19.079 14.676-.775 29.645 4.095 41.43 14.795 11.785 10.703 18.152 25.207 18.92 40.007.77 14.8-4.06 29.896-14.67 41.78L1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	95971
Entropy (8bit):	5.079205236465009
Encrypted:	false
SSDEEP:	1536:/u8gS/avDWCOWeiFhXEGb1jgASA/AuAAKFKdnA+B+J+yQ3x3r33F6AxqP+6BSCe7:m8gP7WCOWelSCM
MD5:	98746CECF7906BFBAF2840C6C8337BBD
SHA1:	602EBA94047922DEF0A64B8F11D81314D60BFD62
SHA-256:	5DD3E9E5A275F13CCA949CB0277A170C3B44849A100E8746F0AF620C0B655F0E
SHA-512:	0FAC0144471749E7ED5197CC4A72828A44E56513D2814394C3989C18AB9E5487FF3E1BBE3FCD29E68BA97C2B85248B0B8FBE6EAD47FECBF3D897F667D17C4F14
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/en-us/edge/Assets/css?v1=11.25.uk
Preview:	.invisible{visibility:hidden}#selectionsDisplay,#filteredSort select,.featureKeyIcon li{display:inline}.featureKey p,.edgeconsumerCatalogCategory .c-heading-2{display:inline-block}fieldset[data-category="brand"] .c-checkbox:nth-child(-n+7){display:block}fieldset[data-category="brand"] .c-checkbox,#resultWrapper,#filterSelections{display:none}.featureKeyIcon img{width:24px;height:24px}.featureKey{padding-top:56px}.featureKey li{display:inline-block;margin-bottom:15px;margin-right:30px}.featureKey .c-image{display:inline-block;margin-right:10px}.featureKey img{width:34px}.filterBy{padding-top:48px}.c-price s{padding-right:5px}.edgeconsumerDeviceBottom::after{clear:both;content:"";display:table}#clearAllFilter{margin-right:20px}#clearAllFilter::after,#showAllFilter::after,.showAllButton::after{content:""!important}#showAllFilter,.showAllButton.c-call-to-action{background:#fff!important;color:#0067b8;border:1px solid #0067b8;padding:10px;position:relative}#showAllFilter span,.showAllButton

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dark-mode.1c68a7642490[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1110
Entropy (8bit):	7.713364067799433
Encrypted:	false
SSDEEP:	24:qPaUn0oQaavhVFEnG4qMl1FpW6aitVwdUcVaSNS1ojgnidg4gRe:qP70oQPtEnG4VFtaitVwJNgojgniG4gE
MD5:	1C68A76424907B439F6D10B14AE211CE
SHA1:	D4470D4B50237C0C533F51C431A47185C04C0FA2
SHA-256:	60D08EF139817A9F7B475E0C8B6FAD3977767EE18EE0775FD09F8746C4FF0294
SHA-512:	EC0A555841FAD3F7364EDCE4F8A669E527C324923E231A4C1DA39FDB4FA762E270361299C9EE7B34BA3BDE33D54C9512C028D36428485860FF5443FE053FB112
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/dark-mode.1c68a7642490.png
Preview:	.PNG........IHDR...@...@.............PLTE...._..v..]..u..a..s..e..q..c..g.....z...........p...........l............q...........x........l..........................i...........n...........................\|..s....................e......NIDATX.W.r.@..f.Q......p..n\...W](.....$.bI.....V+...M#..9N..w.......2...0.$.....%\|..\|.E.\|.N.E.7.&.#I..8...J..u..-4..F=.F.;..f.#..9..Sg3....Ld.bx{t.........5}8(6......'../..]....<.{..7E.9......[...8.....7..M.?G..6m..x@..t...5...m>b.IK.........b..rX....2...@.s...>.'..6...A..gI......jf..H..z!gV...\|Bpc<L..8......"..&QP..G..]...RB{+.'.f.YI.\.x..@....&.')..7....I.o.:JA.yug..8....+..~....,....b!.<...5Z..!0..G.-FC.)(H.9}.w.).aE.%...)@I..d...L.@&7>.3.......?.....>......e.4~....'..;.],.DR.e..Y....e...H....t.A....,..\L....F.......d.,.=b9...am.0..L..y.=m5.Q..\|Z....0.....^..z$0......k....\v..,e&..s..D.......<\.vUGB-.<....`.....[0,.. ".8.N.A..K.mH.!..k..Q.L...pM..; .......y.f...N.=w%u....E..+:8D{kI...<.[.1.pf....M-?\V

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\everyone.dcedbb8ac2c1[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 367 x 302, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	14150
Entropy (8bit):	7.977159877000978
Encrypted:	false
SSDEEP:	384:IisQ2doHDD4NOnTgfyzmhgZjGVS2KauKeT4PneY:f3oekfyz8gZy2bTkeY
MD5:	DCEDBB8AC2C1D4BAC3DDCFD97C20420B
SHA1:	EA4BBD11A5B5F0909EF243F5A4E2366D9465E4BD
SHA-256:	5C8BCF84DE3A99D00AC2C2D2E0F4D8C17C24BD41834FF781E527ED8F659202FD
SHA-512:	6FDB8AF833C574D4B8BFEF772AF00FBCCFCE186E34AC47BFFF5CB61BF3D13480BF377BFC799F140B9ABEE35D479E53D950506B7FD55E8878E995AEDDA5785688
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/everyone.dcedbb8ac2c1.png
Preview:	.PNG........IHDR...o.........v.c.....PLTE.............v..................>...t.......8.......................'.........u......................$...........-........Q....................J.."..............(\|.......O...........N....................p..3.....W..T..5..../.......s..G..............e..B..@..^..,~....\|..z......................G......................1..~..n..w..g..E.............c..:..........Y..:..u..[..<..l..i.....`..........(((...!.......................:::###.........FFF556............SSSLLL.............................ppp@@A.................}}}.......www......hhh...J6.4..#y.ddd^^]...+...........m?..~..u.uV.5&.......a..@....YYY.K.n..kkk..+..(.s .R.ZB...........M-........iM.f........V...%8"....g._7.._..........f.._.........w....#............jc\M@4y.v...4.IDATx...OsU..O...b..smC)...@.*.....e.2Uf.........0j.w._....;...R......V+..:........w...{...>J...!..m..1.;9.M.........h...=.Bqy{....=P...H..(.F....kbdq...=..niX..mv..$Ib.....D.3y...=...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\firefox_new_desktop_join_modal.69e5ca482b50[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2559
Entropy (8bit):	5.222806194857365
Encrypted:	false
SSDEEP:	48:8R93VQXz2kEtjg+wYKcxRyn+XVqtEoBfRufqtQSEFBt9A+6Ln:GQBEhg9M7XVqTBfRYqIBfANj
MD5:	69E5CA482B50150841F7127E64CA88F3
SHA1:	05BAD3DB65A13B75BFFD8270916EB87586BDEA28
SHA-256:	D4BD2280A280E56CAECFE71BB1503CFB3EC81A2D5623582248EA0FD80B3663B4
SHA-512:	01D72E4EADC9DCA91FD14A432AC9A379273BE3209B68AEA283BB2ED54F9EF8D8C50AC53FE70A9B1B00C100F36DE606A9F93840FB24AE8D16AD5855E1DED9B5C6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/js/BUNDLES/firefox_new_desktop_join_modal.69e5ca482b50.js
Preview:	if(void 0===Mzp)var Mzp={};!function(){"use strict";var r,s,m,u={},p=!1,v=document.body,f=document.documentElement,z={};u.createModal=function(e,o,t){z=t;var n=window.innerWidth<760;p&&u.closeModal();var a=z&&z.title?z.title:"",i=z&&z.className?z.className:"",l=z&&z.closeText?z.closeText:"",c='<div class="mzp-c-modal '+i+'" role="dialog" aria-labelledby="'+e.getAttribute("id")+'" tabindex="-1"> <div class="mzp-c-modal-window"> <div class="mzp-c-modal-inner"> <header><h2>'+a+'</h2></header> <div class="mzp-c-modal-close"> <button type="button" class="mzp-c-modal-button-close">'+l+"</button> </div> </div> </div></div>";z&&!z.allowScroll\|\|n?f.classList.add("mzp-is-noscroll"):f.classList.remove("mzp-is-noscroll"),v.insertAdjacentHTML("beforeend",c),m=document.querySelector(".mzp-c-modal"),r=(s=o).parentNode,document.querySelector(".mzp-c-modal-inner").appendChild(o),o.classList.add("mzp-c-modal-overlay-contents");var d=document.querySelector(".mzp-c-modal-butt

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	259076
Entropy (8bit):	5.370461653915801
Encrypted:	false
SSDEEP:	3072:V4FQAB7D2jgXVsaL0rNGd6mKcJXRbt8svk0R6hjr69kS34slA:V4FQAxD2jgXVsaL0I6mKuzSl+CslA
MD5:	30E81A51A36792CEF5BE8B1F245029CB
SHA1:	DF24A7503D329D3C27C2F38D28E444C2E65E8B79
SHA-256:	71FBECA18C04CACE840EF87879F5C963F4FDC46A588CD61C7B08DDFDCCC55347
SHA-512:	3E2FE32CCA979328176E0F91F8C3AA251EEF90EB00ECD7F02CE17D7407D13E11C4F3211F07C74F18B09B759F9B1D8E78C555737236215D6B3E524399B97EB482
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MW3R8V&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(w,g){w[g]=w[g]\|\|{};w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');(function(){..var data = {."resource": {. "version":"208",. . "macros":[{. "function":"__e". },{. "function":"__jsm",. "vtp_javascript":["template","(function(){function k(g,d,k){var b=g,c=b.split(\"?\");g=c[0];b=1\u003Cc.length?b.replace(g,\"\").substring(1):\"\";var a=b;b=a.split(\/[\u0026;]\/);c=[];var e=\"\";if(\"\"===a)d=\"\";else{for(a=0;a\u003Cb.length;a++){var h=b[a].split(\"\\x3d\"),l=h[0];h=h[1];include=!0;for(var m=0;m\u003Cd.length;m++){var f;(f=l.toLowerCase()===d[m].toLowerCase())\|\|(f=\/(([^\u003C\u003E()\\[\\]\\\\.,;:\\s@\"]+(\\.[^\u003C\u003E()\\[\\]\\\\.,;:\\s@\"]+)*)\|(\".+\"))@((\\[[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}])\|(([a-zA-Z\\-0-9]+\\.)+[a-zA-Z]{2,}))\/,f=f.test(l));f\u0026\u0026(include=!1)}include\u0026\u0026\nc.push({name:l,value:h,index:a})}if(1\u003Ec.length)d=e;else{for(a=0;a\u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\highlights.e07971ba2884[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	905
Entropy (8bit):	7.559574582428695
Encrypted:	false
SSDEEP:	24:h1sPuZTMlwFBNugYfqBKSLzzbRA/Ne7Pz9heTh6bHY0s2c:hZZTMq7Fjv0NkLE0zYF7
MD5:	E07971BA2884C150010D21D8BC89751B
SHA1:	3EDFCBE40FAD9B25DA9384A41A712A0F6430BB2E
SHA-256:	B71A891FF73C475D538A32C3E8E38C2878EAB13424381E5DB27DBC7D570280AC
SHA-512:	F2C7BE807CCD35A068601A7292F1D6EDE1F4ADBE1951D6A1250ACD5D22CD1A85DA1C274612196534B3D4C67D7FAFD8C2ACFBB5DA7CFA52B674C56F351F4DE5E1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/highlights.e07971ba2884.png
Preview:	.PNG........IHDR... ... .....D.......PLTE...uB.t@.p........r..].n<.Z+.Y.W(.e.i8.......wD.d3....xF.......................Y....v.............x.....c.............R..k.\.q.j?.............................................W.S.\|G.T..r?.l9.j.uJ.g5.e2.`..d8._3...........}..s..m..i..Z..........{............u....i..[........c.e...T...P...q.d..e..c.xB..T.m.T.R.Q..~..u.zJ.e.xR.uN.qI.mD.^0....U....IDAT8...V.@...M.`... Mi.R.wi..{.w..%.!!...=...........6...k.g..0L9...:....W.OO6V.........N{.z-.+sztl.q.d.v.GT.}].....w.F.Cg.....p7.........P...k\.......2.Pa....._S..9.....a..Vm..,.aM..$.....d....@.....E...X.......bY......7I.!....Bpwb..B................../....Yq....f.L.]..m.#....xII...82.F...R..=MB.>L.L....n.^ ..A.h..5.`7.5.U.(.F...a:N....#...-.]...8.'I.26o..+%..".Q.H.Z_&...~.xPW.O....O.........N.7.%#.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	86926
Entropy (8bit):	5.255976693442152
Encrypted:	false
SSDEEP:	1536:f7Y/2i2/pdUT7ZUniaohKocxwdenIAfjrDvaNnH0iJbzoTbOpoW6BNmGQO:QIDaRSTqpGQO
MD5:	9D4E2BCCFF0710F4ADEC357DC2AD0470
SHA1:	CBF6BFB0A7C5760A9154ADF458E801203E373741
SHA-256:	987007C5A458C47212B2435684B16220686430A300C505C976A0532BA08E645D
SHA-512:	A85BA207362154681BC2539D6C4FB369AE770721DB641AE3A6B6E5A5A69B3AC8E7C20B28766FE390C27F7A914CB5D6EF6AD49AE22FF5DAF4F3077751C82F70E0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/en-us/edge/Assets/jquery?v1=11.25.uk
Preview:	!function(n,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)}("undefined"!=typeof window?window:this,function(n,t){"use strict";function hr(n,t,i){var r,u=(t=t\|\|f).createElement("script");if(u.text=n,i)for(r in df)i[r]&&(u[r]=i[r]);t.head.appendChild(u).parentNode.removeChild(u)}function it(n){return null==n?n+"":"object"==typeof n\|\|"function"==typeof n?bt[or.call(n)]\|\|"object":typeof n}function hi(n){var t=!!n&&"length"in n&&n.length,i=it(n);return!u(n)&&!tt(n)&&("array"===i\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in n)}function v(n,t){return n.nodeName&&n.nodeName.toLowerCase()===t.toLowerCase()}function li(n,t,r){return u(t)?i.grep(n,function(n,i){return!!t.call(n,i,n)!==r}):t.nodeType?i.grep(n,function(n){return n===t!==r}):"string"!=typeof t?i.grep(n,function(n){return wt.call(t,n)>-1!==r}):i.filter(t,n,r)}function wr(n,t){

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\logo-edge.016a47a7fab3[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 190 x 190, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5866
Entropy (8bit):	7.889270761520057
Encrypted:	false
SSDEEP:	96:PKOs0G2zP/l8KnzvtTUbpsHNfyFJgMdBFGkMThUwvchBxXGLzM2dxTZz:PKOHG2zDn5wbUN6L1dMTuwEhU7lz
MD5:	016A47A7FAB347DFE518EC3640ED82F3
SHA1:	C91B2220427D6E2F4AC316B979585EDD88B2278F
SHA-256:	B2631770CF02ED726B0C406736380ED3C2483095C2CD6B0F1E2FE21B49902421
SHA-512:	48DAF6F93FDC3B1B953457E87D1350FB0DD5BC261C92D29A6F5206FE4BFFD4D6A63CAA752CB84BBDC2BC128DDF83DE19F6C5764FCEEAC4E5972EC17A7C881999
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/logos/edge/logo-edge.016a47a7fab3.png
Preview:	.PNG........IHDR...............E.....PLTE..."...].B.r.L.6.<.\.M./...M.0...\|.=.o....y..y..\|..N.1..1...}.S.w.I..{..O..O..G..z.....O.;.`.N.;.$...N..W.3...{.0.3..:.X.T.7.W.y.2..>.[.S.5.N.q+..=.,...z..B{...,.,...\|.O.j4.....z..w.-..y.,..-.*.....2.~....z..}..U..S....4...R.+..3...M..Q..P.-../......O.2..0..,..............+......K..M..K.6.R,.....,..,...L.W.ya.qZ.v-..I.L.H..~.Q..G.S..A....U.\|...?.^.r...-.2.D.].t6..\|.W.rK.[.q4.g...8.O....4./.....T.o3.yF.4.kP.n5.X2..;.=.2.3.t:.UN.k.........v.:..y.1.N.v.}....5.\>.X.v..}.D.@.1.G.S.t....{..v.:.C.h5.c...0.....J.qH.cC.[R.yd.o=.h/.7.0.<.C.pI.k5.`.p.B.L.M.}H.w.o.K.g....o.<.<.p.y.4..H..{.6.:..H.}A.v.w..q..t.A.~.D}D.`.r./.3.qH..}..l..z.=.;.x4.o...?.aB......;.^8.C.6.2.3.6..\..o..?u.u........`.,...g. ..(...z.'.....Mz.?...GtRNS...b+.~R4.d8/&.X@.PI.......bE......{......tI........s..................UIDATx...Kjq..pE.\.Eq}8.-......Z#.'h.h.$....T..I....s......,.g....w.=......9...?.{..d`.Yf.e.Y.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\logo-reality.6bcc5b8e7099[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 216 x 216, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	12069
Entropy (8bit):	7.949263911912639
Encrypted:	false
SSDEEP:	192:5YQ3NdT4RH1pSNGAPHgMGi4H72DdBDTDiQrkRx4OchGkPx1Fa7pTbxgdeNX1TAQx:XNd62JPgZ72BkD4OMPz2pv0eNX1TAR/g
MD5:	6BCC5B8E7099829A85F50C01C605FAF8
SHA1:	8859515249A3058CD52DE2F35FCB12E8897564BE
SHA-256:	D77EB62C8D795985A422F91F3773336E99CAD9B0575B31580679BA6C7AD2AD37
SHA-512:	5C87EA836EA9B6CF354F821653F6EBDE048F601602B25E882046484ECBE8AB5407135708EBE7D48864B4BCF73F53819BBE7A756DF1A941685498E588716D4471
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/logos/firefox/logo-reality.6bcc5b8e7099.png
Preview:	.PNG........IHDR.....................PLTE...G.o1.}....;.....3..G..].22.....q.6V.D;..B.>=..E..h..9..L.@J..b..T.A+....A..<F.A.y<6.....y.:`....?i.....7.9Q.E...d.?..A..R....;<.A!..7.B6...8].E@.7N.7J.......Ek.Hf..I..).6F.>(.Bs.>S.6U.:L.8i..q..".@.p....... ...D/.:?..............0....Y..E$'b....L...".......=.fEp.....H.-..>5.....Q.q2Q+.n.E.B>..K..97.h.5(.0.~....../....'!........2?..N]....#...........,....Kg..&........t".)".,..#C.......b.j.U....1........Fuq-n{k..3-) .....st......./..dn....y.......qH.....K.Kl.5M.ld..........#.XN..F.P........At...N............E..L..W..r..g..a..L........B../..7..D..]........y..6..n........"........V..$.....v........}...A.q.......C..x.D+.?N..@.....H.D..9?.B...C..N..R.8K....~.EA.>E.9B....8.>3.?6.:[..6.<c...3.5.....G.,...1@.\..UHQb..T..._..]..\1T.n.=!lL..g?.}H.N),.......tRNS................................................................................................"...C6...M..2..j....'.U..w...iPl.....................a...sB.............ds...++ID

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\logo-safari.2a116a2615e2[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 190 x 190, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	52440
Entropy (8bit):	7.9927698496494655
Encrypted:	true
SSDEEP:	1536:VZ1/Zuqo/auea05aEibrpZxkqFc/r85FBz6z:BUaXaSqnkqFcUBC
MD5:	2A116A2615E2A2C11AE20F49D747358D
SHA1:	FDC1F0126D2AF5F1A62FFBE6F7D1FBBD5F36A516
SHA-256:	74898A4C506CFA540A8EA8D6BCF2D3B7754AA156FA8AD1A07748966E1734CCE6
SHA-512:	066387801665A0582B3A547F7C3C5915A3916A8BCB7526E1EDFF56336D091FBC37F92E7F2B77509806907355FDC34EB57D0C2A1135405360979C34DBE21894F4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/logos/safari/logo-safari.2a116a2615e2.png
Preview:	.PNG........IHDR..............t......tEXtSoftware.Adobe ImageReadyq.e<...zIDATx..}.`...wg...^...M1.B...86.....GH.I.K....B ` !..p..cz.....m.J...m...3....,.S..kI[fg.~...+.........M\|v.>.u...B.x<......N.....+..eYx..g....>..K/5.1.a..;?...C.+.&D..\x....c.....HIIA$.A8.F.E..\>.}...~...Fss...u.].].v.C..)....7n\!=^........Y.'O..d.>\|8...C............~....\|.v...pNNN......o7..[...6.s../_~...ugmm.n:.....E..sN..>..q......t.\|.....S..)--.B..y.e.....&.]A.e0.]O..=.;.....O<.D.........ZV.}... . Ah.."\|....^......>:.;.........RO.......*.~...gj...1...F..:.]...>no.Xr..ew..%+W.l\.r..a.P.....]oDUp....h....~z.}.`.....q...m..AT...w...[o.$........(...9...0a...&N.8..3...=<._..P.V......}...t_.g..l..q.?.C.....u.~C......?..7rD{}.....w.1i.]Z\|$.g.....H....Q...y......t.u...C.Z............._.....r.-..De.p?....Eq9........4.+h..G.CJ..-d!....{0,..?.O....C.o.i>...[$9..-.Do.0.=.{q..}..._.d...-.9sfp.M...?...3.5\|.7.._.......C.G...........B...X...4vX..ja{S...$..G.D.;$Z.......!..,}....C@

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\logo-word-hor-white-lg.6fa3ad2502e8[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 694 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	10004
Entropy (8bit):	7.902758637314374
Encrypted:	false
SSDEEP:	192:zJzrHMMHAXo58PkTWt421Pjyje9vAbDkojYnyBlaIYv2PWfpPxDm/V:FzrsXG8q65ZyOAb5Yy6tBDo
MD5:	6FA3AD2502E8065A07483564BC76326C
SHA1:	588CF9A3F8610989A23CBBDDB0EEC46AC20F6F46
SHA-256:	7681AF958E8538CA22680E664A489352EFF793439CC672D4DB996F824CA3EFFE
SHA-512:	D0BDE276BB25E1583E6AEE68D629544FBB2007A8B4C72002634B0000CCD615B51F702B5566A9BEE3CA6F508B62AFE29C35B5A2A5E64CCB0A005A82D2D33AE69F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo-word-hor-white-lg.6fa3ad2502e8.png
Preview:	.PNG........IHDR..............a.G....PLTE.......................................................................................................................G.............................r.$y.....6.^Z.....q..r..B..t..?..G..I.L...L..r..r..0..<./_..H..q..H.aG..E..F..E..D..E....c@..5..H..F.....8..K.e,.[N.<...C..1..?..:.\1..@.PT..I..1.>.....B@Y9..=B.7G.:D.F=.Q7..E.4J..h.N9..l.2O.K:..E..B..9.T5..J..F.....c.I<..]..G..5..;.c,.;...@..p..G.j).Z2.9...L..=.W4....^0.F...F....A...5.....7..6.....!..5...Z@...+../....M..x!.q%..R..(....8...H..@.....K..$.U...K]P...5.t5.Z.yZ.iX.cT.i3..\|6p[.YI...7.~...6..sa5..#W..;.d6wM...M..J..2gB...N..9qG...Q..L.,.Y..%..4.;...b.{S.:...C..l.H.s..@...t8...Y.>..lV.N./..l:.[:..-.l3.I..>].K\.!e.0`.v..TV.W.{.I..].<.D..}~rA..Mx.s^.TR._../..b..9F.s..\\|.UA.rK.G....<..Kb.H.....ctRNS....R............j..e.t.Z7A.0.H;%..!....oM~.^V..y..5J.-.;....aQ.hJ?..w...vvW......xe.......q4z...#iIDATx...Kk.Q.....W..B.Y.:........P.5} }!.Y.n.$...PiK.}..R....NP.......w..t.7..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mwf-auto-init-main.var.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	370314
Entropy (8bit):	5.173961506840814
Encrypted:	false
SSDEEP:	3072:X66qy74FC9UPy3rLgP99YEzAFQoX4Bt+8/6iDRFRE9CFpuOxR3Au:X66qy6C9h78P9WuAFDoft/09cRP
MD5:	9EA4EE921FB70E0D7C36B186CB0D8680
SHA1:	27EC427A3266394ABF440B4FE2BC2CC9C996AD78
SHA-256:	FED336F5A5314EE9CD503033762EA4709C33764C2C214405915BF65262FED1EA
SHA-512:	900902274CB28644C69784E0B34A8EBDC25F214DDBFC8FD4677360F7505A8C08E7F96CD00D66B297E89F74C4E5D36B7B95875CB0C4EAF8F7CDD8F96AED6DB7C0
Malicious:	false
Reputation:	low
IE Cache URL:	https://mwf-service.akamaized.net/mwf/js/bundle/1.57.0/mwf-auto-init-main.var.min.js
Preview:	/! modernizr 3.3.1 (Custom Build) \| MIT . * https://modernizr.com/download/?-eventlistener-picture-printshiv-setclasses !*/.!function(n,t){function h(n,t){return typeof n===t}function c(){var u,n,f,e,o,c,t;for(var l in r)if(r.hasOwnProperty(l)){if(u=[],n=r[l],n.name&&(u.push(n.name.toLowerCase()),n.options&&n.options.aliases&&n.options.aliases.length))for(f=0;f<n.options.aliases.length;f++)u.push(n.options.aliases[f].toLowerCase());for(e=h(n.fn,"function")?n.fn():n.fn,o=0;o<u.length;o++)c=u[o],t=c.split("."),1===t.length?i[t[0]]=e:(!i[t[0]]\|\|i[t[0]]instanceof Boolean\|\|(i[t[0]]=new Boolean(i[t[0]])),i[t[0]][t[1]]=e),s.push((e?"":"no-")+t.join("-"))}}function l(n){var t=u.className,r=i._config.classPrefix\|\|"",e;(f&&(t=t.baseVal),i._config.enableJSClass)&&(e=new RegExp("(^\|\\s)"+r+"no-js(\\s\|$)"),t=t.replace(e,"$1"+r+"js$2"));i._config.enableClasses&&(t+=" "+r+n.join(" "+r),f?u.className.baseVal=t:u.className=t)}var s=[],r=[],o={_version:"3.3.1",_config:{classPrefix:"",enableClasses:!0,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mwfmdl2-v3.07[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 22376, version 0.0
Category:	downloaded
Size (bytes):	22376
Entropy (8bit):	7.978063740714443
Encrypted:	false
SSDEEP:	384:2Ejgjh+jMw/sN0JuyIO2cyTUB3kKHQWKffRt/OODsQRsVXkCfPe/DHu2o0HTI:aQjX/2MPIbUZvJ8rDspWIM7u2o3
MD5:	DAE68C4A8AAC30A0C75731AA3C7553F3
SHA1:	4E662B5F83B7F10E297A825072AAF87EE01E9FCC
SHA-256:	7F31CBB16DD8190854789BD1B43F15AE60940FB79AFBB7CFBEF664E12F8A247C
SHA-512:	20433B4530D557D360F9ED51B1DD1DE0C6EEC97B33E880D45898FBAF308A51A73104D04293CDA1959ABCA5C787BB0B2AE50DBA2576CC12D2816ADC74CD9B27E8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/mwf/_h/v3.07/mwf.app/fonts/mwfmdl2-v3.07.woff
Preview:	wOFF......Wh.......\|........................OS/2...X...H...`JZ.:VDMX.............^.qcmap............R..cvt ....... .......fpgm...........Y...gasp................glyf......G-..{2D.;.head..N....2...6....hhea..O........$$..\|hmtx..O(.........yM.loca..O....~...~@l!.maxp..Qp... ... .Q..name..Q....6....`..Upost..V........ .Q.wprep..V.........x...x.c`..g......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...d.Xx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...]L.a...._9u.._...=T.a..B.1..G.n\|..f.....a..D4...L...5..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mwfmdl2-v3.54[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\oval-one.e5b579c2974d[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	248
Entropy (8bit):	5.107239422472561
Encrypted:	false
SSDEEP:	6:tnrtUFGJS3mc4slboGMkcYVCPmqP1dGo7hGFQq9jI69KsKME:trtH8Fb/ehGF3B9MxME
MD5:	E5B579C2974D99812CD60F17C64B5EF5
SHA1:	49D933173053A8A13A272E450D498CD58364D293
SHA-256:	6D01F977053DC419DCC2119DF66C4719C890993B6DCB837BA68562BCBFA9FDB7
SHA-512:	570D2BCE574C6AC9E8714F2E00DE22A3ED99CD0B2B6A70AFBF8AE023FF76A450C13F882400230934A6C7458894C86B11E36F7E0DE57E67E776FA1E260C6C13AE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/features/oval-one.e5b579c2974d.svg
Preview:	<svg width="254" height="274" viewBox="0 0 254 274" xmlns="http://www.w3.org/2000/svg"><ellipse cx="1195" cy="1031.726" rx="135.5" ry="134.898" transform="translate(-1058 -895)" stroke="#FFF" stroke-width="3" fill="none" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\oval-two.d289d7dc464a[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	247
Entropy (8bit):	5.106717084533382
Encrypted:	false
SSDEEP:	6:tnrlFftkmc4slboGMM7YXGmqP1dGoBBq9jI69KsKME:trHtkFbC+qB9MxME
MD5:	D289D7DC464A7197CF3D0F9AB3230089
SHA1:	01EA5635796E7C31CFEA7BE3BBD5F7FC982C28CB
SHA-256:	DAC65DA527524F882E95052833EC03B0514BCB9C137CFBABA2DC958E68A5473D
SHA-512:	E807803C1D560212D5B42880E37A1A0F6BD3EF24A594DA81B20C63F6CA06148146865E1B0BCC08E4A599EE74FC422F26A0D2EB5177A84C03E13216EE5A3E4654
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/features/oval-two.d289d7dc464a.svg
Preview:	<svg width="274" height="193" viewBox="0 0 274 193" xmlns="http://www.w3.org/2000/svg"><ellipse cx="293" cy="1276.542" rx="135.5" ry="134.898" transform="translate(-156 -1140)" stroke="#FFF" stroke-width="3" fill="none" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\person-privacy.02557c8137a2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 462x436, frames 3
Category:	downloaded
Size (bytes):	25240
Entropy (8bit):	7.945786654410562
Encrypted:	false
SSDEEP:	768:03RDnlVp0ebM+sbA46sDJVZMhw1ISSfU7C+z314/GTFPC9wY1ezBM:+nlVBVs0EShw1IjQlz6wPqPszu
MD5:	02557C8137A216D4549BC0B8036CE74F
SHA1:	349D10983D988EF18517F50C7A4F2542E573AA65
SHA-256:	ACB16A04788302650106E248B79649EDF05DB034F1948C1C877CC3C0191D706F
SHA-512:	2DBC7591B2048452AB30828D8345CBCE98E59345CB14BB9512DB71BA964FC29769E6A4787071601783E0EC75AD6267926C1201459C1FB1DAA636D26EAF8941B2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/person-privacy.02557c8137a2.jpg
Preview:	......JFIF.............C...........................$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================............................................................................................`.......................................b.})...................+1...Vem.....+.....................q...M.SYS^.\..l.......u.%...............p..>e..I..gC<M&..n.N..]....8k/l...............p\|.~s...[#4N.W..~k.....W4.]i}...,5..@..............?G.y....t.t.b.M2.....V..<...[d..$..+..=X.h.ik+2u..............[..:<.%.J."....i......D..m...p\|}w...YUL..u.u..{...M..............a...&.=...\...Z%.......v..L.3G...kbl1K....x.j.]\|._..R&f................N.~...7...m.=....Kp.....c..6..k3._.E+([[[.ef.[...sz[.}j...\|...........'6...K_..{...H.x.Y1......u..&.-O=.....h.I.b.{.z.3.h.2................\].q.`.K.....+F.)......A...-.J.]\WL][S=8.;{.`.~.3.^...N.WC...2-].....H.............:.I.!E.bw..Ss.e4.j.9pZ..k"...O..:......X.........1..K..'t..~l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\pinp.1117058dbfcf[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 230 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	794
Entropy (8bit):	7.53276131569376
Encrypted:	false
SSDEEP:	12:6v/740OMJuQcyHEmBsncJ86rDQ6T8ljSKtcK/H9NTsOlArE2whxqE3E+oVBHq1:N0OM1Vk2VJUll5tzl9HAo2qv3PF
MD5:	1117058DBFCFDD3BB34DDC6EA636A91E
SHA1:	F7DEFCF896D646B3164BC8B2FDE9DC1AD7B0E5F3
SHA-256:	2E15FB34BA0FE086031DA338BEAAD90B19BEB287B01C3888D1216F15AADD0854
SHA-512:	6718A242912EA0C25070B0881E2D7BB207AE160A58A53AAE5DEF68AEB697B7B9E612A83C71F7270EF85FA57FB69B94744E19413DC1AFA366095EAF9D88FB669E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/pinp.1117058dbfcf.png
Preview:	.PNG........IHDR....................PLTE..................................................................[..o.................<..................v..!....................q..I..3...............g.................P..........................7.\....IDATx...[s.@...O(v.C.......R..z.....8.f..L.f./.{..<..~.BDDDDDDD..z.?K._..i$uv.[.1..].{GIg...,.{..VV..nN...-.....6.,0....i~.W.M.;.u.5..0..6Uw.Y....8.f....3......;f~<~.Ec.....S.K{.._....YP..n..L..lf..3...0.O.w!...j.k....#...........&L.0..&L.0a...0a...&.....fq..4..Y..2Ua../..... M....92..&...R.r.\|.(.f^I.L.0a...&L.0.0...if....<.....g......)../......g...)r.......W.).S...20.z..gv......76....W...%^M....l.~.[Oz.G..$.....c.o..w_.C..........R0e.L....t..&.\V...p....P..7.q...A........$.......VL.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\privacy.6600d165965f[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	678
Entropy (8bit):	7.378355016170778
Encrypted:	false
SSDEEP:	12:6v/7sYkxDiiUN6D0mkS2wYA7saXS3uECj71f9d3OMSNbMooPss9h1qyT1MBNDL4A:h9xFW6D0G2w8HCj71f/OAls01qoeNDU2
MD5:	6600D165965F2DDAD05F8455C332FD74
SHA1:	35082BA2E80B68057415CACDDB52A1258564B208
SHA-256:	297751AAD941FE4DF052ABF60E663DA6C0BE385F723E73920B5517954324FE4B
SHA-512:	3AAD91773EF7EC575F48CB377FEDB75484CEAE5B2B2199EE7B636C31A6E2182B26C41FC88077F729B5A2E8EC6B2279C17F837B284179455E7B0D0D5F8679DBDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/privacy.6600d165965f.png
Preview:	.PNG........IHDR... ... .....D.......PLTE....Y.vA.W.u?.....^......yE.}J.....x....q..\..[...........c..`.............................V....M..w.\|F.m._.Y.xB.R.N...............w..k..j..h..f....................\|.d..............................u..t...............T...`.u.0W..._IDAT8..QUv.0...bNl...9)3...R.r.../..<....3...KN...SiYN.<...^E. E...f...f...1..&S.T.. D.........`&.......`....#..aqh...t.(...+...%US.b>....P..vO....MP.I..&.6..X...*"...F.".$..E..@h..AoT4..U..4..5.A<....]in....I.{....B'.e...K`Ri5.\|V...$..;6&V`..8. .HY.....gDL...qSeK.>....{.R ..@....S..0.....A.MG./d,..,.<...P. BR6 .`.i....~..//.6.................IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\stub_attribution_code[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	267
Entropy (8bit):	5.554252011668252
Encrypted:	false
SSDEEP:	6:YEt6GKaeV2vSI95Bj9GfBHthf+CthfMl0kq/bm4xt6WMbXRjSX9ULGVYTrLY:YpdzV2v795BxGfBHff+CffMOkqz7I6YY
MD5:	A2DDC7A4C7075117BB8817F439BA0643
SHA1:	1A738B72C086A7E1B9C7DAA679AD2EE0751B58A1
SHA-256:	E2F911A72FC480A4A874CDC19FA0942BFE255DB037A024A77B6A7E1B45087D00
SHA-512:	69E921EE7C119155860379219153FFC0DFB97AF306D6C7690224F88BBA0C557542BE598AA0118E1D6FD20A72A6E99F47DD6BCE85400538ADF7FD02C91F7F3A1D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/en-US/firefox/stub_attribution_code/?referrer=&ua=ie
Preview:	{"attribution_code": "c291cmNlPShub3Qgc2V0KSZtZWRpdW09KGRpcmVjdCkmY2FtcGFpZ249KG5vdCBzZXQpJmNvbnRlbnQ9KG5vdCBzZXQpJmV4cGVyaW1lbnQ9KG5vdCBzZXQpJnZhcmlhdGlvbj0obm90IHNldCkmdWE9aWU.", "attribution_sig": "b4fb923dca856d72021d64cf01a452f5a37c0d351d679d6ac5a0f49ab8b499f0"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\sync.222890d2637e[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 230 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3484
Entropy (8bit):	7.877486392282662
Encrypted:	false
SSDEEP:	48:uGJFtAFJl2d6xeWJGYtS6YhmLPqnx6zNqZzK90wxrSDsBuJOIvJStIxWgg8/GWW:1GFFZGsS6trqnxjzK9pxrSnoCJ7OWW
MD5:	222890D2637EA88655FD925F6B05D018
SHA1:	B39759CCD6245C1F9A284A97CEA8E4791FA9E7F5
SHA-256:	4C708BBECA27665CDE38FA9866415B91AF120EECC6742A2D6AE338245C9F3525
SHA-512:	B34A65D19038AA4A7A884EBECFA99B9A8940880149666082765F730EFC5D6A249B0908266E3CEAB26CCDACFF240525D3AFCE5E836A240D3B1B8C0781CF34B14A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/sync.222890d2637e.png
Preview:	.PNG........IHDR....................PLTE......Y....g6.....pP......a................X).............e4.\,....oN_3.......a7............D.....................vY...qJ..........r..V&.......W(....qQ......=.....Z,..........[.~.tS....X..\;.......m......\|...........]...............nN.hH.......[...l..lK.........m..uM....\......................{V.kB.g;....b5.....l....vW.........u........^0.....x.eE.........)...\|.v.d....~.....r.._.a@......#..........q.gA...............\;............v..^.....7..;......................h=........u..i..g.^=...............o..j..S.....................\|^............X...j:..{..x.i..a.....................0.....yN.............o.............~a.......................P........>..j._.............u.a8...qR.........t..\.sS......WIDATx...e..@.....@Z.......^(...................B.$].?7...}......]....*.3....u..!.[.m.o......hy.!...1...?.J.R...,..`).m....YB....6...L..x...Ue.x9.y.).t.w Ry...P..;:Ie.....~.3H..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\two.2288b2ea2289[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	457
Entropy (8bit):	4.835916575347121
Encrypted:	false
SSDEEP:	12:trxLQxI69E9bPXQsVQYFxW+M5TtZfX3+Uty5YpB9MxME:tdLQxw705RZP3+iyepTMxME
MD5:	2288B2EA2289D8BFB16FA3D212C80FE0
SHA1:	CA462189514396B03E85A0040D9674732BCF4208
SHA-256:	AAF97151E3C79A3704DF64328F63A5B41A173E68C79138715E248EFFA00A0CAE
SHA-512:	9C9DCD4FCEABF5DE7A0BC74033B0B0F40921CF4DEF44FE78D2D59C6F03FB43791D695527A27A7DB3E19FD3DD79A85B10E08793067FE14A38B884D64D32967B36
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/features/two.2288b2ea2289.svg
Preview:	<svg width="478" height="425" viewBox="0 0 478 425" xmlns="http://www.w3.org/2000/svg"><path d="M323.355 75.536c42.256-29.86 102.437-15.612 134.168 32.137 31.295 46.912 22.79 108.83-18.974 138.334L209.821 407.556c-42.741 30.217-103.636 15.165-134.933-33.23L-93.283 115.083c-30.803-47.269-21.425-109 20.723-137.958C-29.921-52.185 30.48-36.78 61.397 11.071L172.23 182.077l151.124-106.54z" stroke="#FFF" stroke-width="3" fill="none" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\upgrade-your-browser[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	1747
Entropy (8bit):	5.033448498937712
Encrypted:	false
SSDEEP:	48:lhcVb/MZ7n9hf/w6hhLZKhc8EQeEht4Nzmv49vqu:TcbQHQcLyZGSdaqu
MD5:	D5AB10EAF48DD3B3661CF04942F229C0
SHA1:	85AF75625A3AD89175DC8B10D08F1B1EC8F9DDC1
SHA-256:	99DBDBA3712F7A5E076129AC99B81E0A9DF5D6EA888D04C9299992C4379D9C1D
SHA-512:	860B175A8483731761CB9E0FA4BDA69D1D700813C7C63C6E429CB33E43FEE0422996E8E388AFB13F562E1CC5661DCB317B3CC78230D58CCE2B3DDCC844AADAA9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang=en-US dir=ltr><head><title>Update Your Browser</title><link rel=stylesheet href=https://img1.wsimg.com/wrhs/browser-deprecation-warning/style-pl-ltr.css><meta http-equiv=Content-Type content=text/html><meta charset=utf-8></head><body class=pl><div id=content><div id=header><div id=header-container><h1>We want to help make your idea a reality.</h1><p>But we can't until you update your browser. Update now to get started.</p></div></div><div id=warning><div id=card><div id=left><h2>Update your browser</h2><ul id=browsers><li class=browser id=Chrome><a href="https://www.google.com/chrome/"><img src=https://img1.wsimg.com/wrhs/browser-deprecation-warning/Chrome.png alt=Chrome><p>Get Chrome</p></a></li><li class=browser id=Firefox><a href="https://www.mozilla.org/firefox/new/"><img src=https://img1.wsimg.com/wrhs/browser-deprecation-warning/Firefox.png alt=Firefox><p>Get Firefox</p></a></li><li class=browser id=Safari><a href="https://www.apple.com/safari/"><img

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Edge[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11004
Entropy (8bit):	7.938351001240865
Encrypted:	false
SSDEEP:	192:wHGMybOMvKRZhUOhv30dSQ6NCDfdVv7HqWKw8CxwVE3bZX:wmAdZhUSv3YyGVv/b8KwVo
MD5:	D666A5613A6300B940300F93E78A3D62
SHA1:	6ABAF534C46B416F7472B6D4801BF791E7C906FB
SHA-256:	1421D289378C5B372D0939645432DB8EA3FD9402D8850A47A68A1BA7F7FAEC77
SHA-512:	2612097C7DE37C2AB6B5B73AD55C6C2406053FA8A7A9084010B98A3E9A671FC37E32240362CF242C78AC8891FD52B1D6C86E4BBD6CCDE799EB32FEAEF2F0A705
Malicious:	false
Reputation:	low
IE Cache URL:	https://img1.wsimg.com/wrhs/browser-deprecation-warning/Edge.png
Preview:	.PNG........IHDR..............>a....IDATx^.}..]Wy......n.dK^..........1..2.......b....{. 3....c..fB...T..!)....L..2v..........U.eKj-.V.[......:...-.%...>.=.......g.+...7.}.4S=G...p..x..c.;Z..`5@........Z.l.....t....{..VE.....?....../{..a.#'.d.......s..o..Ab[.c.+.%}1..<........D..\....u..e.k...9u.3..\....2.w.p&` ..../..I.E..,l.......fz.......0.r...5.k.j......,.N..}.6.......E....)...`.y.m......p..x..g;......=..%..x...KA..R./?_.{.A.W.R......&.4.k6..j...5...%Mf=3"p.,:3k.........,.;.O...-Y..%P/..].[..{.v...GnZ..s......r....=. ..d ..`..rW...H .@.p.o2............W.}....o...dx....l..M.w..q@.#D......\..t.DH.{p.{.]..=.E."...8.>.8=B.,.y.I....S?p..-..~..;.../..2..)~.........U....uX.0....eMv],.`.....P...$O.h..,r......%.}...?...e.W...`.UO\|.M....Ldq7..80=..9.u...UB.....)i...D.1d"pb.,...D....!A.d(....?t..[..\|.+...............8@.d......{...1........!..."AD.B<..t..=.k.q.....M....W..._a.c~.#.......S...&B/...s....W ..- ....q....`..e."....S..5...._...`...40.C...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\RC06c885110f0a48b285d3635c51db10f6-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21011
Entropy (8bit):	5.234967926292925
Encrypted:	false
SSDEEP:	384:gVbnOtko3k9cx/+Df31GKP66fT3EFkXJEJUJMJeLC9:unOtko3kuwDzi6fIFk5l6AS
MD5:	F5781F28D9BBA8E3083264223A8EFAA6
SHA1:	1030B8C06133F4312FE192D14016EA2A4DCBE695
SHA-256:	BD82A3B9DE5B082300807BF32D8F441ED6A9A3AFDA27C124AB9B66D88975BC71
SHA-512:	7673E96F3BA32339E03DE9934B17AA74F5BD8C4D58F4DF238EB4C594B67C6629B7FAD0CA1EAAFA6BD6F22552F09381174DE4401653BB771720EF97C9632714EA
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC06c885110f0a48b285d3635c51db10f6-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC06c885110f0a48b285d3635c51db10f6-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC06c885110f0a48b285d3635c51db10f6-source.min.js', "null!=window.wdgtagging&&null!=window.wdgtagging.jsll&&function(t,m,b){window.location.hostname,window.location.pathname;var e,n,r,a=location.pathname,o=_satellite.getVar(\"CurrentSiteData\");m.tagMSStoreBehavior=function(){return\"PARTNERREFERRAL\"},m.isMicrosoftStore=function(t){return t.attr(\"href\").match(/microsoftstore/i)\|\|t.attr(\"href\").match(/microsoft\\.com/i)&&(t.attr(\"href\").match(/\\/store/i)\|\|t.attr(\"href\").match(/\\/p\\//i))&&!t.attr(\"href\").match(/\\/fwlink\\/p\\//i)},m.tagChooseContentType=function(t){return 0<t.find(\"img\").length\|\|0<t.find(\"picture\").length?\"image\":i(t,\"class\",\"glyph-play\")&&(t.find(\"span\").length<=0\|\|i(t.find(\"span\"),\"class\",\"screen-rea

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\RC3832877df1a545d7a1b4ddb8df0b9113-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6446
Entropy (8bit):	5.329593129602443
Encrypted:	false
SSDEEP:	192:ABQ3+u1vwOPMR572qrP54vW6LjfIR/TtFoFDRcn0S/aK1Fhuc2R8X2TXLHsFSndx:AW+hOP67NLTMDRc0fKXhu/R8GTbHW49B
MD5:	A336A5AC7F2E892C3C7A00153D601552
SHA1:	AE13250DBB5A88E68E965EA9147C2A71135B01D6
SHA-256:	4B6CCA27CC4E1580CF056922C72DD68599F1D5FAEECBA05713BD3FD3D7C0E5D7
SHA-512:	E4AE0B2885BC2CAEFA647BEE0C0F4F1C6B69E319865F470211313F025BA7AF7F86E09C729809573FAC6ECB56EF29E410603D0C680EEBC17500D5805407C3F79F
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC3832877df1a545d7a1b4ddb8df0b9113-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC3832877df1a545d7a1b4ddb8df0b9113-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC3832877df1a545d7a1b4ddb8df0b9113-source.min.js', "null!==window.wdgtagging&&null!==window.wdgtagging.jsll&&function(t,e,w,f){window.location.pathname;var m=window.location.href;w.wdgVideoTagging=!1,w.videoTaggingInit=function(){var g=awa.ct.captureContentPageAction;w.wdgAttachedEvent={},w.wdgVideoName={},awa.ct.captureContentPageAction=function(o){if(239<o.behavior&&o.behavior<253&&240!=o.behavior&&250!=o.behavior&&251!=o.behavior);else if(253==o.behavior)g(o);else if(240==o.behavior){var i=o.contentTags.vidid,d=o.contentTags.vidnm,r=!1,c=f(\".c-video-player > .f-core-player\").find(\"video\");c.length&&c.each(function(t){var e=this,a=f(e).closest(\".c-video-player\").attr(\"data-player-data\"),n=\"\";(a=JSON.parse(a)).metadata&&a.metadata.video

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\RCbbe781f9cd1148bebdaad4990ba9e937-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1285
Entropy (8bit):	5.257971568892533
Encrypted:	false
SSDEEP:	24:D8N1ct/Bu8Nhd+9mwTahWFR9fSZ8USZ8vSZ8DSZ8cSZzSZXSZ7SZhTKVwuGzS:DuKt/BuuLVJhWDtSnSGSGSjS1SBSlSTQ
MD5:	E753EDF10967E396B4CF33A75CA46FBE
SHA1:	2E3176F43E3E7F53E808C834F51C904CFA0C4C82
SHA-256:	790252EDE0F372223E113A24D50EBD2358862CB74FAB37A450145EFD4B850B0D
SHA-512:	2111CCFF6878760109C5361193EA2E6A849789F2EA715635AB4B46AA23932391CD49BBFB463AFAB46690F1AF724ACECCB8605605865C594FDA19506B7E600EA7
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCbbe781f9cd1148bebdaad4990ba9e937-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCbbe781f9cd1148bebdaad4990ba9e937-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCbbe781f9cd1148bebdaad4990ba9e937-source.min.js', "window.location.pathname.match(/\\/edge\\/uninstall\\/?/gi)&&null!=window.wdgtagging&&null!=window.wdgtagging.jsll&&(window.wdgtagging.data=window.wdgtagging.data\|\|{},function(n,a,t,e){e(document).on(\"mousedown\",\"#questionnarie button[name='btntellus']\",function(){var n=\"\",a=\"\";0<e(\"input[name='uninstall-reason0']:checked\").length&&(n=e(\"input[name='uninstall-reason0']:checked\").attr(\"data-bi-name\")\|\|e(\"input[name='uninstall-reason0']:checked\").attr(\"aria-label\")\|\|e(\"input[name='uninstall-reason0']:checked\").val()),0<e(\"input[name='uninstall-reason1']:checked\").length&&(a=e(\"input[name='uninstall-reason1']:checked\").attr(\"data-bi-name\")\|\|e(\"input[name='uninstall-reason1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\RCc71c68d7b8f049b6a6f3b669bd5d00c1-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	913
Entropy (8bit):	5.360016676445125
Encrypted:	false
SSDEEP:	24:Dyct/Bu0U9l4d3rhQzb1K4vRxXko+m2q5vwuPn/:DZt/Bu0l3+b1Kexl+vqRJ
MD5:	E06263B6BD8AA552A545FEA730660AAA
SHA1:	9042A5836A092EE1A31EF93F8EC01194DC462364
SHA-256:	775E76BB5F9FFA0A0AD8D94FAFC87196BE87952C1FB362EEC7D89EF67A870BC8
SHA-512:	A506FF5C44273FD2A54D2F2F817AC03D074B87FB22C194F2D9E9C7BD88687D14E6BAEB285936BBED995485B85A5534AC4F9EA29FB36A11D539993CD1630E36A8
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCc71c68d7b8f049b6a6f3b669bd5d00c1-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCc71c68d7b8f049b6a6f3b669bd5d00c1-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCc71c68d7b8f049b6a6f3b669bd5d00c1-source.min.js', "null!=window.wdgtagging&&null!=window.wdgtagging.jsll&&function(t,a,o){window.location.pathname.match(/\\/en-us\\/edge\\/?$/i)&&o(document).on(\"mousedown\",\".custom-overlay-table\",function(t){var a=o(this);if(a.attr({\"data-bi-name\":a.attr(\"class\"),\"data-module-id\":\"set\",\"data-bi-area\":\"body\",\"data-bi-id\":\"custom-overlay-table-close-background\"}),!o(t.target).parents(\".custom-table-wrap\").length&&!a.parents(\"#mainContent\").length){var n=\"CL\";if(3!==t.which&&2!==t.button){var i={actionType:n};awa.ct.capturePageAction(this,i)}}})}(window.wdgtagging,window.wdgtagging.util,window.jQuery);");

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\RE4GhRY[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 494x278, frames 3
Category:	downloaded
Size (bytes):	24663
Entropy (8bit):	7.91944641961324
Encrypted:	false
SSDEEP:	768:uZCx2UZeRijUoU4jIoZbxPEJvt+BxllJY:Z80djIoZbx8Jvtkl8
MD5:	D0EB38D0B9768B895A0296E3D11890B2
SHA1:	20C1B9BB863DF399F1FF262A2F7A1E12EB7FCADD
SHA-256:	34B7944FC7E6FDA4D91A047C1BDC731DCDBC76A0D22484ACE332BC5DD2B61691
SHA-512:	C04F8B9E41474A468D05853C6E2B9CC72836138BF363BDA060C050FD85A9FE106AA9CCEBA1D744880F3A06E0ABE3BD6F737505DDFA7C65CB7EF859F446AD34FC
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4GhRY?ver=52e8
Preview:	......JFIF.............................................................................................................................................................................................................`............................U...... .#4.........'....D..IQS.X....>N.{..2..L...w.....\|..9....B.^.........'~.t<........0........'s.@...M......'w..... #.P....\|..;....@G.......9.{................;'c.......`..........f...e..M.........u1..4.k..:G.k......m...e.6..b...p.........~cm......>......v.8........-[...z.k\|...V.9....6.<'.6.._/<w........;.m=..3.\|.....m.:7O.....t......<.C#...U...C.;.L.gG....5.....y.>...x.n....5.C.3..y..N.i.'.J3.\F.q_.u?j.......5s.......o.z..n..._..{.j...i}...........Nuk....S....I8o.{_..z.....}\|.s~...z.C)..<Cf.t]s.i[...p..>M.}.7..v,.0...0.[..[.Qw....@.Z.t.#.......=..hK...u..y.A.r\|......."...B...@.....'.f.$...W.:..mXL.......%.".D .!,......ZrI...IJ.....@.B...K,.I%?.;&.F.....!$.0Z....)>...B...K.$..*T~YM...BZt..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\RE4IwKm[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x600, frames 3
Category:	downloaded
Size (bytes):	170640
Entropy (8bit):	7.943212079964687
Encrypted:	false
SSDEEP:	3072:aljd2GRnjsxW1JLo2ubZY1Cr7ygdft+QL87psoLHdql/KNcp4ayue/:aT/Ro0DGbO1Cr7yOLxodGp4ayP
MD5:	27A60D099B8D1E52B73960BE5429FE3C
SHA1:	78135F6A2F2F02CB76907A9D282B284FD4D99691
SHA-256:	35267F3B950EE9193A158E57E1FF65693FB1C17F6849CA062AC7CF8F0515DCDA
SHA-512:	5D8F7AF71469D453B442D1F3A880B3C448DA8C6D7D0A06A3E054C7280D2D7D0787FC921B72AD4A8F55914D5A72AFCA694BAB6797A023701E52974446C6ADB980
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4IwKm
Preview:	......Exif..II*.................Ducky.......K......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164352, 2020/01/30-15:50:38 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e9929d28-239b-4a4b-88a3-49b8c85caf86" xmpMM:DocumentID="xmp.did:4070D56A1DFD11EBB157CCCB7B128DBC" xmpMM:InstanceID="xmp.iid:4070D5691DFD11EBB157CCCB7B128DBC" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0a5f3c6f-b255-4d7b-9a7f-8e66c549cf18" stRef:documentID="xmp.did:e9929d28-239b-4a4b-88a3-49b8c85caf86"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\W2E70PTY.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	237
Entropy (8bit):	5.094841743084737
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwol6hEr6VX16hu9nPic4U+KqD:J0+ox0RJWWPeT
MD5:	AB963A3F1A75D30851528CCD24A624A1
SHA1:	FF0626838B2B1DEAEC727D3F32EFD23CBCC4C5C5
SHA-256:	CA895F19BCAFFCFC7423F6A4BC29D03A6ABCFA5A4FA380A271A213576E6F4350
SHA-512:	D692B65E332A3EAF38E6205C985CBDB2A530791848DE926ACB8CC42D51098FB269B87C3C3C4F8D7730D06E754EFA6F8C8199FF2CC3540851537A81221A1F089E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="http://www.starfieldtech.com/">here</a>.</p>.</body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\black.40d1af88c248[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1681
Entropy (8bit):	4.263886668961708
Encrypted:	false
SSDEEP:	24:tiBj16xQpKeTJhIP1NRbdWhuJLi0XjTwbZQ8720FiBWCFlHULHRqogVDncMG:i6xQpKSJ2lWhuJLzngfQgax8HR/gZ0
MD5:	40D1AF88C248598FB555505C975698BE
SHA1:	EED5B36F4C5A966760E6863843A770CEE5A6B90F
SHA-256:	E95A342F7A1F74B84675401D23453D0A591A81861E79EA6662334D8F5B419C4F
SHA-512:	11CFE694F1B015EC9097FFFF67C06315EC8CF46DE6111B1D720FB3C96056D2B6FADABE481AF548554474263B800B0AD3E09A4CF1D74EE4F34470D246CA92399C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/mozilla/black.40d1af88c248.svg
Preview:	<svg width="112" height="32" xmlns="http://www.w3.org/2000/svg" style="background:#000"><path d="M30.954 22.564h1.86v3.09h-5.826v-7.975c0-2.458-.806-3.404-2.386-3.404-1.922 0-2.696 1.387-2.696 3.373v4.948h1.859v3.089h-5.857v-8.006c0-2.458-.806-3.404-2.386-3.404-1.921 0-2.696 1.387-2.696 3.373v4.948h2.665v3.089H7v-3.089h1.86V14.56H7v-3.09h5.857v2.144c.837-1.513 2.293-2.427 4.245-2.427 2.015 0 3.874.977 4.556 3.058.774-1.892 2.355-3.058 4.555-3.058 2.51 0 4.803 1.545 4.803 4.917v6.461h-.062zm11.001.284c-2.169 0-3.285-1.891-3.285-4.35 0-2.679 1.27-4.223 3.316-4.223 1.89 0 3.409 1.292 3.409 4.16 0 2.743-1.364 4.413-3.44 4.413zm.093-11.662c-5.02 0-7.5 3.436-7.5 7.596 0 4.539 2.976 7.218 7.283 7.218 4.463 0 7.685-2.868 7.685-7.407 0-3.971-2.448-7.407-7.468-7.407zm19.988 9.204l3.16.315-.867 4.98H52.15l-.402-2.143 7.684-8.983h-4.369l-.62 2.206-2.881-.315.495-4.98h12.241l.31 2.143-7.747 8.983h4.524l.65-2.206zm6.105 5.295h4.183v-5.106h-4.183v5.106zm0-9.11h4.183V11.47h-4.183v5.106zM84.874 4l-6.04

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\circle-top-right.c8d759f69e09[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.084508198090398
Encrypted:	false
SSDEEP:	6:tnrxtyqWBWj03mc4slmUjrlPIvyExXb/NGmtjVVSlWR69FAZSKsKMwebZ8:trzyqWBWw3IUj5PEyENhtJrR6fAxxMwX
MD5:	C8D759F69E09BC4B1F312C9B829D98B7
SHA1:	C824131D336DB5868F7EFE74987A999B62B38A48
SHA-256:	2AB067EB297152E558185D954FD09036CB3C18ED87D8724ABFB37C0022F576CA
SHA-512:	DAEEE05EF1E530A9B6406ECFF61E4E85871A81C45CF83797A307C5B7C8BEED4D3304E2FB784E5E646AF17CE337315DE5EE83D15903D7C32BFA853A0AF4301690
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/mobile/circle-top-right.c8d759f69e09.svg
Preview:	<svg width="348" height="304" viewBox="0 0 348 304" xmlns="http://www.w3.org/2000/svg"><path d="M357 123c0 99.413-79.692 180-178 180S1 222.413 1 123 80.692-57 179-57s178 80.587 178 180z" stroke="#20123A" stroke-width="2" fill="none" fill-rule="evenodd" stroke-opacity=".18"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\common.ed203610d03a[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	76987
Entropy (8bit):	5.155220950540117
Encrypted:	false
SSDEEP:	768:R4hIvnz+3/mB4DsgRQC1xJuF6Ldt6A5t6l/UY/FWqv9GrF3lSXNBBiNps2Es68wh:RfVX
MD5:	ED203610D03A9CC9883984EFF90B330D
SHA1:	52B3CF49F901515CAA6231250E9E7CCA74DB9FC7
SHA-256:	0B98340543EB9C7208FA6C3C0D2BB2037F74EE14959BD13A29A03BCAB1F5FEB0
SHA-512:	B4EEFABF767A074F9A00BFBC42C00D626CE8C1D0ED36B6C33DB1E086FF397B73F3592483B6C559851C01A82C309CC41F8F7095A21B1EDA4A69A6D184A893D5A0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/css/BUNDLES/common.ed203610d03a.css
Preview:	@font-face{font-display:swap;font-family:Inter;font-style:normal;font-weight:400;src:url("/media/fonts/Inter-Regular.d55e957612a3.woff2") format("woff2"),url("/media/fonts/Inter-Regular.1a7f90ff1f1e.woff") format("woff")}@font-face{font-display:swap;font-family:Inter;font-style:normal;font-weight:700;src:url("/media/fonts/Inter-Bold.0564381b22b2.woff2") format("woff2"),url("/media/fonts/Inter-Bold.2767206dcd8d.woff") format("woff")}@font-face{font-display:swap;font-family:Inter;font-style:italic;font-weight:400;src:url("/media/fonts/Inter-Italic.d6a4e2b82a0b.woff2") format("woff2"),url("/media/fonts/Inter-Italic.fb463a63312e.woff") format("woff")}@font-face{font-display:swap;font-family:Inter;font-style:italic;font-weight:700;src:url("/media/fonts/Inter-BoldItalic.9d1b867e3416.woff2") format("woff2"),url("/media/fonts/Inter-BoldItalic.d4f1ac27c3c1.woff") format("woff")}@font-face{font-display:swap;font-family:Metropolis;font-style:normal;font-weight:400;src:url("/media/fonts/Metropolis

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\connection.1f5bf9566286[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1700
Entropy (8bit):	3.8573583266710845
Encrypted:	false
SSDEEP:	48:CG43wFS2OlR4OSVBf0qjGItXmZtBFGItk:Gl7SVGC23Vk
MD5:	1F5BF95662868BF9F81B7C7837A424DD
SHA1:	DE06A1D49AD5E4AFDAE7B131C0D254DFFC579EA3
SHA-256:	D0B39421877D7A48CB29A82A4F6C79A7A8D9A239351DC84B7B3854C52128BF67
SHA-512:	AED3288015390C83C51A8EE2B52ACE20202B86826DB79202E345B802F1B9E9435CF4E513EDCC2BA1676D4DF04AC4151AFD2F242F9DC603E1C3593C233A2FA3CD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/icons/connection.1f5bf9566286.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 38.41 41.33" width="38" height="41">.<path fill="#ffffff" d="M37.84,17.86a7.2,7.2,0,0,0-6.64-4.4,7.16,7.16,0,0,0-6,3.17,7.08,7.08,0,0,0-.95,2.09H14.14a5.12,5.12,0,0,0-.29-.86,4.79,4.79,0,0,0-.4-.78l3.62-3.62h0a7.18,7.18,0,0,0,3.59.95,7.08,7.08,0,0,0,2.8-.57A7.21,7.21,0,0,0,27.88,7.2a7.21,7.21,0,0,0-3.18-6,7.18,7.18,0,0,0-4-1.23,7.34,7.34,0,0,0-2.81.56,7.2,7.2,0,0,0-4.4,6.64A7.13,7.13,0,0,0,14,10a7,7,0,0,0,.33.67l-3.67,3.67a7.2,7.2,0,0,0-3.48-.89,7.16,7.16,0,0,0-6,3.17,7.26,7.26,0,0,0-1.23,4,7.13,7.13,0,0,0,.57,2.81,7.23,7.23,0,0,0,2.61,3.17,7.16,7.16,0,0,0,4,1.23,7.21,7.21,0,0,0,6-3.18,6.69,6.69,0,0,0,1-2.08H24.26a6.24,6.24,0,0,0,.3.86,7,7,0,0,0,.33.67l-3.67,3.67a7.17,7.17,0,0,0-3.48-.89,7.16,7.16,0,0,0-6,3.17,7.26,7.26,0,0,0-1.23,4,7.13,7.13,0,0,0,.57,2.81,7.29,7.29,0,0,0,2.61,3.17,7.22,7.22,0,0,0,11.24-6,7.26,7.26,0,0,0-.57-2.8c-.12-.27-.25-.54-.39-.79l3.61-3.61h0a7.18,7.18,0,0,0,3.59.95,7.23,7.23,0,0,0,7.21-7.21A7.26,7.26,0,0,0,37

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\elbow-bottom-right.e7930affff6f[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	474
Entropy (8bit):	4.896406674368539
Encrypted:	false
SSDEEP:	12:trIdcG39ITrkAL/mm/DL4dNYznnHikXa/mI2X+WjPlfAxxMwem:tsmc8ku/d/egieAolYxxMwem
MD5:	E7930AFFFF6F633D12E4CB83C23AE9D7
SHA1:	2C99E8F69AAC3CAFA5C1A7840BDE1414E398DD37
SHA-256:	A71CB7C0AE987A6B879CA7B51A8C857835E92F3817C2311BB954D999C947BBDD
SHA-512:	70A53C37CEDF0E04AB6677B3610457E4756B791387649FA404BF676807EE589D9A78F3611832391137F8F53F2E082CC3DD39AFE1F67E7A56FFAD82571A8EC6E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/mobile/elbow-bottom-right.e7930affff6f.svg
Preview:	<svg width="262" height="369" viewBox="0 0 262 369" xmlns="http://www.w3.org/2000/svg"><path d="M230.033 404.037c4.689 55.616-37.212 104.162-93.733 108.03-55.59 3.907-104.37-37.483-108.997-92.447L1.993 118.617C-2.762 62.353 40.18 13.574 97.039 10.463L401.881-6.68C457.532-9.94 505.722 32.163 509.693 87.19c4.03 55.678-38.972 103.807-95.178 106.856L213.48 205.265l16.554 198.772z" stroke="#20123A" stroke-width="2" fill="none" fill-rule="evenodd" stroke-opacity=".18"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\elbow.c5203ed5b269[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	477
Entropy (8bit):	4.8665763261139094
Encrypted:	false
SSDEEP:	12:trodO4Iz6I0EdAiPyLzz35Zbe4f2i3fAxxMwem:tIO4ns+iP2nO4f2i3YxxMwem
MD5:	C5203ED5B26934268CC203B736A49D76
SHA1:	0E8F3258F0E4B62CAEFDA5037A1A573657F97206
SHA-256:	C3A520FD523DD893DB7912810D197A08D83903178FDCDF0928CD076832657242
SHA-512:	4A4A39F979F36EC98E3D72DBD897E28BFAF8BC222288E4E48320914940CE3DEAD07EFA9D1B63094901E49F910309EF417ECE589A7FC66A930BF33537F49B02D5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/mobile/elbow.c5203ed5b269.svg
Preview:	<svg width="590" height="493" viewBox="0 0 590 493" xmlns="http://www.w3.org/2000/svg"><path d="M450.714 182.812c51.815-20.744 110.49 5.133 130.715 58.053 19.99 52.018-5.33 110.769-56.54 131.263L244.439 484.337c-52.415 20.997-111.617-5.807-131.216-59.272L7.699 138.555C-11.687 86.29 14.486 27.896 65.95 8.01c52.067-20.132 110.665 6.919 130.014 59.777l69.505 188.972 185.246-73.946z" stroke="#20123A" stroke-width="2" fill="none" fill-rule="evenodd" stroke-opacity=".18"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\favicon-196x196.59e3822720be[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 196 x 196, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8050
Entropy (8bit):	7.907796996416949
Encrypted:	false
SSDEEP:	192:4YrZU6AhtZF+g9uEg64W8ACAvQ1aO+ZDLPZNa+00:jkGgu+8yvXOePRY/0
MD5:	59E3822720BEDCC45CA5E6E6D3220EA9
SHA1:	8DAF0EB5833154557561C419B5E44BBC6DCC70EE
SHA-256:	1D58E7AF9C848AE3AE30C795A16732D6EBC72D216A8E63078CF4EFDE4BEB3805
SHA-512:	5BACB3BE51244E724295E58314392A8111E9CAB064C59F477B37B50D9B2A2EA5F4277700D493E031E60311EF0157BBD1EB2008D88EA22D880E5612CFD085DA6D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png
Preview:	.PNG........IHDR..............x~Y....PLTE.....?..>..~.N\..C..w..q..q..r..9..o..r..E..E.z9..E..D..H..r..{..q.}8..H..r..G.=...E..q.."..C..G..E..8..H.....7.TK..1.,`..8..;..E.9..i..Z5.]C..8.=.._V..9.~R..E.;...7.M..;.A..C?.J;.=B.O8..J..B..F..l.5G.T6..gY9..2L..>.\0.8E..E.;..b-.0Q..F..q..9.i(.....;....W3.9...6..b..[........3..H..........p$../.......B...+..#.....).E...I.v"..H.>...J.._..:..:..:..A.~6.Y...HmZ.6...9t\.hW...A..9..6.x4ZA...&^P...6\|[.bT.ZK...J..B..L..2.j6..6....U..H...K..5Y<..W..Q.`5...2..C.b8..2.L...MlK.}%...7.>..Z9.q8..3l0.YF...ceE..p2.{.\|S...Ff2..S..Oo9.t...Q..P.M.D.3.e<...1.8...Q.e2sQ.'..2...i..o.D.<.s@.+..{S..Z.#X.M..sU.2..XX..\yD.B..<.\|J./..D[.jV.5...e.,c.aX..J../....:`..%\7...:.,..5Z.O..r.+...)zC...T.UA.r..U.=.UL.e...Q.[.l?.....Uc..^.D..Q..Ns.~..-..h...ew.sb.e.-..H..?..7..,.h...:tRNS.....,....AAz.t]\E.^..(................}.J...w..M..3....IDATx...A.. ......n.+K....O5S..].....>.'.....[...BMc.pnB,7\l.Z!...)....(.0t.....b.>[.C.B...#...._...J...1-..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\firefox_desktop_download.ba4e97dcd181[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3996
Entropy (8bit):	5.147504339612038
Encrypted:	false
SSDEEP:	48:8RypMg3v7i+uOaP9Mf8buM+XnjAAuAU9UYaoGWyskFKKSCb4bwaiUXziz9hXcgY/:h/lQ1b2kyJF7SX2cgbn3CIssW
MD5:	BA4E97DCD1819C7DACD097D952E59008
SHA1:	E361E276D2610BFF02F4014CD8FC3EEC4DBE324F
SHA-256:	60766ED205F84C2E3FBF4C21A80D02003BCD34F6CB65F79B7BCA8D5871DF21ED
SHA-512:	A1844D0E011BFEB0F6736F5E495C80CF258D08053D8336909FA04A22F8062FA46D8C2BF42CA8EFFE8E0DABCA6B3310BDB077F7B401149832831BC9DA5FDADEB8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/js/BUNDLES/firefox_desktop_download.ba4e97dcd181.js
Preview:	if(void 0===Mzp)var Mzp={};!function(){"use strict";var t,o={};t=document.querySelector(".mzp-c-sticky-promo"),o.init=function(e){if(!e)return!1;document.querySelector(".mzp-c-sticky-promo-close").addEventListener("click",o.close,!1),e.classList.contains("mzp-js-show-on-load")&&document.addEventListener("DOMContentLoaded",function(){o.open()})},o.close=function(e){e&&e.preventDefault(),e.currentTarget.parentNode.classList.remove("mzp-a-slide-in","mzp-js-show-on-load"),e.currentTarget.parentNode.classList.add("mzp-a-fade-out")},o.open=function(e){e&&e.preventDefault(),t.classList.add("mzp-a-slide-in"),t.classList.remove("mzp-a-fade-out")},o.init(t),window.Mzp.StickyPromo=o}(),function(){"use strict";window.Mozilla.run(function i(){var e=window.matchMedia("(min-width: 768px)").matches,t=document.querySelector(".mzp-c-sticky-promo");if(t&&e){var o={},n="firefox-sticky-promo";o.bindEvents=function(){t.addEventListener("animationend",function(){t.classList.add("is-displayed")},!1)},o.hasCoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\goog.27ed69741426[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 230 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3252
Entropy (8bit):	7.891304652169931
Encrypted:	false
SSDEEP:	48:rhArUQMzLfJZnkUkJ7v1Rj4XrCfFvCEYvHV47j5U/3M35xDS1hVWua9eJnEqeGZy:rsZMzLbkUc9pLfFp8qn03Me7ouFEqhy
MD5:	27ED69741426BCA966CA4C52D0BE8FF2
SHA1:	C993409CA72B555B4EC8F7B71438E8A668DF495E
SHA-256:	016EFF197798DC95DEC8F216FCF72334D33B39359077F9C1BA495AA97D93F24B
SHA-512:	DECD50FD0A31FA7540DB4F80143CAE5AC686788A3C0ECF145B0E165FD053F3B15E8DFB63170DA9F7EE47E102850225491EF26257E8B5A3843357C38A82A2DB88
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/goog.27ed69741426.png
Preview:	.PNG........IHDR...................RPLTE..............W...........j....................U...t..........................&.......i.......H...................U.............X.....c......t.................H.......A.........c.._.........&...........R..........b..V..T...........J..................l...O..........~H.........-.........................[.............\......d....................l.L..................L..D..".................p..h......[..v..q..i.....<..5..............F..................s..^...O........=....I...................\|..x..m......%.....%......V...............s.p..i..b;B......IDATx......@...Y..V.QQQ...................g. ....~..^.}..ao@..OD..%.....N+.$..,Rz...)gDQ3.......Z.'..+$....~TUInU...i.i"k........4q.U.SH........Y..{V..&..QI...h.$Au......=.T'q...2.F.{.....u%....:e..@...h...-z..f...z..z(.....'2.!...5.......{h.p...(..`...x.\{Z.?...%3..\|........f...).=...3.LT..,y..8.v._2..(P&..O#.7.P... .....cz.........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\gtm-snippet.9f9cf2026c5f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	514
Entropy (8bit):	5.088023472781701
Encrypted:	false
SSDEEP:	12:c65DRWyS/yr4tO8qN0S2bRRWGLKX+33vvVlh8Y6Vif:coRWyeUIOR0S0RRWG+u33XVT8Y9f
MD5:	9F9CF2026C5FCAD6AF9F12A2E861FFDA
SHA1:	C93A6E6D6F5CB799700A0C3AFBF1966A0426AFB1
SHA-256:	5FF0C822CE892BAE85CA52C2616F7603787FFFD8C072A886A2607E0F630CE730
SHA-512:	305C776B1898EE46D7F249B316D8F601A3203AF610F362C9585C9913A08D3695CE79B4E78934390C6D25F051C86D6A0DB6F1574329F74835CACACC1D048C9633
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/js/BUNDLES/gtm-snippet.9f9cf2026c5f.js
Preview:	!function(){"use strict";var e=document.getElementsByTagName("html")[0].getAttribute("data-gtm-container-id");"function"==typeof Mozilla.dntEnabled&&!Mozilla.dntEnabled()&&e&&function(e,t,n,a,o,g,m,r,i,l){for(e[a]=e[a]\|\|[],e[a].push({"gtm.start":(new Date).getTime(),event:"gtm.js"}),m=t.getElementsByTagName(n)[0],i=o.length,l="//www.googletagmanager.com/gtm.js?id=@&l="+a;i--;)(g=t.createElement(n)).async=!0,g.src=l.replace("@",o[i]),m.parentNode.insertBefore(g,m)}(window,document,"script","dataLayer",[e])}();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\hero.e44596795d0f[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 512 x 371, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	18521
Entropy (8bit):	7.898545293243961
Encrypted:	false
SSDEEP:	384:QWqtSyZgybLUAZbPMdD6O4YaatyS8iglcgPkNQ8NX4QKjVb45emL/04o/sVNP:QrSyZgMUGNOgeyS8igllPAQ8NdKjV2Lh
MD5:	E44596795D0F3E910506777AB53F6227
SHA1:	C9C737443A97B641B938D45AFAA3A8597CC3F9E4
SHA-256:	EDCAB484312A28F54A872614F2DBFF1AC62E2E7CC8CBECA6F521F3B8CE927131
SHA-512:	253B7BABBDF57CF320F99CA1B7C1D84AC8C2105248CB71B69FEDDABECAD660D5C7A7026CDA0DBBC244301A908795792C1DDFE4591DDC48AEC7B6C1B4FAE59ADE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/hero.e44596795d0f.png
Preview:	.PNG........IHDR.......s.......A:....PLTE............ #@..........=6............. ...............................7:_......q...........~......1S......t.........s....................x..............xz\|............+o..;.......4....QMN).~..Y........................zqkb`rkdo.......#!!..aYT=99..........QSZBBE...014.`.'J......_]`...zrjm_Q.....{....{usu...................RI@.......y........kpn`SH.LD.~r...i....._en.we........k......oa.u....1..zFJU...........L;0.....t...}l......ot}.\|oeF7.....5-&.~.......O?..........^K...-".d..o.>/....cRgN.......n\.kW..D{^......5....x..P.........}.-QYi.yZap~..<.........J......zLA.3..L......^..;n.%..o..[#..~...............s..l.b..]..Q......_....g....e\v..}.....N.I..~.3l.IW_s ....X.p...T.[0.)......[.Z.kR.C.........tRNS.....k..E.IDATx...?K.@......:..4.."4..LB7..Q.U...n]......}...;p."t..Z(.........rG.i>/......j.bB.[MP.....\.'%.kF...M...\|.2._b.P...8. ...@H...kG.@b....{..i......u....D..-q......H...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jsll-4[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	56283
Entropy (8bit):	5.402458596770319
Encrypted:	false
SSDEEP:	768:0tgoOjNcc6rCDBjPSeAaKU7rD8kcK7hAHZcllEiKjkT3dgD4GD1hrTd8PuWCF9IS:0tV81ICDVRQihAiUinxgDRQ7wYv6p
MD5:	AD8545B54A7D77B1EF0E02AFB615A107
SHA1:	3E1BE466B952F8A07E04D6187A90C4A7F9D15D28
SHA-256:	196D3E71A396F75F52B94BF617E5F4474B85CA2F358F32CC81D3521731FDE20C
SHA-512:	62E938CF070F47F475E2088C32E6DC12E2D9F6ED40E25920E52B5CC6C973947684BFFC1B1371C4D79E84C005A86E98A2119A0888FB784FD7B76F8DA413576BE5
Malicious:	false
Reputation:	low
IE Cache URL:	https://az725175.vo.msecnd.net/scripts/jsll-4.js
Preview:	var awa=awa\|\|{},behaviorKey;awa.isInitialized=!1;awa.verbosityLevels={NONE:0,ERROR:1,WARNING:2,INFORMATION:3};awa.behavior={UNDEFINED:0,NAVIGATIONBACK:1,NAVIGATION:2,NAVIGATIONFORWARD:3,APPLY:4,REMOVE:5,SORT:6,EXPAND:7,REDUCE:8,CONTEXTMENU:9,TAB:10,COPY:11,EXPERIMENTATION:12,PRINT:13,SHOW:14,HIDE:15,MAXIMIZE:16,MINIMIZE:17,BACKBUTTON:18,STARTPROCESS:20,PROCESSCHECKPOINT:21,COMPLETEPROCESS:22,SCENARIOCANCEL:23,DOWNLOADCOMMIT:40,DOWNLOAD:41,SEARCHAUTOCOMPLETE:60,SEARCH:61,SEARCHINITIATE:62,TEXTBOXINPUT:63,PURCHASE:80,ADDTOCART:81,VIEWCART:82,ADDWISHLIST:83,FINDSTORE:84,CHECKOUT:85,REMOVEFROMCART:86,PURCHASECOMPLETE:87,VIEWCHECKOUTPAGE:88,VIEWCARTPAGE:89,VIEWPDP:90,UPDATEITEMQUANTITY:91,INTENTTOBUY:92,PUSHTOINSTALL:93,SIGNIN:100,SIGNOUT:101,SOCIALSHARE:120,SOCIALLIKE:121,SOCIALREPLY:122,CALL:123,EMAIL:124,COMMUNITY:125,SOCIALFOLLOW:126,VOTE:140,SURVEYINITIATE:141,SURVEYCOMPLETE:142,REPORTAPPLICATION:143,REPORTREVIEW:144,SURVEYCHECKPOINT:145,CONTACT:160,REGISTRATIONINITIATE:161,REGISTRATIO

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\logo-sm.0bc3e6ae9d32[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2491
Entropy (8bit):	7.806829480704644
Encrypted:	false
SSDEEP:	48:mXI83rIRArg7EHYgcwKopTauRTO/ikah7p/btfc3KV9H:mXlCE4pczRTUah7p/btE3m
MD5:	0BC3E6AE9D320DDECD3EC7B7E1DE8DAD
SHA1:	9E33E3CBD660C1AFDFB6467F4CD9AB47F3E94FC4
SHA-256:	8DE69D72F41FDEF11C8F8A5BC159A62C754523524B169F02003E9A8DAF3C18E2
SHA-512:	20A3A7E776279DD133C064E87F2535FB7C263A93173504760A5C009007E41BBCC8B871C545EA001893478B35358E9963BF51B04B29DF7C7FE428157C6B8322E6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/monitor/logo-sm.0bc3e6ae9d32.png
Preview:	.PNG........IHDR...@...@.............PLTE....Af.5..q.C...X.ZZ.Pe..\.W..8.J..K_..]..^..YFb.2...\.._pZ..<c..[.;f.;l.8..[X..[..Y.<..<d.+m.N].pY.^Y..\|.%s.uY.:d."x..\..\.8j..Z.LZ.....\.E...].M..5...Y..{.6.. z..[.S\.#y.K_.zY..~.J_.=.A.H...\..]..].F`.bY.S[.4...Z.V..R..M...[..].....Z..d.3.F.;...j.R\.dY.I_..{.R\.bY.;d.kX.6..L\..\.}Y..d.(s..Y.6.. z.s.x..#v.$u..c..[.$u.yYqZ..!y.=c.@.R...Z..\.>\..d..Z..Y..^..Z..\..[.:...Z..Zb]...a...{Y.5...Z.a..9.1.Cc..KO[^...Z.4..._Cb.1.. {..^Z^..oTAe.zY..4.6...{.5.4.Ec..._.._.8...\.;.ja..0...a..^..].6.T..k..;...\..^..[.}.d.."w.3...{..~..\.N].E`..\.R\..[..].UZ.8..I_.vY.ZY..]..\.Bb.K^..[..[..Z..Y..Y.<..=c..]..Z..Y.\|Y.lY.^Y.R..A..+l..b..Z.qY.gY.cY..a.'r..c..`..^..Z..Z.4..9d.U..O..L..J.F..2g9d.2.4.1.Q`.1.d\.[^.4.,e.7.~W..2..QQ.JLyY.Gd.B..t.Xn.]..[..>I.o4.....tRNS............AA....-....,...............oL7"..............LLI7-..............................~hfed_><8......................\|lgMKK.................}qfdd[URA1..............USA!.da...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\logo-sm.f2523d97cbe0[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2832
Entropy (8bit):	7.797747765966445
Encrypted:	false
SSDEEP:	48:OLooNRKEeWvv+4TdN5yXMAeoRJ6dGykjoB8phDq+0Pii4MwcpFmHmHcfU:2oE7Hf4XMAeof60t0B8phu+Q4Mwo32U
MD5:	F2523D97CBE08B2763FE13D31B42EE29
SHA1:	058EDFA200BCE72DD0F1C9CEF36E20E720E31EAF
SHA-256:	134BACE3D304A22A8CCFE467D4DF111A8AC901FBE423ADAFAED6F4630F290CD2
SHA-512:	E3D61779EF22C59A980D238E99979CE6549370D9AF7CF6C329A81308C9AD81C9FB3203B9501EDDAA2B2E0640D9922338DB32D97566D4BDF198E8457BD6B9403E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo-sm.f2523d97cbe0.png
Preview:	.PNG........IHDR...@...@.............PLTE.....r..q.na..9..p..z..I.]8..P..2..p..H../..A.\...G..I.'...Q..G..q..J..F..p..D.s9..q..B..J.>..!e.\|?.=...I..r..G..E..r..G.8`..=..:....=F..E.~G..s..H..7.....D..K..D.;..S6..D..J.f,.:..Ab..<....tX..G..9..`.....%.0f.p%.h.^1.R_.^.\\.;.....Ba.G=.=C.B@.P8.K:.6HY9..8E..B.T5..i..m.3L..b..D.X3.[1.9...J..F..L..D..H..H....;..1P.d,..".....f..?..:.`/......../..F..9..6....A.."Wo[...7...h..&...z\.[J.e3../N..G..>..6.s$....D.dX.^R.ZC..S..H..G..6.}6.t6.m'...i<...Z..<..<..6.f6.y .Q..[..<.Z=...K..A..6..4....~..W..I.,...L..?.m5..3....J.>.yR.6.lR.3.}(.q,...d..P..J..I..;..7.>...\..[.vU..I..C..B..<..4..1.H.A.yI.;.B...l.._.dW....S.0.rD...q.MchH..s...1.....).O..O.x;../....c.UZ.SH..E.R<..*.O..L..V..v..1_.V.DV.R.[.u=..H_.LV.UL.a.u....`q.}].R.p<..8.j..Y..hp.cW.)`).+...OtRNS.... .....D>.4...&...ea_T4&........L.....vnle........b........q......vbd.c....vIDATX..]HSa.....-d..c2Y...d.~.}HQ..Q7.nV...pcs.....fs.f#..b9\m.....F.]...B.@.D.....=.s.P...<

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\menu.79f1f0c795df[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	4.81285634223051
Encrypted:	false
SSDEEP:	6:tnrwNhy/i3mc4slE4easKMwmqZDdGodlwXq9/1Z0RIYVgrVyRI+JTgrVyRIt1kqe:trwNSi33eaxMwhsXqnj4grl9l7e
MD5:	79F1F0C795DF9775A6E940AA6B794A64
SHA1:	0834AFC9234DC2AEE26026CF61ECD29B4483966E
SHA-256:	C08840807DBE9DBD399A2F176C5C377BB0F26A6762971DD6B25CA2C1129B5161
SHA-512:	6EE45C5E1DB62CB790D9259C40BB1934082388E2FB23049139877663AA02056401F48086EBE8898B2AFB71F9E920F598E71F76160146E37EABFA570E1EFBE121
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/icons/menu.79f1f0c795df.svg
Preview:	<svg width="24px" height="24px" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <g stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round">. <g transform="translate(3.000000, 5.500000)" stroke="#000000" stroke-width="2">. <path d="M0,0.5 L18,0.5"></path>. <path d="M0,6.5 L18,6.5"></path>. <path d="M0,12.5 L18,12.5"></path>. </g>. </g>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\mobile-arrow.66d0fad85ca6[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	5.197055574653359
Encrypted:	false
SSDEEP:	24:t4LPfX6GGEP5bJZXygFgrDQlXDQns9GxDQEXDQo1IXm1GItxMyMKBArMKR5lk0y+:+HXt9BfekMs9G3b1I21Gv/S3hk
MD5:	66D0FAD85CA6F7899B7E5D111B9B7D7E
SHA1:	9B13B0FAD5245D856F8D1B958AD02D2EC2557BC6
SHA-256:	25DD3F1FF4889E994DE131E0F5216E869EAF91A80B486FDF0593B9554E4D838E
SHA-512:	1DBC5D75384B8D8F21CDA7AFD4CE0450AE583770CF7AD531AF4EF3DEC9592F91A64EB0E5611DA8B301F9EE2B859575A0514060410AF429E88E3A05121EF02048
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/mobile-arrow.66d0fad85ca6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="60" height="63" viewBox="0 0 60 63"><defs><circle id="b" cx="20" cy="20" r="20"/><filter id="a" width="180%" height="187.5%" x="-40%" y="-35%" filterUnits="objectBoundingBox"><feMorphology in="SourceAlpha" radius="1.5" result="shadowSpreadOuter1"/><feOffset dy="5" in="shadowSpreadOuter1" result="shadowOffsetOuter1"/><feGaussianBlur in="shadowOffsetOuter1" result="shadowBlurOuter1" stdDeviation="5"/><feColorMatrix in="shadowBlurOuter1" result="shadowMatrixOuter1" values="0 0 0 0 0.0549019608 0 0 0 0 0.0509803922 0 0 0 0 0.101960784 0 0 0 0.13 0"/><feOffset in="SourceAlpha" result="shadowOffsetOuter2"/><feGaussianBlur in="shadowOffsetOuter2" result="shadowBlurOuter2" stdDeviation="4"/><feColorMatrix in="shadowBlurOuter2" result="shadowMatrixOuter2" values="0 0 0 0 0.0274509804 0 0 0 0 0.188235294 0 0 0 0 0.447058824 0 0 0 0.06 0"/><feMerge><feMergeNode in="shadowMatrixOuter1"/><feMergeNode in="shado

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\new[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	104015
Entropy (8bit):	5.128925856303675
Encrypted:	false
SSDEEP:	1536:Y3SoKbcS7O3KsYZ01J6AQpn1BX0wrSoor:m5S7Oa41J6Tp1BXzS/
MD5:	ED415E77E0BA002C24D057C557E6830F
SHA1:	A905C946F023E3DA10239731A7B0C91F25173623
SHA-256:	2F962294632D796972589F15087CF2D1DECFD5F11D79F592E3CF7F0A636A1F86
SHA-512:	C301A8AF80396C96BF3F17518C59A675EF4FE90C1E11169A700EC68BB3FC5AC7FE3F833851B004D59490DF4F7D253732851EB80B0F4AB2D284F49FE0251688BE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/en-US/firefox/new/
Preview:	......<!doctype html>..<html class="windows x86 no-js" lang="en" dir="ltr" data-latest-firefox="83.0" data-esr-versions="78.5.0" data-gtm-container-id="GTM-MW3R8V" data-stub-attribution-rate="1.0" data-sentry-dsn="https://dd94e99168c6431899c1daa5a812d8b6@sentry.prod.mozaws.net/152">. <head>. <meta charset="utf-8">.. <script type="text/javascript" src="https://www.mozilla.org/media/js/BUNDLES/site.c3a28476932c.js" charset="utf-8"></script>.. [if !IE]> >. . <![endif]-->.. . _.-~-.. 7'' Q..\. _7 (_. _7 _/ _q. /. _7 . ___ /VVvv-'_ .. 7/ / /~- \_\\ '-._ .-' / //. ./ ( /-~-/\|\|'=.__ '::. '-~'' { ___ / // ./{. V V-~-~\| \|\| __''_ ':::. ''~-~.___.-'' _/ // / {_ / { /. VV/-~-~-\|/ \ .'__'. '. ':: _ _ _ ''.. / /~~~~\|\|VVV/ / \ ) \ _ __ ___ ___ ___(_) \| \| __ _ .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\oval-bottom.93b9c4b62420[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	425
Entropy (8bit):	4.937138967574126
Encrypted:	false
SSDEEP:	12:trQofq06I/zARaDMVy0H8BgdCDzRfAxxMwem:t8oC06AzhD6HHCDFYxxMwem
MD5:	93B9C4B62420CE67B197B7FA6D403521
SHA1:	84930F8E74828B09053A5F5AC35B0FEC5C419C51
SHA-256:	9765098301347D280C70CE060EB0B6F9B8DE7A83F51AD836078E4FEA8D17F436
SHA-512:	95F195FB16A38CB37ACDAD6B725382BA2F4DA4E2F2645BC9BFE1B2D382E39BE009893E5E69F99346A23EE714E1C8481D8D833E43B81616959B088DF9B2C6608B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/mobile/oval-bottom.93b9c4b62420.svg
Preview:	<svg width="449" height="390" viewBox="0 0 449 390" xmlns="http://www.w3.org/2000/svg"><path d="M410.257 442.674C366.58 479.74 300.09 475.476 261.37 432.79L28.865 175.76C-10.38 132.41-6.49 66.27 37.37 27.73c43.858-38.537 110.982-34.492 150.227 8.855l232.505 257.03c38.683 42.98 35.498 108.312-7.165 146.997l-1.34 1.031-1.34 1.03z" stroke="#20123A" stroke-width="2" fill="none" fill-rule="evenodd" stroke-opacity=".18"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\oval-left.b9983179f7a7[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	426
Entropy (8bit):	4.9122760160620675
Encrypted:	false
SSDEEP:	12:trJF/qIHog2C5UTjnbNcPPJ4Mq5xfAxxMwem:ttxqAD2C5UTTxcPeYxxMwem
MD5:	B9983179F7A7AF8A2F0E5BC508140AA3
SHA1:	3714F7D066E03AC2FC24FCB7025555D6EAB9F6A4
SHA-256:	9B7D4967EE9163B17E27B2F3B0200D96B9790BFEFD021688612135FEA5A67305
SHA-512:	949037F931722E6182820D652F34E84D4F6DEA38F8410ACAB141C65E9A284B4A942D29F245DF2F24ACCF2F7D6A1EFF09C91EB27684BF962C3E2790F794EB67D7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/mobile/oval-left.b9983179f7a7.svg
Preview:	<svg width="258" height="306" viewBox="0 0 258 306" xmlns="http://www.w3.org/2000/svg"><path d="M246.823 61.166c24.5 51.783 3.17 114.904-48.082 141.256L-109.708 360.48c-52.03 26.687-114.908 5.812-140.785-46.528-25.872-52.337-4.592-116.128 47.435-142.816l308.45-158.058C156.919-13.163 219.2 6.822 245.525 58.044l.65 1.56.648 1.562z" stroke="#20123A" stroke-width="2" fill="none" fill-rule="evenodd" stroke-opacity=".18"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\person-mozilla.5fd76ac595b3[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 463x436, frames 3
Category:	downloaded
Size (bytes):	34697
Entropy (8bit):	7.970076936314709
Encrypted:	false
SSDEEP:	768:jySYxtBb54x4GxJ7pfvnSzvExsf9uN0nPjSW+jrAuJ8XggBg:/UttSyGxNtPjxNN0PjSDjrAuJz3
MD5:	5FD76AC595B3BD14BAB6F860E4696410
SHA1:	FB2D15CB1DE5A33B04026E7D25C4055731049C9E
SHA-256:	B2147ABE69859ED6E159A5AF76AB5E40EB4A1C25187A260D17174C0AAF78A3D7
SHA-512:	A3103E83652A37902E2704C9DC811DF86B9CF9B43A266E62E1A41E8DBA939A10CD04D32CF42C29D7B306F13A8D7783E623FAF87A82A5D9BB561D932E1B56D3CF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/person-mozilla.5fd76ac595b3.jpg
Preview:	......JFIF.............C...........................$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================.............................................................................................0............'...2....................[U..W.D).x.Y.....sl........................Z@5.4.7.)..^;..r.................?..z.y.F~P.. ./......B.FEq.J..On.......A.zN.W.Lmg.Fk."...IT..........O.z~..........'...s...jj.j +.b..>......."^x.k^_..U...::O:.....5.......U[.la"(....p.........5.5.h.h.ZZ.z...[......@.....(.<L./.,..........<>m....s..[T.9=1.z.1g..kl.~...W...}.......t.e>..l...........?7...2...lV..........c.....D..zzr....6.......t.f.F..2..........c.K..y..m6.qxt.4.T[Y....>...[..Ns...mY.o@.....;..............a.\|#.Hy.-y./..p.z.&...+.j....1_..zp.z..)....f{..J.n....p...@..U....=.5.........E......ma...os......k.:7E.Mu..L^o.........[3.t....+.Y......A.yY...........Z......}.F...-~.\|..u..H.......2...?B...S..r....k......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\screen.19f69ea7f0ea[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1040 x 412, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	14576
Entropy (8bit):	7.889418514122946
Encrypted:	false
SSDEEP:	384:Xqlu+6PXc8E0IfBlTm0BnYX+aadM6Cd9f3Oh4:Xq5SXe0mXaaOD+h4
MD5:	19F69EA7F0EA3ACBBF929E04201D916F
SHA1:	B28B727DA87D43AEF83D9FEF0256FB745F51E69C
SHA-256:	E9836D34AE366CB0148B3B5B01ECC16F2BC690725738746D8A7DBA81FEA47772
SHA-512:	66F08C2C83F4A8C7E8845597E08FE6A915783F94B92D3BB6F8ABE9B9FC4258A26047AD28AB741C122D3EC3DA0F59203F55F2CDFE4F5F933E6449D08DC173CE69
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/screen.19f69ea7f0ea.png
Preview:	.PNG........IHDR.............W......PLTE,.9005...99<...@@FQQS.E6...116...--2::=779RRT......""'.........>>D...-/7111CCGMMR``d==><=Cbbg+/&&336...'.......c..??@138...........!.G6....F5",93.1......9(&...AAB.E5ZZ^...=9867=vvx......KKM4>K>5,}\|.HHJ.j..n.......UUW................%;......'17.16.... 37...ggi'-9.07...a8:FFH5245+-.t..;:.~..@8.j!...C7......5,-.........q..........x.oor..........kkm....2.sru............zz\|.aV................\|......3........................k..O..~.....Y..J......................=+u......i............U..?\|....K..:......OC9........O`......_.....l..K......B..<.`,............tm.+........T...v......9..(.P........'a.\-..".o....^..E..@Q.<..O.....0q.7[M..u...y.;>rW<.E9.q.H.E..Ym.._\|3W...J=...Q.;...n.XdGT.Q\-J.~..z..t.jX.\-.._Q?O..B.z=.{;.....Y.....tRNS.\....5.IDATx......A..qfB.t.d..vu....T8m...~.3DC..!.....8I.D.?p.PqqB..H.gBH...d.9.....=...o/.m?.}t..)v5.2UU.2..l..=.Js2.F.rr..rN...r2..c...,.W.dU[.i0t......#U.g.T..k..*bN..5E.k.He..kD..j.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\screenshots.cb7e42d6640c[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 230 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1090
Entropy (8bit):	7.711575980486183
Encrypted:	false
SSDEEP:	24:NGVGRLHT49nKF75KpD0Rzlh3VF5YOaZtEKCfL7qs:pF49nKXmaIOast1
MD5:	CB7E42D6640C8D9644321B2308952602
SHA1:	336EF6355161AAE3DC4088B3EF681BCCD8A40B17
SHA-256:	550370D793AF218B4E359BB208E23AA15EF716CE13D56FC13F333E68DA65241D
SHA-512:	A84E7F4E071C4110DEAFEDD9E88A202F3279322FFEAF941C489A4943176262EE42B7BF52BF75372266F5F485E5EB9E3CBCA9B4669D2813291E180139F13AEC7E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/screenshots.cb7e42d6640c.png
Preview:	.PNG........IHDR....................PLTE.....W.................U..............\......~~............r............._.......................}......g..v...........{...................X......................................................ssv.............."IDATx...[s.@.....N....QB!.h.DM..~i..?Q....f.....g...0..]^\FQ.EQ.EQ.EQ...k^}..M....-..9+...JO..%.}.Je^XU1.Rn.WL...$.....j.+.2w...rZ.[V-n..-Vr.);K&.B.?...../(..2....y._..eIf.j...IL.5\....J..\.U.v.M...Z.....w..iK...iJ...\|..qL..G.spjf........Jq...K..i.l.9.UGg...^j..:.9H.Vd&_'?.>.t ..\|.\..C....4..Rr.-{\Cw.KL.1.I....Ho&.Q<.O...}...>...h.pt...C.....AG.w.65r5dB._......@..z.1.}a....c...D;f2db.D7.;ebCW;....4..H..v..b. .\|a.....HF..X\...3!....eB...f.0..j...<..G.6.0.6.k..%c.Sq&.......P.j3.p....L.n...63..^..z.P.t.....Be.T.)$(.S.&..2w..p..........\):u`..wre.S}&Wrg....3.r..J.6.+...3...Nu.\..NU.\..SM&Wn.T...:.dz#?....j.E....hYo..[...-;.......l..?...'b.......Har'gF.8.9..<..)....q..?..F..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\set_hsts[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Reputation:	low
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\site.c3a28476932c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5008
Entropy (8bit):	5.438799061837804
Encrypted:	false
SSDEEP:	96:EFjnH/MA3UU2rD7hvFHYPf9XnXm5s06fabKPASNsufqyI0l3FqN8:IL3UBf7J29nm5sGbEASNsHyIbN8
MD5:	C3A28476932C191C1F474949F5A5C8F9
SHA1:	43BF3113C1818182ACC1E4631F3425FE760F74E6
SHA-256:	A21DF17F83AE2941C569F645CC0AC734BF991C3CD306114A1054B8AE364112AD
SHA-512:	8DD01196E6115BF62421312417F6A904A254ECAABC58B686A7D338225DE1B1407F435189CCBB4357B244F5D5A11BC4F2A8A74FE14077C78140CC9B16BCB58700
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/js/BUNDLES/site.c3a28476932c.js
Preview:	!function(){"use strict";window.site={getPlatform:function(e,t){return t=t\|\|navigator.platform,e=e\|\|navigator.userAgent,-1!==t.indexOf("Win32")\|\|-1!==t.indexOf("Win64")?"windows":/android/i.test(e)?"android":/linux/i.test(t)\|\|/linux/i.test(e)?"linux":-1!==t.indexOf("MacPPC")?"other":-1!==t.indexOf("iPhone")\|\|-1!==t.indexOf("iPad")\|\|-1!==t.indexOf("iPod")\|\|-1!==t.indexOf("MacIntel")&&"standalone"in navigator?"ios":-1===e.indexOf("Mac OS X")\|\|/Mac OS X 10.[0-8]\D/.test(e)?"other":"osx"},getPlatformVersion:function(e){var t=(e=e\|\|navigator.userAgent).match(/Windows NT (\d+\.\d+)/)\|\|e.match(/Mac OS X (\d+[._]\d+)/)\|\|e.match(/Android (\d+\.\d+)/);return t?t[1].replace("_","."):undefined},getArchType:function(e,t){var i;return t=""===t?"":t\|\|navigator.platform,e=e\|\|navigator.userAgent,/Windows/.test(e)&&/ARM/.test(e)?"armv7":navigator.cpuClass?navigator.cpuClass.toLowerCase():(i=/armv\d+/i).test(t)\|\|i.test(e)?RegExp.lastMatch.toLowerCase():/aarch64/.test(t)?"armv8":"x86"},getArchSize:functio

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\zap-08.fc201d70f76b[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	5.187522912405071
Encrypted:	false
SSDEEP:	12:tR1MnroDDuRHxlxbmZCG+AHJGdnuPGNatjU/EX4r629qZPjhlllSVtM:tR1MrofuRHxlduCG/pGdn8Gstix7qZPX
MD5:	FC201D70F76B12D96AFAD6A0BFEB2EC0
SHA1:	03995C3466E608A40F0C4B53C8A873AF450E7795
SHA-256:	6556778B93310D3432C248FAC858827D2CCF2168CDB64F4EF201756825A0808A
SHA-512:	D855E14F87699AE8A30AA22D3E33C0685DF97DE6180AC4BA6CF1314FFE525CEF0AD03DF66533E9F385FCF968F846EE045EC17EDC24308FC998DD230612BF8668
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/zaps/zap-08.fc201d70f76b.svg
Preview:	<svg data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 16" width="400" height="16"><defs><linearGradient id="a" y1="13.69" x2="435.45" y2="13.69" gradientUnits="userSpaceOnUse" gradientTransform="matrix(.91716 0 0 .7708 .27 .687)"><stop offset="0" stop-color="#616eb3"/><stop offset=".5" stop-color="#ec1067"/><stop offset="1" stop-color="#f6901e"/></linearGradient></defs><path vector-effect="non-scaling-stroke" d="M3.12 14c161-19.73 207.41 3 223.21-.65 16.76-3.85 20-6.77 31.28-10.29 18.08-5.64-2.49 13.2 8.14 10.71 16.45-3.84 27.73-7.39 39.25-9.4 15-2.6-2 22.49 87.48-2.37" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" stroke="url(#a)"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\zap-09.bc0c0b72fdaf[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	617
Entropy (8bit):	5.201713128783972
Encrypted:	false
SSDEEP:	12:tR1MnroDDuRHxlxbmZCG+AHJGdnuPGNatK3gaFjjhlllSVtM:tR1MrofuRHxlduCG/pGdn8GstK3gadjj
MD5:	BC0C0B72FDAFB03CE148282CBA22EE41
SHA1:	5DDFDB263B391E19A5C9E2EC39180BBCDB6CC406
SHA-256:	91F598EC39A0E894C73248DAFC20E897F8D8BD81EBEEF82B83227BE77520D7F3
SHA-512:	E7DFED836D2A9362AD734EB031491F0DCB909135A8939E7765B997E215FC2B55400F7D63E0DB85A036778B405359A91BEA80C735ED1199228D8A2DD712E65D07
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/zaps/zap-09.bc0c0b72fdaf.svg
Preview:	<svg data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 16" width="400" height="16"><defs><linearGradient id="a" y1="13.69" x2="435.45" y2="13.69" gradientUnits="userSpaceOnUse" gradientTransform="matrix(.91716 0 0 .7708 .27 .687)"><stop offset="0" stop-color="#616eb3"/><stop offset=".5" stop-color="#ec1067"/><stop offset="1" stop-color="#f6901e"/></linearGradient></defs><path vector-effect="non-scaling-stroke" d="M5 12.11C215.81-5.34 204.87 24.22 284.73 6 341.19-6.82 258.6 26.57 395 6.29" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" stroke="url(#a)"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\zap-10.3ec60d019421[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	5.182544032708995
Encrypted:	false
SSDEEP:	12:tR1MnroDDuRHxlxbmZCG+AHJGdnuPGNat2HoPmIjeRIMzb1h42WKjhlllSVtM:tR1MrofuRHxlduCG/pGdn8GstXPmIjWz
MD5:	3EC60D019421F8E3BD08871A432FCFAB
SHA1:	85C51EAACD61197406587B75431CABFD730339A2
SHA-256:	56A77ED50BF3DD8DFF90AEA280F4B31915D1E5837C0A9B96DF3590EC3FEF4629
SHA-512:	975A85F4841F3169FD215712F356D24E0A6EDFB274D05C1EACE00988CDF5479BBA9641C0CBF3B5B175CB2D821863796DD90D97459591B2D217EF69F321864B86
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/zaps/zap-10.3ec60d019421.svg
Preview:	<svg data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 16" width="400" height="16"><defs><linearGradient id="a" y1="13.69" x2="435.45" y2="13.69" gradientUnits="userSpaceOnUse" gradientTransform="matrix(.91716 0 0 .7708 .27 .687)"><stop offset="0" stop-color="#616eb3"/><stop offset=".5" stop-color="#ec1067"/><stop offset="1" stop-color="#f6901e"/></linearGradient></defs><path vector-effect="non-scaling-stroke" d="M4 13c131.46-16 102 0 131.22-2.73 17.7-1.66 25.81-4.34 41.09-7.73 18.26-4-10.88 16.16 9.93 10.43 25-6.89 164.49 1 209.84-8.9" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" stroke="url(#a)"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\zap-11.b89f1adfc49b[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	694
Entropy (8bit):	5.174301281541271
Encrypted:	false
SSDEEP:	12:tR1MnroDDuRHxlxbmZCG+AHJGdnuPGNatZowcynpqjhlllSVtM:tR1MrofuRHxlduCG/pGdn8GstvcQpqjj
MD5:	B89F1ADFC49BBDA3A88BD5E54919B5AC
SHA1:	786975858081C817EF009C262D9F5CD4D12EA143
SHA-256:	93EE89D8ED60229DE409B9FDDA84118760C5357B4FACAB58D539E0B38E27EA33
SHA-512:	F34EB6517FCFC24E4C6733C52712FEB259CC91A0F8F481E9F36868727725275232CF61D511C0135C9AA2DE96DC1FE00F0909BE9A7F567E931DF1C353E642F627
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/zaps/zap-11.b89f1adfc49b.svg
Preview:	<svg data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 16" width="400" height="16"><defs><linearGradient id="a" y1="13.69" x2="435.45" y2="13.69" gradientUnits="userSpaceOnUse" gradientTransform="matrix(.91716 0 0 .7708 .27 .687)"><stop offset="0" stop-color="#616eb3"/><stop offset=".5" stop-color="#ec1067"/><stop offset="1" stop-color="#f6901e"/></linearGradient></defs><path vector-effect="non-scaling-stroke" d="M5.11 8.12c157.63 5.63 166.68-1.29 176.18-3 7.37-1.37-2.8 10.39 5.19 8.47 6.83-1.64 15.52-6 25.68-7.92 10.77-2 2.83 5 11.2 4.37 7.45-.55 0 0 173.16-7.74" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" stroke="url(#a)"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\50-f1e180[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	133458
Entropy (8bit):	5.224381274909031
Encrypted:	false
SSDEEP:	3072:1f/HuFVppxvIeJ0i9d1EwgXA9JKEODCE5n:1f/Hu/FIeRKn
MD5:	365A10154187380204CA942771D68129
SHA1:	B34E3B77D8D2D6CBF29F57AEE3C14BE3F567EF39
SHA-256:	0FA4389403FD21C7C419C3EDD787F90E198D8D05639967D85BB8D391294B7B75
SHA-512:	1A41E4E5EA1D8F4B73AD8DD720A66DE033F68D48C235FB9BE0923BB575902451E4289C7899E76632C327569BEBCC3DFC0B991F49E9E0BC18482FA9A2FF4B281D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/54-af9f9f/c0-247156/de-099401/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/bb-d7480b/db-bc0148/dc-7e9864/6d-c07ea1/29-1ec5a9/23-c64e70/cd-23d3b0/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/92-10345d/79-499886/7e-cda2d3/b2-7087f0/ea-1a640b/e0-3c9860/91-97a04f/1f-100dea/33-abe4df/50-f1e180?ver=2.0&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Inter-Bold.2767206dcd8d[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 128008, version 0.0
Category:	downloaded
Size (bytes):	128008
Entropy (8bit):	7.992898440141803
Encrypted:	true
SSDEEP:	3072:HkBSrKM/GaqdnWU5bCai8smfuWCYMAaldZgVwtTcw:EBSd/G3Wc/HMjguD
MD5:	2767206DCD8DAAD63C6A24A5940DF79E
SHA1:	6A3A6EDB7CA2D8B8E1542746884C8A34C12B9F07
SHA-256:	CD06B48A60088DF701245B307DD894310B007981E5E5788FC8A3596078D86F76
SHA-512:	60486299BEFE6BEC30D05941D45EBBD619C254F254B0FE28622746984B17BAAB8521B46D83D3990CAB6C72C410F885C0853CC750752E83830A94429DE26D144E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/fonts/Inter-Bold.2767206dcd8d.woff
Preview:	wOFF........................................GDEF...0.........'..GPOS......9....v..zeGSUB..<.......3.Fq-.OS/2..V....V...`#.q0cmap..WD..B..n.....glyf......'........head...<...4...6.3..hhea...p... ...$....hmtx..........%....Ploca...h...p.....I.<maxp........... ....name.......;......d.post...0..%...d.i.Z.x.%..D.Q...s.=..W.o..J"@...^..I..L..`3S)d..b.e... .d+H...z..G.cc.".e_v.\|.......N.K .nR.%..RyAc..T>..gR.BG..Tk..3..z..Vm.6m.vm.......9..e].5]...P...%<.c.h./..o.V.5..lv.uY.s}8.0.r.wy\p...p.`.....q..a....x....]..........{q......?.y..u..._.....~.......L}.g....5..;...E.......#..Z\|l..dM.b-.e]..,.. ..8..,..<.....[.._..........>...~..X.2V....xn...~.V..i.{..u....ex.#a.G.(.B._.7..........S.........w..d...)..t2..."~J.&.x.\...R\|..!f................8..D..0..Yx......U...33....v-X...$.... m.<..P.....%A......B.T.....(...J...7c.....'.....{..3..9....]..!....!a4j.....K...O.O.H!.?.e..M.L4.wu.p....J.s..A..J.5..M(."".....e..j.8...P...-#..*...u.r...3......Ds.>..ln.'.I?d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Inter-BoldItalic.d4f1ac27c3c1[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 134752, version 0.0
Category:	downloaded
Size (bytes):	134752
Entropy (8bit):	7.993642698704655
Encrypted:	true
SSDEEP:	3072:NkBSrKM/9BKDdX933WDtIyp4jfxBIjRfKK6Qhb+4Rs:qBSd/9BAt3mms6obK
MD5:	D4F1AC27C3C139A63E07D23E4A05830D
SHA1:	ACDD933E37A2A0E3672D4C55E77C12536A335884
SHA-256:	BE307212058E1B6C0081B37F81097F62034C1EEC328DAC4BBCFBA3B24FF407EA
SHA-512:	1DFD001BE91960370E9C4AA84B0DE5DE2D460DD2675984F36636F826479A9097F85569011965AFB9AC46ADBCEFF7A509E5747C2C8632357FA739D0A70A6DE829
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/fonts/Inter-BoldItalic.d4f1ac27c3c1.woff
Preview:	wOFF.......`................................GDEF...0.........'..GPOS......9....v..zeGSUB..<.......3.Fq-.OS/2..V....[...`#.p.cmap..WH..B..n.....glyf......?.....w...head...d...4...6....hhea.......$...$.J..hmtx..........%....Aloca......w.....ON.maxp........... ....name...8...G....6Od.post.....%...d.i...x.%..D.Q...s.=..W.o..J"@...^..I..L..`3S)d..b.e... .d+H...z..G.cc.".e_v.\|.......N.K .nR.%..RyAc..T>..gR.BG..Tk..3..z..Vm.6m.vm.......9..e].5]...P...%<.c.h./..o.V.5..lv.uY.s}8.0.r.wy\p...p.`.....q..a....x....]..........{q......?.y..u..._.....~.......L}.g....5..;...E.......#..Z\|l..dM.b-.e]..,.. ..8..,..<.....[.._..........>...~..X.2V....xn...~.V..i.{..u....ex.#a.G.(.B._.7..........S.........w..d...)..t2..."~J.&.x.\...R\|..!f................8..D..0..Yx......U...33....v-X...$.... m.<..P.....%A......B.T.....(...J...7c.....'.....{..3..9....]..!....!a4j.....K...O.O.H!.?.e..M.L4.wu.p....J.s..A..J.5..M(."".....e..j.8...P...-#..*...u.r...3......Ds.>..ln.'.I?d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Inter-Italic.fb463a63312e[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 128744, version 0.0
Category:	downloaded
Size (bytes):	128744
Entropy (8bit):	7.991803796908608
Encrypted:	true
SSDEEP:	3072:WV4M/KC4C3nBTUnCYdu3lTZNMFrCFeS2fUH0TIb:0/KTC3nZUCP3PNMF+0S3H0K
MD5:	FB463A63312E849ABE41DDE33C65F447
SHA1:	45AFBD1F96661246C3BEC6F7EE52CF69C248BC5C
SHA-256:	331B438811C1BC469B9205E889CAB1B91DD67246D2688148131ABD2BB6FF6973
SHA-512:	3B2F39E40CDFA9148D3528E71CC23C6C3BAF3EB6A0793C86EE91712170C4E3BF8758A6947CFA6AD75540459C5202A71533515C8D346035EF4FA9CF62D276F930
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/fonts/Inter-Italic.fb463a63312e.woff
Preview:	wOFF...............`........................GDEF...0.........'..GPOS......6.....nR.~GSUB..9.......3.Fq-.OS/2..S....[...`%.n.cmap..T<..B..n.....glyf..~....K......=.head.......4...6....hhea.......$...$.u..hmtx...$......%.l=AAloca...4...w........maxp.......... ....name.......=....1.d9post......%...d.i...x.%..D.Q...s.=..W.o..J"@...^..I..L..`3S)d..b.e... .d+H...z..G.cc.".e_v.\|.......N.K .nR.%..RyAc..T>..gR.BG..Tk..3..z..Vm.6m.vm.......9..e].5]...P...%<.c.h./..o.V.5..lv.uY.s}8.0.r.wy\p...p.`.....q..a....x....]..........{q......?.y..u..._.....~.......L}.g....5..;...E.......#..Z\|l..dM.b-.e]..,.. ..8..,..<.....[.._..........>...~..X.2V....xn...~.V..i.{..u....ex.#a.G.(.B._.7..........S.........w..d...)..t2..."~J.&.x.\...R\|..!f................8..D..0..Yx......U...33....]...Z... .@...iI"..(=u!..BU.g+J.e.JZ...R.T..h+zDJ*....v^.>w.......{...3.9....B.B...E'a4o.......!".....qB.^.-....iB.............]..L..{...P"L.1<P...~Z;.M2......2V;....z#s.....jm..{[3.T}......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Inter-Regular.1a7f90ff1f1e[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 119692, version 0.0
Category:	downloaded
Size (bytes):	119692
Entropy (8bit):	7.992112364546725
Encrypted:	true
SSDEEP:	1536:iG0xjRyVTq1BbK/CqmPRQ84bhXL+G4hJhSSt5ePW5Xnn7AGeKFSfJItW6LvuFuNW:3V4M/RkG0rFn7beKFSWgAvNTXBFwB
MD5:	1A7F90FF1F1EC75ED4E588736C6A81B0
SHA1:	4AA855FF81ADD61992B3DBE23C7643DA6FF528FC
SHA-256:	764615D6C413495C77873FF78A401DA53D49EB0ABB8554495BCAB483CA1ED2E4
SHA-512:	542ACE63C0F9BCABDAD9029E1C516D123DBD91BFBE764CD9F430C493F601B76D55C0F9037A20EA0F1B12CAAFB04B6F1D70B85C948A502CAD7D73AAE347B08FCA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/fonts/Inter-Regular.1a7f90ff1f1e.woff
Preview:	wOFF.......................................GDEF...0.........'..GPOS......6.....nR.~GSUB..9.......3.Fq-.OS/2..S....V...`%.m.cmap..T8..B..n.....glyf..~\|........s..head...l...2...6....hhea....... ...$...chmtx.......&..%.n..bloca.......m.....(P.maxp...X....... ....name...t...@....1%f.post......%...d.i.ZEx.%..D.Q...s.=..W.o..J"@...^..I..L..`3S)d..b.e... .d+H...z..G.cc.".e_v.\|.......N.K .nR.%..RyAc..T>..gR.BG..Tk..3..z..Vm.6m.vm.......9..e].5]...P...%<.c.h./..o.V.5..lv.uY.s}8.0.r.wy\p...p.`.....q..a....x....]..........{q......?.y..u..._.....~.......L}.g....5..;...E.......#..Z\|l..dM.b-.e]..,.. ..8..,..<.....[.._..........>...~..X.2V....xn...~.V..i.{..u....ex.#a.G.(.B._.7..........S.........w..d...)..t2..."~J.&.x.\...R\|..!f................8..D..0..Yx......U...33....]...Z... .@...iI"..(=u!..BU.g+J.e.JZ...R.T..h+zDJ*....v^.>w.......{...3.9....B.B...E'a4o.......!".....qB.^.-....iB.............]..L..{...P"L.1<P...~Z;.M2......2V;....z#s.....jm..{[3.T}......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\RCd01d50cad19649bf857a22be5995480e-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1070
Entropy (8bit):	5.377552655345418
Encrypted:	false
SSDEEP:	24:DYQMct/BuYQKbEfgwiUtB7eOE7ZewCEArRWxGJiwuPn:DYQ7t/BuYQK6gwiMB7lE7YKArwxeidn
MD5:	12EDB5341B009164CF78B2BC91E26B59
SHA1:	DB6A48495F88BB12B2E41FC0CF1714365F7F7ED8
SHA-256:	B44EB62017430FE88C32C83CDB2FC5384D5A6D02B1F5F9D53C4B948FAB688EB1
SHA-512:	B47597BCA21E49F748005FBEBC29039CCA899E94F473D905EB455E9C78C13F962FBA04A63756582F0387499A0060F1FA5FEB895E447832A1D44B70D85247708A
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCd01d50cad19649bf857a22be5995480e-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCd01d50cad19649bf857a22be5995480e-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCd01d50cad19649bf857a22be5995480e-source.min.js', "null!==window.wdgtagging&&function(t){var a,o,e,n;(0,window.jQuery)(\".at-flicker-control\").slice(1).remove();var i=location.hostname;location.pathname;a=i.match(/^(www.)?microsoft.com/)?\"prod\":\"staging\",(o=window.location.pathname.toLowerCase().split(\"/\")[1])?o.match(/^..-.-..$/)?(e=o.split(\"-\")[0],n=o.split(\"-\")[2]):o.match(/^..-.$/)?(e=o.split(\"-\")[0],n=o.split(\"-\")[1]):n=e=\"\":n=e=\"\";var g=window.location.pathname.toString().replace(/^\\/(.*)/i,\"$1\").replace(/\\/+$/,\"\").toLowerCase();(g.match(/^$/)\|\|\"true\"===document.getElementsByTagName(\"body\")[0].dataset.homepage)&&(g=\"home\"),t.setData(\"env\",a),t.setData(\"langLoc\",o),t.setData(\"lang\",e),t.setData(\"loc\",

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\RCee0d4d5fd4424c8390d703b105f82c31-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	964
Entropy (8bit):	5.299450380692714
Encrypted:	false
SSDEEP:	24:DRxct/BuRbU9lHJ7UOzSE/xFAChIKu8C1ijkiJiLAkwuKIPn/:DRet/BuRb6+VE/TjLCCJkr
MD5:	2D1B1386EE4AC538A07021FFDB187451
SHA1:	224DC650B9563DF3AE4667641F0A9A0D36293FCD
SHA-256:	F87E5BB832C195B19D1686852D5A9664CA7E011CCFD3650953DBEB8C7951DD4D
SHA-512:	214579D676910816DA710AF93A1F5E1646A5736F18902E0CD4056214A237FB94B5954CD680047DC54340C877AA375439FA2CC44B06B359A266D5E04EF04D7644
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCee0d4d5fd4424c8390d703b105f82c31-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCee0d4d5fd4424c8390d703b105f82c31-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RCee0d4d5fd4424c8390d703b105f82c31-source.min.js', "null!=window.wdgtagging&&null!=window.wdgtagging.jsll&&function(a,e,t){var g,n,i=_satellite.getVar(\"CurrentSiteData\");location.hostname,location.pathname;if(i&&i!=undefined){var w={appId:i.appid,version:\"4\",coreData:{env:a.getData(\"env\"),market:a.getData(\"langLoc\"),pageName:a.getData(\"gpn\"),pageType:a.getData(\"pageType\")}};w.prePageView=(g=a,n=t,function(){n.setMetaTag(\"awa-env\",g.getData(\"env\")),n.setMetaTag(\"awa-market\",g.getData(\"langLoc\")),n.setMetaTag(\"awa-pageName\",g.getData(\"gpn\")),n.setMetaTag(\"awa-pageType\",g.getData(\"pageType\"))}),e.load(w)}}(window.wdgtagging,window.wdgtagging.jsll,window.wdgtagging.util,window.jQuery);");

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\RE1Mu3b[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\RE4ncJa[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 2120x1192, frames 3
Category:	downloaded
Size (bytes):	303001
Entropy (8bit):	7.927659852872942
Encrypted:	false
SSDEEP:	6144:q1+b8qAB82Xk5RAVXASfbH9GoDBK6RVK9akhHN/gpVkkcBF:qYgG20bUbMoDBtwnt/6OdBF
MD5:	03FA1EEE7F6B709D0A1177E0378E51AD
SHA1:	334485A1D252C0F590F5A368D761960D53040A96
SHA-256:	F88C48CB25778900EAEC199B7265B9818605D096829719A017D84D493D4180BE
SHA-512:	5E311D5D06B8CAA219F3BE250616236A0762009E41897468CCB925031EFDFE7CD9A2CFD4ED2B39C46D5CD8D8F84D1F4E2EE06BB5CDEEC72EFC67A31AB38B50D0
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4ncJa
Preview:	......Exif..II*.................Ducky.......A......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5E656A79409211EAB5289A6ED4DAB80A" xmpMM:InstanceID="xmp.iid:5E656A78409211EAB5289A6ED4DAB80A" xmp:CreatorTool="Adobe Photoshop 2020 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="D6D9EE93C73FE032909961A41E780051" stRef:documentID="D6D9EE93C73FE032909961A41E780051"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Safari[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7175
Entropy (8bit):	7.922609296000784
Encrypted:	false
SSDEEP:	192:fuJ0+zNsMG3OJIVXQ8oK7RgKDNQXxm5oNRN0b:fuJbK3jK3KRNQo5oNRab
MD5:	BDB8B329A8DD71C276215560A8A09B44
SHA1:	1928D7FE2B1A9AAA5CC21C5FB07BDD2291BAA9B7
SHA-256:	56FE01D22EC671B3D6E8D6A4E29695A63BEE3FB4299EED4EDDD97C71AA72F07B
SHA-512:	A7E9AD17B8B0CD1564C138A59FFC72BC0497D9A5807A2207CB2D02F8FEB4E890734E3A87CD762CCE87C8996D45622A53A9E954F66D081B8BF917DD7596CEFED3
Malicious:	false
Reputation:	low
IE Cache URL:	https://img1.wsimg.com/wrhs/browser-deprecation-warning/Safari.png
Preview:	.PNG........IHDR.....................PLTE...444)))........................BBB.........................```......................................ddd.......PM.......e.....k.................q.................}...........^........v.....y........}..q....5.........x.............&............j.....W..t.......3..........................................n..y.%...........>..)..%z................a.................a.......}..........V.....t..j..k.3..............".........r..Z.......+...N....m...........GCF.........x..'l.A...z....<..e........#\|...............m..c..k.P.........9...b..........D....`..){.4...y.D~.Q..{.........3}.\..p....a.....4q.....u....r....F.._...Dn.........#x..M..k..i.....}..N.%cv.N.Rr....4..y...$#1No...k..o...Y[.$.......k{.ck._\.,-....,=3...`.a9MHDVo3=Fs..q..x.m T....'tRNS.........1$G..@...~.~a.x..].UB...!..r.......IDATx..?..P..m).t(.t...vi...`..'8.I...pP8K.x..1.pP.#.R...0........{.b...^.N>.r.&....Sz....j4;.N..../..t..z.a.57j.....z...0`

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\block.fd6f14710ab5[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 504x343, frames 3
Category:	downloaded
Size (bytes):	40232
Entropy (8bit):	7.957803184416935
Encrypted:	false
SSDEEP:	768:pUSV1OKyv6tCEWuX+eHzGWgTxIBIcWG/shZCJV8rswj3GU98:e/6tZWuueHCTmBIcICH8Dj3G48
MD5:	FD6F14710AB58744228386B7F2B2414D
SHA1:	E5848D3D1189EE76887314E87A25326307032F87
SHA-256:	945A6E59DD001B7F5558DF4DA890EEE124539A12EF275087ABEBA7709FF3652C
SHA-512:	5CBF2E74EBFC8BFD84262D20C4653C0551E56B51FE5737B5E54D8A9965A4EEDEBE28EA5A3D4621C700C2479CF5CE74AC3B27DE5FDE5B8D6E36F2513B97FCB7E8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/block.fd6f14710ab5.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................W.................................................................................................nf..6.O..d...?.zY..!.....,..O!$,.....#.I.!F...VY...76.z.@...Z.].......6.Z.o1...~.5...........a.06..^.^....(.....P.8.....,...I.R...,.H.c.....U.;..e......}..{<...o.N.].ppsh:..R.119...........%#.O1Gm..L....y..h=2. .....Gg3.L...u9U...6"............k....k......>........".b....F@.............................................$...h.....H..@$.$.%..4.."@. ...D..$E0D@"...").y...>....@.../.v...7.ER.......,...B.j.n...HX.....".....$..'......... ....?d....o..$.-.K..)..Z...........1)..y.....L...,.p.QA......H...'......... ....?d....n..@....&U.b1.[;..37.....LIU.....16..b...+...x....k{..@.b....\|...~7........!.'g.~.~....2..H..E..+.5...NM9j..`.F%\..*.&R`[..k..p...$."......~7........!.'g.^.t.......S.j..%..Mj.. ../..h&$..V.W.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\btn-google-play.77bdbc935c58[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 152 x 45, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2688
Entropy (8bit):	7.840632814976992
Encrypted:	false
SSDEEP:	48:3cMbW432+BnZ4RRVpirkTBUeDxucNfTojDoNW9ENwYksn/xBwhGr:s235niRErUUe/M9E+jsn/PwhGr
MD5:	77BDBC935C583F6353BF55A29EE51FA6
SHA1:	B42C846FC1A53D35666EB8F7AE1EB178F53C5979
SHA-256:	B7B8201F58AF95DFC8D37861C3D950A32DB3412DB70AC22C8D7AFF0450FCFDFE
SHA-512:	59858E900DC07C3694714D80617A33B44EFC7635FD525DF24153E13D3A52F662B0DDBB4ADBEB4801BF65FE52318A04ECAD4660BFBD4A19235C0C9F8DF22DE9AE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/l10n/en-US/firefox/android/btn-google-play.77bdbc935c58.png
Preview:	.PNG........IHDR.......-.....e.R.....PLTE.........VVV...Liq..............YYY......qqqrrr.....................\|\|\|.................................................................^^^###444(((...%%%:::.........777.................ggg...RRR///...[[[... ...................CCC**......nnnrrr..........GGG..............................VVVMMM.....ubbb,,,222{{{xxx......AAA...PPP..........5I...???XXX....9L.........KKK.+L.......7F.............1E.......&=...]......................\|===.........666....3Q.,Rttt..w..v.-G.....=...Y....A....1K.oC..j.....i.......1F.+8...a..........."7F..)...+VC.^..m..D.\........y..............R....D,........i.......91.W@.......t.!1.................yl.GB.1..!..........aOF..-...m.#L.g...,...M.u....5%6Xh..X......+...y.......^.`;.....j..tc.%."D.%Y.....H.....H]..uuu2......"tRNS........Dp...Ld.......)....A.e......W....IDATx^..el[[...o..a..3.^#333...............A.slg...n...).(.....9..........tm..._.Z.".k^......t.....n...ay%.....0.e....n..b.%....ne..V...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\close.73e5756fc7ce[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	383
Entropy (8bit):	4.76377104873034
Encrypted:	false
SSDEEP:	6:tnrwNhy/i3mc4slE4easKMwmqZDdGoawXq9/1Z0RIgTblVyRItIroEVNC:trwNSi33eaxMwh7XqnjgTi87
MD5:	73E5756FC7CE98E0B4794BF6494AC363
SHA1:	48CD53CEFB65E3F25214D1B2C17E63D314574048
SHA-256:	8E7FA1D23C05DE55B93FB1B89D0BBC0E9A1D336E6D7984FB88EC1B040316B2DE
SHA-512:	A4CA68DA658AFC7A17F7A52A60C5215D1EBA43E9E6BDE8070A12B58D757BF0FE2AA1F076559C0E37F47AE7759CD2EFAF3514A35B5CD2AA3A2448253418A20677
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/icons/close.73e5756fc7ce.svg
Preview:	<svg width="24px" height="24px" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <g stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round">. <g transform="translate(6.000000, 6.000000)" stroke="#000000" stroke-width="2">. <path d="M0,0 L12,12"></path>. <path d="M0,12 L12,0"></path>. </g>. </g>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\customize.c7c7ea078776[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	649
Entropy (8bit):	7.326492095302959
Encrypted:	false
SSDEEP:	12:6v/7sYCmqjVp2pCtiRRVIk2A/POkxBAenwObYEfKdlNhNIrBN:h4qz2pCtcVIE/PXzdwRpdlNnUBN
MD5:	C7C7EA078776BD9538CFACC3B09F2B9F
SHA1:	212EED368361AC8F973756155837111FF220B933
SHA-256:	BC00CED7D49F7DA7A4C61E8F54606DFE0B84C102379F3AFE33A89BE2B5815CF8
SHA-512:	FA7CB49821BEC425156D22F6EF32CD5D5011E4D390F394A7BC792D3260E2A270CBDD59EE3B4E84165F47777ED761ADEB7B68395544EBE1DDC30B11EBE9D2ED99
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/customize.c7c7ea078776.png
Preview:	.PNG........IHDR... ... .....D......;PLTE....Q..O.b'...................U..P..N.b&........J..G.y<.n0.h1.e,.................................{..p..d.._..Y.....................}?.....v9.t6.q4..U.i+.v:.d'.zJ.o;.Y..V......................................i......\|...............s.....E.C...........\|.l.u..k.b.Z..R.uC.m7..%.....IDAT8...V.@..a.$N.!D..AQ@P.iR.....O....an.Y.\..5.J..J?....73........:e.c......N.U...3s...U..hk>...?..E.O...\|..]7..r...o.....%.............pcWzsp.\..0.6.h........%.SB.g.......T.$.}..*....D..<..p.z.s~..0..\|?..X......m7..ku{?&t.l.^.+<}r....l...c.....?..!'....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\edge[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	189616
Entropy (8bit):	5.118353843010831
Encrypted:	false
SSDEEP:	1536:jooQoP5ksw0ybX3QRpHX09klQoWifmm6HPVVi3DbyqIMRsV07MCqDZLcPyyiIX9P:FQoP5ksw0ybXp07qHyqfM9jOZQaW9
MD5:	CEC4A8163D4A4601B39715EEB42496DA
SHA1:	E48660ADC533D553786BF124C93A75CF9C281560
SHA-256:	AA8957BC71F02AC753465D5CE2714ACE0E45628132C4BD43ABE05FF7EBA0DB68
SHA-512:	065FEEBB1CEE6461A11D57D1CAD19244BED2EA188868D0D9447930EED6BFB43B601A41495CBA2F11CB12535FAAC9AAE16E6EE4AE571A3F0580977632CF9A02F1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/en-us/edge
Preview:	....<!DOCTYPE html>..<html lang="en-us" class="no-js" dir="ltr" xmlns="http://www.w3.org/1999/xhtml" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://www.facebook.com/2008/fbml">..<head>.. <meta charset="utf-8" />.. <meta http-equiv="X-UA-Compatible" content="IE=edge" />.. <meta http-equiv="content-language" content="en-US" />.. <title>Download New Microsoft Edge Browser \| Microsoft</title>.. <meta name="Title" content="Download New Microsoft Edge Browser \| Microsoft" />.. <meta name="Description" content="See what's new on the latest version of the Microsoft Edge browser. Explore features, rewards, and more before you download the new browser today." />.. <meta name="keywords" content="internet browser, web browser, microsoft edge, download microsoft edge, new browser, new microsoft edge browser" />.. <meta name="twitter:site" content="@microsoftedge" />.. <meta name="twitter:card" content="summary_large_image" />.. <meta property="og:description" conte

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\etp.7eb15e0dc639[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 230 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3552
Entropy (8bit):	7.927513440485425
Encrypted:	false
SSDEEP:	96:8olrZxjYmn164qFITuUlugqGtotlT67qtyDeC+IwT0Hx9s:hlrHsmn44HTuUogOi7eh0R2
MD5:	7EB15E0DC6399AAD09385D418F5FE8B9
SHA1:	7F6DE0D3054F1FD4E880F21862BA04FB0F1B8409
SHA-256:	0A80B738CEA53848E048EF05E9DCE5E2700BEEB16CC11F8AC97F5E65FB17A82B
SHA-512:	D9B8A5A70EB5100ABECC62F3702EA682B0AC6681362CFDBBE1573EF38C0BD43611F046BE94F954C06267010043FC3054DB64FDD16222C8EA47CDC4EAA80D415D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/etp.7eb15e0dc639.png
Preview:	.PNG........IHDR....................PLTE......uB.Y*....................tA.g6.s?.V&............Z+....[....................................................wF............sd.........................~\|.......................................^0............yJ.{O...gI....xm..........^......{u.\|x...........Q....}U.c...^6..........................Z.]2.a<....vj............._.f....r.\|...c@....nY.yp........k.xF.e9.h.~....eE....lT.uh.....m.xQ.sL.h=.w...jO.q_.......w...s.zI.z.kA...~.e3.n.......o.n?.pH.w\..}..n......IDATx..._.G.....l6%!!$.@.H..L.)7.%.R..P)..Q......z.Zk/.....u....;...?...x\|?o.73...Od.XR.u.wF...q...DD..b...;.x..[..........u......\|......#8">W..U..>O..h.]=...\|.^...n+.,08.C.u..z.q.L...C...P..ay`.o......%.l0xZ:.:...`....."Z....+.Gzk...Cn".20.C...?.80.....y.&0...O..-qQB.]@]........N.?B.........{..V.l..W.....5...g~..."...2F.. .P..T.....7a..e...Yr$.A\..-.u.`.......R{\v.x.b.'..).(....b..h.`,.M.,.j...e.L.#z.Y.]~...?.y.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-check.c91a6f8e4717[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	192
Entropy (8bit):	6.272670632838235
Encrypted:	false
SSDEEP:	3:yionv//thPlG3VdN96nVgaPRroowjd/uBxfFnRuCH9TrX/HLnulWZiFaHbAf+dEc:6v/lhPI2VgaLmkRuC9VkaHb1dEup
MD5:	C91A6F8E47170400C9713D6149D5617D
SHA1:	C6DBDE95181915512D6BAE92E9735BB39F67B501
SHA-256:	689BF39617987BC5A1B61832B6AF64D888D892B09D7A98A9434757A3EC42E776
SHA-512:	357FF56CE36A6E850CE4A1F859C39F7BC464FE1D6A38C6CD842CC87BBC1E283F9F3D140C5D70258821CC0C4853D0C45AB2DB8B32D3E6CF694BC3677EA015C552
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/icon-check.c91a6f8e4717.png
Preview:	.PNG........IHDR..............Y ....0PLTE.....m...G.;.0...............lQ....].D...m%.3N...KIDAT..c..p4 q.w".lV..N...B.0.C...I...IG....vGw$.JDj@.0)...;J...`......T../\|.O:.m.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-common-voice.127fa3f5dcb0[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4700
Entropy (8bit):	4.9721322351642705
Encrypted:	false
SSDEEP:	96:CCu3sfgBn/Hx+SZp8RLQ+SZpXCupG29KDlRkG29Kb:7+/RFTNFTfGbDQGbb
MD5:	127FA3F5DCB0F737B14B9F29DAC4A2F4
SHA1:	1760C74EC1187EEA5436BBE492DFD2982A29F117
SHA-256:	D7629546C07644EFC307CE7C3D39609916CF88964B68FD2C45437937B0545C84
SHA-512:	CB8DB7ACC411B63B6AD32A84C2F2659A94DF5024958C6D763C99E142DB57632098FAD7F6BA88B5BF1A44BAAE109BBCE508B00551BFB4C3E881CBEE7E000DB7E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/nav/icons/icon-common-voice.127fa3f5dcb0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" width="32" height="32">. <linearGradient id="a" x1="2.8246" x2="29.3543" y1="10.6026" y2="22.6697" gradientTransform="matrix(1 0 0 -1 0 34)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#3b8ac9"></stop>. <stop offset=".68" stop-color="#7661aa"></stop>. <stop offset="1" stop-color="#9451a0"></stop>. </linearGradient>. <path fill="url(#a)" d="M8.6 23.6c-.1.1-.5.8-1.1.8s-1-.8-1-.8l-3.1-7.3-.8 1.9c-.6 1.4-.6 2.9-.1 4.3l1 2.4c.4 1 1.7 2.8 4 2.8s3.6-1.7 4-2.7l1.9-4.4-1.7-4.1-3.1 7.1z"></path>. <radialGradient id="b" cx="-821.9417" cy="489.3766" r="1" gradientTransform="matrix(7.734 0 0 -7.734 6364.4019 3810.0491)" gradientUnits="userSpaceOnUse">. <stop offset=".51" stop-color="#5a4a9e" stop-opacity="0"></stop>. <stop offset=".58" stop-color="#53499c" stop-opacity=".06"></stop>. <stop offset=".71" stop-color="#3f4898" stop-opacity=".22"></stop>. <stop offset=".87" stop-color="#1d4591" stop-op

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-dash.d80e28605027[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	129
Entropy (8bit):	5.51723039319489
Encrypted:	false
SSDEEP:	3:yionv//thPlG3V4NyacR8Wyy58qoll6xfS9BAYvMSsBG/ljp:6v/lhPIiN6R81n/+GyBG/Vp
MD5:	D80E286050272779029C2BDF8FB0A57C
SHA1:	B115186D549100B3AE99C72401CBB3C4CA828F92
SHA-256:	04F1A014AB9AA2DB4A11183B5610189BB77138624BEDAA79D5F177E7FA062777
SHA-512:	DFFD0BAADC87E3489C53E21FFB6C648A6F4DE1BE9A5DD7DA40D73467C03325F154AB1DC455A08633F6A16CF368D9F732BD4317E5A5362EC6435ED77019BBF0BB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/icon-dash.d80e28605027.png
Preview:	.PNG........IHDR..............Y .....PLTE.......................}...'IDAT..c...Q..D@l.$%0P..r.......a....A...].v..fI....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-fpn-beta.9e7bc3a29f6e[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2577
Entropy (8bit):	5.033660474488909
Encrypted:	false
SSDEEP:	48:nnSHJmeWHpW+zAnsnN4HJGWNQNuFMgQtohHpB6eexCTAWwP7:nSm48Osah6lTohJn7TAWwD
MD5:	9E7BC3A29F6E384D28FE7600252D8D23
SHA1:	E768BBAE73B4F0B75D8221CBE4FCF5E87F6E1E0F
SHA-256:	F27170723143E0A5310F65C230B259D20655E110DA18C1F02694B5AAFE6B2AB7
SHA-512:	1B8465845C9F27D39B96A95DB1FA446EFB609904BD6581DD5801B16DB488454F3FE45EB66DA2BDA43A9B9B9E2A44CEF767C9691D330D4B2683490CFC1D26955E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/nav/icons/icon-fpn-beta.9e7bc3a29f6e.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">. <path fill="#008787" d="M28.7 20.6H15.6c-.4 0-.7.3-.7.7v2.1c0 3.1 2.5 5.6 5.6 5.6h7.2c2.3 0 4.2-1.9 4.2-4.2V23c0-1.1-1-2.4-3.2-2.4z"></path>. <linearGradient id="a" x1="26.9067" x2="24.0047" y1="6.7601" y2="9.5076" gradientTransform="matrix(1 0 0 -1 0 34)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#054096" stop-opacity=".5"></stop>. <stop offset=".09995" stop-color="#173ba1" stop-opacity=".442"></stop>. <stop offset=".2949" stop-color="#3434b3" stop-opacity=".329"></stop>. <stop offset=".4888" stop-color="#482ec1" stop-opacity=".217"></stop>. <stop offset=".6797" stop-color="#552bc8" stop-opacity=".107"></stop>. <stop offset=".864" stop-color="#592acb" stop-opacity="0"></stop>. </linearGradient>. <path fill="url(#a)" d="M28.7 20.6H15.6c-.4 0-.7.3-.7.7v2.1c0 3.1 2.5 5.6 5.6 5.6h7.2c2.3 0 4.2-1.9 4.2-4.2V23c0-1.1-1-2.4-3.2-2.4z" opacity=".9"></path>. <linearGrad

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	129944
Entropy (8bit):	5.462123422933554
Encrypted:	false
SSDEEP:	1536:6AlHYdXBiO5EAAaAsxX5pB3A1ApA0AQrCV+PTP/T9Va5BFJQCsPGhwABJtgciW2G:ef3XoUTza5B9Sci6
MD5:	61709E9B3708D0427B99DAC9E200D9D9
SHA1:	0E2B44FC90E1CBFEA3B299EDE6A222B8B0991B36
SHA-256:	E7354DBF82D5991B153295D9750941572CA7BEA3B0636C9D1B490E79F54BA9C4
SHA-512:	60A661253563CB00D6D4E10FA7079F507FBCB4A408DEA53F59AF4B906A76D9C39296238BBD7E8FA72004701F4DEF8D2B3D932CAB4D70FB878A9AFA92DE18BFC6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/en-us/edge/Assets/js?v1=11.25.uk
Preview:	function validateEmail(n){return/^[\w\-\.\+]+\@[a-zA-Z0-9\.\-]+\.[a-zA-z0-9]{2,4}$/.test(n.val())?(n.removeClass("border-red"),!0):(n.addClass("border-red"),!1)}function inputValidations(n,t){n.val().trim()==""?n.addClass("border-red"):n.removeClass("border-red");t.val().trim()==""?t.addClass("border-red"):t.removeClass("border-red")}function SetEqualHeight(n,t){try{if(n.length>0)if(t==undefined&&(t=window.innerWidth\|\|document.body.clientWidth),t>1083){var i=0;n.css({height:"auto"});n.each(function(){var n=jQuery(this);n.outerHeight()>i&&(i=n.outerHeight())});setTimeout(function(){n.css("height",i)},500)}else n.css({height:"auto"})}catch(r){console.log(r)}}function ChangeCheckboxState(){var t=$(".c-dialog .c-checkbox").find("input[type='checkbox']").attr("isdefaultChecked"),n=$(".c-dialog .c-checkbox").find("input[type='checkbox']");t==="false"&&n.prop("checked")===!0&&(n.removeAttr("checked"),n.attr("aria-checked","false"),n.trigger("click"));t==="true"&&n.prop("checked")===!1&&(n.att

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\logo-chrome.36729db6cd71[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 190 x 190, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6403
Entropy (8bit):	7.917306125005351
Encrypted:	false
SSDEEP:	96:cqZoNVVD/bFddENCh+WZMJQ67N4gPlE8WrqG1H32Yy1oPizD/fWBjN:cqmxFTENC6JQ5DlB2Yy1Y0M
MD5:	36729DB6CD71BBF4D269C3DAC7A11E12
SHA1:	3543FCB9A8FEF1B8677963EAB8AF38DBD47EFE43
SHA-256:	7E0D67A67BD99CF284D46141FD6FD8A5CDC91BCE505FF5EFB618CE4547EB66FD
SHA-512:	227DA937BFC6A8E44E780004EEA7F0E18EC7948D2292B142918658E868EDAFBC0FE4155AD527E761B8BFBCDE2F16DCD60456458CD03F1D0C3F01DE6F6293D43A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/logos/chrome/logo-chrome.36729db6cd71.png
Preview:	.PNG........IHDR...............E.....PLTE....SE.Z.].A.E.\|r.\|r.D,.i.~t.._.~t..N'.l..u.zn>.t.zn.._..P.D.._.~t.u..^..a.C!.n.D.v..J..^.C.D..V..`.C..].D..N$.l.xX..>....f.nc..pQ..J....M..^6.v..f..L.ui..^N..K....i..k..r..LW....h..J.[M..j.XJ..lS...^Q..K".n....TH...Y....f.SD..N&.p.^Q..L..D.]N.WI..F..J.[L.....J....O@.SC..H.....b.[L.UF.TD..B..Y.....\..J.VG.A.C..d..\..Y..f.._.bT.YK.UF.....Y.O@..G.A.YJ.BC.........@..j.JF.O?.M<..D.L=..`....[L.....@;....B.oeK....N.QA.QA.tL..bi..^....F..I3..+~...~${...v..H.F7..R.1+.g[...OA.>....yn.40.....[.?+./.9.z........R..;......w.......v..i..\|..b..`.....V.......\|..p........k..U.aT.....*.{..w[.lt.b%.V.A9.=1..,..........,.t..nl.c..[G.Z..>...".........zB.q..j.fP.UE.F7.....\Q.tX.........y..x.q6v....h,.b..q..........T..gj<.Q,.^ M...>tRNS.......Y.).\|)..&..H..>..b......bK...C..O......`......y..!.......IDATx..j.@.E.....h..>.E..b`.....n\.\..w)..,..?q....W...c..gl..;"8.yg....#.<.....d.O.. .....H.~.$.O.DK.j.4M[+.2.\|...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\logo-word-hor-white-sm.3b4af7c9dc52[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 347 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5253
Entropy (8bit):	7.811509789638633
Encrypted:	false
SSDEEP:	96:+CSthMDgq6ikVo8ub7PsaD+Wg2cjn+Rge04tlDcaXQnHe2JIAKBKmQBgPc:vS/7puPEaKKcT8/04tlDce2JIjwmmyc
MD5:	3B4AF7C9DC527362765A6529CA33DB72
SHA1:	FFBB92E1F3401A9B4145A1B60BEE138E138F375B
SHA-256:	0B4ED480C6F5678954022632F6AE456E2E43B9AC07646B578D796786F9B08877
SHA-512:	4D8E689B1D76BE7C84D76656FF44592A68278BD33A0D8A99D3FE6B3F9E12D3D6E0B402BBE99DFF5367CE998D725003C4330090596A2E2A874CB42DC300367394
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo-word-hor-white-sm.3b4af7c9dc52.png
Preview:	.PNG........IHDR...[...@......w$3....PLTE.......................................................................................................................................................................q.......Pn........A.....p.....p.......]8..H..s.4..0b..H..p..-..6.hV..F..5..D..o..G..I.v>..G.}?..C.....m..q..q..J..F.?L.....K..G..G..J.<..n;..B.c:..r..D.1f..B..:.j).YR..I.:...8..V..A..D..#..D..<.)..p%..4..<..J.....i.O8.?AZ9...K.5H..G.K:.9E.H<..B.<C..o..c.C?.3M.;...<.S6..?.`/..E..8.V4..5..G.Z2.f+..F./O.E>..;..\.....D.9...". X.}....iT.....@...E......h2...5.s5../.u#.........`R...K..4.}4z\.n[...d..M..F..F..9..6.h6.l'.T..Y.YB...6..4....'.I.D.ZK..S..Q..K..I..#.M..*.{+.zR.zE.../.K.@.7.0.m@.dA..C...?.C.6.{9..n..^.WZ.CZ..H.]..o.Sg.yU~G..O....y{.MZ.j.i7..M..N.TI.PI.iD.N.M..Xy.a....8..d>......}tRNS.............$...U.....7E9.y.....O?.)K.}3..h/.u..[X,.n_..k.r.f.b..k...=1...A...h%....T.....J.....ed5...lc`.zvXQ2.l]Tz1HT....IDATx...j.P.......!(.P[.`PS(....-.N.;.M......C.t.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\logo.339be800ad8d[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5138
Entropy (8bit):	4.693993542054782
Encrypted:	false
SSDEEP:	96:dziLEULduGumgjSoqy4c5W5mrmgjSoqy4c5W5AbPrMRuQXxd11:tBOoqy4cK0Ooqy4cKSIo4v
MD5:	339BE800AD8D89778F9E449B920DCE34
SHA1:	D86017BD3E6D558282BB81725003791476983372
SHA-256:	5857F366C7A0E2B40E1CECB95BAF89A26BA68B2787ED7A8CC1370A28690CB836
SHA-512:	6944E08CD62AB53932C00398F26300C9431264F75C1EC60C0943D287BDFA52FDF3F6A7D41CB2F86B66396FE1613C8E84BB007ACCFAF05CA53B947AB950AAB707
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/lockwise/logo.339be800ad8d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="80" height="80" viewBox="0 0 80 80"><defs><linearGradient id="a" x1="64.51" y1="15.364" x2="14.037" y2="66.212" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#ff9640"/><stop offset=".6" stop-color="#fc4055"/><stop offset="1" stop-color="#e31587"/></linearGradient><linearGradient id="b" x1="65.224" y1="7.341" x2="25.773" y2="58.44" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff36e" stop-opacity=".8"/><stop offset=".094" stop-color="#fff36e" stop-opacity=".699"/><stop offset=".752" stop-color="#fff36e" stop-opacity="0"/></linearGradient><linearGradient id="c" x1="13.158" y1="72.895" x2="55.479" y2="30.575" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#0090ed"/><stop offset=".325" stop-color="#5b6df8"/><stop offset=".529" stop-color="#9059ff"/><stop offset="1" stop-color="#b833e1"/></linearGradient><linearGradient id="d" x1="-.1" y1="40.341" x2="24.498" y2="58.395" gradientUnits="userSpaceOnUse">

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\logo.d97e5516f9e6[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4049
Entropy (8bit):	5.06238787248724
Encrypted:	false
SSDEEP:	48:+62WKHJtfaLXAKHJgrY2HJ9Uto1RHJyAsIHJfEBj9B9PHJwVpSMxYaRBdOxpOwch:+xziLz52Lr3OuxLGpncxLGpmHe3VG/
MD5:	D97E5516F9E6641712EE6C8ECAE835D7
SHA1:	45B7C2F33FCE47ECE99C844ADB90C0020210D5CF
SHA-256:	499B17C0884891BA3A59004E6A9EA8E4BAF48122040561F49E87A55A9E3C904B
SHA-512:	7850F78311CF09B96F234CEC96EF8FE4EB4AB3CAD8E93091AB239791C089CFE5333BFAF7A7C0B6A3403FAA9399BBF5CD36A4D03CFF1D639F4245EE2CC8011497
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/monitor/logo.d97e5516f9e6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="80" height="80" viewBox="0 0 80 80"><defs><linearGradient id="a" x1="54.419" y1="9.758" x2="16.72" y2="75.055" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#ff9640"/><stop offset=".6" stop-color="#fc4055"/><stop offset="1" stop-color="#e31587"/></linearGradient><linearGradient id="b" x1="54.419" y1="9.758" x2="16.72" y2="75.055" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fff36e" stop-opacity=".8"/><stop offset=".094" stop-color="#fff36e" stop-opacity=".699"/><stop offset=".752" stop-color="#fff36e" stop-opacity="0"/></linearGradient><linearGradient id="c" x1="35.583" y1="53.055" x2="67.226" y2="21.412" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#0090ed"/><stop offset=".325" stop-color="#5b6df8"/><stop offset=".529" stop-color="#9059ff"/><stop offset="1" stop-color="#b833e1"/></linearGradient><linearGradient id="d" x1="46.271" y1="56.809" x2="51.587

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\one.aac49bb315cd[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	567
Entropy (8bit):	4.674925357015721
Encrypted:	false
SSDEEP:	12:trMcn7iIs2BMtUB+lmQLLR6Hdvg88WOOCGk9LpDB7LVFB9MxME:t4cn7iziMM+cVvg8xClppZfTMxME
MD5:	AAC49BB315CDD17A041FC520F23A1F41
SHA1:	B25175FDD483865764CAF8F13AA26C708B057955
SHA-256:	2AC78B2C02AD821C702B7CC7DAE047D0DFD9F8A54ECC4618B7EDBE970EB3F280
SHA-512:	D5844578CF0BC4F058348AA08A4F9E47A43815DB35980EF20BB2CBBEDA61DB283D2B3587A0E222A2C8FB9A1DEAB276518B12C64BA9AE7A306FC79D10388763B7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/features/one.aac49bb315cd.svg
Preview:	<svg width="641" height="559" viewBox="0 0 641 559" xmlns="http://www.w3.org/2000/svg"><path d="M581.104 322.764c-53.245 29.7-120.474 11.732-151.84-40.4l-1.91-2.996c-30.111-49.898-94.717-66.668-145.501-37.35-50.784 29.318-68.7 93.498-40.231 144.268l1.745 3.269c29.833 53.44 11.2 121.27-42.43 152.222-54.066 31.062-123.263 12.659-154.353-41.162C-45.323 341.82 9.536 138.822 168.89 47.27 328.575-44.824 532.395 9.242 624.302 168.036c30.981 53.385 13.06 121.269-39.915 152.984l-1.642.872-1.641.872z" stroke="#FFF" stroke-width="3" fill="none" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\oneplayer[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	336199
Entropy (8bit):	5.28645490470456
Encrypted:	false
SSDEEP:	6144:zfhfdXR1sr10qRORPvksdm+cX3p8q9hk2RXuH:bhfdu1Vesw
MD5:	B2AA73D62CE06D845A34A031E4347AFF
SHA1:	B26FF707495B75E6EF75A28EB660CAA0E525CDDB
SHA-256:	0C0B07B0C7B7C8E169672691E1C06EB7B680A32276DE2937A49DC59D4347AD85
SHA-512:	EA4F1B5A11C009E6D8B7ACDAEE7A12BAE894CCB08F9927AD4509F2C580ABFBDF17A1DB8692086E8A4DAD4898C87B78C898F8ED7BC6E68CDCCEB69CEC973DA5AC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.microsoft.com/videoplayer/js/oneplayer.js
Preview:	(function(){var requirejs,require,define,__extends;(function(n){var i=Object.defineProperty&&function(){var n,t;try{n={};Object.defineProperty(n,"x",{enumerable:!1,value:n});for(t in n)if(n.hasOwnProperty(t))return!1;return n.x===n}catch(i){return!1}}(),t;i\|\|n.definePropertyShamSet\|\|(n.definePropertyShamSet=!0,t=Object.defineProperty,Object.defineProperty=function(n,i,r){n instanceof Element?t(n,i,r):n[i]=r?r.value:!0})})(window);./*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\override[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	1531
Entropy (8bit):	4.797455242405607
Encrypted:	false
SSDEEP:	24:Udf0F+MOu2UOqD3426TKgR2Yyk9696TkMYqdfskeEkeGk/ksuF9qaSm9qags:Ud8FYqTj36TKgR2Yyk9696TkMYO0keEW
MD5:	A570448F8E33150F5737B9A57B6D889A
SHA1:	860949A95B7598B394AA255FE06F530C3DA24E4E
SHA-256:	0BD288D5397A69EAD391875B422BF2CBDCC4F795D64AA2F780AFF45768D78248
SHA-512:	217F971A8012DE8FE170B4A20821A52FA198447FA582B82CF221F4D73E902C7E3AA1022CB0B209B6679C2EAE0F10469A149F510A6C2132C987F46214B1E2BBBC
Malicious:	false
Reputation:	low
IE Cache URL:	https://statics-marketingsites-neu-ms-com.akamaized.net/statics/override.css?c=7
Preview:	a.c-call-to-action:hover, button.c-call-to-action:hover{box-shadow:none!important}a.c-call-to-action:hover span, button.c-call-to-action:hover span{left:0!important}...c-call-to-action:not(.glyph-play):after { right: 0!important;} a.c-call-to-action:focus,button.c-call-to-action:focus{box-shadow:none!important}a.c-call-to-action:focus span,button.c-call-to-action:focus span{left:0!important;box-shadow:none!important}...theme-dark .c-me .msame_Header_name {color: #f2f2f2;}...pmg-page-wrapper .uhf div, .pmg-page-wrapper .uhf button, .pmg-page-wrapper .uhf a, .pmg-page-wrapper .uhf span, .pmg-page-wrapper .uhf p, .pmg-page-wrapper .uhf input {font-family: Segoe UI,SegoeUI,Helvetica Neue,Helvetica,Arial,sans-serif !important;}..@media (min-width: 540px) {.pmg-page-wrapper .uhf .c-uhfh-alert span, .pmg-page-wrapper .uhf #uhf-g-nav span, .pmg-page-wrapper .uhf .c-uhfh-actions span, .pmg-page-wrapper .uhf li, .pmg-page-wrapper .uhf button, .pmg-page-wrapper .uhf a, .pmg-page-wrapper .uhf #meC

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\picture-in-picture.85b50c01d575[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	7.5639169323004785
Encrypted:	false
SSDEEP:	12:6v/7sAMoNDBbHG0dj8GXo7q5bdFSs+ESrRpUdZ1TYqZODbSWC+CrNdOTrCdD5Cf:qMoFBbHDl8GOmbjSsIRiZ1TYqQ3SZrN2
MD5:	85B50C01D5759B2D95DD6F5D6B2F414D
SHA1:	1549E8CFFB1F0F0A8CB8184DD4AB5C5AF9383C0B
SHA-256:	7271749EE61C8DC99BA558829BDFDEFA2CAC7AE6664DBDAB79688DBD4B8F8952
SHA-512:	4AD07D4B23FC31FD05DB8B86C53DF7BE31D2419898A897BF1B41C18F404D4FAE86C649F3E34A6CB1885190A5A7FFC69D06CFEEA635C25968F843C3879476C15A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/picture-in-picture.85b50c01d575.png
Preview:	.PNG........IHDR...@...@.............PLTE.....uB.t@.....R.....\.S.s?.................Y....{I.......O.wE......`.................o.d...........\|.k.h.V..............................x5.9....IDATX.....0...c..Q....C.......b2L..!WS3._)E..*......g(.......]...J{..>..k.D....=...KB.7.......i.q...b..0..?F..F...A..+.D.u!wP>.i+....YN.<..bFX.Y....Y.=Z.r...J.Wa.b..br..Z.@`..A..4..l.p5..?..%.?...\|I.....).Z.,...c-.3;....p[..Vo..n7..h.B...... ..l..;.ob.\|....U.-..p.^..`..[.....q...)d.].C.8-.....C..0/...k.5...PD3K....XT.......A...k..._.r.`...^4Y...~2hidu..Ako].......\|....?.h..8.....&paL..&xdx....(...".j(.......lb.0Q. \|r.-W.x.S...U7....O.DyK..>.....M%0l}......K`.y.n.......0?.S......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\rect-one.26a762a93b9a[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	426
Entropy (8bit):	4.885737961759744
Encrypted:	false
SSDEEP:	12:trstXODR09I0bs75BDISuyFJ2p4xPzd9jB9MxME:toteDRsFQt1IlWJBrjTMxME
MD5:	26A762A93B9A7AFE529C86DE26A0B999
SHA1:	1D902A331DDC5A3AF174095EA0E68BCEB2FC8035
SHA-256:	649616FA3BC9D3ADB4A90EE316033ABB3E54A9ACF0DE53FA48F999F67B81B408
SHA-512:	67B1D4F4415AAB9DEFEBE32D94CA4DB3D8D7FB5162DB26E334E51A36E4113F061F655C54EA2710520C4ACD3D0E144961DFD648D27D059A8C36BCA5E2EE980228
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/features/rect-one.26a762a93b9a.svg
Preview:	<svg width="453" height="448" viewBox="0 0 453 448" xmlns="http://www.w3.org/2000/svg"><path d="M-22.924 216.428L251.935 24.832C309.077-15 387.67-1.142 427.743 55.832l.088.124c39.903 56.733 26.26 135.073-30.472 174.976l-.435.304-274.859 191.596C64.923 462.665-13.67 448.807-53.743 391.833l-.088-.125c-39.903-56.733-26.26-135.072 30.472-174.976l.435-.304z" stroke="#FFF" stroke-width="3" fill="none" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\rect-two.23f1fc8ac1a9[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	400
Entropy (8bit):	4.8967654547955055
Encrypted:	false
SSDEEP:	12:trtjoWQIgns+IU/RihVQvnPQWhUBAB9MxME:t5jo/Zbd/RIVQv4uvTMxME
MD5:	23F1FC8AC1A993262D6EE8C8AE410AB2
SHA1:	DB218D4DAC3B6AD131F4F2307A4E2DC168A24A63
SHA-256:	07889BDDA3A353D66900A9444B2972A28C49CB126FC971251B3EB03FC1711B0E
SHA-512:	1C36378C32284B9CDC8AB24EDF3AB0CF384D706807E409AB281D0E64B8310D288AF252C230775C244094E1CDAEEAE622C9002C32CE53193320B9CD3664FC427B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/features/rect-two.23f1fc8ac1a9.svg
Preview:	<svg width="302" height="266" viewBox="0 0 302 266" xmlns="http://www.w3.org/2000/svg"><path d="M26.165 115.549L186.418-55.532c33.389-35.645 89.308-37.597 125.101-4.369 35.587 33.037 37.654 88.667 4.618 124.254l-.269.288-160.254 171.08c-33.388 35.645-89.307 37.597-125.1 4.37-35.587-33.037-37.655-88.667-4.618-124.254l.269-.288z" stroke="#FFF" stroke-width="3" fill="none" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\stub-attribution.8015cb233077[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3297
Entropy (8bit):	5.212335302968477
Encrypted:	false
SSDEEP:	96:afT7BkqimbGepZGK8lXlTV0ntyuRLzKJVc:IeqtZGZlXl6y6J
MD5:	8015CB233077A05D739C64838A812B33
SHA1:	17D18397F76F1A4CFB08D0B88E2256B9834C6295
SHA-256:	0DB788ABE3928AB10F5823EDE6FF9FA6076A851FC47E24BAF522D1FB54B2EEF2
SHA-512:	832C36097D63CDB47945DB6F10366EEDFA3E15B9BDEB9863EF3C8A5E21894FFEE86CC1A1C4F3130008E77AF6482C71FEC3DB3ED5FB2332A7B38D2B343A92BB1E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/js/BUNDLES/stub-attribution.8015cb233077.js
Preview:	"undefined"==typeof window.Mozilla&&(window.Mozilla={}),function(){"use strict";var u={COOKIE_CODE_ID:"moz-stub-attribution-code",COOKIE_SIGNATURE_ID:"moz-stub-attribution-sig"};u.experimentName,u.experimentVariation,u.withinAttributionRate=function(){return Math.random()<u.getAttributionRate()},u.getAttributionRate=function(){var t=$("html").attr("data-stub-attribution-rate");return isNaN(t)?0:Math.min(Math.max(parseFloat(t),0),1)},u.hasCookie=function(){return Mozilla.Cookies.hasItem(u.COOKIE_CODE_ID)&&Mozilla.Cookies.hasItem(u.COOKIE_SIGNATURE_ID)},u.setCookie=function(t){if(t.attribution_code&&t.attribution_sig){var e=new Date;e.setTime(e.getTime()+864e5);var i=e.toUTCString();Mozilla.Cookies.setItem(u.COOKIE_CODE_ID,t.attribution_code,i,"/"),Mozilla.Cookies.setItem(u.COOKIE_SIGNATURE_ID,t.attribution_sig,i,"/")}},u.getCookie=function(){return{attribution_code:Mozilla.Cookies.getItem(u.COOKIE_CODE_ID),attribution_sig:Mozilla.Cookies.getItem(u.COOKIE_SIGNATURE_ID)}},u.updateBouncerL

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\wcp-consent[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	255440
Entropy (8bit):	6.051861579501256
Encrypted:	false
SSDEEP:	6144:PIgagvUI0iDsW9Whsredo7NjIZjIZP0aNWgF9Dyjzh:PIgaHI0iIUedo7NjIZjIZP0o74t
MD5:	38B769522DD0E4C2998C9034A54E174E
SHA1:	D95EF070878D50342B045DCF9ABD3FF4CCA0AAF3
SHA-256:	208EDBED32B2ADAC9446DF83CAA4A093A261492BA6B8B3BCFE6A75EFB8B70294
SHA-512:	F0A10A4C1CA4BAC8A2DBD41F80BBE1F83D767A4D289B149E1A7B6E7F4DBA41236C5FF244350B04E2EF485FDF6EB774B9565A858331389CA3CB474172465EB3EF
Malicious:	false
Reputation:	low
IE Cache URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent=function(e){var a={};function i(n){if(a[n])return a[n].exports;var o=a[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=e,i.c=a,i.d=function(e,a,n){i.o(e,a)\|\|Object.defineProperty(e,a,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,a){if(1&a&&(e=i(e)),8&a)return e;if(4&a&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&a&&"string"!=typeof e)for(var o in e)i.d(n,o,function(a){return e[a]}.bind(null,o));return n},i.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(a,"a",a),a},i.o=function(e,a){return Object.prototype.hasOwnProperty.call(e,a)},i.p="",i(i.s=1)}([function(e,a,i){window,e.exports=function(e){var a={};function i(n)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\RC8bf86b2e25ad4866a6b1b265d645790e-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5124
Entropy (8bit):	5.245278905195689
Encrypted:	false
SSDEEP:	96:FBBIRkACI+l/+vYh1nt1W8+SnZLNDdmQNMKr0cbW55SnXs:FBLbxhN+SnZLNDdjNMKr0cbW55Sn8
MD5:	C8BFA32AADD1F948F19B5C568F08EC22
SHA1:	526C649A562DE8AA1EB2E88416B36C392852B135
SHA-256:	299A569A9AF75169A990447B08CDF94ED0E2FDE95E3D1DF4E9A79E38FBA0AF51
SHA-512:	F29EA7A516C9B97CED445B663F40C14835FA2EF08492E2FD73E92F42AEC9C3AD94B58610A5371343DC380E0F721D7C11F6E897CE507BAAD88AAF983FEEF937D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC8bf86b2e25ad4866a6b1b265d645790e-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC8bf86b2e25ad4866a6b1b265d645790e-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC8bf86b2e25ad4866a6b1b265d645790e-source.min.js', "null!=window.wdgtagging&&(window.wdgtagging.jsll=window.wdgtagging.jsll\|\|{},function(t,a,i,n){location.pathname;var e,o,d,c,m,s={main_sel:\"#mainContent>DIV\",zone_id:\"a3\",sec_custom_sel:\"[data-sec],.fullbleed\",grp_custom_sel:\".m-hero,.mosaic-container,.m-hero-item,[id^='ContentBlockList_'],[data-grid='container'],.gameSection,.featuredgames,[id^='ContentBlockList_'] > div,section.m-feature,.m-content-placement,[role='dialog'],.multi-combobox,fieldset.c-radio,#questionnarie .c-checkbox,#questionnarie>div\",pnl_custom_sel:\".m-global-promotion,.m-product-placement-item,.m-panes-product-placement-item,section.f-stacked,.m-content-placement-item,section.m-feature,.m-content-placement,.c-link-na

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\RC994583e7d8754405b7f8eff9ecd39653-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7500
Entropy (8bit):	5.228206394388393
Encrypted:	false
SSDEEP:	96:eiBB9EJ27VCkUbTh7MC0o3c1KOfamD8FQnfIrz9g7Hd:eiBXEwVCky708Fy
MD5:	C32F59A2C42C916E4A17A1F4EFD73812
SHA1:	1A8ACD090EA171851E8CC99B7E0621B3FFD7C956
SHA-256:	C5EE15F1EAB41C1757001C82C34D609B69D57D1A6DE10E16D60B961924A54248
SHA-512:	6730E11D18888BAF767FDA319A8AA9034D02BBDE5F4B02D550B51CDF22A99D8F6DBC1E0580D5CBB90F89BA62F2E99629BBA0B107106D67F33C57F04FDA2E1619
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC994583e7d8754405b7f8eff9ecd39653-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC994583e7d8754405b7f8eff9ecd39653-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/5ef092d1efb5/4d1d9f749fd3/c8d4c3b250b0/RC994583e7d8754405b7f8eff9ecd39653-source.min.js', "null!=window.wdgtagging&&(window.wdgtagging.jsll=window.wdgtagging.jsll\|\|{},function(e,u,r){u.lineage={main_sel:\"MAIN\",zone_id:\"a3\",sec_custom_sel:\"\",grp_custom_sel:\"\",pnl_custom_sel:\"\",subpnl_custom_sel:\"\",exclude_sec_sel:\"\"},r.isDebug=!1,u.lineageSetupCounter=1,\"1\"===r.readCookie(\"debug\")?r.isDebug=r.readCookie(\"debug\"):-1<location.search.indexOf(\"debug=1\")&&(r.isDebug=!0),r.lineageDebug=function(e){r.isDebug&&console.log(e)},r.lineageDebug(\"JSLL Core Lineage Start\"),r.getLineageName=function(e,a){return e.attr(\"data-lineage-name\")\|\|e.attr(\"data-productid\")\|\|e.attr(\"data-bigid\")\|\|e.attr(\"data-id\")\|\|e.attr(\"data-vg\")\|\|e.attr(\"id\")\|\|a},r.resetLineageName=functi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\RE4tG3O[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	13846
Entropy (8bit):	6.638413482278179
Encrypted:	false
SSDEEP:	384:n71iogZ9YPY+BFGNvZg6GAsG111111111m+:xiou+6vqN+
MD5:	8EC7A94782C2F02686E3745F5F31D036
SHA1:	FC67083870DAF2F63585127F08B9127FBEC4FB92
SHA-256:	7111EA853C2DD0942D636FD88F3E3D7CACC7B36B439A456A025EF27750F90E3C
SHA-512:	1EC1B3EB005F478C63E8DAF347B38621E00639134804C3C3A4708779FBF49FDC7F9A1F89C392FC52447D4DE8DC302C252D847BBA953524D947B4288745C611D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tG3O
Preview:	.............................................................................................................................................]....Adobe.d..................................................................................................................!1....."79AQXavw......5Uq...RVWtu.......#BSbc...............................!17Qaq..4ARUrst........"25T....#3B....$C............?....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\RE4tIoW[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	17003
Entropy (8bit):	6.965938246332196
Encrypted:	false
SSDEEP:	384:nIUPWnaC57MZzsl+v1svJMknvMY1lyMNME502kMlyMgFMuMuEJPmMBMOMBMWMfS:I1a8Z+v1YDTmqd502kFhNBEJ+ofuNKS
MD5:	D53A9D365FD53B95D579006A88C062A2
SHA1:	CF3CE9F891AA21CC7D8660A1DE0C230D5530DDCE
SHA-256:	F07961CCE2A406B0E3A3208C72C75CE4E3A6E819891C56F3D2C3FB90E873F2BF
SHA-512:	22C93723E6DAECA7F05B261B77CC5F4CC132969D27276F5A89AD1448B7CC8E58AC7E59BD8E1007B19D0D5B867F34C4E01965991B7EA26807B079D50D8A6FFB83
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tIoW
Preview:	.............................................................................................................................................]....Adobe.d.................................................................................................................!VX.......78UWwx......$1v."#25A.%QS...9Ru.............................!1SU........6AQTu....."7BRt..#a..q$2Cb...%s..D..............?........................................................................?.........................................................................?.........................................................................?.........................................................................?.........................................................................?.........................................................................?.........................................................................?.........................................................................?............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\RE4tMOD[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	17010
Entropy (8bit):	6.967316521171722
Encrypted:	false
SSDEEP:	192:nM2jbyAFnvr8yE8n1daGUA+3pH8i2W/92T9JMf14U8uxs8miBmiqif5viVJvBo3A:nM2iAdvrRuAHzoEH2CyPDVBoBfNx
MD5:	A99DF6690F7D7C1913FC50923B289F9E
SHA1:	ABD378CDD1371628FBFDA3D04C8994EAFA03EBAB
SHA-256:	0B9577CE6BE0686A22AE0017F60DFA61EFA31E3F08F210CDF8EA52C8B3EC2F90
SHA-512:	532C94B0349FE2DC4CA353D284D4292564163718C838DA7109F69B5143D4D51C9F6C925C7B4F53A757157ECE6DF2F7CB44A573537BA5C8A0020675FF730870F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tMOD
Preview:	.............................................................................................................................................]....Adobe.d...............................................................................................................V....!W.....1A..."7w..#28QX..Basu....rt............................!T...1AQU....a...5q...26rst..#3B......"4Rbd...............?..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\RE4tQVa[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 740x417, frames 3
Category:	downloaded
Size (bytes):	11051
Entropy (8bit):	6.169965812987515
Encrypted:	false
SSDEEP:	192:nKCpHeQ6gHlGDrjH188iSQxOsJQhYomvFgUADe:n/He+gptiJxOGaRkC6
MD5:	0A493F37D73DDD4007967E16E9C98DA4
SHA1:	3C878E37C3FF3EE9B94C21E33AC3CE3816280CF2
SHA-256:	326F12F44A0E097C89C37A8526F6810AD965B494B834FEC817366A979D96AAF8
SHA-512:	931B7260908CC689D9C98428C0E743DC1D2EEE70187285A7C13D95C823C397EED0D74B77B52E65B18335CBE556BB8A7E96010F8F3B4730581C4AA92EB414EB5F
Malicious:	false
Reputation:	low
IE Cache URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4tQVa
Preview:	.............................................................................................................................................]....Adobe.d..............................................................................................................!...18Au...."VXav......#267Bqw..$%3R............................!1.AQa..."56TUqrs......#BRbu........2.CS$%&3............?................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\black.0b92f54b3059[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	4.598094550080737
Encrypted:	false
SSDEEP:	12:trZvnlKIZdWJ0Ti2cKYJb8ZfmqBTJF1LCBAME:tVvnYaYJSihRJb8ZffTL1LCBAME
MD5:	0B92F54B305911937F1B046B407F1DF8
SHA1:	BE25A32BB81E20FB33CB31C11BCE6BBB30A36094
SHA-256:	D705F7F6B5A32CC664AB1EC268D7342F79A748BEED62F065A5618B5BA5F7DC5D
SHA-512:	60D188162B8A0E3A14B35F07993367FA1BE327B384157CDB43B11BA376517ACC622878F4168CDD9F39B62CE74106399F0F29F2D6E55C92B3244F0BE09EEDF020
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/icons/social/youtube/black.0b92f54b3059.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M15.666 3.749C16 4.997 16 7.599 16 7.599s0 2.604-.334 3.852a2.004 2.004 0 0 1-1.415 1.415C13.003 13.2 8 13.2 8 13.2s-5.003 0-6.251-.334A2.004 2.004 0 0 1 .334 11.45C0 10.203 0 7.6 0 7.6s0-2.603.334-3.851A2.004 2.004 0 0 1 1.75 2.334C2.997 2 7.999 2 7.999 2s5.004 0 6.252.334c.689.184 1.23.726 1.415 1.415zM6.4 9.999L10.557 7.6 6.4 5.2V10z" fill="#000" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\black.180e8cf7ea9e[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1637
Entropy (8bit):	4.061688919431878
Encrypted:	false
SSDEEP:	48:rnawk9VKZlCHK3lm2UNU52/mQIowSCmSZ5ZB+fP1:mJ9qyKFcRDWnZMH1
MD5:	180E8CF7EA9E0A381B7B2C44E13FBE68
SHA1:	C99CD61B0EC2161117F2EF4C14AABD2CC2204502
SHA-256:	2D7263960C6067A8EDE4F1FF8F0D85D33A51C04080C96BD2BD4731DAEA814F4C
SHA-512:	6C8B3729E019B1ECA6C85C5CC3F9A8F287BF3A15972DDA5580100F71FE3BC9133FD73B994ED817B91E90DD29CDC157FD76CF2DDD86A3CCDCBA36CC8BBA3E06D8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/icons/social/instagram/black.180e8cf7ea9e.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M7.997.005c2.172 0 2.445.01 3.298.048.851.039 1.432.174 1.941.372a3.92 3.92 0 0 1 1.417.922c.444.445.718.891.922 1.417.198.509.333 1.09.372 1.941.039.853.048 1.126.048 3.298s-.01 2.444-.048 3.297c-.039.851-.174 1.432-.372 1.941a3.92 3.92 0 0 1-.922 1.417 3.92 3.92 0 0 1-1.417.922c-.509.198-1.09.333-1.941.372-.853.039-1.126.048-3.298.048s-2.444-.01-3.297-.048c-.851-.039-1.432-.174-1.941-.372a3.92 3.92 0 0 1-1.417-.922A3.92 3.92 0 0 1 .42 13.24c-.198-.509-.333-1.09-.372-1.941C.01 10.447 0 10.175 0 8.003s.01-2.445.048-3.298c.039-.851.174-1.432.372-1.941a3.92 3.92 0 0 1 .922-1.417A3.92 3.92 0 0 1 2.76.425C3.268.227 3.849.092 4.7.053 5.553.014 5.825.005 7.997.005zm0 1.441c-2.135 0-2.388.008-3.231.047-.78.035-1.203.166-1.485.275-.374.145-.64.318-.92.598-.28.28-.453.547-.598.92-.11.282-.24.705-.275 1.485-.039.843-.047 1.096-.047 3.232 0 2.135.008 2.388.047 3.231.035.78.165 1.203.275 1.485.145.374.318.6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\black.ac47c78a3a28[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	567
Entropy (8bit):	4.4463055245617795
Encrypted:	false
SSDEEP:	12:trZvnlKIBN0ccSclrFfp8Srlgtgja7is4J1Qc+FJLuP4QyuBAio/:tVvnY+HfclrFfyAA4jeLZQyuBAiY
MD5:	AC47C78A3A288B3DA148551DF8DDA3D1
SHA1:	15130B30AABA7708CBFD4F45ECF59C610253E887
SHA-256:	8B63960D7892DD7524EA5208CB1EE5F053C7A300A460BA919193B9D9BF07C43B
SHA-512:	54428662EDCF98B9278FC65B1790C7BF4EC6E116966D66B74FF780A5600119FAA52708667C6C1B89FC11C4007D0CDD15CB652E6758BC4E9ABF316064A0C7EA7D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/icons/social/twitter/black.ac47c78a3a28.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M5.032 14.5c6.037 0 9.34-5.002 9.34-9.34 0-.142 0-.283-.01-.424A6.679 6.679 0 0 0 16 3.037c-.6.266-1.235.44-1.885.517a3.294 3.294 0 0 0 1.443-1.816 6.579 6.579 0 0 1-2.085.797A3.286 3.286 0 0 0 7.88 5.528 9.32 9.32 0 0 1 1.114 2.1 3.285 3.285 0 0 0 2.13 6.481 3.258 3.258 0 0 1 .64 6.07v.041A3.284 3.284 0 0 0 3.274 9.33c-.484.132-.99.151-1.483.056a3.286 3.286 0 0 0 3.067 2.28A6.587 6.587 0 0 1 0 13.025a9.294 9.294 0 0 0 5.032 1.472" fill="#000" fill-rule="nonzero"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\close-white.8557d2773e57[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	4.997017480855836
Encrypted:	false
SSDEEP:	6:tnrwdhC/i3mc4slZs49fhWR6ZSKsKMwmqZUR4RJ:trwdU/i3lzxxMwhUqRJ
MD5:	8557D2773E579A06FD894094A1654CA7
SHA1:	CD9886D5BC4757C771F846D75487B7CBEDD27667
SHA-256:	724FA90BD3F771B1D33E86AD93CBF1853D9A67CAD935FDCA8E3EAAAD00A07E63
SHA-512:	F9FD2696D303034940777F08414F2A8F985F6FAF24E1EB196322727B0F96DDBB79EE38E4C8C02D4725E60C70C7323C1157DCCA4AD4B7A73DA96B0A2E02C88FAC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/icons/close-white.8557d2773e57.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><g stroke="#fff" stroke-width="2" fill="none" fill-rule="evenodd" stroke-linecap="round"><path d="M6 6l12 12M6 18L18 6"/></g></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\common.d920e24f84b3[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	121606
Entropy (8bit):	5.318531898852347
Encrypted:	false
SSDEEP:	1536:oLoNEiAld3FgdYXVZxCtVafQvXa6KswzR4BR6wF1pE92Wv0dzaHXUgMrrz4YXHX1:E9zR4BDOf0Za3ULXHXRZ7TPK0tpWK
MD5:	D920E24F84B3B7A1522A2E12CFDF0EF8
SHA1:	71FD395B4A92BED2CD62411CFE6354D4A3B166BF
SHA-256:	E0119FFDEF2C3C566F646D2770EA95F1D579C875622BE754F9D72106CDB8C8A6
SHA-512:	8F80A6461A5A768762C8025CA696648EF834537FEDFD1F1EA4123D26F174B1CE20EAFB4B97C8F8B9278F5CBFB526D1717CBF28AEE5716C39017EB62D3230C1F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/js/BUNDLES/common.d920e24f84b3.js
Preview:	if(function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(S,e){"use strict";function m(e){return null!=e&&e===e.window}var t=[],k=S.document,i=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,o=t.indexOf,n={},r=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},x=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var i,o,r=(n=n\|\|k).createElement("script");if(r.text=e,t)for(i in c)(o=t[i]\|\|t.getAttribute&&t.getAttribute(i))&&r.setAttribute(i,o);n.head.appendChild(r).parentNode.removeChild(r)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[r.call(e)]\|\|"object":typeof e}var f="3.4.1",C=function(e,t){return new C.fn.init(e,t)},d=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\contain.41609482b85d[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 230 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1741
Entropy (8bit):	7.810631000351912
Encrypted:	false
SSDEEP:	48:4Vvqx3o5sBUTrCcEQ7Ih+zM7pL0++itM5hgnvX2a:4pq8sBj8Mh+Qq++icmv2a
MD5:	41609482B85D93AA68D96051198A3491
SHA1:	C59A3E7417C4B8B26E4178F813627D09C5CDA4E8
SHA-256:	6761E17F717A9A147B435615D09AB770CAFE08105BCC7988C620EE5117701BB6
SHA-512:	73D1A77AF1CB82B8E4FA9622033843DA6A5823067F97968652345F27BE657F06E001A914C59344B0E981EC22F146C5943CE9723C8F76EE7CDF4ADE96A9007D33
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/contain.41609482b85d.png
Preview:	.PNG........IHDR...................qPLTE..................................................pP.nM.......oO................pO.w...~....wX.......u..................d...........n.....................tU..................).............l.lL........{......C.........rR.lKr...........\|_>...{.............j..................4............w..t...............O.........................g................`.......8Jy....IDATx....K.@...........{...IK.E.t.}..M.h..X..7..l......h...r.>o.&..<O..I.$I.$I.$I.$.....:&..<..\|...k.".w.jd....".X...L3.TC..l....`....=.....\|$zfc.3.w9_5,...V.\...%_&L...I"...J2.yf>.\|3KWgO...p.<?.O.Y.s......ri.....#(.........=(eb.3.}...\|....G..v.=.F......... ...3.Zn]wzA.)p&Z.3L.h..(Q....1.x6tF..I.L.0..q..;..6.-z...X...'jm....0I....j.Q...[.qo>..{.;+[y...So.S..;.8.D...D+...T.^o..-h.m.LM.h..2t;.....<..x...u.T...S..nf.>.........*...L...d.e...QDj..............'....S.. 4@....D...3..gR.-...g.&PP..e.....&.1.<....\.vh.%..G....q.,4..Z..LYf.....,W .. df..x...l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\devices.837eed3af485[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 483x491, frames 3
Category:	downloaded
Size (bytes):	23894
Entropy (8bit):	7.928578642153703
Encrypted:	false
SSDEEP:	384:Vi/cuN6ypxeAo0eZh2AZV4nJwUQP7ss9+oxlJ05ljTzJTGQRmR1Nr:VUFIAo0eZQFk2oJ05lXzl5C
MD5:	837EED3AF485135269994F9EE61222BA
SHA1:	E2580B21EA8067C279530C11A75E3F5E803A31B5
SHA-256:	C3B7B4A31BDB5DC8ABBC45F96918A15A6FF4206F868EB685BA37005DADDE5FAB
SHA-512:	A99E0D8F3B39F5EC5363337171726C1E4EE445B72C831D9B6F2E8B16B178FBB1EE4850438F1F116D11FCEF5B59FD6785421E549289856CAB2168331036EB1C45
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/devices.837eed3af485.jpg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222.................................................................................................................GV.......+.)...................L.....9....................O:.......'......................`....................................\|....................`....................................\|...g.................q.=....XZ>.u.......O.................@..Lb...h.y.......A>\|z......2...@\"T............E.2...34.}<....... .>=a..x..e..q..el.L.\|.@........6yy}]f.@.5&..}<....... .>=Q.....P.P...P....~.p.....`............b...$H.2...%.$H.".I.$H."D..$T..V..J8C;.}<....... .>=..)..$H."D..$T.(.R...H."D..&kL.fIU.T.PT.p.wh.y.......A>\|z+:S.$H."D..H."QREI..A"D....>m3.&e.......T......O:.......'.EgKt.I.$H."D....$T.R......"\|.O/'..t..jT.T.p~wh.y.......A>\|z;:[.$H.RD..$H.H.".J.P."...p.._.e.o..e.T..N....O:.......'.GgLt.I.$T

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\firefox_desktop_download.ed849a028caf[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	47605
Entropy (8bit):	5.114565632423939
Encrypted:	false
SSDEEP:	768:GuFY/FWqv9GrF3lSXNBBiNps2Es68ws604xsKgZX0UDIKw4eruQLt/8mKKBx:R24YuQLt/fBx
MD5:	ED849A028CAFC711FB781BAC630B8EF2
SHA1:	518FFAB6734F6EFEBEC9B79BBB962F4D6CD85268
SHA-256:	4C0A14905BC8148F8E1964406070F9EA8522DB38C09E365D5A473B600D16F6BC
SHA-512:	4EB623D6605EB04B00B10819EB08BCA23465E418B3A6F5275EA374F7AFB51E9CEB64302883E20744DD56D1240C625C761815F53BEDC9C2DB1A65F429E5CD73E0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/css/BUNDLES/firefox_desktop_download.ed849a028caf.css
Preview:	.mzp-c-emphasis-box{background:#fff;border-radius:8px;box-shadow:0 8px 12px 1px rgba(29,17,51,.04),0 3px 16px 2px rgba(9,32,77,.12),0 5px 10px -3px rgba(29,17,51,.12);margin:16px;padding:32px}.mzp-c-emphasis-box.mzp-t-dark{background:#42425a;color:#fff}html.mzp-is-noscroll{overflow:hidden;height:100%}html.mzp-is-noscroll body{height:100%;overflow:hidden}html.mzp-is-noscroll .mzp-c-modal{position:absolute}@media (min-width:768px){html.mzp-is-noscroll{height:auto}html.mzp-is-noscroll body{height:auto}html.mzp-is-noscroll .mzp-c-modal{position:fixed}}.mzp-c-modal{-webkit-animation:mzp-a-fade-in .3s ease-in 0s 1 normal both;animation:mzp-a-fade-in .3s ease-in 0s 1 normal both;background:#000;background:rgba(0,0,0,.85);bottom:0;height:101%;left:0;overflow:auto;position:fixed;right:0;top:0;width:100%;z-index:9999999}.mzp-c-modal-window{padding:24px}.mzp-c-modal-inner{zoom:1;background:rgba(0,0,0,.9);max-width:1200px;padding:32px;position:relative}.mzp-c-modal-inner:after{clear:both;content:'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\icon-privacy-promise.eee1662acb03[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3991
Entropy (8bit):	4.986519310279732
Encrypted:	false
SSDEEP:	48:n5HJH0GHQKHjFfz39oWyfANXRZiHJ2fw74S/6eKqd/OMHJsZ2iV++pVMSqd/OVHF:5DQKJZPEMWuaISROMH5ROVQk
MD5:	EEE1662ACB03543A9A24B25903FCF8E9
SHA1:	46F6E2300D4FEAD760620F55A25AEB1E7AC0382E
SHA-256:	0E3E64B31E3CF5018358042F8AAFEE2F4351970BFFBD6F03E48747BCB6AEFABE
SHA-512:	DA7C1D9C2642CDF4678F993BE3ACA9728714A3D31561C99FD0161A6C69068404161883BAFDF2DF3B24325876A23708D09DF9B669167EF52999CAE1D4AC3C99C5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/nav/icons/icon-privacy-promise.eee1662acb03.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">. <linearGradient id="a" x1="20.5504" x2="20.5504" y1="6.4937" y2="30" gradientTransform="matrix(1 0 0 -1 0 34)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#3a8ee6"></stop>. <stop offset=".2359" stop-color="#5c79f0"></stop>. <stop offset=".6293" stop-color="#9059ff"></stop>. <stop offset="1" stop-color="#c139e6"></stop>. </linearGradient>. <path fill="url(#a)" d="M28.8 6.5C27.3 4.9 25.3 4 23.1 4H23c-2.2 0-4.2.8-5.7 2.3l-6.4 6.4c-.5.5-.8 1.2-.8 1.9s.3 1.4.8 1.9l1.2 1.2c.5.5 1.2.8 1.9.8s1.4-.3 1.9-.8l-3.1-3.1 6.4-6.4c1-1 2.3-1.5 3.7-1.5h.1c1.4 0 2.8.6 3.7 1.6 2 2.1 1.9 5.4-.2 7.5L17.4 25c-.8.8-2.1.8-2.8 0l1.5 1.5.2.2c.9.9 2.3.9 3.2.2l9-9.1c3.2-3.1 3.3-8.2.3-11.3z"></path>. <linearGradient id="b" x1="28.5539" x2="14.5874" y1="12.29" y2="12.29" gradientTransform="matrix(1 0 0 -1 0 34)" gradientUnits="userSpaceOnUse">. <stop offset=".136" stop-color="#6a2bea" stop-opacity

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\icon-relay-beta.acc9d8b3aa68[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4739
Entropy (8bit):	4.36991273683595
Encrypted:	false
SSDEEP:	48:nR9gCCRHJNBBHAhkn89gCguEPmHJGWBOPwBYbXPg4l7ILRoBPzfihwwXHJ6eexv2:RCRfiK8bhBOPwBWX44StoZiywXf15nR
MD5:	ACC9D8B3AA687017984AD239CAD49859
SHA1:	11D6CC582158E295943EB6106EEC0B35D615A885
SHA-256:	44873670B010BBAC1D3045FB67272FF3C872A71B0960BD722BB7ED92D1C47D77
SHA-512:	C610FA5813376913284FEBDEA778EEF1B280B210CFE30FAD0EF2B7DBEC432557593448D70C531190BCD8D764DDB8FA03610D95007DB3312084BF2AAA40E98508
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/nav/icons/icon-relay-beta.acc9d8b3aa68.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">. <path fill="#008787" d="M28.7 20.6h-13c-.1 0-.2 0-.3.1-.1 0-.2.1-.2.1-.1.1-.1.1-.1.2s-.1.2-.1.3v2.1c0 .7.1 1.5.4 2.1.3.7.7 1.3 1.2 1.8s1.1.9 1.8 1.2c.7.3 1.4.4 2.1.4h7.2c.5 0 1.1-.1 1.6-.3.5-.2 1-.5 1.4-.9.4-.4.7-.8.9-1.4s.3-1 .3-1.6v-1.8c0-1-1-2.3-3.2-2.3z"/>. <linearGradient id="a" x1="28.4022" x2="23.879" y1="5.3974" y2="9.6758" gradientTransform="matrix(1 0 0 -1 0 34)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#054096" stop-opacity=".5"></stop>. <stop offset=".1" stop-color="#173ba1" stop-opacity=".44"></stop>. <stop offset=".29" stop-color="#3434b3" stop-opacity=".33"></stop>. <stop offset=".49" stop-color="#482ec1" stop-opacity=".22"></stop>. <stop offset=".68" stop-color="#552bc8" stop-opacity=".11"></stop>. <stop offset=".86" stop-color="#592acb" stop-opacity="0"></stop>. </linearGradient>. <path fill="url(#a)" d="M28.7 20.6h-13c-.1 0-.2 0-.3.1-.1 0-.2.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\launch-EN7b3d710ac67a4a1195648458258f97dd.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	521971
Entropy (8bit):	5.243479439032824
Encrypted:	false
SSDEEP:	12288:+pDC5NfCzl6r1GPG4xy8SNf2O1ybwWkiPf2a16wWkiM:kDC5xCzl6r1GPG4xy8SL1IwwZ16wwM
MD5:	4EA6B777A582C23C0BCFFD566B72C3AD
SHA1:	BFEF92F3BFA91E02435413C16ED3766677673BCF
SHA-256:	9DA9F1ABA23DF317FF73F49FFE22C6D6E199C6BDF8D4C425F7F7E05C0F799085
SHA-512:	5AC2A14BF262CF4B6E8C19380B0F5C8AD4E8DCDF20CF521DD1B6DB2D58735AB8FFA1BF3D6DF26323D2103D64342B8A0C39E23E8872148BB7FE8EC4A4CFC6FBC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/launch-EN7b3d710ac67a4a1195648458258f97dd.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2020-11-21T03:55:00Z",environment:"production",turbineBuildDate:"2020-08-10T20:14:17Z",turbineVersion:"27.0.0"},dataElements:{JSLL_RedTiger:{defaultValue:"",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return 0<$("#primaryArea[data-m]").length}}},"Partner Offers \| benefits pages":{defaultValue:"",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return!(!location.hostname.match(/microsoft\.com/i)\|\|!location.pathname.match(/\/Partner-Offers\/?$/i)&&!location.pathname.match(/\/Partner-benefits\/?$/i))}}},MSCC_Consent:{defaultValue:"",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return!("undefined"!=typeof window.mscc&&"function"==typeof window.mscc.hasConsent&&!window.mscc.hasCon

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\linkid[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\lock.b92c7e55bd98[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	7.655517385258993
Encrypted:	false
SSDEEP:	24:q8V0uArhbB5RPNWBf8Tall0CSxaG9Cv8gxVEs87GSK:q8ohbB5RA8TaH0CuovVfYGb
MD5:	B92C7E55BD98670D7A415035F7F3F538
SHA1:	03E81C9855FE38702AD36865F8B1B4DC5B04A645
SHA-256:	92A536C2F69D02DF7F7EF18D312A91827C61A3220392A45437D53B2AC5708259
SHA-512:	CA3AAE24FD2CDF91C904F44B0D1D240C7F4DAC6871F7D45160FB3F721A7095FFECD7F4DE0E00D344813C53A4F8F66A0894801C19CCDF01FE330543B0729DBBEA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/lock.b92c7e55bd98.png
Preview:	.PNG........IHDR...@...@.............PLTE....q.vA.u@...u>.m....I.K.p..x..Y........X.s.......zG........O....k.^.T.........}J....y............u.f.xD.......................b..........\|......................x.i..................................\|..m............/.......IDATX...S.P.....X.P..L.eZij.......e.p.@C....o.Q.....9...y..v..4jy.r7...u.k...1a8?-...'....~..-.J........t.4.V!.....I......"...6{.0..C&A.....f.2y..i..s.Tp[.6....X.R._g=eUuY.4...<;=.....%.N...7>.....0~...b.\|.n%0...lte`._p.w_.'L.?.Y..c.w.4q....b..#...#?\P...{.9.........>.\.=.EG.-.b9."..........?.d....)....c<S.he.@...K.w4EQL.chJ...._...f0....D..sX...LX@...`...@...wX #(......R).Z] 7s.F..@..T.h..YXE..3JM..iI.J.(.?......&.29...k.@..)jU.}Su.k..!...).=.0.....D..\..x..p..T..{.1..{_.t.`.......]tqd.@.y...&..(.*.+......_P.T......../u....1....\d..c+.[^..F.....]#..y%8.#.......Ko.>...@.._....#....$..z...H....Uo....{....+.)....\.."..LP....o....+..vX.'@.ED..D.6Y...c..;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\logo-sm.d3157a6ac671[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2949
Entropy (8bit):	7.901955484552058
Encrypted:	false
SSDEEP:	48:Ekq0oI65bnP3/1MOxag8aVp1A5rI9WQXsUE4DeqxmNGxnPyhoXif/0CRxy7yRlWl:UI65bLwg8CAJIPXPE4aqxmOfXm/7emWl
MD5:	D3157A6AC671F6DBE4926EB27308B70B
SHA1:	8E08E23BDB4438BD166A9F2CE089C234F8112FCF
SHA-256:	6DCDF08A7F5FF08A37E3BED32F1B884524AB10081CBA1E3E733EBDFFA71239BE
SHA-512:	3FE0967F5EA3D1888A25D4A26166A2B514B9BA9CE6FC54CF594F31CF7FA02EF938A9D0C2CBC922E523D87632735E4E332D2C80345B5AA4354942C798AC82CDF9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/browser/developer/logo-sm.d3157a6ac671.png
Preview:	.PNG........IHDR...@...@.............PLTE.....(.3g.1_v.....Z..d.....v..s....(.t..\..[.T..%...}....i..<..........[...a.Q..t..n...K..=..^..W..j..\..]..u.R.......g....D..&...n.b......[.......a..,.......7..{...W.<...H.:........}..M....."..m..8....w.....r......Z.Z...y..i.T.....{..!...W.P...\|....2..u...p....D............y.....}....................v.#$t]...R..&........W.....Y..T..V.?..@..@......\.......58.+%..#pU..K..@..@..b..?...t.6.?..4(.$%y?..?...............q..W.(..v..?...Z.%'~5..@..H..?.....+..'J.._../.k.."............e..W.'C.83.7/.D..>..W..7..1..3......z..X..P..>..+\|.)va........2.....#...[..k..M.!K.#+.j..\..1..(..+..N...........$R..^..G.'7..2.."l/..............!..+.....,..!...j..`..N.+;..7.H..E..3.....G..E.#A.t..Q..j..!H..m....c..d......\|.5w..y.Q..&[.:m.&4....C..4?.'c.7:._.....-..Rf.FP...R....ZtRNS.........)....W..+....?....`:,.....r]RK..............qUE@......ie=........vo........P.UP....IDATX..[hRq...L./.t%.K.j[.m."../t...H..T.....B...,k..[...5...s.+m....e..X....oc."

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\logo-word-hor-xs.c87882e8c93c[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 260 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4044
Entropy (8bit):	7.843815284411972
Encrypted:	false
SSDEEP:	96:DUEG793lPqwfoHa/HyqqQtMaydTPKWV45qtp+c2jOFjmeGMe:DbqnqwA6/ShQ7yFPKWV4A+cfKeu
MD5:	C87882E8C93C8E8ADD46662736A179CF
SHA1:	DA977CA2D10451B0D27848DE9357B46C5A29DD64
SHA-256:	D35436542A3513095A794C175C1DB8062E5263E7061E4298614444808089D834
SHA-512:	8F1C0EC7BE73446EE30A3CC23DB0AA4E2A35E9AB6146551A06D7734C899AEEFD304EE93083EB697DC481A67B69854018A3F46B78810B2CF890A2C72FB4A6C94A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo-word-hor-xs.c87882e8c93c.png
Preview:	.PNG........IHDR.......0......J.7....PLTE... .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .: .:.aq..p .:..=..0..F..H..z..<..n..o..A..s..I..9..=..1..o..H..H..j.<..q.....D..H.l?.....p..q....l7..q..9.4V..K.L:..D.6d..K..I..J.GA.0O.:...N.tX.q%.V4..S..$..J..6..E.....D.q%.Q..:.8..T^..o.:...Q.b[..B..E.:./. .:.7F.W4.J;.F=.N9Y:..R6.2M.C?..E..A.@A..l.....c..I..F..D.;D..:..h.^0....<..d-.=B.4J..>..:.j)....A...L..G.w6..5.s#ZF...H.."....V..:.eT...Z.#X..5..+..'.}....u[.7.k1...P..F..E..=..;.k6....Z.G.\P...^..M..G..9k[.hD...I.a7..4....Q..C.D.C.5.uD.`9...f..Y..P..L..I..:..6../uP.S.}'...8.M..F.D.4.\|2.i<..\|..Io.Z.VZ.+Q.gP.TO..<.+..\..:..y.`x.m.8^.Q.M..0..+.o.uV.EU.SB.b.x.5..v..Ib..O.k.g..e\|.Zp.ok.Y93".....wtRNS............G.O..c...u+...@.2..n.#.\|^.iW.'..7.../...4$..5.l#.....F...K.......A.......~J.......}kgdZ.......sb`E8.Dd.....IDATh..Ih.Q...d...I3..&1ImliM....H...........@IJ...ZI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\logo.eb1324e44442[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10572
Entropy (8bit):	4.846546938265641
Encrypted:	false
SSDEEP:	192:y2FQvZHHevKPTWFw9aemD3dbsoM/6X6P+XCDhaemlFTdQoaemDY:yEQvZHHeyPK7emrdeI8cemlhCemk
MD5:	EB1324E44442D41CC447BF257456D257
SHA1:	293439DEC5A12C2E15302018F9D930251D8CE2A4
SHA-256:	F3DD297EE9EF486E0563BEEA279318CEDC69980CB808747197CD42A311A2BA50
SHA-512:	861947BD4AB5ABC9E7BD8A52D86D47C3F9AC9F3B610FF1C9CA38CA3E73766717D2E3814208BAE3CEDD0B87DA6861B13AB6E8B09B98408AA8CCD7D631C5126274
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/firefox/browser/logo.eb1324e44442.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="0 0 512 512"><defs><linearGradient id="a" x1="446.9" y1="76.85" x2="47.94" y2="461.77" gradientUnits="userSpaceOnUse"><stop offset=".05" stop-color="#fff44f"/><stop offset=".11" stop-color="#ffe847"/><stop offset=".22" stop-color="#ffc830"/><stop offset=".37" stop-color="#ff980e"/><stop offset=".4" stop-color="#ff8b16"/><stop offset=".46" stop-color="#ff672a"/><stop offset=".53" stop-color="#ff3647"/><stop offset=".7" stop-color="#e31587"/></linearGradient><radialGradient id="b" cx="428.46" cy="55.06" r="501.01" gradientUnits="userSpaceOnUse"><stop offset=".13" stop-color="#ffbd4f"/><stop offset=".19" stop-color="#ffac31"/><stop offset=".25" stop-color="#ff9d17"/><stop offset=".28" stop-color="#ff980e"/><stop offset=".4" stop-color="#ff563b"/><stop offset=".47" stop-color="#ff3750"/><stop offset=".71" stop-color="#f5156c"/><stop offset=".78" stop-color="#eb0878"/><stop offset=".86" stop-color="#e50080"/></radialG

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\mwf-main.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	825986
Entropy (8bit):	5.103471477696141
Encrypted:	false
SSDEEP:	6144:EDZAN0Z9dyG1lBNZF6Z95+KpZ93+KmzvpRdU6mM+SMGquOa2+KT3zt/zXtRNtRQn:EDZiZiUQckFt0G
MD5:	7CB9E82BF400BD878BE8998CA33CDF1E
SHA1:	3C484A3F73653E38A09BCA76EF0DC5727278CC05
SHA-256:	CD71494AAF026E74B27F258A3518F0D43BB199F1C2DF6E9B5B9B8BD208DE6FFD
SHA-512:	4BC8E5C8F3E8AEC0686FE521A1B2187F334B2649AAAB211659F9AE85E9021C6FA4FEDC611875E1B75B2BC86D26A47E4C595379AA5C833E1257F599CB8F09DCFD
Malicious:	false
Reputation:	low
IE Cache URL:	https://mwf-service.akamaized.net/mwf/css/bundle/1.57.0/west-european/default/mwf-main.min.css
Preview:	@charset "UTF-8";./! 1.57.0 \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.html{font-family:sa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\passwords.a3e9f3026396[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	482
Entropy (8bit):	7.44908942431133
Encrypted:	false
SSDEEP:	12:6v/7sSHlcNONl01aoFFtwdOp6IAKZLUq7AM2E/TGhYOPalz:hSHloFWdGfAK13ZTmYp9
MD5:	A3E9F3026396A0D324A2CD1C19766FEC
SHA1:	7FBC4C5A7F6BA7EB4C5198708CB1DD969DE1175C
SHA-256:	6C747BDE265A403B583D6019BD43C6245A01547479B812F5883F1F6ABD3E1321
SHA-512:	DA65127AA1C77C4DDB773B5E44161FB1098D12ABEFECECA97F8C78AF766E231934F9BBAFA09215BD727BB1D822C5CBA88F64C3FD5F642D13E477338EEADD307A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/passwords.a3e9f3026396.png
Preview:	.PNG........IHDR... ... .....D.......PLTE...uB.q>.tA.d2.......k>....`.s@.p=...a0....[.yG.l:.j=.\,....o.h.W.}L.uL.^-...............w.s...Q.i6._.................T.....................~...l....x.\|V.f9.b4.(; G....IDAT8..Y..0.E_..&..AFifp..ng..,I..K.\....=.z..qf/..&r~...kpK]...+..^+..U.k.......z!jb...`..."N0.d.e..."#.N....v...6..OMF.0\..u.+U....~..yI.F&......\2...L....<1...g.$.E:....p....1T}t....V..f\ZK.e.... ..c...Vvy.O....,.[\|.G.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\pocket.f21f7a5dedba[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	426
Entropy (8bit):	4.650869241250668
Encrypted:	false
SSDEEP:	12:trwdnlKIT6ZO54tvx5WQPV/rZtHSoEep/ceL/rkKWAion:tYY6OO4leQ13HSoDRcqdXiC
MD5:	F21F7A5DEDBA662641EA771D23702F5C
SHA1:	35499458E44B95E610C8960BE24FFAAE05C9D0F0
SHA-256:	D1B8F4345A5F07AA6BCBE615C9A2D2BF6AE09E851C0B7A7BC32421DD6A7F3E8D
SHA-512:	4E586EFCA3E4888902B9109CC8305471022D771BF3CAFA38AE8F6CC153C981B7C102115550BA9FCF6E606D94880A0F0278273221C5887B2B0D3F1F2B072B0C1D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/logos/pocket/pocket.f21f7a5dedba.svg
Preview:	<svg width="24" height="22" xmlns="http://www.w3.org/2000/svg"><path d="M12 21.5c-6.627 0-12-5.373-12-12v-6a3 3 0 0 1 3-3h18a3 3 0 0 1 3 3v6c0 6.627-5.373 12-12 12zm5.977-15.048a1.485 1.485 0 0 0-1.087.479l-4.923 4.924-4.835-4.851A1.476 1.476 0 0 0 6 6.452a1.5 1.5 0 0 0-1.071 2.55l-.024.016 4.94 4.96 1.06 1.06a1.5 1.5 0 0 0 2.121 0l1.06-1.06 4.964-4.96a1.5 1.5 0 0 0-1.073-2.566z" fill="#FF4056" fill-rule="nonzero"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\release-noodles.cce62ec9560f[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	643
Entropy (8bit):	4.960228313800256
Encrypted:	false
SSDEEP:	12:tr86YcAFb34VxMQjo8d23vBWglflrphHJ0VJtsN9MN5NLxXRfWq47N:t46YcE3cxMQxd4Xfj/WHff07N
MD5:	CCE62EC9560FA760522F5BA285EE8D24
SHA1:	CF49E679CF5ED63F7D99B1A3A98EBBD48E94E363
SHA-256:	A12C4A7F6606ED56093EE12A7DBD043F26FAC02BB54A968A6F707707505016CD
SHA-512:	E88D5E95E8D2C1B6E84F7A2232C5AC21371834A920C16BD64FAD615354B30DE907399C0D3E77B4A4AE31AD37A49E1659047B68447DB2489FFE906B75768E5FCC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/release-noodles.cce62ec9560f.svg
Preview:	<svg width="287" height="212" viewBox="0 0 287 212" xmlns="http://www.w3.org/2000/svg"><g transform="translate(1 -2.036)" fill="none" fill-rule="evenodd"><rect stroke="#7542E5" transform="rotate(49 201.5 50)" x="162" y="33" width="79" height="34" rx="17"/><circle stroke="#FF9640" cx="81.5" cy="131.5" r="81.5"/><path d="M273.936 3.676a3.873 3.873 0 0 1-.279 5.393l-.087.086a3.674 3.674 0 0 0-.221 5.158c1.353 1.497 3.649 1.639 5.16.318l.098-.082a3.895 3.895 0 0 1 5.444.334 3.88 3.88 0 0 1-.286 5.483c-4.706 4.228-11.954 3.84-16.185-.86-4.253-4.706-3.884-11.944.821-16.172a3.89 3.89 0 0 1 5.452.245l.042.048.04.05z" fill="#F80089"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\search.9a8494844596[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	7.538512816365613
Encrypted:	false
SSDEEP:	12:6v/7svRlvhrFH8QFXxXXnSXo1+wy2H5kvyhoJjD8qE2Aps1vIBpNi1:hvlFHzFXxHnmo1+yYv8e2nLNi1
MD5:	9A84948445966D3E5C4917B584CF25B9
SHA1:	80D3ADDC36D8DB564586402A88C7DB68460DECF5
SHA-256:	42CAFAF6769AA120534A19B2F63750674469FC9CF4B00A30D563079264F5F583
SHA-512:	63F8DDBA9CFF5591204ACAF8EE5FFC805BE60CDC62458994553C272B70692AE6E41DD47D794B807DA892642FEBABC1EE232A29B0EF2FA15C5B8622E7C572A228
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/img/firefox/new/desktop/ie8/search.9a8494844596.png
Preview:	.PNG........IHDR... ... .....D.......PLTE...uB.t@.yH.....Q.......{J......l..O.........\.......................V.................\|K..........\|.t.i.d.......w._!.....>IDAT8...r.0..-..........m......P......Z.+K.3......W..U'...~.e=.oR]..K..!.C.1....P...:...YU.w...Y.b..mU@6.....~<h4q....98.^G.A1.........`%9.9.Me.t.C....B.......HsT..".X.0.l.....)....jO..i.P.]-.n.....7x.).Z2{.D..8A..... ..v...$...g7m..m..M.D.X..)."......Cx..1t.U.d.Z&.r..=..a...*.......#D.~&.a...$.k{.(...0......x....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\sentry.d4a49ae2b9e1[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	57718
Entropy (8bit):	5.222970930870903
Encrypted:	false
SSDEEP:	768:b1OODWUvfUNFV7td6BdAj8vNiCOoghSUSgWU/DDf8jbs+KvLXuzpjOBf6vMm5gyD:b1OOq1NFV7td6PInCOnhDD/4pah6jSC
MD5:	D4A49AE2B9E152D261A658571A169220
SHA1:	2D101D7C2EAF632EC1F37A68747CF2EBFAB3DBD5
SHA-256:	62071B7D1DACFB476E19B506E4FBAF0A6DDE9E2D3AAA2A10A2F38EB2C9D262CF
SHA-512:	B2EE2DA176C534FABD9E2919AB6EBD8B1C6DFC397E262658F2271D3C38A75AEAD877760DD7F1EBD1C07F39E52D61A746E3CD30448842E9F24E02C6F24302AB70
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/js/BUNDLES/sentry.d4a49ae2b9e1.js
Preview:	var Sentry=function(c){var r=function(t,e){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}r(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e,n,o,i,a,s,l=function(){return(l=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function d(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var r,o,i=n.call(t),a=[];try{for(;(void 0===e\|\|0<e--)&&!(r=i.next()).done;)a.push(r.value)}catch(t){o={error:t}}finally{try{r&&!r.done&&(n=i["return"])&&n.call(i)}finally{if(o)throw o.error}}return a}function u(){for(var t=[],e=0;e<arguments.length;e++)t=t.concat(d(arguments[e]));return t}(s=e=e\|\|{})[s.None=0]="None",s[s.Error=1]="Error",s[s.Debug=2]="Debug",s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\set_hsts[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.firefox.com/set_hsts.gif
Preview:	GIF89a.............!.......,...........2.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\style-pl-ltr[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1785
Entropy (8bit):	5.042490920228446
Encrypted:	false
SSDEEP:	24:tSeyZl0Ddf3OTbvfwsJrzK3EZP3+qe1r+owwPKb1iXR7KWMpnpfM1HKsQuVaQkuS:tSVoIjfws5z5PK1KpCSpK1qagF
MD5:	B71DB466A4BA29969033D2B804793066
SHA1:	718A81F126D57D67A50302BE6689D0F98895798D
SHA-256:	F59DB7AB521A8B014E45EC3ABD12AEA5AFF5168B4A6AC20D497468AF9564584B
SHA-512:	17225AD96D2585DFF3F4F981092F00F597BD8928F8310742B58F4B227F6EE682FCA920E7ADE88D5E70337492EA3FD188F1D408DEB77EB86E9748E873BD4D80D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://img1.wsimg.com/wrhs/browser-deprecation-warning/style-pl-ltr.css
Preview:	*,:after,:before{box-sizing:border-box}body,p{margin:0}body{background:#fff;color:#555;font-family:Helvetica,Arial,sans-serif}a:hover,a:link,a:visited{color:#1757a5;text-decoration:none}a:hover{text-decoration:underline}a:active{color:#1d6ccd}p{font-size:16px;line-height:24px}#content,#footer{min-width:840px}#card,#header-container{width:90%;margin-left:auto;margin-right:auto}#header{background-color:#dde9f8;z-index:-1;padding-bottom:100px}#header-container{padding-top:24px}#banner{margin-bottom:48px}#banner>img{margin-top:7px;height:32px}h1,h2{color:#000}h1{font-family:serif;font-size:46px;line-height:56px;max-width:550px;margin:0 0 24px;letter-spacing:.01em}h2{margin:0 0 32px;font-weight:400}#card{margin-top:-64px;padding:32px;background-color:#fff;border:1px solid #d6d6d6;border-radius:4px}#card::after,#card::before{content:'';clear:both;display:table}#left,#right{float:left}#left{width:60%;max-width:570px}#right{width:40%;padding-left:32px;border-left:1px solid #d6d6d6}.pl #left{bo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\zap-14.59889e9bbc67[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	5.1588153870944495
Encrypted:	false
SSDEEP:	12:tR1MnroDDuRHxlxbmZCG+AHJGdnuPGNatHtIZxUWRl4IrpFxYm8liAjhlllSVtM:tR1MrofuRHxlduCG/pGdn8GstACWRQm+
MD5:	59889E9BBC672B882DC1DF2CFA738EA2
SHA1:	F13629CF661F5151DDAD305C3DD44ADE6A120A8D
SHA-256:	4705CC89550E227D0056A5B80CA8A59BB7086B49F149450B1BAC4D8A09DA0AEB
SHA-512:	007608EA322B9EE79C45BE702CCC1BEB5C8E41468F7AA1028EA1A8C200CD6C40A617C4A13CE2CF739C1093D20E4B0DB6C439C611230DE10BB09F837B00B9AD6A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/zaps/zap-14.59889e9bbc67.svg
Preview:	<svg data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 16" width="400" height="16"><defs><linearGradient id="a" y1="13.69" x2="435.45" y2="13.69" gradientUnits="userSpaceOnUse" gradientTransform="matrix(.91716 0 0 .7708 .27 .687)"><stop offset="0" stop-color="#616eb3"/><stop offset=".5" stop-color="#ec1067"/><stop offset="1" stop-color="#f6901e"/></linearGradient></defs><path vector-effect="non-scaling-stroke" d="M2.12 2.25c166.94 9.56 228 16.48 280.46 4.85 20.82-4.61 1.62 8.18 17 5.34 12.9-2.37 19.14-3.59 32.53-6.5 14.93-3.25-2.65 2.81-6.21 7.49-2.28 3 25-6.74 31.87-8.6 13.06-3.56-7.43 7.75 1.17 5.57 9-2.29 19.52-5.31 37.21-8.4" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" stroke="url(#a)"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\zap-16.fe39cc0d310d[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	5.196737216475909
Encrypted:	false
SSDEEP:	12:tR1MnroDDuRHxlxbmZCG+AHJGdnuPGNatFvlFubP6Ul5IxN5jhlllSVtM:tR1MrofuRHxlduCG/pGdn8GstFqR5ijj
MD5:	FE39CC0D310D8533B975235B7E914B22
SHA1:	2AB322DBAED1E8DFE07E19E805DC976E06D118C2
SHA-256:	C6081A16CB8F93FDDE4645C113A27CBEC39A5F89E52356A8B260425678783734
SHA-512:	0ED456A72D7C1754E7EA7CD5BE2280DB23957A3107A362E2B905CCF4091A13000A791A137A390CDD9E195B5772A488898B8FD9037B0680D6D36684BE129937C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.mozilla.org/media/protocol/img/zaps/zap-16.fe39cc0d310d.svg
Preview:	<svg data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 16" width="400" height="16"><defs><linearGradient id="a" y1="13.69" x2="435.45" y2="13.69" gradientUnits="userSpaceOnUse" gradientTransform="matrix(.91716 0 0 .7708 .27 .687)"><stop offset="0" stop-color="#616eb3"/><stop offset=".5" stop-color="#ec1067"/><stop offset="1" stop-color="#f6901e"/></linearGradient></defs><path vector-effect="non-scaling-stroke" d="M4.45 12.56c123.37-8.65 202.6-9 229.52-8.94 31.59 0 127.62 3.43 159.36 2.37 2.44-.08 2.63-3.12.19-3.28C366.32 1 276.1 1.71 238.45 14" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" stroke="url(#a)"/></svg>.

C:\Users\user\AppData\Local\Temp\~DF255C6DA31BAAD1E7.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	67443
Entropy (8bit):	1.0415047171058887
Encrypted:	false
SSDEEP:	384:kBqoxKAuqR+eYSbIk7G75/jRHfGx9t9iUQ9t9iTWTj1WMHC/a9iR0Oxit0O:XR/Y9tY9t4Aj1WMilA
MD5:	239F0535CBCC3A5CC2CED8807531C39C
SHA1:	1076F97CFC1DD35C13BEE01BE0C1AE20B0D44EFA
SHA-256:	041558B377AEE7F15E22EADF905EE785C47F43BC336F3EA499F6E0BAF44D2AAC
SHA-512:	D312CE8078444DA7779422AB8EB954C20337436B0450D4D8A905AEC619CD9407F4386B7E2505B63B9E157A426E90DFD4D23F49C361BCB7E738F749B8AF467677
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF3195614C07DBC29C.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.47897596175969753
Encrypted:	false
SSDEEP:	12:c9lCg5/9lCgeK9l26an9l26an9l8fRZ19l8fRZV9lTqZqQ7L7H:c9lLh9lLh9lIn9lIn9loH9loH9lWH
MD5:	65945055B8746BEF173E9BA0A1A5A7CE
SHA1:	4729F05B579F64D1D86CB24586332DC69216E1AF
SHA-256:	495D416205E946533C67EB479D0698634D59DBD1236D3AF3FC3E6A352BF67E48
SHA-512:	63188A0003A7A510342B24C4901CDBD77D014DED74A96876A83C5E32A9D2563F21680878106D987301A78B59E1D14A55E5B5EBA1D4D56AEB221C10A1F3DC6AB6
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF6DED009FA4C6BF4D.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.29700321047424266
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laAZ:kBqoxxJhHWSVSEabZ
MD5:	3F39AB29AB97855901D9CEE25FDC4928
SHA1:	821A72266FB1C805937DA38D168CC0E0A0CA047A
SHA-256:	7E2FF46C76E050A4606337A86B65713C2BFD499A57E3FED8244F1CC20CFAE4C6
SHA-512:	B26A567A61B190FBA1888956BDCBE5619EE37DD286E57B45E4A702F61C3EA5148D5A948B7162EC2123A70597808577B2F7F1E8A64065D5417E8D0374FDFB2DAF
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 183
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2020 17:20:46.717425108 CET	49713	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:20:46.717875957 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:20:46.733495951 CET	80	49713	13.224.89.84	192.168.2.5
Nov 25, 2020 17:20:46.733618021 CET	49713	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:20:46.733808041 CET	80	49714	13.224.89.84	192.168.2.5
Nov 25, 2020 17:20:46.733889103 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:20:46.734466076 CET	49713	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:20:46.750396967 CET	80	49713	13.224.89.84	192.168.2.5
Nov 25, 2020 17:20:46.764903069 CET	80	49713	13.224.89.84	192.168.2.5
Nov 25, 2020 17:20:46.765022039 CET	49713	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:21:06.475162029 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.476366043 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.664946079 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.665107012 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.665937901 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.667447090 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.667522907 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.680160999 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.855242968 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.856905937 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.856967926 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.857011080 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.857083082 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.857141972 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.857151031 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.870862961 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.872652054 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.872706890 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.872751951 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:06.872760057 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.872831106 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.875803947 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.877954006 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.878834009 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.879053116 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.909837008 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:06.910429001 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.069008112 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.069106102 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.069235086 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.069489002 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.069538116 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.069578886 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.069998026 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.070024967 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.070065975 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.070092916 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.099545956 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.099657059 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.099704981 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.099817038 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.099875927 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.120784044 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.137980938 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:21:07.236939907 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.237728119 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.252902031 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.253026009 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.253762007 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.253839016 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.254432917 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.254772902 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.270476103 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.270615101 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.270873070 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.270912886 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.270953894 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.270970106 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.271017075 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.271023035 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.272452116 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.272492886 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.272531033 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.272548914 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.272581100 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.272587061 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.272769928 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.272838116 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.274872065 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.274934053 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.285161018 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.285537958 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.285723925 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.290373087 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.290393114 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.301245928 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.301347017 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.301450014 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.301481009 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.301537037 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.301584005 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.301637888 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.302582026 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.302658081 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.306389093 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.306427956 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.306828022 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.306947947 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.306968927 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.306993961 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.310095072 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.310636044 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:21:07.326050997 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.326653957 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:21:07.351851940 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:07.372617006 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:21:11.053071022 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.061647892 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.069329023 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.069519997 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.074697971 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.077838898 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.078022003 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.090955973 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.092653990 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.092696905 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.092730999 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.092833042 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.092855930 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.507224083 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.523438931 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.524390936 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.524415970 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.524429083 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.524513006 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.524544954 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.546165943 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.562577009 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.562601089 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.562669039 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.562705994 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.571954012 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.572679043 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.579163074 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.588423014 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.588464022 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.588560104 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.588610888 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.590934038 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.591003895 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.595249891 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.595304012 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.606271982 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.606304884 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.622375965 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623490095 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623541117 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623594999 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623599052 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623625994 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623642921 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623647928 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623687983 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623702049 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623729944 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623750925 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623766899 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623784065 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623802900 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623811007 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623836994 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623853922 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623872042 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623873949 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623913050 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.623923063 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623964071 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.623987913 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.624033928 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.624041080 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.624068022 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.624089003 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.624103069 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.624129057 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.624141932 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.624146938 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.624197006 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.624197006 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.624244928 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:11.624252081 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.624298096 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.636967897 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:21:11.696058035 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:21:16.749763966 CET	80	49714	13.224.89.84	192.168.2.5
Nov 25, 2020 17:21:16.749895096 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:11.650305033 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.650437117 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:11.656133890 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.656357050 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:11.666719913 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.672774076 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.820480108 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.820519924 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.820548058 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.820575953 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:11.820632935 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:11.820641041 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:11.868293047 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:11.868419886 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:12.092111111 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:12.092288971 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:12.564186096 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:12.564356089 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:13.464230061 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:13.464502096 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:13.654797077 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:13.654896021 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:15.256233931 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:15.256417990 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:15.670344114 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:15.670427084 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:17.686470032 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:17.686666012 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:18.964138985 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:18.964334011 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:19.706428051 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:19.706598997 CET	49764	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:21.718467951 CET	443	49764	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:26.132133007 CET	443	49765	152.199.21.175	192.168.2.5
Nov 25, 2020 17:22:26.132283926 CET	49765	443	192.168.2.5	152.199.21.175
Nov 25, 2020 17:22:36.537170887 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:22:36.537230968 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:22:36.537482977 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:22:36.537525892 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:22:36.541527033 CET	49713	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:36.541703939 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:36.553064108 CET	443	49739	13.224.96.162	192.168.2.5
Nov 25, 2020 17:22:36.553164959 CET	49739	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:22:36.553623915 CET	443	49740	13.224.96.162	192.168.2.5
Nov 25, 2020 17:22:36.553711891 CET	49740	443	192.168.2.5	13.224.96.162
Nov 25, 2020 17:22:36.557492018 CET	80	49713	13.224.89.84	192.168.2.5
Nov 25, 2020 17:22:36.557615042 CET	49713	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:36.727036953 CET	443	49735	44.236.72.93	192.168.2.5
Nov 25, 2020 17:22:36.727293968 CET	49735	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:22:36.728364944 CET	443	49736	44.236.72.93	192.168.2.5
Nov 25, 2020 17:22:36.728472948 CET	49736	443	192.168.2.5	44.236.72.93
Nov 25, 2020 17:22:36.841794014 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:37.451210976 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:38.654496908 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:41.060725927 CET	49714	80	192.168.2.5	13.224.89.84
Nov 25, 2020 17:22:45.873826981 CET	49714	80	192.168.2.5	13.224.89.84

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2020 17:20:40.671117067 CET	52441	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:40.698000908 CET	53	52441	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:41.878926992 CET	62176	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:41.906044960 CET	53	62176	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:43.413898945 CET	59596	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:43.441082001 CET	53	59596	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:44.552109003 CET	65296	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:44.579211950 CET	53	65296	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:45.625174999 CET	63183	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:45.663247108 CET	53	63183	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:46.670511961 CET	60151	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:46.707834959 CET	53	60151	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:46.780766010 CET	56969	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:46.834383965 CET	55161	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:46.837860107 CET	53	56969	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:46.869770050 CET	53	55161	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:47.195674896 CET	54757	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:47.204484940 CET	49992	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:47.232670069 CET	53	54757	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:47.241661072 CET	53	49992	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:47.290927887 CET	60075	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:47.362088919 CET	53	60075	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:47.832248926 CET	55016	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:47.861378908 CET	53	55016	8.8.8.8	192.168.2.5
Nov 25, 2020 17:20:49.741357088 CET	64345	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:20:49.777162075 CET	53	64345	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:03.322405100 CET	57128	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:03.361018896 CET	53	57128	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:05.281285048 CET	54791	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:05.308443069 CET	53	54791	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:05.577220917 CET	50463	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:05.604329109 CET	53	50463	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:06.445458889 CET	50394	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:06.472429991 CET	53	50394	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:06.602926970 CET	58530	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:06.646701097 CET	53	58530	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:07.191741943 CET	53813	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:07.235276937 CET	53	53813	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:07.324464083 CET	63732	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:07.362920046 CET	53	63732	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:08.064109087 CET	57344	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:08.107995033 CET	53	57344	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:08.708211899 CET	54450	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:08.745312929 CET	53	54450	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:09.721940041 CET	59261	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:09.725644112 CET	57151	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:09.738986015 CET	59413	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:09.758795023 CET	53	59261	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:09.761015892 CET	53	57151	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:09.775548935 CET	53	59413	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:09.901479959 CET	60516	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:09.936795950 CET	53	60516	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:09.959044933 CET	51649	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:09.995851040 CET	53	51649	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:10.021441936 CET	65086	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:10.065953970 CET	53	65086	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:10.085453987 CET	56432	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:10.120959997 CET	53	56432	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:11.015295029 CET	52929	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:11.050710917 CET	53	52929	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:16.622548103 CET	64317	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:16.649643898 CET	53	64317	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:16.735712051 CET	61004	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:16.762775898 CET	53	61004	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:17.075738907 CET	56895	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:17.111382008 CET	53	56895	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:17.621673107 CET	64317	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:17.657527924 CET	53	64317	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:17.748625040 CET	61004	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:17.775715113 CET	53	61004	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:17.777420044 CET	62372	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:17.820933104 CET	53	62372	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:18.756745100 CET	64317	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:18.783735991 CET	53	64317	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:18.801578999 CET	61004	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:18.828594923 CET	53	61004	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:21.155844927 CET	64317	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:21.169437885 CET	61004	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:21.183049917 CET	53	64317	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:21.205121040 CET	53	61004	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:21.412627935 CET	61515	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:21.439754963 CET	53	61515	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:22.787769079 CET	56675	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:22.814836025 CET	53	56675	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:25.164200068 CET	61004	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:25.164232016 CET	64317	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:26.933752060 CET	57172	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:26.985248089 CET	53	57172	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:29.186851978 CET	55267	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:29.224780083 CET	53	55267	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:29.895751953 CET	50969	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:29.932390928 CET	53	50969	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:43.249413967 CET	64362	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:43.288619995 CET	53	64362	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:49.746042967 CET	54766	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:49.781861067 CET	53	54766	8.8.8.8	192.168.2.5
Nov 25, 2020 17:21:53.393798113 CET	61446	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:21:53.437148094 CET	53	61446	8.8.8.8	192.168.2.5
Nov 25, 2020 17:22:10.265944958 CET	57515	53	192.168.2.5	8.8.8.8
Nov 25, 2020 17:22:10.293209076 CET	53	57515	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Nov 25, 2020 17:20:46.670511961 CET	192.168.2.5	8.8.8.8	0x690d	Standard query (0)	o.ss2.us	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:46.780766010 CET	192.168.2.5	8.8.8.8	0x1942	Standard query (0)	www.starfieldtech.com	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:47.195674896 CET	192.168.2.5	8.8.8.8	0x3440	Standard query (0)	img6.wsimg.com	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:47.204484940 CET	192.168.2.5	8.8.8.8	0x8b72	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:47.290927887 CET	192.168.2.5	8.8.8.8	0xed57	Standard query (0)	www.secureserver.net	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:03.322405100 CET	192.168.2.5	8.8.8.8	0x6a64	Standard query (0)	www.secureserver.net	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:06.445458889 CET	192.168.2.5	8.8.8.8	0xafc7	Standard query (0)	firefox.com	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:07.191741943 CET	192.168.2.5	8.8.8.8	0x4f6	Standard query (0)	www.firefox.com	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:09.725644112 CET	192.168.2.5	8.8.8.8	0x94f	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:17.075738907 CET	192.168.2.5	8.8.8.8	0xcf38	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:26.933752060 CET	192.168.2.5	8.8.8.8	0xde86	Standard query (0)	consentreceiverfd-prod.azurefd.net	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:53.393798113 CET	192.168.2.5	8.8.8.8	0xe210	Standard query (0)	g.msn.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Nov 25, 2020 17:20:46.707834959 CET	8.8.8.8	192.168.2.5	0x690d	No error (0)	o.ss2.us		13.224.89.84	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:46.707834959 CET	8.8.8.8	192.168.2.5	0x690d	No error (0)	o.ss2.us		13.224.89.219	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:46.707834959 CET	8.8.8.8	192.168.2.5	0x690d	No error (0)	o.ss2.us		13.224.89.53	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:46.707834959 CET	8.8.8.8	192.168.2.5	0x690d	No error (0)	o.ss2.us		13.224.89.212	A (IP address)	IN (0x0001)
Nov 25, 2020 17:20:46.837860107 CET	8.8.8.8	192.168.2.5	0x1942	No error (0)	www.starfieldtech.com	starfieldtech.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:20:47.232670069 CET	8.8.8.8	192.168.2.5	0x3440	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:20:47.241661072 CET	8.8.8.8	192.168.2.5	0x8b72	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:20:47.362088919 CET	8.8.8.8	192.168.2.5	0xed57	No error (0)	www.secureserver.net	wildcard-ipv6.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:03.361018896 CET	8.8.8.8	192.168.2.5	0x6a64	No error (0)	www.secureserver.net	wildcard-ipv6.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:06.472429991 CET	8.8.8.8	192.168.2.5	0xafc7	No error (0)	firefox.com		44.236.72.93	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:06.472429991 CET	8.8.8.8	192.168.2.5	0xafc7	No error (0)	firefox.com		44.236.48.31	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:06.472429991 CET	8.8.8.8	192.168.2.5	0xafc7	No error (0)	firefox.com		44.235.246.155	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:07.235276937 CET	8.8.8.8	192.168.2.5	0x4f6	No error (0)	www.firefox.com	fxc-prod.moz.works		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:07.235276937 CET	8.8.8.8	192.168.2.5	0x4f6	No error (0)	fxc-prod.moz.works	dzlgdtxcws9pb.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:07.235276937 CET	8.8.8.8	192.168.2.5	0x4f6	No error (0)	dzlgdtxcws9pb.cloudfront.net		13.224.96.162	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:09.761015892 CET	8.8.8.8	192.168.2.5	0x94f	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:09.936795950 CET	8.8.8.8	192.168.2.5	0x85a1	No error (0)	consentdeliveryfd.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:11.050710917 CET	8.8.8.8	192.168.2.5	0x9c0b	No error (0)	sni1gl.wpc.gammacdn.net		152.199.21.175	A (IP address)	IN (0x0001)
Nov 25, 2020 17:21:17.111382008 CET	8.8.8.8	192.168.2.5	0xcf38	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:17.111382008 CET	8.8.8.8	192.168.2.5	0xcf38	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:17.111382008 CET	8.8.8.8	192.168.2.5	0xcf38	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:17.111382008 CET	8.8.8.8	192.168.2.5	0xcf38	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:26.985248089 CET	8.8.8.8	192.168.2.5	0xde86	No error (0)	consentreceiverfd-prod.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Nov 25, 2020 17:21:53.437148094 CET	8.8.8.8	192.168.2.5	0xe210	No error (0)	g.msn.com	g-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)

HTTP Request Dependency Graph

o.ss2.us

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49713	13.224.89.84	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Nov 25, 2020 17:20:46.734466076 CET	52	OUT	GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: o.ss2.us Connection: Keep-Alive
Nov 25, 2020 17:20:46.764903069 CET	53	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Content-Length: 237 Connection: keep-alive Server: Sucuri/Cloudproxy Date: Wed, 25 Nov 2020 02:48:54 GMT X-Sucuri-ID: 15024 Location: http://www.starfieldtech.com/ Cache-Control: public, no-transform, must-revalidate X-Sucuri-Cache: HIT X-Cache: Hit from cloudfront Via: 1.1 c202f63846a430afd2d556266be8b50c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH50-C1 X-Amz-Cf-Id: uJ1DYL8tJyaYv8IujfW7UoFdxbcorUmx--rTXGVU8_vWblfP3xJyRw== Age: 48712 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 74 61 72 66 69 65 6c 64 74 65 63 68 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.starfieldtech.com/">here</a>.</p></body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Nov 25, 2020 17:21:06.856967926 CET	44.236.72.93	443	192.168.2.5	49735	CN=firefox.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Oct 13 02:09:02 CEST 2020 Thu Mar 17 17:40:46 CET 2016	Mon Jan 11 01:09:02 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Nov 25, 2020 17:21:06.856967926 CET	44.236.72.93	443	192.168.2.5	49735	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Nov 25, 2020 17:21:06.872706890 CET	44.236.72.93	443	192.168.2.5	49736	CN=firefox.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Oct 13 02:09:02 CEST 2020 Thu Mar 17 17:40:46 CET 2016	Mon Jan 11 01:09:02 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Nov 25, 2020 17:21:06.872706890 CET	44.236.72.93	443	192.168.2.5	49736	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Nov 25, 2020 17:21:07.272769928 CET	13.224.96.162	443	192.168.2.5	49740	CN=www.firefox.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Jun 24 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Sat Jul 24 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Nov 25, 2020 17:21:07.274872065 CET	13.224.96.162	443	192.168.2.5	49739	CN=www.firefox.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Jun 24 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Sat Jul 24 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Nov 25, 2020 17:21:11.092730999 CET	152.199.21.175	443	192.168.2.5	49764	CN=sni1e6ffgl.wpc.edgecastcdn.net, OU=SecOps, O="Verizon Digital Media Services, Inc.", L=Los Angeles, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Apr 16 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Thu Apr 21 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Nov 25, 2020 17:21:11.092730999 CET	152.199.21.175	443	192.168.2.5	49764	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Nov 25, 2020 17:21:11.524429083 CET	152.199.21.175	443	192.168.2.5	49765	CN=sni1e6ffgl.wpc.edgecastcdn.net, OU=SecOps, O="Verizon Digital Media Services, Inc.", L=Los Angeles, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Apr 16 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Thu Apr 21 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Nov 25, 2020 17:21:11.524429083 CET	152.199.21.175	443	192.168.2.5	49765	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

• iexplore.exe
• iexplore.exe

Click to jump to process

Memory Usage

• iexplore.exe
• iexplore.exe

Click to jump to process

Behavior

• iexplore.exe
• iexplore.exe

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 2880 Parent PID: 792

Function Logs

General

Start time:	17:20:45
Start date:	25/11/2020
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff67ca50000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

File Activities

Show Windows behavior

Section Activities

Process Activities

Process Information Set

Show Windows behavior

Thread Activities

Thread Information Set

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

System Activities

Language or Locale ID Queried

Show Windows behavior

Timing Activities

Show Windows behavior

Windows UI Activities

Window UI Enumerated

Show Windows behavior

Network Activities

Show Windows behavior

Object Security Activities

Show Windows behavior

LPC Port Activities

Chronological Activities

Analysis Process: iexplore.exe PID: 5952 Parent PID: 2880

Function Logs

General

Start time:	17:20:46
Start date:	25/11/2020
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2880 CREDAT:17410 /prefetch:2
Imagebase:	0xfb0000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

File Activities

Show Windows behavior

Section Activities

Sections loaded by Windows

Show Windows behavior

Registry Activities

Show Windows behavior

Mutex Activities

Show Windows behavior

Process Activities

Process Information Set

Show Windows behavior

Thread Activities

Thread Information Set

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

System Activities

Language or Locale ID Queried

Show Windows behavior

Timing Activities

Show Windows behavior

Windows UI Activities

Show Windows behavior

Network Activities

Show Windows behavior

Object Security Activities

Show Windows behavior

LPC Port Activities

Chronological Activities

Disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report http://o.ss2.us/

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 2880 Parent PID: 792

General

File Activities

File Opened

File Created

File Written

File Read

File Attributes Queried

Directory Queried

Volume Information Queried

Device IO

Section Activities

Sections loaded by Windows

Registry Activities

Key Opened

Key Value Created

Key Value Modified