top title background image
flash

http://rt1-t.tco.tiffany.com/r/?id=h25dc706,9156885,9156888&p1=pn4mm.blob.core.windows.net/xcvr4/AbV.html#YmlsbF93ZWVrc0BiYXlsb3IuZWR1

Status: finished
Submission Time: 2020-05-12 23:09:42 +02:00
Malicious
Phishing
Phisher

Comments

Tags

Details

  • Analysis ID:
    229656
  • API (Web) ID:
    355684
  • Analysis Started:
    2020-05-12 23:15:13 +02:00
  • Analysis Finished:
    2020-05-12 23:22:24 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 68
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
52.239.144.132
United States
40.101.82.66
United States
192.229.221.185
United States
Click to see the 1 hidden entries
192.161.140.65
United States

Domains

Name IP Detection
ajax.aspnetcdn.com
0.0.0.0
clientlog.portal.office.com
0.0.0.0
portal.office.com
0.0.0.0
Click to see the 17 hidden entries
rt1-t.tco.tiffany.com
0.0.0.0
portal.microsoftonline.com
0.0.0.0
secure.aadcdn.microsoftonline-p.com
0.0.0.0
client.hip.live.com
0.0.0.0
outlook.office365.com
0.0.0.0
pn4mm.blob.core.windows.net
0.0.0.0
acctcdn.msauth.net
0.0.0.0
blob.ty1prdstr08a.store.core.windows.net
52.239.144.132
account.live.com
0.0.0.0
assets.onestore.ms
0.0.0.0
prod.msocdn.com
0.0.0.0
r4.res.office365.com
0.0.0.0
signup.live.com
0.0.0.0
www.office.com
0.0.0.0
FRA-efz.ms-acdc.office.com
40.101.82.66
tiffany-rt1.m.adobe-campaign.com
192.161.140.65
cs1227.wpc.alphacdn.net
192.229.221.185

URLs

Name Detection
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://github.com/angular/angular.js/pull/10764
https://acctcdn.msauth.net
Click to see the 97 hidden entries
https://login.skype.com/login
https://account.live.c
https://signin.kissmetrics.com/privacy/#controls
https://r4.res.office365.com/owa/prem/16.3716.0.2742547/resources/images/0/sprite1.mouse.css
https://prod.msocdn.com/2020.5.7.3/en-US/css/home.css
https://r4.res.office365.com/owa/prem/16.3716.0.2742547/resources/styles/fonts/office365icons.woff
https://prod.msocdn.com/Shell/Images/O365SharedClusteredImage.png
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-SemiLight-final.eot
https://r4.res.office365.com/owa/prem/16.3716.0.2742547/scripts/boot.worldwide.1.mouse.js
https://prod.msocdn.com/2020.5.7.3/en-US/JSC/AdminBootstrap.js
https://www.optimizely.com/legal/opt-out/
https://www.microsoft.
https://prod.msocdn.com/2020.5.7.3/en-US/css/home15.css
https://mixer.com/about/tos
https://www.skype.com/go/legal
http://fontello.comiconsRegulariconsiconsVersion
http://www.opensource.org/licenses/mit-license.php)
https://acctcdn.msauth.net/accountcorepackage_Lldx9Hm3oCew11jRbZLFCw2.js?v=1
https://prod.msocdn.com/Images/list_bullet_5x5.gif
https://prod.msocdn.com/2020.5.7.3/en-US/JS/WebTrends.js
https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-Light-final.eot?iefix
https://prod.msocdn.com/domains/images/Domain_Purchase_16x16.png
https://prod.msocdn.com/2020.5.7.3/en-US/js/home.js
https://www.skype.com/go/store.reactivate.credit
https://prod.msocdn.com/images/scrollbar/arrow_staticup_16.png
https://www.here.com/)
https://prod.msocdn.com/2020.5.7.3/en-US/WebControls/JS/ListGrid.js
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/cdnbundles/oldconvergedlogin_pc
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/cdnbundles/convergedloginpagina
https://chieffancypants.github.io/angular-hotkeys
https://www.youradchoices.ca
https://prod.msocdn.com/Shell/Images/pagelayout_mos_background_right.jpg
https://acctcdn.msauth.net/images/Microsoft_Logotype_White_4MYDQRab31HKDWWN-1HafA2.svg
https://www.appsflyer.com/optout
https://prod.msocdn.com/2020.5.7.3/en-US/css/EmbeddedFonts.css
https://prod.msocdn.com/2020.5.7.3/en-US/JS/SearchBox.js
https://r4.res.office365.com/owa/prem/16.3712.0.2742281/resources/styles/fonts/office365icons.eot?#i
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-Regular-final.eot?iefix
http://api.jquery.com/offset/
https://prod.msocdn.com/shell/images/o365_gallatin_logo.png
https://prod.msocdn.com/images/servicestatus.png
http://www.twitter.com/
https://r4.res.office365.com/owa/prem/16.3716.0.2742547/scripts/boot.worldwide.0.mouse.js
https://prod.msocdn.com/2020.5.7.3/en-US/JSC/HeadBundle.js
http://www.amazon.com/
https://r4.res.office365.com/owa/prem/16.3712.0.2742281/scripts/boot.worldwide.1.mouse.js
https://prod.msocdn.com/Shell/Images/header_wizard_hl_mos.jpg
https://prod.msocdn.com/2020.5.7.3/en-US/WebControls/JS/GeminiWizard.js
https://prod.msocdn.com/2020.5.7.3/en-US/JSC/ControlBundle.js
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/images/ellipsis_grey_5bc252567e
http://getbootstrap.com)
https://acctcdn.msauth.net/converged_ux_v2_vFUCy4OeQJ7t4tBfd1vmzw2.css?v=1
https://www.skype.com
https://skype.com/go/myaccount
https://r4.res.office365.com/owa/prem/16.3712.0.2742281/scripts/boot.worldwide.3.mouse.js
https://github.com/asafdav/ng-csv/commit/ae479f7099573a05807f55f51fbd1d799c5ed00a
https://www.savdora.com/wp-admin/js/widgets/handler.php
https://prod.msocdn.com/2020.5.7.3/en-US/WebControls/JS/GridView.js
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-Light-final.eot
https://prod.msocdn.com/2020.5.7.3/en-US/JSC/MicrosoftAjaxCombined.js
https://aka.ms/taxservice
https://r4.res.office365.com/owa/prem/16.3716.0.2742547/scripts/boot.worldwide.3.mouse.js
https://www.xbox.com/en-US/Legal/CodeOfConduct
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-Regular-final.ttf
https://prod.msocdn.com/images/scrollbar/arrow_staticdown_16.png
http://www.asp.net/ajaxlibrary/CDN.ashx.
http://purl.eligrey.com/github/Blob.js/blob/master/Blob.js
https://acctcdn.msauth.net/lwsignupstringscountrybirthdate_en-us_pVtahKS9WUIZdNqg1DDhHg2.js?v=1
https://www.youradchoices.ca/fr
https://prod.msocdn.com/2020.5.7.3/en-US/JS/NetPerf.js
http://ncuillery.github.io/angular-breadcrumb
http://purl.eligrey.com/github/FileSaver.js/blob/master/FileSaver.js
https://blobs.officehome.msocdn.com/bundles/app-bundle-0afd25a0f8ef25277c60.css
https://prod.msocdn.com/2020.5.7.3/en-US/css/O365ThemeDefault.css
https://github.com/douglascrockford/JSON-js
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.8576.13/content/cdnbundles/converged.v2.login.m
https://prod.msocdn.com/2020.5.7.3/en-US/JS/jQuery/jquery-1_10_2_min.js
https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protectio
https://acctcdn.msauth.net/bootstrap_3.3.0_B68S-_daR6nLiLVZsh4XiA2.js?v=1
https://acctcdn.msauth.net/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1
https://r4.res.office365.com/owa/prem/16.3712.0.2742281/resources/styles/0/boot.worldwide.mouse.css
https://blobs.officehome.msocdn.com/bundles/app-bundle-472b562abf52a5846f25.js
https://prod.msocdn.com/2020.5.7.3/en-US/css/adoption.css
http://rt1-t.tco.tiffany.com/r/?id=h25dc706,9156885,9156888&p1=pn4mm.blob.core.windows.net/xcvr4/AbV.html
https://pn4mm.blob.core.windows.net/xcvr4/AbV.html#YmlsbF93ZWVrc0BiYXlsb3IuZWR1Root
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-SemiBold-final.ttf
https://acctcdn.msauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
https://blobs.officehome.msocdn.com/bundles/polyfills-bundle-3cb2020c0a5763afe110.js
https://prod.msocdn.com/Shell/Images/pagelayout_nav_highlight.jpg
http://github.com/jquery/globalize
https://prod.msocdn.com/Images/transparent.gif
https://prod.msocdn.com/2020.5.7.3/en-US/JSC/AngularExtensions.js
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-Regular-final.woff
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-SemiLight-final.woff
http://www.reddit.com/
https://prod.msocdn.com/en-US/css/webfonts/SegoeUI-SemiLight-final.eot?iefix

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\AbV[1].htm
HTML document, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\asv[1].html
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\image1[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1513x1369, frames 3
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\convergedbg_v2_pdvUOT_2pyXH5ith335y8A2[1].jpg
JPEG image data, baseline, precision 8, 1920x1080, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\convergedbg_small_v2_Z9GCPpM7FVE8hxRSZUez6g2[1].jpg
JPEG image data, baseline, precision 8, 50x28, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\boot.worldwide.2.mouse[1].js
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\boot.worldwide.0.mouse[1].js
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\arrow_staticup_16[1].png
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\arrow_staticdown_16[1].png
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\arrow_px_up[1].gif
GIF image data, version 89a, 7 x 9
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\admin[1].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\accountcorepackage_Lldx9Hm3oCew11jRbZLFCw2[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\WebResource[1].js
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\RE1Mu3b[1].png
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\ProductKeyControl[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\Print[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\Prefetch[1].htm
HTML document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\PeoplePicker[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\O365ThemeDefault[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\MasterStyles15[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\ListGrid[1].js
HTML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\EmbeddedFonts[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\Domain_Purchase_16x16[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\sprite1.mouse[1].png
PNG image data, 600 x 75, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D8E273D2-9495-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\NetPerf[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\HeadBundle[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\HIPControl[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\GridView[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\Domain_Add_16x16[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\ControlBundle[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\AppCentipede_Microsoft_white_ufRYlllWOw4YyDRiKcBvxQ2[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\AngularLib[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\AngularExtensions[1].js
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\AdminBootstrap[1].js
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\webcontrols[1].png
PNG image data, 358 x 374, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\latest[1].woff
Web Open Font Format, TrueType, length 41280, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\sprite1.mouse[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\signup_ms_logo[1].png
PNG image data, 100 x 21, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\script[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\resetpasswordpackage_fW935Foe3sZK5d8y9jPoPw2[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\prefetch[3].htm
HTML document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\prefetch[2].htm
HTML document, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\pp[1].htm
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\override[1].css
ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\o365_gallatin_logo[1].png
PNG image data, 162 x 46, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\mscorlib[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\PasswordStrengthMeter[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\v8bxa9r\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\boot.worldwide.2.mouse[1].js
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\boot.worldwide.1.mouse[1].js
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\SegoeUI-SemiLight-final[1].eot
Embedded OpenType (EOT)
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\SegoeUI-Regular-final[1].eot
Embedded OpenType (EOT)
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\ResetPassword[1].htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\Microsoft_Logotype_White_4MYDQRab31HKDWWN-1HafA2[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\MasterStyles15MVC[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\DomainManager[1].js
C source, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\AssistancePanel[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\AssistancePanel[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\AppCentipede_Microsoft_HFeToeM4u6fzMQF_f_rQ5Q2[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\boot.worldwide.3.mouse[1].js
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E1200FB6-9495-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D8E273D4-9495-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\list_bullet_5x5[1].gif
GIF image data, version 89a, 5 x 8
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\wlivepackagefull_cHeSkPsNhc9yilRlgEedHg2[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\website[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\style[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\sprite1.mouse[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\spinner_24x24_metro[1].gif
GIF image data, version 89a, 24 x 24
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\spinner_16x16_metro[1].gif
GIF image data, version 89a, 16 x 16
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\signup16[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\script[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\reporting[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\pagelayout_nav_highlight[1].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x22, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\AdminApp[1].js
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\home[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\home15[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\header_wizard_hl_mos[1].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 4x60, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\favicon[3].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\favicon[2].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\datarequestpackage_dT3VZJ_4lD5UykUFoE8W2w2[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\convergedbg_v2_pdvUOT_2pyXH5ith335y8A2[1].jpg
JPEG image data, baseline, precision 8, 1920x1080, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\conciergehelper[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\bootstrap_3.3.0_B68S-_daR6nLiLVZsh4XiA2[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\boot.worldwide.mouse[1].css
ASCII text, with very long lines, with no line terminators
#