top title background image
flash

https://astreconseil-my.sharepoint.com/:b:/g/personal/eric_vervoitte_astre-conseil_com/EY-UoX04IstLtJjacoZjaf8Bpv4roz2yVBXk3f7d6BblNA?e=4%3atnzcNm&at=9

Status: finished
Submission Time: 2021-01-27 14:27:32 +01:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    344948
  • API (Web) ID:
    591826
  • Analysis Started:
    2021-01-27 14:28:27 +01:00
  • Analysis Finished:
    2021-01-27 14:38:43 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 56
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
52.239.152.74
United States
192.229.221.185
United States
23.211.149.25
United States

Domains

Name IP Detection
assets.onestore.ms
0.0.0.0
offertooldataprod.blob.core.windows.net
0.0.0.0
spoprod-a.akamaihd.net
0.0.0.0
Click to see the 14 hidden entries
amp.azure.net
0.0.0.0
statics-eus.onestore.ms
0.0.0.0
statics-wcus.onestore.ms
0.0.0.0
statics-neu.onestore.ms
0.0.0.0
mem.gfx.ms
0.0.0.0
ajax.aspnetcdn.com
0.0.0.0
microsoftwindows.112.2o7.net
15.237.136.106
statics-eas.onestore.ms
0.0.0.0
assets.adobedtm.com
0.0.0.0
logincdn.msauth.net
0.0.0.0
astreconseil-my.sharepoint.com
0.0.0.0
aka.ms
23.211.149.25
cs1227.wpc.alphacdn.net
192.229.221.185
blob.bl6prdstr14a.store.core.windows.net
52.239.152.74

URLs

Name Detection
http://www.cdiscount.com/
http://www.etmall.com.tw/
http://www.taobao.com/favicon.ico
Click to see the 97 hidden entries
http://www.nytimes.com/
http://list.taobao.com/
http://search.msn.com/results.aspx?q=
http://search.goo.ne.jp/favicon.ico
http://www.kkbox.com.tw/
http://search.daum.net/favicon.ico
http://www.servicios.clarin.com/
http://www.ceneo.pl/favicon.ico
http://it.search.yahoo.com/
http://www.tiscali.it/favicon.ico
http://ie.search.yahoo.com/os?command=
http://www.news.com.au/favicon.ico
http://ariadna.elmundo.es/
http://service2.bfast.com/
http://search.centrum.cz/favicon.ico
http://www.iask.com/
http://search.orange.co.uk/favicon.ico
https://www.xbox.com/favicon.ico
https://www.xbox.com/&
http://www.target.com/
http://auto.search.msn.com/response.asp?MT=
http://www.twitter.com/
http://www.soso.com/favicon.ico
https://schema.org/ItemList
http://www.founder.com.cn/cn
https://privacy.moft.com/en-us/privacystatementductsRoot
http://www.google.co.uk/
http://video.globo.com/favicon.ico
https://onedrive.live.com/about/en-us/
https://account.micros
http://www.orange.fr/
http://www.auction.co.kr/auction.ico
http://search.ipop.co.kr/
https://www.xbox.com/h
http://www.univision.com/favicon.ico
http://cnweb.search.live.com/results.aspx?q=
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
https://mem.gfx.ms
http://www.rtl.de/
http://search.gismeteo.ru/
http://www.google.fr/
http://www.asharqalawsat.com/favicon.ico
http://www.cdiscount.com/favicon.ico
http://www.amazon.co.uk/
https://www.xbox.com/v
http://www.linternaute.com/favicon.ico
http://www.cnet.com/favicon.ico
http://www.galapagosdesign.com/DPlease
http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity
http://buscar.ozu.es/
http://search.msn.co.jp/results.aspx?q=
http://cgi.search.biglobe.ne.jp/favicon.ico
https://www.skype.com/en/
http://search.hanafos.com/favicon.ico
http://it.search.dada.net/favicon.ico
http://www.etmall.com.tw/favicon.ico
http://www.ya.com/favicon.ico
http://busca.igbusca.com.br//app/static/images/favicon.ico
http://www.reddit.com/
http://msk.afisha.ru/
http://www.ask.com/
http://img.shopzilla.com/shopzilla/shopzilla.ico
http://in.search.yahoo.com/
http://fr.search.yahoo.com/
https://assets.adobedtm.com/5ef092d1efb5/e6b4ca74378c/4d35cae9a362/RC95d5954deda24aa780e2bd87a6eabf8
http://www.fontbureau.com/designers
http://www.asp.net/ajaxlibrary/CDN.ashx.
https://assets.adobedtm.com/5ef092d1efb5/4c272e8cc694/4c2e7f5b6000/RC5a76fb711f8f47b581632aa500f1bc3
https://assets.onestore.ms
http://www.dailymail.co.uk/
http://www.merlin.com.pl/favicon.ico
http://www.mercadolivre.com.br/
http://www.ozu.es/favicon.ico
http://busca.orange.es/
https://support.office.com/en-us/article/OneDrive-Help-5943c2b9-fafc-4cb4-95c0-9cc73fcabb30
http://www.soso.com/
https://www.xbox.com/oductsd
http://www.google.si/
https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9
http://search.nifty.com/
http://www.founder.com.cn/cn/bThe
http://www.gmarket.co.kr/
http://search.yahoo.co.jp/favicon.ico
http://openimage.interpark.com/interpark.ico
http://search.sify.com/
http://search.chol.com/favicon.ico
http://uk.search.yahoo.com/
http://www.rambler.ru/favicon.ico
http://list.taobao.com/browse/search_visual.htm?n=15&q=
http://google.pchome.com.tw/
https://astreconseil-my.sharepoint.com/_layS
http://browse.guardian.co.uk/favicon.ico
http://www.pchome.com.tw/favicon.ico
http://sads.myspace.com/
http://www.amazon.de/
http://search.auction.co.kr/
http://www.google.it/

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCc603b998e8c64e55b78656817f793285-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4r1E5[1].png
PNG image data, 44 x 40, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4qxNL[1].wdp
JPEG-XR
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4qv5D[1].wdp
JPEG-XR
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4qRrT[1].png
PNG image data, 39 x 40, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4qAnQ[1].wdp
JPEG-XR
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4qAnJ[1].wdp
JPEG-XR
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4ehRf[1].png
PNG image data, 646 x 606, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4MAc1[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCea5ad6baf7a84455b0447fa19709190d-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCe37a65e1116b45deb0955342783465c4-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCd898c8a8376b41f88f24c93b8645f178-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCce79330d434c45ca8ea9effba974a13d-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RE4tWN0[1].jpg
[TIFF image data, little-endian, direntries=12, height=730, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1300], baseline, precision 8, 1300x730, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCc0230152987c4e73b3230be623bd92e6-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCbec07f7149ab4e7d832205be01626a5d-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCbc709073dce74912819599f48060dd84-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCb5228c09c2ba4cd3b98fc201fa2703d4-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCb36993ed0cd440348a1b4711c13dbc8e-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCb0e7b7b9bdd945458fd1380859b0de3b-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCa7a16d61c0134716b6c5d59808f9fd26-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCa6da6c2ddf044453bdb4d0b0dafda95b-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC82d1a8b936874d0baddf4c5dc20c7a6e-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC6be9b9327bb449c3a91ca999c97630be-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC683368007e154c38814065ef2499a0b8-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\meBoot.min[1].js
ASCII text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\1920_Panel10_4Up_Protect[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 358x201, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\1920_Panel01_FullbleedHero_Color_NoHoliday[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x720, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\wcp-consent[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\social[2].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\social[1].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\site-oneui[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\privacystatement[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\privacy-in-our-products[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\override[1].css
ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mwfmdl2-v3.54[1].woff
Web Open Font Format, TrueType, length 26288, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\microsoft-365[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\meCore.min[1].js
ASCII text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC66fad9a29d7e4a4abc78c265ab6c03bb-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\launch-ENbb9d0de7cc374dc99259df2c4b823cef.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery-1.11.2.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\icons[1].eot
Embedded OpenType (EOT), icons family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fb-083993[3].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fb-083993[2].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fb-083993[1].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\amx.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\WebResource[1].js
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Twitter[1].png
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ScriptResource[1].js
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel13_2Up_Pro[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 494x278, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel11_HighlightFeature_Apps[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1083x609, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel10_4Up_Together[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 235x132, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel10_4Up_Time[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 235x132, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel10_4Up_Protect[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 235x132, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel10_4Up_Ideas[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 235x132, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel08_MultiFeature_Neurodiversity[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1083x609, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel08_MultiFeature_Mobility[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1083x609, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel08_MultiFeature_Learning[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1083x609, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel08_MultiFeature_Hearing[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1083x609, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel13_2Up_home[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 494x278, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{46A211B1-60EF-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2CACDFBE-60EF-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{18282A01-60EF-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{18282A00-60EF-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ActiveOffers[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC5a76fb711f8f47b581632aa500f1bc39-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC579ee48d9ed04155b8299e869af1ac51-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC54b490a964b8430a93c0a4bea8ec38f8-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC4552f1fbf4374dc3b64139dd4e13d49e-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC4531a4e4108f48ab95bfce9b9140bf03-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC2c82363df66d4caeadff9a77d1ccc036-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC278c787435b94d148603e89a80d2b336-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC05ac5f311ffd4e5c9ad450f46819401c-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Manage_Privacy_settings_32x32[1].png
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\MWFMDL2[1].woff
Web Open Font Format, TrueType, length 11480, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\MS-Execs-2015-07-Nadella-Satya-24-2[1].png
PNG image data, 799 x 532, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\LinkedIn-high-contrast[1].png
PNG image data, 21 x 20, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{182829FE-60EF-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\94-3cd1e0[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\8acd8711-c2d1-4191-85b6-2b5e4f72eb46[1].png
PNG image data, 1084 x 430, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7a-3277aa[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\4b8d9e30-e1b0-4027-80e8-74da19dd38b3[1].png
PNG image data, 539 x 300, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1x1clear[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel24_3Up_Footer_Surface[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 321x180, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel15_Mosaic_Item5_Stand[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 542x400, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel15_Mosaic_Item4_Key[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 542x400, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel15_Mosaic_Item3_Pen[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 542x400, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel15_Mosaic_Item2_Nocamera[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 542x400, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1083_Panel15_Mosaic_Item1_Gray[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1083x400, frames 3
#