top title background image
flash

https://sites.google.com/view/settlements213/home

Status: finished
Submission Time: 2021-06-22 18:17:15 +02:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    438538
  • API (Web) ID:
    806127
  • Analysis Started:
    2021-06-22 18:17:16 +02:00
  • Analysis Finished:
    2021-06-22 18:22:38 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 88
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP Country Detection
104.18.11.207
United States
172.217.23.97
United States
130.198.118.97
United States
Click to see the 3 hidden entries
216.58.212.161
United States
104.16.18.94
United States
172.67.194.129
United States

Domains

Name IP Detection
smtpro101.com
172.67.194.129
cdnjs.cloudflare.com
104.16.18.94
maxcdn.bootstrapcdn.com
104.18.11.207
Click to see the 10 hidden entries
googlehosted.l.googleusercontent.com
172.217.23.97
s3.au-syd.cloud-object-storage.appdomain.cloud
130.198.118.97
lh5.googleusercontent.com
0.0.0.0
abanoub1121524.s3.au-syd.cloud-object-storage.appdomain.cloud
0.0.0.0
ka-f.fontawesome.com
0.0.0.0
code.jquery.com
0.0.0.0
lh6.googleusercontent.com
0.0.0.0
kit.fontawesome.com
0.0.0.0
lh4.googleusercontent.com
0.0.0.0
www.youtube-nocookie.com
0.0.0.0

URLs

Name Detection
https://abanoub1121524.s3.au-syd.cloud-object-storage.appdomain.cloud/distanced/index.html
https://abanoub1121524.s3.au-syd.cloud-object-storage.appdomain.cloud/distanced/index.html$Share
https://abanoub1121524.s3.au-syd.cloud-object-storage.appdomain.cloud/distanced/index.html
Click to see the 74 hidden entries
https://abanoub1121524.s3.au-syd.cloud-object-storage.appdomain.cloud/distanced/index.htmldomain.clo
https://about.google/
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
https://code.jquery.com/jquery-3.3.1.js
http://youtube.com/yt/2012/10/10
https://smtpro101.com/email-list/mnb/images/adobe.jpg
https://policies.googl
https://www.google.de/intl/en/about/products
https://smtpro101.com/email-list/onedrive25/finish.php
https://1322829165-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-
https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
https://code.jquery.com/jquery-3.1.1.min.js
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
https://www.google.de/shopping?hl
https://smtpro101.com/email-list/mnb/images/othermail.ico
https://youtube.com/api/drm/fps?ek=uninitialized
https://www.gstatic.
https://www.youtube.com/generate_204?cpn=
http://www.youtube.com/videoplayback
https://www.youtube-nocookie.com/embed/TBR-xtJVq7E?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l
http://youtube.com/drm/2012/10/10
https://github.com/IanLunn/Hover
https://www.blogger.com/
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://abanoub1121524.s3.au-syd.cloud-object-stoRoot
https://www.youtube.com/?gl
http://ianlunn.co.uk/
https://smtpro101.com/email-list/mnb/images/office365.png
https://smtpro101.com/email-list/mnb/images/yahoo.png
https://www.google.%/ads/ga-audiences
https://translate.google.de/?hl
https://getbootstrap.com)
https://books.google.de/?hl
https://login.microsoftonline.com/common/login
http://ianlunn.github.io/Hover/)
https://kit.fontawesome.com
http://youtube.com/streaming/metadata/segment/102015
https://sites.google.Root
https://github.com/twbs/bootstrap/graphs/contributors)
https://www.youtube-nocookie.com/embed/
https://fontawesome.com
https://youtu.be/
https://smtpro101.com/email-list/mnb/images/gmail.png
https://g.co/adsettings
https://fontawesome.com/license/free
https://www.google.de/webhp
https://admin.youtube.com
http://schema.org/WebPage
https://maps.google.de/maps?hl
https://631929361-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-f
http://youtube.com/streaming/otf/durations/112015
https://smtpro101.com/email-list/mnb/css/hover.css
https://code.jquery.com/jquery-3.2.1.slim.min.js
https://ka-f.fontawesome.com
https://1494549356-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-
http://opensource.org/licenses/MIT).
http://www.broofa.com
http://www.apache.org/licenses/LICENSE-2.0
https://844328678-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-f
https://smtpro101.com/email-list/mnb/images/other1.png
https://smtpro101.com/email-list/mnb/images/office3651.png
https://smtpro101.com/email-list/mnb/images/outlook.png
https://www.google.de/save
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
https://kit.fontawesome.com/585b051251.js
https://redux.js.org/api/store#subscribelistener
https://smtpro101.com/email-list/mnb/images/aol.png
https://stats.g.doubleclick.net/j/collect
https://smtpro101.com/email-list/mnb/images/outlook1.png
https://sites.google.c
https://90022991-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-fr
https://www.google.
https://g.co/privacytools
https://smtpro101.com/email-list/mnb/images/8.jpg

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\home[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\googlelogo_color_74x24dp[1].png
PNG image data, 74 x 24, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\adobe-pdf-icon-logo-png-transparent-285x300[1].png
PNG image data, 285 x 300, 8-bit/color RGBA, non-interlaced
#
Click to see the 90 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\8[1].jpg
[TIFF image data, big-endian, direntries=12, height=709, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 1200x646, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\www-player[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\team[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\so[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\rs=AA2YrTvhqESG86SancEQRa0zo3UDA8gUsw[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\m=sy26,sy20,sy2g,sy2i,fuVYe,vVEdxc,sy2b,CG0Qwb[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\m=pB6Zqd,syu,IZT63,SF3gsd,vfuNJf,syq,syo,syv,O8k1Cd,sy15,siKnQd,syp,syt,syz,YNjGDd,syy,sy10,PrPYRd,xs1Gy,hc6Ubd,o02Jie,SpsfSb,sy17,sy16,syl,zbML3c[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\m=byfTOb,lsjVmc,LEikZe[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery-3.1.1.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jizfRExUiTo99u79B_mh0O6tKw[1].woff
Web Open Font Format, TrueType, length 57524, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\base[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\gmail[1].png
PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\free.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\free-v4-shims.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[1].ico
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cb=gapi[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\analytics[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\TBR-xtJVq7E[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff
Web Open Font Format, TrueType, length 20396, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\EmbeddedImage[3].jpg
[TIFF image data, little-endian, direntries=3, software=Picasa], baseline, precision 8, 1280x720, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\EmbeddedImage[2].jpg
[TIFF image data, little-endian, direntries=3, software=Picasa], baseline, precision 8, 1280x720, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\m=IavLJc[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Temp\~DFFF23116C5CA0207F.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFB3F85CD5A509D60B.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF309FEA8605C84965.TMP
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\www-embed-player[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\rs=AGEqA5np4GsaSgpKcbRjMJpEQzhhkjtoZg[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\rs=AA2YrTtPtU9izWoJXQVEkjBV77Qhz74j5g[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\remote[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\popper.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\other1[1].png
PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\m=view[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\m=Wt6vjf,_latency,FCpbqb,WhJNk[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\pxiDypQkot1TnFhsFMOfGShVF9eI[1].woff
Web Open Font Format, TrueType, length 38064, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jizaRExUiTo99u79D0KEww[1].woff
Web Open Font Format, TrueType, length 55340, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\hover[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\home[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fetch-polyfill[1].js
Pascal source, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon[2].ico
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon[1].ico
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\faq[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\client[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\adobe-pdf-icon-logo-png-transparent-285x300[1].png
PNG image data, 285 x 300, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\outlook1[1].png
PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\office3651[1].png
PNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m=_b,_tp[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m=FqLSBc,krBSJd[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m=Ae65rd,Y9atKf,NTMZac,CuaHnc,sy1m,gJzDyc,sy1g,uY3Nvd,syh,syj,HYv29e,mxS5xe[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\googlelogo_clr_74x24px[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\embed[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cookies[2].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cookies[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cb=gapi[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\u-440qyriQwlOrhSvowK_l5-fCZK[1].woff
Web Open Font Format, TrueType, length 23600, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmSU5fBBc-[1].woff
Web Open Font Format, TrueType, length 20404, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AXST5WH2.js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\585b051251[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\4UabrENHsxJlGDuGo1OIlLV154tzCwA[1].woff
Web Open Font Format, TrueType, length 26164, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[1].woff
Web Open Font Format, TrueType, length 26412, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\4UaGrENHsxJlGDuGo1OIlL3Owpg[1].woff
Web Open Font Format, TrueType, length 26180, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{DAF902A4-D3C0-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{DAF902A3-D3C0-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{DAF902A1-D3C0-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ZwAIity5OytDQOj__cc8fuNOAUOVNWteP-Sel1v9cww[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\6A1C8KEL\www.youtube-nocookie[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\m=wmlPKb[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\m=Y9atKf,NTMZac,sy1m,gJzDyc,sy1g,uY3Nvd,syh,syj,HYv29e[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\m=Ae65rd,Y9atKf,NTMZac,CuaHnc,sy1m,gJzDyc,sy1g,uY3Nvd,kTx9td,syh,syj,HYv29e,mxS5xe[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery-3.2.1.slim.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\index[1].htm
HTML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\history[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\css[2].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\adobe[1].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\EmbeddedImage[1].jpg
[TIFF image data, little-endian, direntries=3, description=Mockup image of male hands using a laptop computer and holing a smart phone both with blank whi, software=Picasa], baseline, precision 8, 5472x3648, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\YBIY3K09.js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOmCnqEu92Fr1Mu4mxM[2].woff
Web Open Font Format, TrueType, length 19824, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOmCnqEu92Fr1Mu4mxM[1].woff
Web Open Font Format, TrueType, length 20332, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff
Web Open Font Format, TrueType, length 19888, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmSU5fBBc-[1].woff
Web Open Font Format, TrueType, length 19916, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmEU9fBBc-[2].woff
Web Open Font Format, TrueType, length 20012, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Web Open Font Format, TrueType, length 20532, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\EmbeddedImage[1].jpg
[TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 1280x740, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\url[1].htm
HTML document, ASCII text, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\u-4n0qyriQwlOrhSvowK_l52xwNZWMf8[1].woff
Web Open Font Format, TrueType, length 23260, version 1.1
#