Invoice#0036473 .xlsx
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
malicious
Score: 76
|
System: Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
|
|
|
|
malicious
Score: 84
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Potential for more IOCs and behavior
|
| IP | Country | Detection |
|---|---|---|
| 69.49.244.155 | United States |  |
| 104.17.24.14 | United States |  |
| 104.18.10.207 | United States | |
| Click to see the 8 hidden entries | ||
| 142.251.36.205 | United States | |
| 142.251.36.238 | United States | |
| 142.251.36.227 | United States | |
| 104.18.11.207 | United States | |
| 239.255.255.250 | Reserved | |
| 104.18.29.243 | United States | |
| 172.64.150.12 | United States | |
| 172.217.16.161 | United States | |
| Name | IP | Detection |
|---|---|---|
| eyecandylashcompany.com | 69.49.244.155 | |
| gstaticadssl.l.google.com | 142.251.36.227 | |
| stackpath.bootstrapcdn.com | 104.18.10.207 | |
| Click to see the 12 hidden entries | ||
| accounts.google.com | 142.251.36.205 | |
| cdnjs.cloudflare.com | 104.17.24.14 | |
| maxcdn.bootstrapcdn.com | 104.18.11.207 | |
| clients.l.google.com | 142.251.36.238 | |
| cdn.iconscout.com | 104.18.29.243 | |
| cdn.pixabay.com | 172.64.150.12 | |
| googlehosted.l.googleusercontent.com | 172.217.16.161 | |
| clients2.google.com | 0.0.0.0 | |
| ka-f.fontawesome.com | 0.0.0.0 | |
| code.jquery.com | 0.0.0.0 | |
| kit.fontawesome.com | 0.0.0.0 | |
| lh3.googleusercontent.com | 0.0.0.0 | |
| Name | Detection |
|---|---|
| https://eyecandylashcompany.com/payment/frontend_paper_lantern/index.html | |
| https://eyecandylashcompany.com/payment/frontend_paper_lantern/css/hover.css | |
| https://eyecandylashcompany.com/payment/frontend_paper_lantern/images/office3651.png | |
| Click to see the 97 hidden entries | |
| https://ncus.contentsync. | |
| https://lh3.googleusercontent.com | |
| https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json | |
| https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices | |
| https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech | |
| https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios | |
| https://outlook.office365.com/autodiscover/autodiscover.json | |
| https://www.google.com/images/dot2.gif | |
| https://prod-global-autodetect.acompli.net/autodetect | |
| https://analysis.windows.net/powerbi/api | |
| https://officesetup.getmicrosoftkey.com | |
| https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 | |
| https://dataservice.o365filtering.com/ | |
| https://graph.windows.net | |
| https://www.google.com/images/x2.gif | |
| https://api.addins.store.officeppe.com/addinstemplate | |
| https://web.microsoftstream.com/video/ | |
| https://api.powerbi.com/v1.0/myorg/groups | |
| https://api.diagnosticssdf.office.com/v2/feedback | |
| https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | |
| https://www.odwebp.svc.ms | |
| https://dev0-api.acompli.net/autodetect | |
| https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech | |
| https://asgsmsproxyapi.azurewebsites.net/ | |
| https://wus2.contentsync. | |
| https://api.diagnosticssdf.office.com | |
| https://incidents.diagnosticssdf.office.com | |
| https://api.office.net | |
| https://outlook.office365.com/api/v1.0/me/Activities | |
| https://o365auditrealtimeingestion.manage.office.com | |
| https://play.google.com | |
| https://insertmedia.bing.office.net/odc/insertmedia | |
| http://www.gmail.com | |
| https://www.google.com/images/cleardot.gif | |
| https://clients.config.office.net/user/v1.0/ios | |
| https://incidents.diagnostics.office.com | |
| https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false | |
| http://schemas.mi | |
| https://outlook.office365.com | |
| https://management.azure.com | |
| https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml | |
| https://messaging.lifecycle.office.com/ | |
| https://www.google.com/ | |
| https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios | |
| https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks | |
| https://apis.live.net/v5.0/ | |
| http://weather.service.msn.com/data.aspx | |
| https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/ | |
| https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/ | |
| https://www.google.com | |
| https://ofcrecsvcapi-int.azurewebsites.net/ | |
| https://api.aadrm.com/ | |
| https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy | |
| https://entitlement.diagnosticssdf.office.com | |
| https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile | |
| https://cloudfiles.onenote.com/upload.aspx | |
| https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech | |
| https://cortana.ai | |
| https://lookup.onenote.com/lookup/geolocation/v1 | |
| https://rpsticket.partnerservices.getmicrosoftkey.com | |
| https://powerlift.acompli.net | |
| http://schemas.microz | |
| https://clients.config.office.net/user/v1.0/tenantassociationkey | |
| https://api.addins.omex.office.net/appinfo/query | |
| https://cdn.entity. | |
| https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr | |
| https://code.jquery.com/jquery-3.2.1.slim.min.js | |
| https://roaming.edog. | |
| https://autodiscover-s.outlook.com/ | |
| https://cdn.pixabay.com/photo/2018/03/10/12/00/paper-3213924_1280.jpg | |
| https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize | |
| https://shell.suite.office.com:1443 | |
| https://login.microsoftonline.com/ | |
| https://res.getmicrosoftkey.com/api/redemptionevents | |
| https://messaging.engagement.office.com/ | |
| https://globaldisco.crm.dynamics.com | |
| https://outlook.office.com/autosuggest/api/v1/init?cvid= | |
| https://api.aadrm.com | |
| https://store.office.cn/addinstemplate | |
| https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p | |
| https://dns.google | |
| https://sr.outlook.office.net/ws/speech/recognize/assistant/work | |
| https://officeci.azurewebsites.net/api/ | |
| https://tasks.office.com | |
| https://powerlift-frontdesk.acompli.net | |
| https://payments.google.com/payments/v4/js/integrator.js | |
| https://graph.ppe.windows.net | |
| http://schemas.microsof | |
| https://www.google.com/accounts/OAuthLogin?issueuberauth=1 | |
| https://portal.office.com/account/?ref=ClientMeControl | |
| https://kit.fontawesome.com/585b051251.js | |
| https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | |
| https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h | |
| https://cr.office.com | |
| https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive | |
| https://api.microsoftstream.com/api/ | |
| https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\index[1].htm |
HTML document, UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\fr\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\pl\messages.json |
ASCII text, with very long lines | # | |
| Click to see the 97 hidden entries | |||
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\nl\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\nb\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\lv\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\lt\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\ko\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\ja\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\it\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\id\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\hu\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\hr\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\hi\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\pt_BR\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\fil\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\fi\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\et\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\es_419\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\es\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\en_GB\messages.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\en\messages.json |
ASCII text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\el\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\de\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\da\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\cs\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\zh_CN\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\images\topbar_floating_button_hover.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\images\topbar_floating_button_close.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\images\topbar_floating_button.png |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\images\icon_16.png |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\images\icon_128.png |
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\images\flapper.gif |
GIF image data, version 89a, 30 x 30 | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\html\craw_window.html |
HTML document, ASCII text | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\css\craw_window.css |
ASCII text | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\craw_window.js |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\craw_background.js |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_metadata\verified_contents.json |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\zh_TW\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\ca\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\vi\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\uk\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\tr\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\th\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\sv\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\sr\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\sl\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\sk\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\ru\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\ro\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\pt_PT\messages.json |
ASCII text, with very long lines | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\76659c36-8a81-4adf-89b4-c364184e7489.tmp |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c0f82db5-ad7f-4d81-9915-8744d398f9f3.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy) |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1 |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\7094d46a-0046-475b-bb34-1d7293eca4b5.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy) |
UTF-8 Unicode text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy) |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy) |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy) |
ASCII text | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG |
ASCII text | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9164e2a7-f0ee-4e6d-99de-697544cf8a95.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d401b33d-9ce5-4417-85c9-4e59132f92d6.tmp |
UTF-8 Unicode text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\75a425df-9ddd-4041-bdca-f8bc5f54de59.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\635b3ed0-db8c-4d2e-929d-c2c5032211c2.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4448a291-c972-42d9-abe9-fc064e8a8c4f.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2aa6bfef-82e7-41d8-b31e-a113c96e0570.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\84847969-5c87-4bb2-818e-b94b27003720.tmp |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\71f00045-b35a-43c4-8896-30fa85b85e29.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\6a7823d1-9ee1-4aaf-a95f-fefd99acc230.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\50b08064-8803-462a-bc27-1183ed393096.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\4c84ccbd-83a1-4b1e-b2c4-e86a464b28a7.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\204f15aa-cd39-4bd6-bc6f-c02c1d133d38.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\e9858284-c07c-44b7-b8b0-ce0f31e2368f.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6216_1129368496\CRX_INSTALL\_locales\bg\messages.json |
UTF-8 Unicode text, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Temp\c74542be-5229-4ca4-84da-1bdbe9ebb4f2.tmp |
very short file (no magic) | # | |
C:\Users\user\AppData\Local\Temp\bb63800f-610d-4a15-a8b8-0b061b19bfe7.tmp |
Google Chrome extension, version 3 | # | |
C:\Users\user\AppData\Local\Temp\6216_1284855047\manifest.json |
ASCII text | # | |
C:\Users\user\AppData\Local\Temp\6216_1284855047\manifest.fingerprint |
ASCII text, with no line terminators | # | |
C:\Users\user\AppData\Local\Temp\6216_1284855047\_metadata\verified_contents.json |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Temp\6216_1284855047\Recovery.crx3 |
Google Chrome extension, version 3 | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A9669ADD.png |
PNG image data, 1140 x 1281, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9B7EEB3A.tmp |
Composite Document File V2 Document, Cannot read section info | # | |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\7411BFF8-D245-4AA5-9494-FF51EE73FEE8 |
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\ead0b8bd-a0fd-438e-b9bd-33505bd1b038.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\0c437755-473f-4122-97e4-4045c86f469d.tmp |
SysEx File - | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\ceb21468-8458-44a7-b3b2-9282c71a9adb.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\b57bc473-8f9e-46e9-93c7-774aa35c22a5.tmp |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy) |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy) |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version |
ASCII text, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\GPUCache\data_1 |
data | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ffcafbd3-fd32-4f6a-bfa5-410720ecafa7.tmp |
ASCII text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fbbd72ef-6390-4ce5-a738-5be3f83f701f.tmp |
UTF-8 Unicode text, with very long lines, with no line terminators | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy) |
ASCII text | # | |
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp |
ASCII text | # | |
