top title background image
flash

https://mhxyds.com/contact.html

Status: finished
Submission Time: 2022-08-11 05:40:37 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    682144
  • API (Web) ID:
    1049650
  • Analysis Started:
    2022-08-11 05:40:37 +02:00
  • Analysis Finished:
    2022-08-11 05:47:22 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
clean
Score: 2
System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301

IPs

IP Country Detection
47.253.50.2
United States
172.64.145.85
United States
118.27.105.118
Japan
Click to see the 19 hidden entries
239.255.255.250
Reserved
103.235.46.191
Hong Kong
142.251.36.42
United States
142.250.185.234
United States
142.250.203.206
United States
142.250.186.99
United States
103.15.210.63
Australia
58.254.150.48
China
142.250.186.67
United States
216.58.212.174
United States
142.250.186.72
United States
162.247.241.14
United States
151.101.66.137
United States
47.243.100.207
United States
35.158.9.70
United States
172.217.168.237
United States
142.250.179.132
United States
172.217.16.138
United States
183.131.207.66
China

Domains

Name IP Detection
chrome.cloudflare-dns.com
172.64.145.85
accounts.google.com
172.217.168.237
www.google.com
142.250.179.132
Click to see the 3 hidden entries
clients.l.google.com
142.250.203.206
mhxyds.com
118.27.105.118
clients2.google.com
0.0.0.0

URLs

Name Detection
https://mhxyds.com/css/fonts/helvetica-neue/2DF85E_1_0.ttf
https://dnstranfer.com/lipgupiao/assets/images/haoli3.jpg
https://mhxyds.com/css/fonts/helvetica-neue/2DF85E_0_0.woff2
Click to see the 97 hidden entries
https://mhxyds.com/js/picturefill.min6b70.js?v=636160472800000000
https://accounts.google.com/MergeSession
https://mhxyds.com/css/custom.css
https://mhxyds.com/jpg/hero_banner_746x419_peic_3656fa.jpg?h=419&la=en&mw=800&w=746&hash=7C1F89192750291213D694E248308C865C3F5668
https://sandbox.google.com/payments/v4/js/integrator.js
https://mhxyds.com/js/sc.fields-captcha.js
https://mhxyds.com/png/thad77.png?h=73&w=55&la=en&hash=4311F49121FFFAB00AC2A81710641D8C4BA0FCC4
https://mhxyds.com/js/sc.fields-date.js
https://83202.global.siteimproveanalytics.io/image.aspx?url=https%3A%2F%2Fmhxyds.com%2Fcontact.html&title=Contact%20%7C%20Perpetual&res=1920x1080&accountid=83202&rt=9210&prev=f0b268dd-a818-0db6-9ca3-86cfebd962e9&luid=1b876654-67e3-1fe2-3afc-0b270dc8c413&rnd=46192
https://mhxyds.com/png/tmc0ce.png?h=73&w=55&la=en&hash=96F86B1DC04644EE7ED2DE1ED649AAFE79C5D556
https://mhxyds.com/js/jquery.validate.unobtrusive.js
https://www.google.com/images/cleardot.gif
https://mhxyds.com/js/jquery-ui-1.8.24.js
https://mhxyds.com/shareholders.html
https://mhxyds.com/gtm5445.html?id=GTM-WNXQNKG
https://www.google.com/
https://83202.global.siteimproveanalytics.io/image.aspx?url=https%3A%2F%2Fmhxyds.com%2Fabout.html&title=About%20%7C%20Perpetual&res=1920x1080&accountid=83202&rt=1724&prev=f0b268dd-a818-0db6-9ca3-86cfebd962e9&luid=60e5a47e-d465-5bdf-41f4-402fa42d9b4c&rnd=41050
https://iframes.perpetualequity.com.au/_Resource/_module/1tsuXa2q3UCbZ_-sdLg1BQ/PIC-iframe-styles_1.css
https://mhxyds.com/css/fonts/vendor/bootstrap/glyphicons-halflings-regular.ttf
https://mhxyds.com/jpg/perpetual-knowledge-bank-series-reporting-season-746x4190ae6.jpg?mw=285&hash=CC9B6A2517D6517FA98B06A38A407613637A6C0F
https://mhxyds.com/js/main.js
https://mhxyds.com/css/jquery-ui.min.css
https://www.google.com/intl/en-US/chrome/blank.html
https://iframes.perpetualequity.com.au/_Modules/CorporateActions/PriceVolumeChartModule/priceVolumeChart.js
https://dnstranfer.com/lipgupiao/assets/images/bg-01.jpg
https://mhxyds.com/png/dm1ba0.png?h=73&w=55&la=en&hash=3A295843D6CCFE8B1E8E1C1EE86E9D18CC8F9326
https://mhxyds.com/css/fonts/helvetica-neue/2DF85E_1_0.woff2
https://dnstranfer.com/lipgupiao/assets/css/popup_skycodec.css
https://83202.global.siteimproveanalytics.io/image.aspx?url=https%3A%2F%2Fmhxyds.com%2Fshareholders.html&title=Shareholders%20%7C%20Perpetual&res=1920x1080&accountid=83202&rt=1716&prev=f0b268dd-a818-0db6-9ca3-86cfebd962e9&luid=3769b23c-9bb0-95f9-aaa6-57229e53fe95&rnd=65555
https://dnstranfer.com/lipgupiao/assets/images/left.png
https://iframes.perpetualequity.com.au/FormBuilder/_Resource/_module/r1C2SHNItkyshZb6YUZ8Ug/js/PIC-iframe-scripts.js
https://iframes.perpetualequity.com.au/FormBuilder/_Resource/_module/r1C2SHNItkyshZb6YUZ8Ug/js/iframeResizer.contentWindow.min.js
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
https://hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1920x1080&vl=969&et=0&ja=0&ln=en-us&lo=0&rnd=1325596944&si=17fe70ecc9d76a927d7f46dbe65fefca&v=1.2.96&lv=1&sn=60357&r=0&ww=1920&ct=!!&u=https%3A%2F%2Fmhxyds.com%2Findex.php&tt=%E9%97%AA%E7%89%9B%E9%85%8D%E8%B5%84%E8%BF%91%E6%9C%9F%E8%A1%8C%E6%83%85-%E5%B9%B3%E5%8F%B0%20%E9%97%AA%E7%89%9B%E9%85%8D%E8%B5%84%7C%20%E9%97%AA%E7%89%9B%E9%85%8D%E8%B5%84%E8%B5%B0%E5%8A%BF%E5%9B%BET%2B0%E5%B9%B3%E5%8F%B0
https://mhxyds.com/jpg/hero%20peic67d9.jpg?h=368&la=en&mw=656&w=656&hash=4B1B64C75664486C9D64C51258F8B6C7EEFCB327
https://mhxyds.com/~/media/perpetualpeic/images/hero-sp-banners/website-image-1_1665x550.ashx?w=2200&hash=BE4181F04B84F74A757ECFDF8522E33EE398B202
https://mhxyds.com/js/siteanalyze_83202.js
https://mhxyds.com/js/iframeresizer.min.js
https://chrome.cloudflare-dns.com
https://dnstranfer.com/direct/index.html
https://mhxyds.com/Resources/PerpetualPEIC/img/ajax-loader.gif
https://dnstranfer.com/lipgupiao/assets/images/nhaynhay.gif
https://www-googleapis-staging.sandbox.google.com
https://dnstranfer.com/lipgupiao/assets/images/icon-icon-close@2x.png
https://mhxyds.com/js/jquery.min.js
https://mhxyds.com/investment-calculator.html
https://mhxyds.com/shareholders.html
https://mhxyds.com/css/fonts/helvetica-neue/2DF85E_1_0.woff
https://mhxyds.com/index.php
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
https://dnstranfer.com/direct/main.js
https://mhxyds.com/jpg/karen%20davis%20photo2a51c.jpg?h=73&w=55&la=en&hash=B38EE530183F7DA7894D1D4C64E54362342370D4
https://mhxyds.com/~/media/perpetual/images/hero-sp-banners/webinar-banner-1-1665-x-550.ashx?w=2200&hash=CC192888C22F1629AD546396726254CA71C13731
https://mhxyds.com/js/jquery.validate.js
https://mhxyds.com/css/style.minb90e.css?v=637328095360000000
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=94.0.4606.61&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
https://dnstranfer.com/static/image/img-andriod-tips@2x.png
https://dnstranfer.com/direct/jump.js
https://mhxyds.com/jpg/webinar-banner-1-1665-x-5503649.jpg?w=1000&hash=C46449DD65874A2AC83E8E310F0A237DE1101A22
https://mhxyds.com/img/logo.svg
https://dnstranfer.com/lipgupiao/assets/images/pay1.png
https://mhxyds.com/css/fonts/helvetica-neue/2DF85E_0_0.woff
https://mhxyds.com/js/modernizr.min6b70.js?v=636160472800000000
https://mhxyds.com/js/sc.fields-unobtrusive.js
https://dnstranfer.com/lipgupiao/assets/images/haoli4.png
https://mhxyds.com/jpg/understanding-the-lic-structure-746x419-1f46b.jpg?mw=285&hash=C8C36499F66CAC27725EBD92450D8783215D5F03
https://mhxyds.com/css/fields.css
https://mhxyds.com/layouts/system/VisitorIdentificationCSS.aspx?1660193000845
https://mhxyds.com/jpg/hero%20peic7c4f.jpg?h=419&la=en&mw=800&w=746&hash=1D7E8F4BD6C5FA5B5C7A265D08D4197FA72551AA
https://dns.quad9.net
https://iframes.perpetualequity.com.au/Scripts/js_list_compressed_2_2_8227.js?20220717081501
https://mhxyds.com/css/fonts/vendor/bootstrap/glyphicons-halflings-regular.woff2
https://iframes.perpetualequity.com.au/iframes/?page=share-price-graph
https://mhxyds.com/css/fonts/helvetica-neue/2DF85E_0_0.ttf
https://mhxyds.com/js/visitoridentification.js
https://www.google.com/images/dot2.gif
https://iframes.perpetualequity.com.au/iframes/?page=investment-calculator
https://mhxyds.com/about.html
https://mhxyds.com/about.html
https://mhxyds.com/contact.html
https://dnstranfer.com/lipgupiao/assets/js/popup-main-page.js
https://mhxyds.com/js/sc.fields-events-tracking.js
https://www.google.com/images/x2.gif
https://mhxyds.com/jpg/hero%20peicc2c4.jpg?mw=285&hash=3E47FCE246A72FBA35DB1562D6F9DD053E0F5355
https://iframes.perpetualequity.com.au/iframes/?page=share-price-graph
https://iframes.perpetualequity.com.au/_Modules/CorporateActions/PriceVolumeChartModule/priceVolumeChartInit.js
https://payments.google.com/payments/v4/js/integrator.js
https://mhxyds.com/js/jquery-1.8.2.min.js
https://mhxyds.com/index.php
https://dnstranfer.com/direct/index.html
https://dnstranfer.com/lipgupiao/assets/images/haoli1.png
https://mhxyds.com/img/logo-footer.svg
https://dnstranfer.com/lipgupiao/assets/images/btn-bg.png
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
https://dnstranfer.com/lipgupiao/assets/images/right.png
https://sdk.51.la/js-sdk-pro.min.js
https://dnstranfer.com/lipgupiao/assets/images/foot-img.png

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\craw_window.js
ASCII text, with very long lines
#
C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-US\default.acl
Little-endian UTF-16 Unicode text, with no line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\topbar_floating_button_pressed.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\topbar_floating_button_maximize.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\topbar_floating_button_hover.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\topbar_floating_button_close.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\topbar_floating_button.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\images\flapper.gif
GIF image data, version 89a, 30 x 30
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\html\craw_window.html
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\css\craw_window.css
ASCII text
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\craw_background.js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9e4766e5-ac0e-4878-8485-3c797e9a4421.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Trusted Vault (copy)
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\6d447b95-086a-4941-b24f-e9c19e6792a1.tmp
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\88ea9396-9278-4890-9f3f-5bd151a38302.tmp
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\0a0621bb-012a-4c03-8b47-1b5f8260f203.tmp
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a335b981-46f5-449b-b993-29ec6cd6cec2.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6b7d5085-f580-47b7-9437-89659e8b0dc4.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\65f41ec1-4431-4df8-b1eb-6d778da6efec.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5e118828-c9a3-472b-ae41-18922c3b26b1.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\28437055-8c6e-44bd-9e8b-8097daeab257.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\9e10fd97-bbf3-415a-9ace-efad08c97e88.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\76ba77cc-c090-4ff8-8314-b52e7327f6f2.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\3ea9e6bd-57bf-40f6-8ae4-0c0bd7e7c56f.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\2b4c43bd-3c11-4a2f-83cd-930a0ee41e57.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\2482284d-ca60-43ad-8d8b-c6624e96323a.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\1f3483ce-30c3-45c9-a832-8dafebe06efc.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\ec69f745-ab4c-4bf0-8937-37e1817c95b2.tmp
data
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir1064_1943311683\462f2cf1-f88b-4b6a-a1ce-2252d1dfe89c.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Temp\dd59916f-f1b1-48e8-8076-983fda0bf43f.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\b1ca2ea4-c89d-4f93-95cc-59b8c2cd49f7.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
#
C:\Users\user\AppData\Local\Temp\a6d0e17e-60e9-4995-b3e7-ce64d5833631.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
#
C:\Users\user\AppData\Local\Temp\7eea2f47-602a-4750-81a2-5dd8cf16ed32.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
#
C:\Users\user\AppData\Local\Temp\587d3c8b-c911-498a-8133-8428a3317a4a.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
#
C:\Users\user\AppData\Local\Temp\462f2cf1-f88b-4b6a-a1ce-2252d1dfe89c.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\1110f44a-f2ef-4140-ab0b-b72de3a634ad.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\c7c9cc65-4903-4b68-959f-0da378ad1da8.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\eaf1358a-d8f7-40ce-8404-ee5fba5710ec.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000022.dbtmp
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\cca83444-a3c6-40dd-9f5c-1e8f439fa8a8.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\cc21b17d-db30-4389-8b95-a6e19e5f5f79.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a45c89f2-52bd-4bfc-8844-7c8df1ed0bcc.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#