Automated Malware Analysis Management Report for https://smex-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.google.com%2fdocument%2fd%2fe%2f2PACX%2d1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ%5fUPOxYmoLJIZ9VMR7vP%5fJ8ndmrPjRlbE1II4lR%5fGR0kBskRfp%2fpub&umid=91df453f-7d8a-446f-ab1f-9a0d407c6e2a&auth=856bdeb49c24cf1ed4617ec0d03b4215d922f93f-c278dd7c29525280d7eaed20a631067b0f3958c1

Overview

General Information

Sample URL:	https://smex-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.google.com%2fdocument%2fd%2fe%2f2PACX%2d1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ%5fUPOxYmoLJIZ9VMR7vP%5fJ8ndmrPjRlbE1II4lR%5fGR0kBskRfp%2fpub&umid=91df453f-7d8a-446f-ab1f-9a0d407c6e2a&auth=856bdeb49c24cf1ed4617ec0d03b4215d922f93f-c278dd7c29525280d7eaed20a631067b0f3958c1
Analysis ID:	384911
Infos:
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish20

Found iframes

Unusual large HTML page

Classification

Signatures

AV Detection:

Antivirus detection for URL or domain

Source: https://docs.google.com/document/d/e/2PACX-1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ_UPOxYmoLJIZ9VMR7vP_J8ndmrPjRlbE1II4lR_GR0kBskRfp/pub

SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

Yara detected HtmlPhish20

Source: Yara match

File source: 64835.pages.csv, type: HTML

Found iframes

Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=811529367&timestamp=1618069204723
Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=811529367&timestamp=1618069204723
Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=146699773&timestamp=1618069206141
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=146699773&timestamp=1618069206141
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Iframe src: /_/bscframe

Unusual large HTML page

Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Total size: 1680120
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: Total size: 1687219

Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown	HTTPS traffic detected: 34.218.143.206:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.218.143.206:443 -> 192.168.2.5:49711 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: smex-ctp.trendmicro.com

Source: 77EC63BDA74BD0D0E0426DC8F8008506.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 000003.log5.0.dr, 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr, Current Session.0.dr, manifest.json0.0.dr	String found in binary or memory: https://accounts.google.com
Source: Current Session.0.dr	String found in binary or memory: https://accounts.google.com#
Source: 582e01ede6ef92b8_0.0.dr, ffc08c007b335770_0.0.dr	String found in binary or memory: https://accounts.google.com/
Source: History-journal.0.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin?passive=1209600&continue=https://docs.google.com/&followup=
Source: Current Session.0.dr, History-journal.0.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&continue=https://docs.google.c
Source: 764803163018ae44_0.0.dr	String found in binary or memory: https://accounts.google.com/_
Source: Current Session.0.dr	String found in binary or memory: https://accounts.google.com/_/bscframe
Source: Current Session.0.dr, History.0.dr	String found in binary or memory: https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.
Source: History-journal.0.dr	String found in binary or memory: https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2
Source: Current Session.0.dr	String found in binary or memory: https://accounts.google.comh
Source: Current Session.0.dr	String found in binary or memory: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=14669
Source: Current Session.0.dr	String found in binary or memory: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=81152
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://apis.google.com
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr, 952125e6-7166-4586-81f7-a71e1eb3ed71.tmp.1.dr, 90565704-ed9f-4196-aeb1-4a89eb7c05df.tmp.1.dr	String found in binary or memory: https://dns.google
Source: Current Session.0.dr	String found in binary or memory: https://docs.google.com/
Source: Current Session.0.dr	String found in binary or memory: https://docs.google.com/2
Source: History-journal.0.dr	String found in binary or memory: https://docs.google.com/Anmelden
Source: History-journal.0.dr	String found in binary or memory: https://docs.google.com/abuse?id=AKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMne
Source: Current Session.0.dr, History-journal.0.dr, Favicons-journal.0.dr	String found in binary or memory: https://docs.google.com/document/d/e/2PACX-1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ_UPOxYmoLJIZ9VMR7vP_J8ndmr
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: Current Session.0.dr	String found in binary or memory: https://risemove.com/.manage/tracking_34598451605
Source: Current Session.0.dr	String found in binary or memory: https://risemove.com/.manage/tracking_34598451605Z
Source: Current Session.0.dr	String found in binary or memory: https://risemove.com/.manage/tracking_34598451605k
Source: manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: History-journal.0.dr	String found in binary or memory: https://smex-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.google.com%2fdocument%
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 764803163018ae44_0.0.dr, 409ffab2e5f6fb9d_0.0.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/static/_/js/k=gaia.gaiafe_glif.de.U7H4_GSPiIA.O/am=A4O44Q4K0AAgAAEA
Source: Favicons-journal.0.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-favicon7.ico
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: Current Session.0.dr, manifest.json0.0.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: Favicons.0.dr	String found in binary or memory: https://www.google.com/favicon.ico
Source: Favicons.0.dr	String found in binary or memory: https://www.google.com/favicon.icoC
Source: History-journal.0.dr	String found in binary or memory: https://www.google.com/url?q=https://risemove.com/.manage/tracking_34598451605&sa=D&source=editors&u
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 003e378c-b852-4ee2-8b5e-a531710d5e77.tmp.1.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443

Source: unknown	HTTPS traffic detected: 34.218.143.206:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.218.143.206:443 -> 192.168.2.5:49711 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@49/181@5/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-6071C6B7-122C.pma

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\aa61f7c8-2268-4e70-88e9-335e74202e59.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://smex-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.google.com%2fdocument%2fd%2fe%2f2PACX%2d1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ%5fUPOxYmoLJIZ9VMR7vP%5fJ8ndmrPjRlbE1II4lR%5fGR0kBskRfp%2fpub&umid=91df453f-7d8a-446f-ab1f-9a0d407c6e2a&auth=856bdeb49c24cf1ed4617ec0d03b4215d922f93f-c278dd7c29525280d7eaed20a631067b0f3958c1'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1720 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5492 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=5412 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1720 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5492 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=5412 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

IP	Domain	Country	ASN	ASN Name	Malicious
34.218.143.206	ctp.wtp.trendmicro.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.168.33	unknown	United States	15169	GOOGLEUS	false
172.217.168.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
162.241.65.242	risemove.com	United States	46606	UNIFIEDLAYER-AS-1US	false

Domain

Country

Flag

ASN

ASN Name

Malicious

34.218.143.206

ctp.wtp.trendmicro.com

United States

16509

AMAZON-02US

false

239.255.255.250

unknown

Reserved

unknown

false

172.217.168.33

unknown

United States

15169

GOOGLEUS

false

172.217.168.65

googlehosted.l.googleusercontent.com

United States

15169

GOOGLEUS

false

162.241.65.242

risemove.com

United States

46606

UNIFIEDLAYER-AS-1US

false

IP
192.168.2.1
127.0.0.1

192.168.2.1

127.0.0.1

Name	IP	Active
risemove.com	162.241.65.242	true
ctp.wtp.trendmicro.com	34.218.143.206	true
googlehosted.l.googleusercontent.com	172.217.168.65	true
clients2.googleusercontent.com	unknown	unknown
smex-ctp.trendmicro.com	unknown	unknown
accounts.youtube.com	unknown	unknown
lh4.googleusercontent.com	unknown	unknown

Name

Active

risemove.com

162.241.65.242

true

ctp.wtp.trendmicro.com

34.218.143.206

true

googlehosted.l.googleusercontent.com

172.217.168.65

true

clients2.googleusercontent.com

unknown

smex-ctp.trendmicro.com

unknown

accounts.youtube.com

unknown

lh4.googleusercontent.com

unknown

Name	Type	MD5	SHA1	SHA256
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic	data	A78AD14E77147E7DE3647E61964C0335	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, 58596 bytes, 1 file	61A03D15CF62612F50B74867090DBE79	15228F34067B4B107E917BEBAF17CC7C3C1280A8	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	9971238E28732C2B3948FA73E80B4DF7	C62A672E381D0F5740632E45512A6CEE815B11CB	2405DC761BF7A315B56BDD0A556C93AC05B17A5D3F20B25326DEB913BB9ED066
C:\Users\user\AppData\Local\Google\Chrome\User Data\094a62ab-1f42-4b6e-8612-a63a31f5d0b5.tmp	ASCII text, with very long lines, with no line terminators	5741F2C035CD14FC53D308124AEB1280	15466BF7945E562208AB64DE5668BE2E50FD8478	96D929C1C280F8226447DD4371C6418E2DF01F2EEB6F95505DC75AFEF50ABF2D
C:\Users\user\AppData\Local\Google\Chrome\User Data\590ad95b-0437-4a87-bde0-a11663b5dbc6.tmp	ASCII text, with very long lines, with no line terminators	457CB5FF3D863C7541371ACF0D5D25C8	28DF915FA7BA8D290409D2DFBCD85215652E6342	48F79CF0E3955CA19B81E79F5277772857B33C605B1EBFBE8B7D849855B49E66
C:\Users\user\AppData\Local\Google\Chrome\User Data\69a92cea-48da-4fe6-9ea0-2636056c2f76.tmp	ASCII text, with very long lines, with no line terminators	04CDF5B07E3C97194284B57C41E9331C	269816CF1DC70A61F166FA6DB17FC81F20ADADB0	6D856636F2101A8908705C1022E7661B2A4BE8C8B91A0C30558EEC7F90F9C8D6
C:\Users\user\AppData\Local\Google\Chrome\User Data\9da7fd04-607e-45cd-a625-806dd3cba80c.tmp	data	1D5B91D5CB128BC6BA0582666DFCBC4B	9BB3F3179905E96B8BEF7C08538433457A5F190D	67F5F7FBBE42E6FA5FE3A348DF97FEC8F2694F2CF90CC169D180C878DF5F57D2
C:\Users\user\AppData\Local\Google\Chrome\User Data\9ff0bcfe-d683-463c-9241-9b34a620087e.tmp	data	0B4ADF5D337F82A3614302738EEEC889	BE5F4F30EBEF3BE350A8F5BB086589371A8DAC09	AEE0FB070862CE3603C9FE7DC8FC4B0DE3A106893827459D701D7BE7C87BC903
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat	data	569FA64ACAA310B1DE1A6250CC7356B0	14251450C245F8612958BF94779E8B72AE6D6213	AEE20ADEBF2D35EB8A39BE2DC391B0E5966EFCB4AFDC971BB3A18115C929F563
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\003e378c-b852-4ee2-8b5e-a531710d5e77.tmp	ASCII text, with very long lines, with no line terminators	829D5654ADF098AD43036E24C47F2A94	506C8BA397509BA0357787950C538C1879047DF3	4D0B852D18FCA5C1A712904CF6DB3811FB905E86D8A7508A2D42F9C8D68E2211
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\241a28d0-afa4-430b-94e4-7f84155b1518.tmp	ASCII text, with very long lines, with no line terminators	94AC3394CBEA3117ED06A1438E07DF40	BCA254C587085F9626849FA9CC7396E1724EA2E2	FD5CB0B1BEB55CF7E8E6A5706C79C6FCDCF75C44E3F76A6F4D95651E99C9F40B
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\367af831-100c-4201-9c58-27c996d56f83.tmp	ASCII text, with very long lines, with no line terminators	AB362367921E0065A7D1665E588C2689	0B77310948EA7BAC2C740424E08E56372515A4C1	44D33080BB733C90B409D0BB524A29E79A14B5C8451CEDFE62FCAAB6ABC3E9F7
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\37c60904-104f-4c74-b7ce-bd79aaa8f6b5.tmp	ASCII text, with very long lines, with no line terminators	D142EB9E07CB687B9D0640FBE18BDE6A	67D49C9C101DBE903308501F00AE0333AC6890AE	ACF843CBE0BA19ADB8A54E6D806969045FCA27E7751C7ABDC919B5F5EF493C45
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\52da9c47-7700-40af-a782-c202c922ede5.tmp	ASCII text, with very long lines, with no line terminators	5C777672D9CD0C95D64B2DD9B486F77F	0247425F7088AEC164ABE6C66E733CEB81041ACA	4886356102A6F0BA52F166D68E89CFB67BF4AA7DED54DD277C229729CBCC03C9
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6822495d-5cd5-41cd-bb9d-8658f96e4929.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	74E790AF5FF17EDD3C9B4E98A8827823	06851335680F1B517826AF102E93408E1F3C608B	39DE43F14D9EDBBE4A23E6E07BECC5EF61156B3509506D54558759CA9330AC44
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\96d62dc5-0083-4d8a-babc-0a5ffd2844e5.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	8B7E905FF5647F57A2185418538CEC52	A37CB8A3902B9E94D138A7B1AFA8E946CE2E4440	2ADD633D07D2973DA395CE23028AC9028CA077E1FFC74977903B7BD20FCD1527
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9c5f8060-b559-4e69-9cd0-7254adc19085.tmp	very short file (no magic)	5058F1AF8388633F609CADB75A75DC9D	3A52CE780950D4D969792A2559CD519D7EE8C727	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG	ASCII text	85E452806F078693C041B9295E6CB36F	13C5E79A9023FB36563F558B9D9FD0DB01BC25D7	91091EA73763BE690184A4CB3C101B509033518B58AA2D84BA7A272F0B010ABE
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG	ASCII text	0894C37B1DD469B8E3CC680BBA3BA38D	24DF168730FC35F880004C8289A441ACF64C8514	83D8EE832E2D357E21D9F6A7FA941F7F24CAC76D7AB79E8B588C4B169FFFBDF4
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\324194875fe803e7_0	data	CFCD464D9EC2C50AEBE1FEB1EF403A8B	12422F68EB494C18E4383A693123DD0306F0EA22	6D887974120EA80A405F08BD986A3B39B48C51D2A2B28BF0AE31C294AD09B432
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\409ffab2e5f6fb9d_0	data	928BEF6109D57D1EB0521ED24D8FE545	953FC8EDA075E9D40779EC84AA6B25FC855F1C59	23DD23803DF56A17D20E746A8F9E82BFD7C3270D4D98FE56596FD9612B58F7D8
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\582e01ede6ef92b8_0	data	B2A875626569B830579EAE559D249EA6	0AEB511819B08C949796967B3EFBC06A8CDAC901	8D8892954A5BECA6A85E1D7F4897D6250EC9C478FEFF8D379E8DD2F19A4AABBF
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\764803163018ae44_0	data	5A8BFE8D28EC39FE55AFAF7735C0235B	14ADE171D15E600220858ECF05E98977D71229A8	0798074A061615F2541CC750528E0CBB05FA6CDDDD7AE056AA7FD84BD697013A
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5fd096bb5d96f3a_0	data	8F4B003CADFA8E2AC763F629F5C4EC08	7B943BDB437CEC6B60C2C3879DC851380106AE5C	D9807462DE05107D1C0C2F1C7BDAC1010FADAA4B3C7DB96AB0736B8655A5BAF5
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ffc08c007b335770_0	data	D81C64AA3769771DF8B356922E1276DD	9E59F63A6347D578A6AFE073F65DC3FC9F33A0F1	288984AEB455DE8D7CEEA5C9365373007ECCB33E399D7DBF36A5607246BED86D
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index	data	6672B1CCDCA609BEB08F23DC2AD89479	5F4CCD64559434D91A40CB17139FD81B45E3A867	E8E7281B9E61FBB26F4CB57C0CF2CC10341BE4AF0E957BCBEEC7021D0C3FFC15
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	SQLite 3.x database, last written using SQLite version 3032001	92452B55906EFCC43665BE4CA38B6494	D6CB252FCDD7FF6D9F2DD071702A7532A7BB2C07	6F6A400DDB10D69ACDAE2D7899D996371BA4F440D2244E423F2502BA67CDC245
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal	data	CC4A4CEC16F9E8A034C9C38B012FE12A	4198176D2378100BF3B53E3DAA00D63B6A867D02	F520CAFC1E96910C27CEF282F72F7CF727E2941A5C45AC2322B601A90E5CA104
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session	data	726E7CE0E4E0D5A46B064AAF5ED8BDAB	721E10AC37762FA4A1239376294122D310524F7E	33BAD133AC8CC7AC8980D22982F4378BCB2C69442F16B469499F2D907DDF1F3C
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs	data	0686D6159557E1162D04C44240103333	053E9DB58E20A67D1E158E407094359BF61D0639	3303D5EED881951B0BB52CF1C6BFA758770034D0120C197F9F7A3520B92A86FB
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log	data	0A906A9A542CDF08FF50DAAF1D1E596E	B97D6274196F40874A368C265799F5FA78C52893	EB9CABBF5FDA1AD535300B0110EAA4068A083248BA928A631C9278545935426D
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG	ASCII text	73014CD907761A9621D23314C764E7B0	29B72C547806E9F37F85F65F45B4E14064640CC3	80BB63B1A133646F941038A82501456D3827589DE8B0C80E17FDB1E071A013A5
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log	data	D4BA0AE0BB0B9FAFF3DA6F35FDBC3C8A	FB3E9DEC7F35A9B1D94E54A5659DD0DE484055E7	99DEF1B557F19F04C1AFFC6F247D0451F33FC10EC42E73792223C3215AC98BE6
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG	ASCII text	FAFDE3B2B32E60AF22AEC582454888DA	085D758226D0CAD89BC4C5827F17B70FDF2C1121	73828D02340CD9F0205A7721B8CD22BE1BF170475674628A15DC251EC38084FB
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	90F880064A42B29CCFF51FE5425BF1A3	6A3CAE3996E9FFF653A1DDF731CED32B2BE2ACBF	965203D541E442C107DBC6D5B395168123D0397559774BEAE4E5B9ABC44EF268
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	6AE2135EA4583C2F06CDEBEA4AE70FA4	DCEB26C7F02D53B5F214305F4C75B4A33A79CDC2	03AA1944CB3C4F39E20B6361571BC45DFBEBD3FFDA3D8F148CC6ECB29958F903
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons	SQLite 3.x database, last written using SQLite version 3032001	AEDA887FA2F7F3D25A70B6788172EB63	5C5F048E358461514BC4C92681DE008EAC620D34	318FC5A15A092C4C3DB9EDBAD3DA0E084600101F19093C26CF2D2151F859A00C
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal	data	8E4142DF15B3DDCB05116DE9B55178DE	4ED85570A3E09C2A4B96E1700D66E43C18E2A855	694DDD6EBFAC552D85C0F9C624144F4DB3685EF38BCFB23399B4A2053E73A263
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log	data	0407B455F23E3655661BA46A574CFCA4	855CB7CC8EAC30458B4207614D046CB09EE3A591	AB5C71347D95F319781DF230012713C7819AC0D69373E8C9A7302CAE3F9A04B7
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG	ASCII text	732363C8393109B8073B0C95DA57FF07	62C3FE4E2A40CC795DA41C8D48013F0A7231F7B2	906496FFB012D549B587D2131A9200144C332E4CF732057FCA185755EE6ED648
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG	ASCII text	13C4C84ECBA66F5794691D34C0BDDE1A	EFADD64C19E70EF07850D141DF76620C6D4C2E82	4F488BF64C1C05B95D26FD7B4249D59232E3B645AE0E46079D30AA678D882031
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG	ASCII text	57D3DB6921C9DA2C89A9690BB813A521	F54F6335394027D7A59C578F5EF47A64EFB38208	38AFE940E0B70A040A0ECC2E4B2136248A662E9CB62AA44A036ECEC51F2B1242
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	SQLite 3.x database, last written using SQLite version 3032001	C48F75EA273470A5C63862894BFDE9C0	9729A755590BF3B3D31F4CFD083292D8E4B8447D	AB0D63D2506CF668458592BA0FFA721729D71735DF0084D9C97E7E33380276E7
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache	data	29C11970F5613DCCE7BF4A32E183D9D2	74C4FA348DB92A67274CC4EB412E6F07AF1C01CB	AF40EE79C7657169DAB2FE5322BECB8709B7DA2EAD2E12B5C1FEC39EF58F90B2
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal	data	2282389E7FBD1F709C43B6A160C7A55A	12F7BC89263E24A8C04D871BBF6B02B951AB2B96	E5513B2809B9D5FE566028CEF21F97E7DAFAC45E83548B3629875937F03F3998
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log	data	399279B174458A79E76334AFC9069F52	77EE6A90F8C22B7D2AA2892025A5DB7456A6DBE4	3185F84274A9AA2C6E54CDEB74249482ACE63EA49ECDDA1E4CF8470B2B1DA14E
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG	ASCII text	626121F8EE2EA6B202E83A979BC9C1D9	1F3F608DD2527ADC6E05E015F93153940BB0B96F	0C8A2AE334D0C55CFDEDB8DABFECCA870F71DC1E300041ACC2C3DF9E45CD6C1A
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor	SQLite 3.x database, last written using SQLite version 3032001	064661E81E71285A40C7CC166916FE97	5BA0A566C5385AD61BEE27D39E917504076A5875	E49AD2BC4C9E840540C622A74B3D19B92C19614C82F3B99D932645D291FD534F
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal	data	7581DF49C60F12DECFBA096D02D2C67E	3D9AF8346620867AAAD0C61967FE1FE685FCBA36	9ED78D9A792189CA46883374F4B59B69F554D083C53694AA49AFE39AC2F0A2EE
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG	ASCII text	BDD3EE0FA00856337C6D9718D2A2DD84	0CA3030FF1D94416488CFF84C98CD939434ABAD4	7139741B4F9FA17177E01B27BC20CA75F46112D17BB37988F851AB5AB5434FBB
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log	data	1B4FA89099996CE3C9E5A0A9768230E8	9026E1E0906E3B3FE0E414EE814CC5A042807A04	537818AAFD0902A8B2D58B483674391E33E762B5E1E8CD226D873098CCE9C8F9
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG	ASCII text	25B3D8242D9791EF7D96F6F6329D57CE	743E7415A31677D8ACD51BCDDF411918A72DA869	EB0818FD096E66C63A9441ACBB13334049834056A686802D821C3A9711FABE0E
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG	ASCII text	ECC62E9F9529B5A47E3C13A82826C9B3	519050BEE71FFC2CDDAD1AE692EF71D7C102099C	B8FAA5549DFB2EC6F4A973393F7A6B20B3DEA8873C2DC25A719AA0DF90033FD4
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\90565704-ed9f-4196-aeb1-4a89eb7c05df.tmp	ASCII text, with very long lines, with no line terminators	0C03D530AC97788D62D27B2802C34D83	20F78B6B32D98FA52846C70DF78E4E5CEF663E2D	7941FADA9867DAAE08EBC196BAFC6952DD506842C3E7D8FB14DF9D4E402D894B
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1	data	C4DF0FB10C4332150B2C336396CE1B66	780A76E101DE3DE2E68D23E64AB1A44D47A73207	18FAB4D13CDA7E1DEE12DC091019A110A7304B6A65FC9A1F3E6173046BA38EF6
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG	ASCII text	7170D8BA157492179A7CD37D87CC2227	72CBAB5F82CC22805943AB54B3F8F113CD275C30	65F4012293497C9BA7D15A1333026FAEC53262347EDEC17EAE057BC001ECEEFC
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG	ASCII text	E795CDFEAEA71B3CA3D1F1E55E5C05F8	07E00E36B753AD1B6404A9AFAB81952EF6AAEDCE	CCD2EBECA7DB8694A7D1D045A73DD622470A5F83501F2E225E2329B71B37C5BF
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log	data	E556F26DF3E95C19DBAECA8F5DF0C341	247A89F0557FC3666B5173833DB198B188F3AA2E	B0A7B19404285905663876774A2176939A6ED75EF3904E44283A125824BD0BF3
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG	ASCII text	9A5C1081FFE1E8BA6F3CE18CA1ED7D2E	4F5A6442C63CBDAABD69B54D28CB028F6A5CE465	6CA513DCD4616A455CC05B8CD4049243CD84B900FAC36B18BE71162FC6F88406
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\952125e6-7166-4586-81f7-a71e1eb3ed71.tmp	ASCII text, with very long lines, with no line terminators	5886A009EB58EE06A16EFD6D1BA9A046	A867B5052F3FBB811693DF8CE3FDAA794F2F2E40	9E3392126DE2D81D019E0AB3E17F20BADD0EC9FBD944BCB7C4DAF449D937D496
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1	data	C4DF0FB10C4332150B2C336396CE1B66	780A76E101DE3DE2E68D23E64AB1A44D47A73207	18FAB4D13CDA7E1DEE12DC091019A110A7304B6A65FC9A1F3E6173046BA38EF6
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG	ASCII text	205730E283D5162F3A65827D2184C372	848C901C0DA6EEB5BAC602352770B3B5F04094DC	D07DE550D549644D9BB91073D67614D4ADA072A36355035C966B6C371BE2D967
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG	ASCII text	A3B6D6F4B9764C592BDB5195A6404677	111DD06DAA6126AFEBB7DAB4B5BEE27F04B2E6E7	FC70DBFED1834CE1553E154F5D7FF710FEFA536CB7D513C6987688A4634B301B
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log	data	E556F26DF3E95C19DBAECA8F5DF0C341	247A89F0557FC3666B5173833DB198B188F3AA2E	B0A7B19404285905663876774A2176939A6ED75EF3904E44283A125824BD0BF3
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG	ASCII text	9B1B297F84C60BB6B7192335AB2B4FDF	CDA45837528514F9334ECA3CC281D994FD6C3E42	66B403064C27F2E7834CD87D8F9BDA5F6A1CEA20B58AB8F013D806DBBFC37B42
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log	data	45A8ECA4E5C4A6B1395080C1B728B6C9	8A97BB0E599775D9A10C0FC53C4EDB29AA4CEB4E	DB320AB28DFF27CDA0A7F87B82F2F8E61B3178A6DE8503753D76F1172D32E08E
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG	ASCII text	8C36E5714439E6C6A446DF92468D7253	F5ED239A099C7090E6082608324DCBB46D9E1BD6	4E375669911DF7B7894F5D85800B4791F87A51E95AC95908D38F654DDD9DAB93
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG	ASCII text	A69EB291A5938C8BEE96366065BD8A2F	BD145FC0D3E4C63E526F183A69115B5A135F9A4D	0AF413F0C8A127AEACE1BB4B0B56C11996869AF43ADD085361AE3DD71B0D6DE4
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links	data	C0E41EE9E58BBEAC64935D35B89185E9	9891D79A68584E02203E47E069C80D3696127D38	F55206C76DF9164404D185752A910294FF237019CA4362C228E484FAF9D5CC01
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ae695731-5a5d-476c-b953-416d4f19a2c9.tmp	ASCII text, with very long lines, with no line terminators	D16E299FDABB72D7DB9384E7522FED7B	7FD54D7BFB7313220076EF4C7E4BC6B9B091077B	B243804775FF30EABBC56FDD047D3780A819B81D2F3E8B36B2A2E06CCECB8318
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d4cea2ea-c79f-4a30-ac3a-343b2f26b85a.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	5FFCEDF17C2D80CFEDC0D83147953DB8	141B1854EB6BEE1ACE91F5A29BB7C0FABC7783FF	233D939DE1A4FC7D3603447E9565AF7F74A96D8400D4EC46C56549CB8AF9F538
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp	ASCII text	6752A1D65B201C13B62EA44016EB221F	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG	ASCII text	EABB8613464B5E9E48C36CB51378BBFA	41A40189DA89F8F6D02F90FD08F40339A7562223	B6FED2FB97ACC2313A1C31DF2CFFCB619BB4D4A21D71D0D487A5C0FD9F250AC3
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004	MPEG-4 LOAS	031D6D1E28FE41A9BDCBD8A21DA92DF1	38CEE81CB035A60A23D6E045E5D72116F2A58683	B51BC53F3C43A5B800A723623C4E56A836367D6E2787C57D71184DF5D24151DA
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ebab8e34-abae-45b4-b99b-d27a81f42e7f.tmp	ASCII text, with very long lines, with no line terminators	F589B5CDB7B6A88CCF3C8C0D4B9DA6C8	3F3048746B2426F5EB1FC3E4F46C6557FEB698F7	D1EF955242080B1F5AA2AF577DF3BAB1D74574DDB5C53CAC8C7A854B68DB6D2A
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f4964043-f852-48bf-a178-ffbc8ab3e6ac.tmp	ASCII text, with very long lines, with no line terminators	94A4C536C54CD0044E0CDF8005CC486D	ADFB073AFDAB6BA1F6ACBE41579BC6F8960A8FE2	59946481D38881F4FC75430E30D0D51A46C1D1B98DB2421077F9FD4E6DF4D078
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG	ASCII text	E0761DF7DAAFEFD665858718A0ED028D	654FD16F04C9EDFCEEF5ABB3DCF712EBE08961E0	C0376ECCC0C4E98FEE81EA03EF2931101EA3FCC3BB7419AD780F0A62DB84C234
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser	data	DE9EF0C5BCC012A3A1131988DEE272D8	FA9CCBDC969AC9E1474FCE773234B28D50951CD8	3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version	ASCII text, with no line terminators	C422F72BA41F662A919ED0B70E5C3289	AAD27C14B27F56B6E7C744A8EC5B1A7D767D7632	02E71EB4C587FEB7EE00CE8600F97411C2774C2FC34CB95B92D5538E7F30DA59
C:\Users\user\AppData\Local\Google\Chrome\User Data\a2cfdc6c-ea91-44b4-a082-ebfe84ac6684.tmp	data	02620C57147D95E6AD9F56BA544C5510	58665EDB965179BAD8D9D6BE9CAB62D2AC885526	55CE61AC71F15F34DE64542572AB61EBA9D94ADD25403711189CDFA655A3B518
C:\Users\user\AppData\Local\Google\Chrome\User Data\bacdb599-5df3-4dc4-b5ea-e04efd1b7272.tmp	ASCII text, with very long lines, with no line terminators	2DEA15FD2EEF84C54EE644CB4A95D81B	9850CBDF54C11896F4483BC628FE928702A66D6F	6D7D5FA3CC2C0076A753970F80DB82377E3A57C9ED28E1C7B39C00799589F71C
C:\Users\user\AppData\Local\Google\Chrome\User Data\df8a86be-537a-4059-a5a4-4161848828c8.tmp	ASCII text, with very long lines, with no line terminators	49B8ED7ED7FFBE7AC8E3BB336CD0EE18	A64104C2AE8107F92AB405686C69E8A1DF49947B	37D7A796EDFFECCDD64A5C958397EB821C2E1CCB8F1C946ACD30DCDB5813A4DC
C:\Users\user\AppData\Local\Temp\973ed0a7-7dd9-433d-b058-321b32d0d1ef.tmp	very short file (no magic)	5058F1AF8388633F609CADB75A75DC9D	3A52CE780950D4D969792A2559CD519D7EE8C727	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
C:\Users\user\AppData\Local\Temp\aa61f7c8-2268-4e70-88e9-335e74202e59.tmp	Google Chrome extension, version 3	541F52E24FE1EF9F8E12377A6CCAE0C0	189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6	81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
C:\Users\user\AppData\Local\Temp\ace7ba60-63a1-4b37-8fa1-178d8b76dc3e.tmp	very short file (no magic)	5058F1AF8388633F609CADB75A75DC9D	3A52CE780950D4D969792A2559CD519D7EE8C727	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
C:\Users\user\AppData\Local\Temp\f3a56190-eabb-4817-9e10-296ac20ea460.tmp	Google Chrome extension, version 3	A11D5CAF6BF849AEB84B0C95B1C3B7CF	27F410CCBD75852C01C7464A1FD7EF8C29BE3916	D0E62ACE64AFC334330A7AC3A2CC657914FEB321F1F89AEE11D2A6D0E7D81C31
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\bg\messages.json	UTF-8 Unicode text, with CRLF line terminators	6F8E288A9AD5B1ED8633B430E2B4D4CA	F671D3D4BEFA431D1946D706F4192D44E29B6F08	A114E2783D0E9B12155017323BA70838F0F82A71C7EE8DC1F115AE36991241F8
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ca\messages.json	UTF-8 Unicode text, with CRLF line terminators	1FDAFC926391BD580B655FBAF46ED260	C95743C3F43B2B099FEBEBC5BD850F0C20E820AC	C67898B67F9C9209EAFDA6532B62D5789863CFB855998DD6A70E7775316CEC20
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\cs\messages.json	UTF-8 Unicode text, with CRLF line terminators	76DEC64ED1556180B452A13C83171883	CFB1E56FD587BCDC459C1D9A683B71F9849058F9	32290D69A90E6BAAC428B10382C99221B12773BB9A184F3B93DFB48A4F6D7A40
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\da\messages.json	UTF-8 Unicode text, with CRLF line terminators	238B97A36E411E42FF37CEFAF2927ED1	4E47AC90BA24C8F4724D9293FA40CFD4ADA66FE0	4977D4A053542FF66967FAED6B06585DD70E68E20BFEB533B66FE3287F9655D9
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\de\messages.json	UTF-8 Unicode text, with CRLF line terminators	6B3E916E8C1991AA0453CBA00FEDCAAA	D6366D15912E40CA107FD42BFE9579C3336A51F9	A62FFAB910E31531758EEE48B2CC71A8857BEC3021DEAD50B668CBA3C8667053
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\el\messages.json	UTF-8 Unicode text, with CRLF line terminators	05C437A322C1148B5F78B2F341339147	AB53003A678E44A170E73711FBD9949833BBF3AA	A052C32B4FCAC61152EB0ADB2C260FB6A8256AD104AA0013DB93E9798D41A070
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\en\messages.json	ASCII text, with CRLF line terminators	91F5BC87FD478A007EC68C4E8ADF11AC	D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6	92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\en_GB\messages.json	ASCII text, with CRLF line terminators	91F5BC87FD478A007EC68C4E8ADF11AC	D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6	92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\es\messages.json	UTF-8 Unicode text, with CRLF line terminators	82719BD3999AD66193A9B0BB525F97CD	41194D511F1ACC16C1CA828AC81C18C8C6B47287	4DB9B2721E625C18B9E05C04B31AF5D9694712F1CAAF6219ABE34BB08E5DB1C7
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\es_419\messages.json	UTF-8 Unicode text, with CRLF line terminators	6B2583D8D1C147E36A69A88009CBEBC7	4D4DEEB4BE6AA0181825F3371A761ABC5B4D5937	6659BC3705311D7641A73995DCFEA80C7734F2F4EBBC3787B3892A240348324F
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\et\messages.json	UTF-8 Unicode text, with CRLF line terminators	CFF6CB76EC724B17C1BC920726CB35A7	14ED068251D65A840F00C05409D705259D329FFC	C85800BF45942FCC7FD6B1DF929C25F9CC2A977A6678966BD03D4B6B69889AFD
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\fi\messages.json	UTF-8 Unicode text, with CRLF line terminators	3A01FEE829445C482D1721FF63153D16	F3EAAADDC03F943FC88B30B67F534AA13E3336DD	0BDE54B20845124113383B6EB81E43A0F05E4EB0C44BEE3C1DFAC4CC5FEC2836
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\fil\messages.json	ASCII text, with CRLF line terminators	57AF5B654270A945BDA8053A83353A06	EEEF7A4F869F97CF471A05D345E74F982D15E167	EC002ED92359F67818B49455DFC579E140368E6A004080AF022FD4F57F6B03F2
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\fr\messages.json	UTF-8 Unicode text, with CRLF line terminators	8D11C90F44A6585B57B933AB38D1FFF8	3F9D44EA8807069A32AACA2AAAD02FD892E6CC90	599491F8C52B945C16C441ADF45BFD45AFAE046DA07757D97C56AF4DE75ED3B5
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\hi\messages.json	UTF-8 Unicode text, with CRLF line terminators	E376D757C8FD66AC70A7D2D49760B94E	1525C5B1312D409604F097768503298EC440CC4D	8106D98C4F8DA16DB698444409558E29CC96735E188BFA303C333A5D99231C1D
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\hr\messages.json	UTF-8 Unicode text, with CRLF line terminators	8185D0490C86363602A137F9A261CC50	5BD933B874441CEACB9201CCC941FF67BAED6DC0	A2B2EC359A9DD9DCCCE02859CE1E738BD30FAA4A05F1DC522893FFDF722BBC15
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\hu\messages.json	UTF-8 Unicode text, with CRLF line terminators	85609CF8623582A8376C206556ED2131	1E16EB70DB5E59BB684866FF3E3925C2DEF25A12	32A249749F12ADB6A220BF9ADC272C7E5D9AD5497A38B0086D961E3ABA17FBC6
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\id\messages.json	ASCII text, with CRLF line terminators	EAB2B946D1232AB98137E760954003AA	60BDC2937905B311D2C9844DF2D639D7AC9F7F67	C6E8800450602DE0F39FE9F6854472383813FB454B08ABAE7E25A9167CE004C3
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\it\messages.json	UTF-8 Unicode text, with CRLF line terminators	A328EEF5E841E0C72D3CD7366899C5C8	2851ED658385804E87911643F5A4200B1FB26E13	CD891C45F7586FB4A2514205A11F260E4A6D4482FA03D901909DD9F57BE0536D
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ja\messages.json	UTF-8 Unicode text, with CRLF line terminators	9B3A5D473C3F2BBFAEECE94A07A940B8	61BACA342CF766BBA15C7B4D892A0E7DAC9405AA	706312A4A2AEF3317223F141EB2B82685345B7EED444F16BB4DF3A272716DA1F
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ko\messages.json	UTF-8 Unicode text, with CRLF line terminators	9F6B4D82A70C74CA751E2EAE70FAB5CF	0534F125FFCE8222277CF2BE3401C59DAF9217F8	D1467B8D037114403E8F4EFC52E88C4A7FEB96126BE4CFF883FEFF1084EF7E68
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\lt\messages.json	UTF-8 Unicode text, with CRLF line terminators	4CA644F875606986A9898D04BDAE3EA5	722A10569E93975129D67FBDB75B537D9D622AD1	7C311AB751D840D750C11553C083785813E079C1D464FE568A98C9E3EF3DB96C
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\lv\messages.json	UTF-8 Unicode text, with CRLF line terminators	C5CE2C51391EAFD3DA9E4C71549A3C28	1F67FF6EF6E90C0CE3AAF56ED543A3EFD381574D	1FA1DF2CA8516DEF490FB8484E9AA498ACFF80EEF5C9258FFE42D3678E6C7DED
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\nb\messages.json	UTF-8 Unicode text, with CRLF line terminators	93C459A23BC6953FF744C35920CD2AF9	162F884972103A08ADB616A7EB3598431A2924C5	2CD700AEB57D89C2E73333D0702556EE3FF3863516170F85669BC680FCBDC4E0
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\nl\messages.json	ASCII text, with CRLF line terminators	7A8F9D0249C680F64DEC7650A432BD57	53477198AEE389F6580921B4876719B400A23CA1	92BE7C2DC9CFBE5A65E9CE6488D364C8D7EC19E7B67A31E4D43C1CB2B169671C
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\pl\messages.json	UTF-8 Unicode text, with CRLF line terminators	0E6194126AFCCD1E3098D276A7400175	E8127B905A640B1C46362FA6E1127BE172F4A40F	E2699F98C511B18A2AFB82EAE9A4804B646C4FF1077D80E77C17A3943A6373C2
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\pt_BR\messages.json	UTF-8 Unicode text, with CRLF line terminators	86A2B91FA18B867209024C522ED665D5	63DEC245637818C76655E01FCB6D59784BC7184E	6374880FDD1F8AF1EE8AEA6A06B73BE0AB265AFCEB4FE6F08BDE3B3989264B21
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\pt_PT\messages.json	UTF-8 Unicode text, with CRLF line terminators	750A4800EDB93FBE56495963F9FB3B94	8BFB915488A4EB3CB33D68E2E59F1F8447DB7D61	C1C94F65FABAF17DEF98A8587711A56D61B1E5607500E9B01F2824DB109F9E83
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ro\messages.json	UTF-8 Unicode text, with CRLF line terminators	98D43E4B1054A65DF3FA3CC40AB6FB6D	46E0A21C4DA2BB5D4D8F837AE211C1B6FA26E7E2	113A13900CBA62FE8AED06751971C23A80A99B47F9BE219CF884D57DB19611D9
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ru\messages.json	UTF-8 Unicode text, with CRLF line terminators	DB2EDF1465946C06BD95C71A1E13AE64	FB4F3ECE9ECECEBBC6CA2A592A15FB9C1FDFB811	FBAF22CE6E16DE174CED8CB5EA3098CCA1C3426A2111FF33BD3E64DA64ED67AB
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sk\messages.json	UTF-8 Unicode text, with CRLF line terminators	8DF215D1EFBDABB175CCDD68ED8DCB0A	2B374462137A38589A73FDD00A84CBDC7E50F9F4	7FA16AF97E6CFC52EC6008EB679D3F30E7E0C24F9EF2D18A9228EAF4DED9D63B
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sl\messages.json	UTF-8 Unicode text, with CRLF line terminators	3943FA2A647AECEDFD685408B27139EE	0129DD19D28373359530B3B477FE8A9279DABB7D	18AFF072EE0DF7C3495045435C752A805606E6D5D462EF2321C443F1773F4B3A
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sr\messages.json	UTF-8 Unicode text, with CRLF line terminators	D485DF17F085B6A37125694F85646FD0	24D51D8642CDC6EFD5D8D7A4430232D8CDE25108	7FFDE34C58E7C376C042DE64DEF6481DAE32BE8B70F0B18EDF536290CBE0C818
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sv\messages.json	UTF-8 Unicode text, with CRLF line terminators	D372B8204EB743E16F45C7CBD3CAAF37	C96C57219D292B01016B37DCF82E7C79AD0DD1E8	B8BA77E0089B0676545EC16D32468B727812B444F90B33A7A5B748E6C36C4388
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\th\messages.json	UTF-8 Unicode text, with CRLF line terminators	83E2D1E97791A4B2C5C69926EFB629C9	429600425CB0F196DDD717F940E94DBD8BFF2837	2FECA577F43D97BAEEA464741D585892103585208FD0A935B810A03BDCE83C88
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\tr\messages.json	UTF-8 Unicode text, with CRLF line terminators	2CEAE0567B6BB1D240BBAD690A98CA3B	5944346FBD4A0797B13223895995CAB58E9ECD23	A7CB86F30C9C31FE5540282C308BA96ADB4EC16EF98C87129EB88105E5BEF5FC
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\uk\messages.json	UTF-8 Unicode text, with CRLF line terminators	AB0B56120E6B38C42CC3612BE948EF50	8B3F520E5713D9F116D68E71DAEED1F6E8D74629	68ABA284751EB9C856032062EF9B1651E2A1E5CE5FDA0977FFC97D63BA7BED9E
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\vi\messages.json	UTF-8 Unicode text, with CRLF line terminators	7EBB677FEAD8557D3676505225A7249A	F161B4B6001AEAEAB246FF8987F4D992B48D47BE	051F96ED874C11C4A13589B5F68964E4F5B03B52DDA223D56524F2CA23760C04
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\zh_CN\messages.json	UTF-8 Unicode text, with CRLF line terminators	BB73BF561BB79F89D9BF7C67C5AE5C65	2FADD3A1959B29C44830033A35C637D0311A8C9C	D804F2A040D21D7511EFD5213D8E1721D64964A1A0DBB48E21622CEEDC9D967E
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\zh_TW\messages.json	UTF-8 Unicode text, with CRLF line terminators	5FF50C673CC0C661D615F0CFD0E6DCA0	60DFF98DEAB9C4746B288BDD9C94B3BCAE5EAA85	C6F8C640F3353A7B9B1432A0C139C1AEEC40133800E6C9B467B63991AD660308
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\images\icon_128.png	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced	4DBC9F9E6F5A08D299BAC9E54DF07694	BB38F5DE34B1E0BE1109220BA55271087A4D9EA5	91C2718DD23B4356D71F88F6146868369033291086DF327534546DFA459BEB0E
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\images\icon_16.png	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	FB9C46EA81AD3E456D90D58697C12C06	5FC450F7D73CCFAC8F0D818CB3392BA4D91B69DE	016CA659BA080E194FBFC0929602B16506ED60AA6019FAA51410C4FD93B583E8
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\manifest.json	ASCII text, with CRLF line terminators	01334FB9D092AF2AA46C4185E405C627	47AD3C0E82362FFE5B881DF8D71D6F79AB7F5796	F52714812D68C577A445169D11E84DF6751C2D6886BC429643072BB5D61C6C27
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\aa61f7c8-2268-4e70-88e9-335e74202e59.tmp	Google Chrome extension, version 3	541F52E24FE1EF9F8E12377A6CCAE0C0	189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6	81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\am\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	26330929DF0ED4E86F06C00C03F07CE3	478F3B7E7A7E007BEE182B89C2EF6FFE6045E92C	621B5139ED199022BB6529AF18ED4DC312AE9F3E90ECAF3B2C9E1D12114F5B22
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ar\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	44325A88063573A4C77F6EF943B0FC3E	78908D766F3E7A0E4545E7BD823C8ED47C7164EB	67A439A08804EF4BEF261BDBADD8F0FEFD51729167D01EDCA99DD4AF57D6108B
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\bg\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	6911CE87E8C47223F33BEF9488272E40	980398F076BB7D451B18D7FDE2DE09041B1F55AD	273DEF0F67F0FA080802B85EF6F334DE50A19408F46BDF41F0F099B1F5501EEA
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\bn\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	F9DDF525C07251282A3BFFCEE9A09ABB	A343A078E804AF400A8F3E1891E3390DA754A5CD	C69C6C90F7EB8F10685CD815AF1F6F1B87CF30C4E8D95DF1D577DE1105AAD227
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ca\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	A90CF7930E7C3BEC61EE252DEFAD574A	F630CA01114A7BDD39607CB84B8280CCE218A5C6	A533740E17559E2ADF40B4555C60F21EEC84E92C09CDBC19EED033A0B4DD2474
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\cs\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	17E753EE877FDED25886D5F7925CA652	8E4EC969777CC0CEB7C12D0C1B9D87EBBB9C4678	C562FCCFCE374D446BFAC30AC9B18FF17E7A3EF101C919FF857104917F300382
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\da\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	F08A313C78454109B629B37521959B33	3D585D52EC8B4399F66D4BE88CED10F4A034FCCC	23BF7E5EDF70291CA6D8F4A64788C5B86379EECB628E3DFA7DD83344612F7564
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\de\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	980FB419ED6ED94AD75686AFFB4E4C2E	871BFBCA6BCBA9197811883A93C50C0716562D57	585C7814AFD2453232BC940252D4AE821D6E6CBCFD74A793F78E5DB8BA5342F1
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\el\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	40EB778339005A24FF9DA775D56E02B7	B00561CC7020F7FE717B5F692884253C689A7C61	F56BF7C171AA20038EE30B754478B69A98F3014C89362779B0A8788C7B9BEEE1
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\en\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	8351AF4EA9BDD9C09019BC85D25B0016	F6EC1FFD291C8632758E01C9EE837B1AD18D4DCF	F41C82D8A4F0E9B645656D630C882BE94A0FB7F8CEC0FE864B57298F0312B212
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\es\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	8A70C18BB1090AA4D500DE9E8E4A00EF	8AFC097FA956C1317DB0835348B2DA19F0789669	FF173D1CEF665B1234E02F11070ABD2B65230318150734579A03C7F31B4AE3F4
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\et\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	A62F12BCBA6D2C579212CA2FF90F8266	F7E964A2D9BBDA364252BCE5CFBA3FD34FDD825E	3EB3EB0B3B4A8E5A477D1B3C3A3891CCC7DC6B8879ECE243A7BD7C478068273D
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fa\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	852BD3CFF960F1BC3A2AAB3CB3874EF9	C9F6F3C776542889FE3B67971D65ACFE048A3A0A	D87597B6C10364501B98AA42524843F109009CCEF022D8E0170440D7F144F4C6
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fi\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	3902581B6170D0CEA9B1ECF6CC82D669	C8208AC2B1DD6D4F8BDAAE01C8BD71FFFA5A732B	D2A8180225A83A423BB6E17343DFA8F636D517154944002ED9240411B8C0C5E1
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fil\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	59483AD798347B291363327D446FA107	C069F29BB68FA7BA2631B0BF5BBF313346AC6736	DD47530EAE96346CD4DC3267A0BB1091BB17B704803A93CDA2E3E81551B94F12
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fr\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	9B416146FE4F1403C2AACAC4DCF1A5C3	616F055C9FAD4CE972DF82EC8A9B2F4EDA3E7FAD	7C7F5758F54008190ACCDDBD1761CBD980FB5FE0847E992874498228D2571DBC
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\gu\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	68B03519786F71A426BAC24DECA2DD52	B8E6608932EC5CEC4BC3C5475BFC3E312D2E2E7D	C77A4D27E9E6CA25B9290056D93A656E3EBE975957E4C2EE9F0FB11B133D5CD4
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\hi\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	20C86E04B1833EA7F21C07361061420A	617C0D70E162CF380005E9780B61F650B7A39F9B	C2C27CA242DBDE600BA3AA7782156BC2B190A64D8A1B51EDC8007BDECA139553
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\hr\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	3ED90E66789927D80B42346BB431431E	2B061E3271DF4255B1FFC47BDB207CDEC0D9724F	0B41E3C42414F72C9A12C05F8772597F9685115366A774C66018467AD4B71A74
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\hu\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	8E9FF7E49473C5734A2F6F0812E12EB3	A4F10DDD1580582533D5EB59EDF6D8048F887C81	6CDD2FB39ADECE00E88B989E464B05ED1414092D0492F6D0AE58D549BFD1A46A
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\id\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	7ADF9F2048944821F93879336EB61A78	C3DA74FB544684D5B250767BB0CB66FFB7C58963	3630947E1075E3663AD3E4824D0BE42CB47C0D615D8053E83B9595047C8BA9BE
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\it\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	BB3041A2B485B900F623E57459AE698A	502F5EA89F9FB0287E864B240EA39889D72053A4	025737EF8FA06706B3F26D0F52B4844244A6D33DAE1D82FEF2931A14C003D57E
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ja\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	6F2CC1A6B258DF45F519BA24149FABDC	8A58C7880C6D22765DCBB6BCE22A192C1B109AE1	42ECFEE727CFC4F2845FEFDACE5EDC2E0A40AFAD69973A3B950CE653A7633342
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\kn\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	2E3239FC277287810BC88D93A6691B09	FC5D585DA00ADC90BF79109C7377BD55E6653569	5FC705AD19761204D8604EA069936A23731B055D51E7836CAAF16AC7719FBEEA
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ko\messages.json	UTF-8 Unicode text, with CRLF line terminators	E303CD63AD00EB3154431DED78E871C4	3B1E5B8E2CF5EBDF5D33656EF80A46563F751783	FDE602BFDB1AFD282682DA5338C4F91D8A2F6CB5411DB8F62F4583D629CE67A6
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\lt\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	93BBBE82F024FBCB7FB18E203F253429	83F4D80F64FA2ADCE6C515C5F663BD38A76C51DB	E7A8570922CCC4F2CA3721C4E61F426158C4E7BC90274FBC8BE4040FF8B6CA9B
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\lv\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	388590CE5E144AE5467FD6585073BD11	61228673A400A98D5834389C06127589F19D3A30	05CA14196CA5D90B228C0F03684E03EBE403A3E7B513AE0A059244AE12B51164
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ml\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	2AF93901DE80CA49DA869188BCDA9495	E60DF4F2FB12BD3F1CA869DAD9F6BDE0C17CEB11	329E80AEE1212F634E180DEF7E16D6E38D9C9FDA9AC9DB1D99B8AE1626EF304E
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\mr\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	659F5B4ACA112D3ECBB6EC1613DDE824	5DEE35FCD260554999F8DDEC489FBA9F81FA8EEE	C8B765E7A07578BC078A952E151E3B866506959E15E79E9E5E1DBB98F9C4008F
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ms\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	09D75141E0D80FBD3E9E92CE843DA986	B24EAB4B1242C31B69514D77BC1DB36A3F648F40	8F1DBDEFD910AD88BEEC7956619CDB34391D6E69254C3A7497E8F87134AE8B5C
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\nb\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	ED99169537909291BCC1ED1EA7BB63F0	5F72D51B6DBE8C622EF33D2B2AEBD7E9E20DAFB3	65B6598225ADA1E14EE9CB76CA863708E8F9EE0724B4EDC8F9508532BD631BAB
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\nl\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	E9236F0B36764D22EEC86B717602241E	DE82B804B18933907095DEF3F2EF164C1BB5F9B6	300F4F7C45EBE39EAAF40776C28D0A399A710699AAB58E9A8D43A6FD2DD00376
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\pl\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	8254020C39A5F6C1716639CC530BB0D6	A97A70427581ADA902CA73C898825F7B4B4FAC8F	2F4E4FC6AEB4A8E7F0E0DCE220D66E763F4EBF1FA79985834D636C6692FEA3E8
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\pt\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	FABD5D64267F0E6D7BE6983AB8704F8C	D4DAAD0FF5C461C51E6C1FD22B86AFC5B13E123F	D82DCA262FF005668B252B478DEDAAC4A5C1E417AF9DE57C22F169A6680183AE
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ro\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	75E16A8FB75A9A168CFF86388F190C99	C27CE4C1DB3DF2D232925C73DC9AC1FA24DAD396	9C4716FF42A730F1E7725F0D9E703F311E79FDA31F85B4BB0B8863FC3C27AB9D
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ru\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	8EF94823972EA8D2FC9BB7EC09AB1846	4171DC9CE9D82FDA5A280517A1FE58C907D75CE3	1009DB9FFA64E411B31E0780EBA43B9C9F8B05B5AC8CCA9A38514650261ABB0A
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sk\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	C314FAC15AFF6A2EE9C732C64AB5A66D	D51F3362B5FDD2F3756DE42D7D6227DC818C6344	8EE2A25A09D6D0F89063FAA34BA2BC4DB505DD31FE6D5064C5D6E1E153721484
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sl\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	F60AB4E9A79FD6F32909AFAC226446B3	07C9E383D4488BEBE316CA86966FC728F55A2E32	CDE581E6E7CF0136B003B45549E3BBEE7B67B74ADD786A8D5607BFDAD1DE7B87
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sr\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	4E233461D805CA7E54B0B394FFF42CAB	77F30833FC73A4C02C652C9E5A6EAFE9C3988A30	E1E1C64213EBF2CFEB7BA83E51B697CEA449B3A8B279B1024B859228DE869879
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sv\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	897DAE6B0CF0FDE42648F0B47CB26E06	E1F5F5F65AF34FF9484AB2B01E571EAF19BA23D0	52656C24F6F6D0F3B3FC01E9504C4D5CEB85624F1B22E974CA675DD0E94EB82D
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sw\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	EC233129047C1202D87DC140F7BA266D	537E4C887428081365D028F32C53E3C92F29AAA6	28EDBC5C4858217811D45CAA215710E452C8926E4DE99F810001AD664D08BE0D
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ta\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	C50C5D2EDFC79DBDCBD5A58A027A3231	14314D760A18C39F06CD072CF5843832AFB86689	EEB0E89D5AD92B80FF08F88533A111DB3416D7C3860C64227D1CC8B7C2B58298
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\te\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	F740F25488BE253FCF5355D5A7022CEE	203A8DF19BA5A602A43DE18E99A6615D950C450E	5B9C96CB5D62510836B321EB9CEEF23865BB9D4DC4DE7716E90A858E00701FDF
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\th\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	9F926FCB8BAEA23453B99EA162CCDEA1	04D1E45591C0435A39DCA00A81E83E68585E8B64	100463C587F549C964A4EB21EA38EA1B4ADEF11E927FAC8FF884623B77202C02
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\tr\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	B0420F071E7C6C2DE11715A0BF026C63	F41CC696786B18805DB8DC9E1E476146C0D6BE90	309F946F753DF6AF5C255D772EA0D429462152F78ABA4A96A2E369707A2C6B67
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\uk\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	FF06E78C06E8DFF4A422EA24F0AB3760	A434D1CE22DE0D2FD1842E94F5815F7B1972D1EE	E209FDEF12CCEC03B4E0D5B9464F90D527E62C5BC4DD565C680661D7F282AB02
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\vi\messages.json	UTF-8 Unicode text, with very long lines, with CRLF line terminators	C3A40E8433D96D7E766C011D9EC7502B	EAB7BFAE48B1D29B95A8AE040DE94D3500824EE3	BD3D0F8CF100C96415B224011F550082D4516593CBD3631347748B7D6AD5B85A
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\zh\messages.json	UTF-8 Unicode text, with CRLF line terminators	D4513639FFC58664556B4607BF8A3F19	65629BC4CBBACA498F4082DD5884C8D3D7DDDC8A	C6D49997A9B4FF7FE701EC3644B1A523679A27778FB4BD39B7DBCA9F1ACCE595
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\zh_TW\messages.json	UTF-8 Unicode text, with CRLF line terminators	494CE2ACB21A426E051C146E600E7564	D045ECC2A69C963D5D34A148FE4A7939DE6A1322	A1053F9496ED7FA3C625C94347F07A5E760F514FD8EE142EC9EE64E86B9C063D
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\manifest.json	ASCII text, with very long lines, with CRLF line terminators	F76238944C3D189174DD74989CF1C0C6	85CE141EC8867B699668A5F5A48F404C84FCEB04	2EF48A1CF322DE356E8844DD2FD3431E8E7ACD04770649B6507EACA5ABDB53A7
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\f3a56190-eabb-4817-9e10-296ac20ea460.tmp	Google Chrome extension, version 3	A11D5CAF6BF849AEB84B0C95B1C3B7CF	27F410CCBD75852C01C7464A1FD7EF8C29BE3916	D0E62ACE64AFC334330A7AC3A2CC657914FEB321F1F89AEE11D2A6D0E7D81C31

ID:	384911
Product:	CloudBasic
Start time:	08:38:51
Start date:	10.04.2021
Cookbook:	browseurl.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains