Automated Malware Analysis IOC Report for

Files

File Path

Type

Category

Malicious

https://www.stopcovid19.jp/

URL

initial url

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Microsoft Cabinet archive data, 61020 bytes, 1 file

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9096A354A7A3E42F3F619F51DB75C6B9

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8408FE5CA4467EE4DA84A76EF238FE3

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9096A354A7A3E42F3F619F51DB75C6B9

data

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8408FE5CA4467EE4DA84A76EF238FE3

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\07f5191b-c2ea-4d7b-a268-9f1ccca25e8f.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\13361eca-bb5c-4842-980a-caf29adaab87.tmp

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\17bbf285-ef36-4d74-b191-6b129e999017.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\5309e44f-d887-4a85-bdfc-f4027bbc3263.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\6e75c698-35a5-4636-ad04-2f20ab382cbe.tmp

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1257eab8-61d5-486e-a5fb-d5c82d2aff9c.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1bbb7ac5-a5d1-41aa-a307-d7baa5c040dd.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1fc45c48-6085-4afb-a115-60203fe8089c.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\392c3e29-f64a-40b8-a373-0015566343ae.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3d35275f-adda-489f-bd74-6e45d6c7ac62.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\45bbe0ee-f342-4060-b567-48c1d93cd8fc.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\62d29eba-b592-409f-9efa-bab7873c3b4a.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\80f55b8d-8fd2-440a-a15e-19001067ad39.tmp

UTF-8 Unicode text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\82c086a3-9b05-4929-971a-eb41cb71f415.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9204a067-40ec-484e-856b-7ae04dc0f8b0.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\96e1c5a1-569a-4ceb-b126-2a12afd1c45e.tmp

UTF-8 Unicode text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\025f1edcacd2ee39_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\02889551788d14d1_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\04b54609843d02e7_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0b91c0c5c27d6e45_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0da2f868400f82ef_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0de576a9af9c678f_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\135a9e73b7a29232_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\185f65919f8657a6_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ada5ae8963a52d7_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ceb78fd7b4f42b9_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ed688489afa22d3_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1eec102889a7d5de_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1fe1ce509956500f_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2010a3486f72e241_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\22af22b9e46fc343_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\254c5407071bb61d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2d25afbbb58fae73_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2e945b9f3fee2c50_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3478c12dca436e2d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\374f2986eab128df_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3a2bde8044c36811_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3bb10d6b1efce9fd_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3e325b24ae8e7fc3_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3f06794e593404b1_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\417d44c966162bbf_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\41e713294820c411_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\42fa32866eba36b2_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\446f107d2b69240e_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4f99f75766b6b7fe_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\501b480118794d26_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\509232bb9ca12ba0_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\51196661b8f777b5_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5d9be227865dff27_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6115739dd1388ec4_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6198a102811c2f6d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6214889f7c2e82fe_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6386862eb4b2bb21_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\665a8aa81f8330ba_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\693b0dfadae079cc_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6be9779e925d9085_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6c328409abe273f8_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7052c509a8f8b1f1_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\71ff639c7a25c6fb_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\73ccb4559ad00796_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\76015e3a4b6224a2_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\777a7fe0d0f666fc_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7aee37dd622a4e46_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7b2a5235503b4b88_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7c21be5089b61970_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7c6c430c5b32df45_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7df5b6e20f2af607_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\802e1bfb59a9db13_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8478470334b58522_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\89a981ce4d0a0464_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8cfa1199efdab160_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\97b834ef0803d9e7_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9b2160d82b9e4faa_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9e285134dde499bf_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9ef6dd16e6c04320_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a11713cbf11dbe8c_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a562e271c28ce1cb_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a5e7cb262c05eea2_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a782bc86a3b81da4_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a8021a103cac1926_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ad1ee8a46673fd3d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ad93ac35a63b43df_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\adf7722569fd0bc6_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b03c983cdd03da8d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b1ace53f1483ebae_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b1ce1a24dbd33c5b_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b2c8341815361ffa_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b33e1f449eb327db_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b343428e4e214036_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b513e1192537baeb_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b848f038f264e3cc_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ba7e703f02f92686_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bd7958f6689f890b_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c211b3c7fa1797c6_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c4c7f1bec05b0c69_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c573b2ce1a7b4785_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c83d6da5b16bd5fb_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c871ee38a4562d6a_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c96806c9c0703ad9_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\cb2151828fe86510_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\cfbdcba4d4494926_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d00f5f3aa71c8776_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d19d6471338d3ff1_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d28853861de1103c_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d3c9fc52e9fb9c54_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d7c2dacb15547355_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d830ce70b8d08e98_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d8e4fe21d12de66f_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d9024b17b2399765_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\dae94e10ef035149_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\db8d81a1b1fffaa9_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\db9563a95e9f0af3_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\de127990e43d2e44_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e17efa549f5b4d3b_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e76d480e5ffe042e_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ea481fc6e74d044f_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ee3f7893eb7fc0fa_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ef103027ee3b845d_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f4eb7bba90bf5a5c_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f5f2a49254671b73_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f5fbeb72598a2f4e_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f84915395d85abfe_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fcf2c74c021f7c56_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fea82623cf4dc9bf_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fff68a289301b614_0

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000004.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000005.ldb

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL

SQLite 3.x database, last written using SQLite version 3032001

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\1aa88f00-7872-472c-930f-ea3c117ab97f.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\6d8e6aea-8d64-4cda-8d35-7929bcf7a5f1.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a6673e55-b9c1-4b99-b3f9-0cfae1132415.tmp

very short file (no magic)

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d2745ee5-a1e5-4c9c-992f-1deb03eda004.tmp

UTF-8 Unicode text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004

MPEG-4 LOAS

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e1dfc5b5-881d-4a02-a61b-fbcdcb1d0b5b.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e8203be4-4e20-4a61-91f4-d7f7486f1a30.tmp

ASCII text, with very long lines, with no line terminators

modified

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\effcdbe3-7e4f-4ed1-9825-7007ed618229.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fcf9b0eb-6466-4158-805b-b314186e9bf0.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fd0d81d8-f84c-49b1-9ee8-76aaa7c389d1.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

ASCII text

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser

data

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\aa6e3a1b-fdaa-4404-9402-6bb08144bb50.tmp

SysEx File -

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\b93119cb-7e12-4ed5-b66f-d781b787ecc4.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\c9d3a52f-bb77-494f-a163-a06926788702.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Google\Chrome\User Data\d4f901ce-3b53-4012-aa9f-e30b6df1d898.tmp

ASCII text, with very long lines, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\341f371f-db63-4077-b278-1570a383cf72.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\5de5b14a-2abf-424c-b520-7d85acf51f47.tmp

very short file (no magic)

dropped

C:\Users\user\AppData\Local\Temp\616366a9-3ae6-4667-b54a-0755d9d681e0.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\browser-sslkeys.log

ASCII text

dropped

C:\Users\user\AppData\Local\Temp\cc0b08b5-6f5a-4543-b91c-381722bc667c.tmp

very short file (no magic)

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\341f371f-db63-4077-b278-1570a383cf72.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\am\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ar\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\bg\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\bn\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ca\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\cs\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\da\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\de\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\el\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\en\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\es\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\et\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\fa\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\fi\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\fil\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\fr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\gu\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\hi\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\hr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\hu\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\id\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\it\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ja\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\kn\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ko\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\lt\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\lv\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ml\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\mr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ms\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\nb\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\nl\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\pl\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\pt\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ro\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ru\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\sk\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\sl\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\sr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\sv\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\sw\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\ta\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\te\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\th\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\tr\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\uk\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\vi\messages.json

UTF-8 Unicode text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\zh\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\_locales\zh_TW\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_1505261632\CRX_INSTALL\manifest.json

ASCII text, with very long lines, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\616366a9-3ae6-4667-b54a-0755d9d681e0.tmp

Google Chrome extension, version 3

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\bg\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\ca\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\cs\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\da\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\de\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\el\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\en\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\en_GB\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\es\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\es_419\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\et\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\fi\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\fil\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\fr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\hi\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\hr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\hu\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\id\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\it\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\ja\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\ko\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\lt\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\lv\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\nb\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\nl\messages.json

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\pl\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\pt_BR\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\pt_PT\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\ro\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\ru\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\sk\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\sl\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\sr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\sv\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\th\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\tr\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\uk\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\vi\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\zh_CN\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\_locales\zh_TW\messages.json

UTF-8 Unicode text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\images\icon_128.png

PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\images\icon_16.png

PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

dropped

C:\Users\user\AppData\Local\Temp\scoped_dir2936_2031679815\CRX_INSTALL\manifest.json

ASCII text, with CRLF line terminators

dropped

There are 290 hidden files, click here to show them.

Processes

Path

Cmdline

Malicious

C:\Program Files\Google\Chrome\Application\chrome.exe

'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://www.stopcovid19.jp/'

Details

Is windows:	true
Is dropped:	false
PID:	2936
Target ID:	1
Parent PID:	4944
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://www.stopcovid19.jp/'
Size:	2150896
MD5:	C139654B5C1438A95B321BB01AD63EF6
Time:	09:20:36
Date:	15/07/2021
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff609c80000
Modulesize:	2199552
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,11141525606934232942,4789934611024801501,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8

Details

Is windows:	true
Is dropped:	false
PID:	5976
Target ID:	3
Parent PID:	2936
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,11141525606934232942,4789934611024801501,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8
Size:	2150896
MD5:	C139654B5C1438A95B321BB01AD63EF6
Time:	09:20:38
Date:	15/07/2021
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff609c80000
Modulesize:	2199552
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

URLs

Name

Malicious

https://connect.facebook.net/ja_JP/sdk.js

unknown

https://i.socdm.com/sdk/html/adg-azs-container.html

https://pixel.mathtag.com/sync/img?redir=https%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D3591

unknown

https://www.mhlw.go.jp/common/scripts/jquery.mk_smoothScroll.js

unknown

http://sync.1rx.io/usersync2/rubicon

unknown

https://d5p.de17a.com/cookies/rubicon

unknown

http://cm.ctnsnet.com/int/cm?exc=2&redir=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D14965

unknown

https://rubiconcm.digitaleast.mobi/usersync/rubicon.gif

unknown

http://um2.eqads.com/um/rc

unknown

https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=54

unknown

https://eus.rubiconproject.com/

unknown

https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp

unknown

https://static.xx.fbcdn.net/rsrc.php/v3/yj/r/_7Fp1_8TZ3D.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://api.primecaster.net/adlogue/api/sync/rubicon

unknown

https://token.rubiconproject.com/token?pid=27&a=1

unknown

https://static.criteo.net/

unknown

https://sync.1rx.io/usersync2/rubicon

unknown

https://yads.yjtag.yahoo.co.jp/tag?s=67018_295415&fr_id=yads_564321-0&sb_support=1&enc=UTF-8&u=https

unknown

https://www.ja-ces.or.jp/wordpress/wp-includes/js/jquery/jquery.form.min.js?ver=4.2.1

unknown

http://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp

unknown

https://id.rlcdn.com/709414.gif

unknown

https://s.amazon-adsystem.com/x/1c2fd14bf310b6aff649

unknown

http://d5p.de17a.com/cookies/rubicon

unknown

https://gu.dyntrk.com/adx/rbcn/us.php?dynk=r1b32c0n

unknown

http://cti.w55c.net/ct/cms-2c-rubicon.html

unknown

http://token.rubiconproject.com/token?pid=37556&a=1

unknown

https://tr.blismedia.com/v1/api/sync/rubicon

unknown

https://www.stopcovid19.jp/COVID-19

unknown

https://mhlw.go.jp/A.B

unknown

https://i.w55c.net/ping_match.gif?ei=RUBICON&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3

unknown

https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=

unknown

https://platform.twitter.com/js/button.5573c974dc31bbdab5ea7923a0bd5cf3.js

unknown

https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=25560792&p=157377&s=0&a=0

unknown

https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}

https://taisukef.github.io

unknown

https://static.xx.fbcdn.net/rsrc.php/v3/yt/r/7x71UTSzUeX.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://static.xx.fbcdn.net/rsrc.php/v3i5ED4/yz/l/de_DE/63GuVXEYA0F.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://static.xx.fbcdn.net/rsrc.php/v3iOTn4/yi/l/de_DE/1yn8K1CVZ6m.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://hatena.ne.jp/

unknown

https://static.xx.fbcdn.net/rsrc.php/v3iNtm4/yP/l/de_DE/xqdIHa8I6D_.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://www.mhlw.go.jp/common/scripts/jquery.mk_inputFucus.js

unknown

https://cm.smadex.com/sync?sm_p=rbc&sm_r=rbc

unknown

https://eus.rubiconproject.com/usync.html

unknown

https://static.xx.fbcdn.net/rsrc.php/v3ibyi4/y1/l/de_DE/bt7u4jh_X13.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@

https://www.ja-ces.or.jp/wordpress/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.

unknown

https://b.hatena.ne.jp/favicon.ico

unknown

https://static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz

unknown

http://pixel.rubiconproject.com/exchange/sync.php?p=a9eu

unknown

https://connect.facebook.net/ja_JP/sdk.js?hash=717430068f18341031a2bf06d6ad5a88

unknown

https://www.stopcovid19.jp/

https://aax-eu.amazon-adsystem.com/s/x/1c2fd14bf310b6aff649

unknown

https://token.rubiconproject.com/token?pid=10362

unknown

https://yads.c.yimg.jp/uadf/yads_vimps.js

unknown

https://mhlw.go.jp/H9

unknown

https://www.mhlw.go.jp/common/scripts/jquery.mk_megaDropdown.js

unknown

https://stopcovid19.jp/y3

unknown

https://ad.turn.com/r/cs?pid=6

unknown

https://www.ja-ces.or.jp/wordpress/wp-content/plugins/svg-support/js/min/svgs-inline-min.js?ver=1.0.

unknown

https://b.st-hatena.com/js/v4/bookmark.js?version=b28e833a092c996f374596d23318dea9e3c5a9c8

unknown

https://secure.adnxs.com/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%

unknown

https://p.rfihub.com/cm?in=1&pub=64

unknown

https://www.ja-ces.or.jp/wordpress/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp

unknown

https://ads.pubmatic.com/AdServer/js/showad.js

unknown

https://acdn.adnxs.com/dmp/async_usersync.html

https://hatena.ne.jp/#

unknown

https://match.deepintent.com/usersync/141?redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3

unknown

https://www.ja-ces.or.jp/wordpress/wp-includes/js/wp-embed.min.js?ver=5.2.11

unknown

https://www.mhlw.go.jp/common/scripts/newDate.js

unknown

https://www.mhlw.go.jp/common/scripts/jquery.mk_location.js

unknown

https://pixel-a.sitescout.com/dmp/pixelSync?nid=1

unknown

https://id5-sync.com/i/175/9.gif

unknown

https://www.stopcovid19.jp/#

unknown

https://adc.auone.jp/api/v1/sync/web?u=YO-h4MCo5sEAALQoIuEAAAAA&ut=1&st=2&ref=https%3A%2F%2Fb.hatena.ne.jp%2Fentry%2Fs%2Fwww.stopcovid19.jp%2F

https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=8Qiqtu4fCnqXvBNLMuLvYA

https://rubicon.digitru.st/digitrust-sync

unknown

https://b.hatena.ne.jp

unknown

https://b.hatena.ne.jph

unknown

https://feedback.googleusercontent.com

unknown

https://www.stopcovid19.jp/:COVID-19

unknown

https://cm.ctnsnet.com/int/cm?exc=2&redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D149

unknown

https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-045ac90d-7f34-449f-bcd3-a948b166aa59-003

https://b.hatena.ne.jp/favicon.ico=

unknown

http://pixel.mathtag.com/sync/img?redir=http%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D35912%

unknown

http://match.adsrvr.org/track/cmf/rubicon

unknown

https://token.rubiconproject.com/token?pid=2974&pt=n&a=1

unknown

https://code4sabae.github.io/kafumon/lib/Chart.mjs

unknown

https://ads.pubmatic.com/AdServer/js/showad.js#PIX&kdntuid=1&p=157377

unknown

https://hatena.ne.jp/A

unknown

https://id.sharedid.org/usync?redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D624210%26

unknown

https://sync.mathtag.com/sync/img?mt_exid=9&redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3

unknown

https://static.xx.fbcdn.net/rsrc.php/v3/yb/r/UHlXKQHdl3t.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://token.rubiconproject.com/token?pid=37556&a=1

unknown

https://hatena.ne.jp/:xY

unknown

https://www.google.ch

unknown

https://hatena.ne.jp/H

unknown

https://hatena.ne.jp/Zh=

unknown

https://acdn.adnxs.com/dmp/async_usersync.html

unknown

https://static.xx.fbcdn.net/rsrc.php/v3/y9/r/ugD21mPGNBo.js?_nc_x=Ij3Wp8lg5Kz

unknown

https://rubiconproject.com/

unknown

There are 90 hidden URLs, click here to show them.

Domains

Name

Malicious

taisukef.github.io

185.199.109.153

um.simpli.fi

169.50.137.190

lga-bh-bgp.contextweb.com

198.148.27.140

tls13.taboola.map.fastly.net

151.101.1.44

cnt.fout.jp

202.232.238.39

global.px.quantserve.com

91.228.74.134

cm119.appier.org

172.105.220.23

pixel-a.sitescout.com

66.155.71.25

platform.twitter.map.fastly.net

199.232.136.157

generic-2.lb.lm5v.com

162.55.6.212

t.co

104.244.42.5

mwzeom.zeotap.com

104.22.24.87

dualstack.tls13.taboola.map.fastly.net

151.101.1.44

repository.secomtrust.net

61.114.177.151

rtb-csync-itx4.smartadserver.com

185.86.139.89

adc.auone.jp

54.95.129.54

id.rlcdn.com

35.244.174.68

match.prod.bidr.io

52.16.214.249

static.am5.vip.prod.criteo.net

178.250.2.130

s.twitter.com

104.244.42.195

pixel.onaudience.com

146.59.148.16

inv-nets-eu-s2.admixer.net

146.0.227.109

d1ykf07e75w7ss.cloudfront.net

143.204.95.188

code4sabae.github.io

185.199.109.153

cdn.bigmining.com

143.204.98.58

ifccloud6.infocreate.co.jp

169.56.3.74

googlehosted.l.googleusercontent.com

172.217.168.33

aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com

3.10.35.49

s.w.org

192.0.77.48

cr-pall.ladsp.com

143.204.98.24

ssp-pc-layer7-lb-1418692822.ap-northeast-1.elb.amazonaws.com

13.230.7.5

mail.ja-ces.or.jp

164.46.34.110

edge.g.yimg.jp

182.22.24.124

scontent.xx.fbcdn.net

157.240.17.15

idsync.rlcdn.com

35.244.174.68

rtb-csync-eqx.smartadserver.com

185.86.137.131

rtb.adentifi.com

54.236.227.29

sync.srv.stackadapt.com

54.81.207.173

b.hatena.ne.jp

143.204.98.109

tk3-805-12365.vw.sakura.ne.jp

27.134.249.119

osscdn.netdnasa9.netdna-cdn.com

23.111.8.154

pixel.tapad.com

35.227.248.159

twitter.com

104.244.42.1

sync.ipredictive.com

34.232.92.67

aax-eu.amazon-adsystem.com

52.95.124.170

cs41.wac.edgecastcdn.net

93.184.220.66

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

3.124.143.99

syndication.twitter.com

104.244.42.200

d.socdm.com

202.241.208.56

gum.am5.vip.prod.criteo.com

178.250.2.146

www.google.ch

172.217.168.3

ib.anycast.adnxs.com

37.252.172.249

prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud

18.156.0.31

edge.gycpi.b.yahoodns.net

87.248.118.22

optomaton.geo.iponweb.net

35.210.178.101

pug-lhr.pubmatic.com

185.64.190.80

eu-u.openx.net

35.244.159.8

spl.zeotap.com

104.22.25.87

elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com

3.127.51.194

hbopenbid22000nf.pubmatic.com

185.64.189.112

penta.a.one.impact-ad.jp

107.178.248.96

widget.par.vip.prod.criteo.com

178.250.0.163

sync.crwdcntrl.net

52.48.248.240

cm.g.doubleclick.net

216.58.215.226

ds-pr-bh.ybp.gysm.yahoodns.net

212.82.100.176

sync.1rx.io

213.19.147.44

ads.playground.xyz

34.98.107.212

bidder.am5.vip.prod.criteo.com

178.250.2.131

star-mini.c10r.facebook.com

157.240.195.35

d1o24znjkq68c8.cloudfront.net

143.204.98.37

pugm22000nf.pubmatic.com

185.64.189.115

us-u.openx.net

34.98.64.218

stats.l.doubleclick.net

74.125.128.155

s.hatena.ne.jp

18.182.163.232

g.deepintent.com

169.197.150.8

a.tribalfusion.com

104.18.12.5

cr-p31.ladsp.jp

143.204.98.44

io.narrative.io

52.212.225.58

aa-agkn-com-https-2145740884.eu-central-1.elb.amazonaws.com

52.29.225.117

pixel-origin.mathtag.com

185.29.132.144

s.tribalfusion.com

104.18.12.5

alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com

54.93.69.146

a97adde81b00f2ca4.awsglobalaccelerator.com

13.248.242.197

hatena-d.openx.net

34.98.64.218

dac-yieldone-gce.pool.iponweb.net

35.213.109.249

elb-aws-ie-rockabox-scoota-2052063539.eu-west-1.elb.amazonaws.com

52.17.35.107

avi-aud-k8s-ams.pubmatic.com

185.64.189.249

rtb.gumgum.com

52.18.52.16

pb.ladsp.com

54.95.166.26

match.bnmla.com

38.27.122.158

ad.as.amanad.adtdp.com

143.204.98.55

tg.dr.socdm.com

124.146.215.52

sync.resetdigital.co

45.35.192.162

alb-aws-fr-bswx-1-445786803.eu-central-1.elb.amazonaws.com

52.58.102.227

ums.acuityplatform.com

154.59.122.79

pug22000nf.pubmatic.com

185.64.189.110

spug22000nf.pubmatic.com

185.64.189.114

pmp.mxptint.net

204.2.255.233

visitor.fiftyt.com

35.201.96.126

b.st-hatena.com

143.204.98.89

There are 90 hidden domains, click here to show them.

IPs

Domain

Country

Malicious

124.146.215.52

tg.dr.socdm.com

Japan

93.184.220.66

cs41.wac.edgecastcdn.net

European Union

104.244.42.200

syndication.twitter.com

United States

27.134.249.119

tk3-805-12365.vw.sakura.ne.jp

Japan

185.64.190.80

pug-lhr.pubmatic.com

United Kingdom

54.236.227.29

rtb.adentifi.com

United States

202.241.208.56

d.socdm.com

Japan

38.27.122.158

match.bnmla.com

United States

182.22.16.123

unknown

Japan

216.58.215.226

cm.g.doubleclick.net

United States

185.199.109.153

taisukef.github.io

Netherlands

178.250.0.163

widget.par.vip.prod.criteo.com

France

239.255.255.250

unknown

Reserved

18.156.0.31

prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud

United States

52.18.52.16

rtb.gumgum.com

United States

143.204.98.24

cr-pall.ladsp.com

United States

35.244.174.68

id.rlcdn.com

United States

104.18.12.5

a.tribalfusion.com

United States

183.79.248.124

unknown

Japan

18.182.163.232

s.hatena.ne.jp

United States

52.212.225.58

io.narrative.io

United States

204.2.255.233

pmp.mxptint.net

United States

157.240.17.15

scontent.xx.fbcdn.net

United States

185.64.189.110

pug22000nf.pubmatic.com

United Kingdom

169.197.150.8

g.deepintent.com

United States

185.64.189.112

hbopenbid22000nf.pubmatic.com

United Kingdom

185.64.189.114

spug22000nf.pubmatic.com

United Kingdom

185.64.189.115

pugm22000nf.pubmatic.com

United Kingdom

37.252.172.249

ib.anycast.adnxs.com

European Union

157.240.195.35

star-mini.c10r.facebook.com

United States

143.204.98.37

d1o24znjkq68c8.cloudfront.net

United States

178.250.2.130

static.am5.vip.prod.criteo.net

France

61.114.177.151

repository.secomtrust.net

Japan

185.86.137.131

rtb-csync-eqx.smartadserver.com

France

178.250.2.131

bidder.am5.vip.prod.criteo.com

France

143.204.98.109

b.hatena.ne.jp

United States

91.228.74.134

global.px.quantserve.com

United Kingdom

169.50.137.190

um.simpli.fi

United States

66.155.71.25

pixel-a.sitescout.com

Canada

74.125.128.155

stats.l.doubleclick.net

United States

54.95.166.26

pb.ladsp.com

United States

157.240.196.15

unknown

United States

35.201.96.126

visitor.fiftyt.com

United States

182.22.24.124

edge.g.yimg.jp

Japan

143.204.98.44

cr-p31.ladsp.jp

United States

199.232.136.157

platform.twitter.map.fastly.net

United States

3.124.143.99

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

United States

192.168.2.1

unknown

143.204.95.188

d1ykf07e75w7ss.cloudfront.net

United States

192.168.2.5

unknown

52.95.124.170

aax-eu.amazon-adsystem.com

United States

212.82.100.176

ds-pr-bh.ybp.gysm.yahoodns.net

United Kingdom

143.204.98.55

ad.as.amanad.adtdp.com

United States

143.204.98.58

cdn.bigmining.com

United States

52.16.214.249

match.prod.bidr.io

United States

35.213.109.249

dac-yieldone-gce.pool.iponweb.net

United States

52.17.35.107

elb-aws-ie-rockabox-scoota-2052063539.eu-west-1.elb.amazonaws.com

United States

52.29.225.117

aa-agkn-com-https-2145740884.eu-central-1.elb.amazonaws.com

United States

213.19.147.44

sync.1rx.io

United Kingdom

202.232.238.39

cnt.fout.jp

Japan

34.232.92.67

sync.ipredictive.com

United States

185.199.108.153

unknown

Netherlands

127.0.0.1

unknown

182.22.31.252

unknown

Japan

13.248.242.197

a97adde81b00f2ca4.awsglobalaccelerator.com

United States

13.230.7.5

ssp-pc-layer7-lb-1418692822.ap-northeast-1.elb.amazonaws.com

United States

54.93.69.146

alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com

United States

143.204.98.70

d1g3u69q0yy58t.cloudfront.net

United States

107.178.248.96

penta.a.one.impact-ad.jp

United States

146.59.148.16

pixel.onaudience.com

Norway

185.29.132.144

pixel-origin.mathtag.com

United Kingdom

198.148.27.140

lga-bh-bgp.contextweb.com

United States

87.248.118.22

edge.gycpi.b.yahoodns.net

United Kingdom

3.127.51.194

elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com

United States

104.244.42.5

t.co

United States

34.98.64.218

us-u.openx.net

United States

172.217.168.33

googlehosted.l.googleusercontent.com

United States

143.204.98.89

b.st-hatena.com

United States

There are 68 hidden IPs, click here to show them.

Registry

Path

Value

Malicious

C:\Program Files\Google\Chrome\Application\chrome.exe

ahfgeienlihckogmohjhadlkjgocpleb

C:\Program Files\Google\Chrome\Application\chrome.exe

gdaefkejpgkiemlaofpalmlakkmbjdnl

C:\Program Files\Google\Chrome\Application\chrome.exe

gfdkimpbcpahaombhbimeihdjnejgicl

C:\Program Files\Google\Chrome\Application\chrome.exe

kmendfapggjehodndflmmgagdbamhnfd

C:\Program Files\Google\Chrome\Application\chrome.exe

mfehgcgbbipciphmccgaenjidiccnmng

C:\Program Files\Google\Chrome\Application\chrome.exe

mhjfbmdgcfjbbpaeojofohoefgiehjai

C:\Program Files\Google\Chrome\Application\chrome.exe

neajdppkdcdipfabeoofebfddakdcjhd

C:\Program Files\Google\Chrome\Application\chrome.exe

nkeimhogjdpnpccoofpliimaahmaaome

C:\Program Files\Google\Chrome\Application\chrome.exe

prefs.preference_reset_time

C:\Program Files\Google\Chrome\Application\chrome.exe

S-1-5-21-3853321935-2125563209-4053062332-1002

C:\Program Files\Google\Chrome\Application\chrome.exe

gfdkimpbcpahaombhbimeihdjnejgicl

C:\Program Files\Google\Chrome\Application\chrome.exe

nmmhkkegccagdldgiimedpiccmgmieda

C:\Program Files\Google\Chrome\Application\chrome.exe

pkedcjkdefgpdelpbcmbmeomcjbeemfm

C:\Program Files\Google\Chrome\Application\chrome.exe

nmmhkkegccagdldgiimedpiccmgmieda

C:\Program Files\Google\Chrome\Application\chrome.exe

state

C:\Program Files\Google\Chrome\Application\chrome.exe

StatusCodes

C:\Program Files\Google\Chrome\Application\chrome.exe

StatusCodes

C:\Program Files\Google\Chrome\Application\chrome.exe

state

C:\Program Files\Google\Chrome\Application\chrome.exe

software_reporter.reporting

C:\Program Files\Google\Chrome\Application\chrome.exe

module_blacklist_cache_md5_digest

C:\Program Files\Google\Chrome\Application\chrome.exe

media.storage_id_salt

C:\Program Files\Google\Chrome\Application\chrome.exe

google.services.last_account_id

C:\Program Files\Google\Chrome\Application\chrome.exe

google.services.account_id

C:\Program Files\Google\Chrome\Application\chrome.exe

software_reporter.prompt_seed

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.last_triggered_for_homepage

C:\Program Files\Google\Chrome\Application\chrome.exe

default_search_provider_data.template_url_data

C:\Program Files\Google\Chrome\Application\chrome.exe

safebrowsing.incidents_sent

C:\Program Files\Google\Chrome\Application\chrome.exe

pinned_tabs

C:\Program Files\Google\Chrome\Application\chrome.exe

search_provider_overrides

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.last_triggered_for_default_search

C:\Program Files\Google\Chrome\Application\chrome.exe

prefs.preference_reset_time

C:\Program Files\Google\Chrome\Application\chrome.exe

google.services.last_username

C:\Program Files\Google\Chrome\Application\chrome.exe

session.startup_urls

C:\Program Files\Google\Chrome\Application\chrome.exe

session.restore_on_startup

C:\Program Files\Google\Chrome\Application\chrome.exe

software_reporter.prompt_version

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.last_triggered_for_startup_urls

C:\Program Files\Google\Chrome\Application\chrome.exe

settings_reset_prompt.prompt_wave

C:\Program Files\Google\Chrome\Application\chrome.exe

homepage

C:\Program Files\Google\Chrome\Application\chrome.exe

homepage_is_newtabpage

C:\Program Files\Google\Chrome\Application\chrome.exe

browser.show_home_button

C:\Program Files\Google\Chrome\Application\chrome.exe

user_experience_metrics.stability.exited_cleanly

C:\Program Files\Google\Chrome\Application\chrome.exe

lastrun

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

C:\Program Files\Google\Chrome\Application\chrome.exe

Blob

There are 61 hidden registries, click here to show them.

Memdumps

Base Address

Regiontype

Protect

Malicious

14527080000

unkown

page readonly

29311448000

unkown

page read and write

14527B18000

unkown

page read and write

1452C886000

unkown

page read and write

7FF532185000

unkown

page readonly

7FF5325C5000

unkown

page readonly

29311470000

unkown

page read and write

2931142A000

unkown

page read and write

14527170000

unkown

page read and write

7FF58C25A000

unkown

page readonly

F68579B000

unkown

page read and write

29311A02000

unkown

page read and write

1452C820000

unkown

page read and write

145281D0000

unkown

page readonly

7FF532A07000

unkown

page readonly

320077F000

unkown

page read and write

14527256000

unkown

page read and write

F685AFE000

unkown

page read and write

7FF58BFC1000

unkown

page readonly

14528220000

unkown

page readonly

269F8229000

unkown

page read and write

14527302000

unkown

page read and write

1452C6D0000

unkown

page read and write

7FF58C1DE000

unkown

page readonly

14527150000

unkown

page readonly

7FF58C051000

unkown

page readonly

7FF58C15A000

unkown

page readonly

7FF58C17B000

unkown

page readonly

320067A000

unkown

page read and write

293111B0000

heap private

page read and write

269F81E0000

unkown

page readonly

14527A15000

unkown

page read and write

269F8300000

unkown

page read and write

145271E1000

unkown

page read and write

1452C6F4000

unkown

page read and write

269F824D000

unkown

page read and write

7FF58C0DC000

unkown

page readonly

269F823C000

unkown

page read and write

7FF5325B6000

unkown

page readonly

29311400000

unkown

page read and write

29311F40000

unkown

page readonly

14527213000

unkown

page read and write

1452723D000

unkown

page read and write

7FF58BD36000

unkown

page readonly

F685BF5000

unkown

page read and write

269F824B000

unkown

page read and write

32002FF000

unkown

page read and write

7FF532841000

unkown

page readonly

7FF58C1ED000

unkown

page readonly

7FF58C175000

unkown

page readonly

1452D010000

unkown

page read and write

14527279000

unkown

page read and write

F685A7D000

unkown

page read and write

7FF5329F0000

unkown

page readonly

C5DB77E000

unkown

page read and write

29311508000

unkown

page read and write

14527313000

unkown

page read and write

1452728D000

unkown

page read and write

F685F7F000

unkown

page read and write

14528010000

unkown

page read and write

320027E000

unkown

page read and write

14527B00000

unkown

page read and write

29311413000

unkown

page read and write

7FF532943000

unkown

page readonly

1452729E000

unkown

page read and write

2931144B000

unkown

page read and write

320057B000

unkown

page read and write

7FF53218B000

unkown

page readonly

C5DB27B000

unkown

page read and write

7FF532A58000

unkown

page readonly

1452C700000

unkown

page read and write

269F8400000

unkown

page readonly

320047F000

unkown

page read and write

14527C81000

unkown

page read and write

7FF532A6D000

unkown

page readonly

29311513000

unkown

page read and write

14527F00000

unkown

page read and write

7FF58BD30000

unkown

page readonly

269F8308000

unkown

page read and write

32000FF000

unkown

page read and write

1452C6F1000

unkown

page read and write

32003FF000

unkown

page read and write

1452CA30000

unkown

page read and write

14527B02000

unkown

page read and write

7FF58C254000

unkown

page readonly

269F8250000

unkown

page read and write

14527274000

unkown

page read and write

269F88B0000

unkown

page readonly

14528230000

unkown

page readonly

327F93E000

unkown

page read and write

7FF58C19F000

unkown

page readonly

145279F0000

unkown

page read and write

7FF532893000

unkown

page readonly

7FF532A34000

unkown

page readonly

14527B18000

unkown

page read and write

269F8213000

unkown

page read and write

14527B13000

unkown

page read and write

7FF58C0C3000

unkown

page readonly

7FF532954000

unkown

page readonly

1452C6D4000

unkown

page read and write

327FFFF000

unkown

page read and write

7FF532AD4000

unkown

page readonly

1452C830000

unkown

page read and write

1452722A000

unkown

page read and write

1452C710000

unkown

page read and write

320037E000

unkown

page read and write

7FF5329EA000

unkown

page readonly

7FF58C1C4000

unkown

page readonly

7FF58C1B4000

unkown

page readonly

2931143C000

unkown

page read and write

269F8A02000

unkown

page read and write

1452C6D8000

unkown

page read and write

7FF58C1CF000

unkown

page readonly

269F8302000

unkown

page read and write

7FF532A1F000

unkown

page readonly

1452C6DE000

unkown

page read and write

145279C3000

unkown

page read and write

29311220000

unkown

page readonly

14527A02000

unkown

page read and write

14527160000

unkown

page readonly

269F824F000

unkown

page read and write

1452C6D0000

unkown

page read and write

14527A00000

unkown

page read and write

145280F0000

unkown

page read and write

7FF5329EE000

unkown

page readonly

7FF58C187000

unkown

page readonly

327FF7A000

unkown

page read and write

7FF58C1D8000

unkown

page readonly

14527180000

unkown

page read and write

7FF5329DA000

unkown

page readonly

29311502000

unkown

page read and write

269F8270000

unkown

page read and write

145272FD000

unkown

page read and write

7FF58C16E000

unkown

page readonly

7FF58C0D4000

unkown

page readonly

14527293000

unkown

page read and write

7FF58C1BA000

unkown

page readonly

F68607F000

unkown

page read and write

7FF58C261000

unkown

page readonly

7FF5328EB000

unkown

page readonly

29311C00000

unkown

page readonly

7FF532AE2000

unkown

page readonly

269F8313000

unkown

page read and write

269F8860000

unkown

page read and write

C5DB677000

unkown

page read and write

7FF532A44000

unkown

page readonly

145279D0000

unkown

page read and write

327FCF7000

unkown

page read and write

293113E0000

unkown

page read and write

7FF532ADA000

unkown

page readonly

7FF532A69000

unkown

page readonly

269F8282000

unkown

page read and write

7FF532AE1000

unkown

page readonly

7FF5329F5000

unkown

page readonly

7FF58C19C000

unkown

page readonly

1452CA30000

unkown

page read and write

2931148A000

unkown

page read and write

14528200000

unkown

page readonly

7FF5329FB000

unkown

page readonly

7FF5BCAC2000

unkown

page readonly

C5DB2FE000

unkown

page read and write

7FF58BEEF000

unkown

page readonly

7FF58C1E9000

unkown

page readonly

7FF5328EE000

unkown

page readonly

7FF58C06B000

unkown

page readonly

1452C714000

unkown

page read and write

269F81F0000

unkown

page readonly

7FF58C06E000

unkown

page readonly

145279E0000

unkown

page read and write

327FE7C000

unkown

page read and write

7FF532A4F000

unkown

page readonly

29311453000

unkown

page read and write

269F8252000

unkown

page read and write

1452CA30000

unkown

page read and write

7FF58C262000

unkown

page readonly

7FF58C1E6000

unkown

page readonly

14528210000

unkown

page readonly

1452C6D1000

unkown

page read and write

14527200000

unkown

page read and write

14527010000

heap private

page read and write

327F9BE000

unkown

page read and write

29311402000

unkown

page read and write

7FF58BEE7000

unkown

page readonly

29311210000

heap default

page read and write

145281E0000

unkown

page readonly

7FF532A66000

unkown

page readonly

269F8100000

heap default

page read and write

269F8C00000

unkown

page readonly

7FF532767000

unkown

page readonly

F685D7E000

unkown

page read and write

29311500000

unkown

page read and write

7FF532770000

unkown

page readonly

14527790000

unkown

page readonly

32001FB000

unkown

page read and write

C5DB87F000

unkown

page read and write

7FF53295C000

unkown

page readonly

1452726F000

unkown

page read and write

F685E77000

unkown

page read and write

7FF5329DC000

unkown

page readonly

C5DB57B000

unkown

page read and write

327F8BC000

unkown

page read and write

F685CFB000

unkown

page read and write

145279C0000

unkown

page read and write

29311600000

unkown

page readonly

7FF58C15C000

unkown

page readonly

2931144E000

unkown

page read and write

7FF58C0BD000

unkown

page readonly

14527400000

unkown

page readonly

7FF58C170000

unkown

page readonly

7FF532A27000

unkown

page readonly

7FF53293D000

unkown

page readonly

7FF532A3A000

unkown

page readonly

7FF58C16A000

unkown

page readonly

1452C7A0000

unkown

page read and write

293112F0000

unkown

page readonly

7FF58B60A000

unkown

page readonly

C5DB37F000

unkown

page read and write

7FF58C013000

unkown

page readonly

7FF5325B0000

unkown

page readonly

7FF532A5E000

unkown

page readonly

7FF532A1C000

unkown

page readonly

269F80A0000

heap private

page read and write

327FD7E000

unkown

page read and write

14527070000

heap default

page read and write

7FF5328D1000

unkown

page readonly

7FF58BD45000

unkown

page readonly

269F8110000

unkown

page readonly

145281F0000

unkown

page readonly

7FF58C1A7000

unkown

page readonly

293113D0000

unkown

page readonly

269F8200000

unkown

page read and write

There are 221 hidden memdumps, click here to show them.

DOM / HTML

URL

Malicious

https://www.facebook.com/v6.0/plugins/share_button.php?app_id=214172318638956&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3b52d37088878%26domain%3Dwww.stopcovid19.jp%26origin%3Dhttps%253A%252F%252Fwww.stopcovid19.jp%252Ff1629894ef8dcc4%26relation%3Dparent.parent&container_width=1263&href=https%3A%2F%2Fwww.stopcovid19.jp%2F&layout=button_count&locale=ja_JP&sdk=joey&size=small

https://eus.rubiconproject.com/usync.html

https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=8Qiqtu4fCnqXvBNLMuLvYA

https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=pm-db5_rbd&dcc=t

https://acdn.adnxs.com/dmp/async_usersync.html

https://penta.a.one.impact-ad.jp/psm/1.0/actualizar

https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=rbd_pm-db5&fv=1.0&a=cm&cm3ppd=1

https://pixel.tapad.com/idsync/ex/receive/check?partner_id=PUBMATIC_RTB

https://www.facebook.com/login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https%3A%2F%2Fwww.facebook.com%2Fsharer%2Fsharer.php%3Fkid_directed_site%3D0%26sdk%3Djoey%26u%3Dhttps%253A%252F%252Fwww.stopcovid19.jp%252F%26display%3Dpopup%26ref%3Dplugin%26src%3Dshare_button&cancel_url=https%3A%2F%2Fwww.facebook.com%2Fdialog%2Fclose_window%2F%3Fapp_id%3D966242223397117%26connect%3D0%23_%3D_&display=popup&locale=de_DE&kid_directed_site=0

https://www.ja-ces.or.jp/info-ce/%e4%ba%ba%e5%b7%a5%e5%91%bc%e5%90%b8%e5%99%a8%e3%81%8a%e3%82%88%e3%81%b3ecmo%e8%a3%85%e7%bd%ae%e3%81%ae%e5%8f%96%e6%89%b1%e5%8f%b0%e6%95%b0%e7%ad%89%e3%81%ab%e9%96%a2%e3%81%99%e3%82%8b%e7%b7%8a/

https://s.yimg.jp/images/listing/tool/yads/yads-iframe.html?start_prod_num=0&s=67018_295415&fr_id=yads_564321-0&sb_support=1&enc=UTF-8&u=https%3a%2f%2fb.hatena.ne.jp%2fentry%2fs%2fwww.stopcovid19.jp%2f&async=0&mb=1&kwe=u&kwm=1&pv_ts=1626333667497

https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:aY6uWkC21M3VGh5&gdpr=0&gdpr_consent=

https://b.hatena.ne.jp/entry/button/?url=https%3A%2F%2Fwww.stopcovid19.jp%2F&layout=basic-label-counter&lang=ja&mode=popup

https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=

https://eus.rubiconproject.com/usync.html?p=a9eu&endpoint=eu

https://www.mhlw.go.jp/stf/seisakunitsuite/newpage_00023.html

https://aax-eu.amazon-adsystem.com/s/ecm3?id=F76BE1DA-9244-4697-BA45-0BAAC7575976&ex=pubmatic.com

https://adc.auone.jp/api/v1/sync/web?u=YO-h4MCo5sEAALQoIuEAAAAA&ut=1&st=2&ref=https%3A%2F%2Fb.hatena.ne.jp%2Fentry%2Fs%2Fwww.stopcovid19.jp%2F

https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjUmdGw9MTI5NjAw&piggybackCookie=1b78b8a7-f89d-411d-8705-3a21e9d7876a

https://i.socdm.com/sdk/html/adg-azs-container.html

https://platform.twitter.com/widgets/tweet_button.06c6ee58c3810956b7509218508c7b56.ja.html#dnt=false&id=twitter-widget-0&lang=ja&original_referer=https%3A%2F%2Fwww.stopcovid19.jp%2F&size=m&text=COVID-19%20Japan%20-%20Anti-Coronavirus%20Dashboard%20%23StopCOVID19JP&time=1626333646850&type=share&url=https%3A%2F%2Fwww.stopcovid19.jp%2F

https://www.mhlw.go.jp/bunya/kenkou/kekkaku-kansenshou15/02-02.html

https://ads.pubmatic.com/AdServer/js/showad.js#PIX&kdntuid=1&p=157377

https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156657&predirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3DPM_UID%26ex%3Dpubmatic.com&userIdMacro=PM_UID

https://platform.twitter.com/widgets/widget_iframe.06c6ee58c3810956b7509218508c7b56.html?origin=https%3A%2F%2Fwww.ja-ces.or.jp

https://c1.adform.net/serving/cookie/match?party=14&cid=F76BE1DA-9244-4697-BA45-0BAAC7575976

https://b.hatena.ne.jp/entry/s/www.stopcovid19.jp/

https://tk3-805-12365.vw.sakura.ne.jp:3443/mini

https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AADZpE7B38QAAECNb5QxLg

https://www.stopcovid19.jp/

https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-045ac90d-7f34-449f-bcd3-a948b166aa59-003

https://eu-u.openx.net/w/1.0/pd?plm=10&ph=df544eff-6086-432f-957e-aa9175d18515&gdpr=0

https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=4MMDCA0YR3VZU9rICR5anrkg3nk

There are 25 hidden doms, click here to show them.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOCReport

Files

Processes

URLs

Domains

IPs

Registry

Memdumps

DOM / HTML