top title background image
flash

http://ny-t.r-tb.com/

Status: finished
Submission Time: 2022-02-01 15:12:59 +01:00
Malicious

Comments

Tags

Details

  • Analysis ID:
    564184
  • API (Web) ID:
    931711
  • Analysis Started:
    2022-02-01 15:13:56 +01:00
  • Analysis Finished:
    2022-02-01 15:23:28 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 56
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP Country Detection
104.16.124.96
United States
104.16.123.96
United States
104.17.23.75
United States
Click to see the 29 hidden entries
142.250.102.154
United States
104.18.1.239
United States
35.190.26.57
United States
239.255.255.250
Reserved
68.142.70.14
United States
188.114.97.7
European Union
142.251.36.130
United States
13.224.222.119
United States
216.58.201.70
United States
142.251.36.132
United States
151.101.1.229
United States
104.17.72.14
United States
104.16.95.65
United States
192.28.144.124
United States
104.17.22.75
United States
172.217.23.193
United States
104.22.65.104
United States
54.73.67.72
United States
35.190.80.1
United States
142.251.36.77
United States
142.251.36.78
United States
104.17.73.206
United States
192.229.220.19
United States
35.188.42.15
United States
151.101.0.65
United States
45.92.42.1
United Kingdom
151.101.13.51
United States
163.171.156.28
European Union
104.16.53.99
United States

Domains

Name IP Detection
clients2.googleusercontent.com
0.0.0.0
ptcfc.com
104.16.53.99
api.radar.cloudflare.com
104.18.1.239
Click to see the 53 hidden entries
clients.l.google.com
142.251.36.142
713-xsc-918.mktoresp.com
192.28.144.124
googlehosted.l.googleusercontent.com
172.217.23.193
adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com
54.73.67.72
www.google.ae
142.251.36.67
cdnetworks.cedexis-test.com.wsoversea.com
163.171.156.28
limelight-ssl.cedexis-test.com
0.0.0.0
d.adroll.com
0.0.0.0
carefully-rested-condor.edgecompute.app
0.0.0.0
testingcf.jsdelivr.net
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
www.cloudflare.com
104.16.123.96
clients2.google.com
0.0.0.0
partly-divine-monitor.edgecompute.app
0.0.0.0
ad.doubleclick.net
0.0.0.0
adservice.google.ae
0.0.0.0
munchkin.marketo.net
0.0.0.0
info.cloudflare.com
0.0.0.0
9309168.fls.doubleclick.net
0.0.0.0
vdms-ssl.cedexis-test.com
0.0.0.0
stackpath-map3.cedexis-test.com
0.0.0.0
fastly.jsdelivr.net
0.0.0.0
fastly.cedexis-test.com
0.0.0.0
cdnetworks.cedexis-test.com
0.0.0.0
p29.cedexis-test.com
0.0.0.0
d1inq1x5xtur5k.cloudfront.net
13.224.222.119
dart.l.doubleclick.net
216.58.201.70
benchmark.1e100cdn.net
35.190.26.57
static.cloudflareinsights.com
104.16.95.65
tr.www.cloudflare.com
104.16.124.96
ajax.cloudflare.com
104.17.72.14
adservice.google.com
142.251.36.130
ny-t.r-tb.com
104.22.65.104
cedexis-1.s.llnwi.net
68.142.70.14
jsdelivr.b-cdn.net
45.92.42.1
serverless-benchmarks-js.compute-pipe.com
188.114.97.7
www.google.com
142.251.36.132
cs482.wpc.edgecastcdn.net
192.229.220.19
serverless-benchmarks-rust.compute-pipe.com
188.114.97.7
jsdelivr.map.fastly.net
151.101.1.229
ab13.mktossl.com
104.17.73.206
ecp.map.fastly.net
151.101.13.51
embed.videodelivery.net
104.17.23.75
pagead46.l.doubleclick.net
142.251.36.130
a.nel.cloudflare.com
35.190.80.1
accounts.google.com
142.251.36.77
stats.l.doubleclick.net
142.250.102.154
videodelivery.net
104.17.22.75
sentry.io
35.188.42.15
prod.cedexis-ssl.map.fastly.net
151.101.0.65
assets.www.cloudflare.com
104.16.123.96
www.googleoptimize.com
142.251.36.78
iframe.videodelivery.net
104.17.22.75

URLs

Name Detection
http://ny-t.r-tb.com/favicon.ico
http://ny-t.r-tb.com/2$Suspected
https://iframe.videodelivery.net/36e2ecf71363317a16bd2236dfa3b8b1?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2Fd54759e4e89631c396f7741c5250b8fa%2Fimage_new-homepage_thumbnail_video_findlaw.jpg&preload=auto
Click to see the 78 hidden entries
https://iframe.videodelivery.net/652f2749728df84fc32f9a6480438364?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2F6c664e30bf2f38015fb61bd986a719c8%2Fthumbnail_stream_case-study_lendingtree.jpg&preload=auto
https://iframe.videodelivery.net/e696e3b6be9ada0fc9e9674aedb54b17?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2Fcd4f24ce8e7102f1250568b31eef4fc7%2Fimage_new-homepage_thumbnail_video_hubspot.jpg&preload=auto
http://ny-t.r-tb.com/
http://ny-t.r-tb.com/
http://ny-t.r-tb.com/cdn-cgi/images/icon-exclamation.png?1376755637
https://iframe.videodelivery.net/5efe5eca1517ad1a2f9ff3e75cc9cf5a?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2F49e13a9372ad387fe3f96771e6783819%2Fthumbnail_stream_case-study_customer-video.jpg&preload=auto
http://ny-t.r-tb.com/cdn-cgi/styles/cf.errors.css
https://adservice.google.com
http://llvm.org/):
https://www.google.com/images/x2.gif
https://clients2.google.com/service/update2/crx
https://tr.www.cloudflare.com/ns.html?id=GTM-PKQFGQB
https://hangouts.google.com/
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
https://www.google.com;
https://adservice.google.ae
https://clients6.google.com
https://payments.google.com/payments/v4/js/integrator.js
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
https://www.google.ae
https://www.cloudflare.com/trademark/
https://9309168.fls.doubleclick.net/activityi;dc_pre=CPCPlczY3vUCFfAhBgAd84oHXg;src=9309168;type=resou0;cat=us-re0;ord=1699083194691;gtm=2yg1q0;auiddc=1855812276.1643757326;u1=2022%20Feb%2001%2015%3A15%3A45;u2=undefined;u3=https%3A%2F%2Fwww.cloudflare.com%2Fcase-studies%2F;u4=undefined;u5=undefined;u6=undefined;u10=undefined;~oref=https%3A%2F%2Fwww.cloudflare.com%2Fcase-studies%2F?
https://support.google.com/chromecast/troubleshooter/2995236
https://www.google.com/intl/en-US/chrome/blank.html
https://docs.google.com
https://ad.doubleclick.net
https://www.google.com/images/dot2.gif
https://meetings.clients6.google.com
https://play.google.com/log?format=json&hasfast=true
https://www.cloudflare.com/5xx-error-landing/
https://code.google.com/p/nativeclient/issues/entry%s:
https://tr.www.cloudflare.com/gtm.js?id=GTM-PKQFGQB
http://tools.ietf.org/html/rfc1950
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
https://code.google.com/p/nativeclient/issues/entry
https://www.cloudflare.com/5xx-error-landing2
https://support.google.com/chromecast/answer/2998456
https://feedback.googleusercontent.com
https://www.google.com/
https://clients2.googleusercontent.com
https://www.cloudflare.com/ssl/
https://meet.google.com
https://hangouts.clients6.google.com
https://www.googleoptimize.com
https://www.google.com
https://preprod-hangouts-googleapis.sandbox.google.com
https://accounts.google.com/MergeSession
https://9309168.fls.doubleclick.net
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
https://sandbox.google.com/payments/v4/js/integrator.js
https://hangouts.google.com/hangouts/_/logpref
https://www.google.com/log?format=json&hasfast=true
https://benchmark.1e100cdn.net
https://crash.corp.google.com/samples?reportid=&q=
https://www.cloudflare.com/disclosure/
https://www.google.com/images/cleardot.gif
https://apis.google.com/js/client.js
https://stats.g.doubleclick.net
https://www.cloudflare.com/plans/#overview
https://www-googleapis-staging.sandbox.google.com
https://ogs.google.com
https://9309168.fls.doubleclick.net/activityi;dc_pre=CPPH_MjY3vUCFacKBgAdC0gMuA;src=9309168;type=prici0;cat=us-pr0;ord=5246337112613;gtm=2yg1q0;auiddc=1855812276.1643757326;u1=2022%20Feb%2001%2015%3A15%3A38;u2=undefined;u3=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2F;u4=undefined;u10=undefined;~oref=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2F?
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
https://dns.google
http://www.apache.org/licenses/LICENSE-2.0
https://www.google.com/tools/feedback
https://www.cloudflare.com/hp/
https://www.cloudflare.com/5xx-error-landing/2
https://clients2.google.com
https://www.cloudflare.com/case-studies/
https://github.com/madler/zlib/blob/master/zlib.h
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
https://apis.google.com
https://github.com/angular/material
https://creativecommons.org/publicdomain/zero/1.0/.
http://angularjs.org
https://clients2.google.com/cr/report
https://accounts.google.com

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Google\Chrome\User Data\fd3d3031-301b-419a-b29e-a3bc056aab47.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
current ar archive
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_pnacl_json
ASCII text
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\41af2915-51f5-4897-bf38-828833c90425.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Temp\30c2578d-8631-4363-b2dc-4abc1c780ec2.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\fb82ada5-b4ef-46e0-9b8a-7df3d84f5bf6.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\d3b274d6-bb21-4dd2-b282-7f440e843fcb.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\d1729299-41ea-4c36-942d-9d72bfb1916d.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\a07e410c-de0e-4f21-a95c-aedf80ea4085.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info CacheP. (copy)
SysEx File -
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Statef8 (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ff02ef66-e3a8-495e-8da7-399ea17f4be1.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ec2338f8-858e-4cc3-9dfc-8d80ef46aadb.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\41af2915-51f5-4897-bf38-828833c90425.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Temp\e48990e3-bd94-4f03-b0df-5d93913bae91.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\ce8f33da-8491-4f7c-aa69-0d87007fc9e5.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\manifest.json
ASCII text
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\manifest.fingerprint
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4ab450bc-7dd4-4bb0-8095-5117ef8a74ed.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9c7e9906-6184-40d9-bd62-b7c328ababc4.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\87477827-3fa1-4073-b293-905b38f3ed65.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7654ac1b-8a64-4aee-a060-605b2d775bbf.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7171c975-6592-4bc2-8007-ca76e492ef76.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6d287a92-e8b8-4b3c-8074-c7822327e98d.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\696e657a-f8aa-4b81-b040-5814fcb6632c.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\53a21b2a-3951-4c03-b07b-f1159639f252.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\515409e7-6b24-47c4-b784-0832b2cdb72f.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4fea363e-f686-46a5-a814-74d8dcd5abac.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\29335cdd-86d6-4f3d-8413-57382d2e0536.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\165a8378-f10d-4a9e-9dee-1dfccada9f20.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0a4a6058-d422-4703-be98-4574384b304f.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\7973fe94-1984-4a9a-bee9-a599d288ad2b.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\679a509e-476c-4930-bb34-ac639f894c4c.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\4534a1f8-d36d-451d-973a-90a1320a3fb5.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\33a70f25-d5bd-4f8e-8abc-1406591bebc6.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\2b477162-4e57-43f3-970d-2b76389e302f.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\19a56dee-9088-43e7-9ed3-476166115f4f.tmp
SysEx File -
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\099695c3-6035-4124-a6b1-6f136b73835e.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTaa (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c956182f-6baa-4b46-acdb-6a58a64f9ed5.tmp
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c2197144-b737-4810-a2cc-1dec3fc16790.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\be5a96b6-dc4c-4167-a0ad-48f36a818c84.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\VideoDecodeStats\MANIFEST-000001
PGP\011Secret Key -
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\VideoDecodeStats\CURRENT. (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\VideoDecodeStats\000001.dbtmp
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
#
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\61ae7b3f-641b-4b4b-8fd6-fab4d52559d4.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\c969abab-a3f1-4f19-81a5-e3c8ab3cb894.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferencesl\ (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences. (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State} (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
ASCII text
#