flash

https://www.viewsonlines.com/newdocument

Status: finished
Submission Time: 14.09.2021 20:35:24
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    483333
  • API (Web) ID:
    850902
  • Analysis Started:
    14.09.2021 20:35:25
  • Analysis Finished:
    14.09.2021 20:41:51
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
48/100

IPs

IP Country Detection
104.18.10.207
United States
216.58.215.237
United States
157.240.9.35
United States
Click to see the 17 hidden entries
69.49.228.167
United States
116.203.11.150
Germany
157.240.17.15
United States
34.90.225.198
United States
35.204.150.5
United States
104.16.18.94
United States
142.250.203.99
United States
172.217.16.142
United States
34.120.151.89
United States
172.253.120.157
United States
104.18.11.207
United States
172.217.168.78
United States
172.217.168.36
United States
239.255.255.250
Reserved
172.217.168.33
United States
162.241.87.183
United States
216.58.212.163
United States

Domains

Name IP Detection
gstaticadssl.l.google.com
142.250.203.99
stackpath.bootstrapcdn.com
104.18.10.207
star-mini.c10r.facebook.com
157.240.9.35
Click to see the 29 hidden entries
webador.co.uk
34.90.225.198
equilibriumdiet.com
162.241.87.183
accounts.google.com
216.58.215.237
www-google-analytics.l.google.com
172.217.16.142
stats.l.doubleclick.net
172.253.120.157
maxcdn.bootstrapcdn.com
104.18.11.207
aspiretobeaqueen.com
69.49.228.167
cdn.jwwb.nl
34.120.151.89
editor.jouwweb.nl
34.90.225.198
scontent.xx.fbcdn.net
157.240.17.15
cdnjs.cloudflare.com
104.16.18.94
www.google.co.uk
142.250.203.99
website-rendering.jouwweb.nl
35.204.150.5
www.google.com
172.217.168.36
clients.l.google.com
172.217.168.78
ashercummins.com
162.241.87.183
googlehosted.l.googleusercontent.com
172.217.168.33
eu1.jwwb.nl
116.203.11.150
www.facebook.com
0.0.0.0
www.viewsonlines.com
0.0.0.0
f.eu1.jwwb.nl
0.0.0.0
t.eu1.jwwb.nl
0.0.0.0
www.webador.co.uk
0.0.0.0
connect.facebook.net
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
clients2.googleusercontent.com
0.0.0.0
clients2.google.com
0.0.0.0
code.jquery.com
0.0.0.0
www.webador.com
0.0.0.0

URLs

Name Detection
https://www.viewsonlines.com/received-document
https://www.viewsonlines.com/newdocument
https://www.webador.com/
Click to see the 97 hidden entries
https://ashercummins.com/fil/Odrivex/index.php
https://www.viewsonlines.com/online-document
https://stats.g.doubleclick.net
https://webador.com/V2
https://t.eu1.jwwb.nl/W2130871/lQOJv5t3lPR2qEdeN4GKwTwJsUY=/1200x0/filters:quality(95)/f.eu1.jwwb.nl%2Fpublic%2Fo%2Fh%2Fn%2Ftemp-kizijemardkzwkiyysxr%2Fokeoj7%2FScreenShot2021-08-25at111931PM-1.png
https://www.viewsonlines.com/newdocument2
https://code.jquery.com/jquery-3.2.1.slim.min.js
https://www.webador.com/v2/unsafe-token/2130871
https://webador.co.uk/
https://www.webador.co.uk/
https://ashercummins.com/fil/Odrivex/index.phpSharing
https://www.webador.com/9
https://cdn.jwwb.nl/
https://www.webador.co.uk/Create
https://www.webador.com/G
https://aspiretobeaqueen.com/
https://www.webador.com/v2/account/register
https://www.viewsonlines.com/
https://cdn.jwwb.nl/assets/website-rendering/421.7de90f12a3d8725a82d2.jsaD
https://www.google.com
https://cdn.jwwb.nl/assets/landing/fonts/37CB36_0_0.woff2?bust=5f0c3e4353c778c2327a5c801144a382
https://t.eu1.jwwb.nl/W2130871/KNSYy188548DwMXOd9CocJtYOYw=/1200x0/filters:quality(95)/f.eu1.jwwb.nl%2Fpublic%2Fo%2Fh%2Fn%2Ftemp-kizijemardkzwkiyysxr%2Fr7hibg%2FScreenShot2021-08-25at111931PM1.png
https://cdn.jwwb.nl/assets/landing/421.7de90f12a3d8725a82d2.js
https://viewsonlines.com/k
https://viewsonlines.com/m
https://connect.facebook.net/en_US/fbevents.js
https://a.nel.cloudflare.com/report/v3?s=o3rnksJi3uG5DZ9TZsk19YqKb6D0rK%2BxtCIBJRZ5jSrIYj7dXRjXvAGL2
https://www.viewsonlines.com/received-document0
https://www.viewsonlines.com/received-document2
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
https://cdn.jwwb.nl/assets/landing/122.cf19a7d241b89fad7f84.js?bust=9f518d410c4faa8b907005b0a79f7a2c
https://cdn.jwwb.nl/assets/website-rendering/styles.408e5dd0f84857aa96cf.css?bust=408e5dd0f84857aa96cf55b61d85a711
https://viewsonlines.com/en7
https://www.webador.co.uk
https://viewsonlines.com/d
https://webador.com/K
https://www.viewsonlines.com/newdocumentNewdocument
https://cdn.jwwb.nl/assets/landing/styles.09623201e50d19ecee27.css?bust=09623201e50d19ecee278451535b21e7
https://cdn.jwwb.nl/assets/landing/fonts/37CB36_2_0.woff2?bust=c65cb371685ee4ba29c1d374987e40a3
https://dns.google
https://www.viewsonlines.com/online-document
https://www.viewsonlines.com/f
https://www.viewsonlines.com/received-documentRECEIVED
https://viewsonlines.com/L
https://support.google.com/chromecast/troubleshooter/2995236
https://cdn.jwwb.nl/assets/brand/webador/logo/logo-light-jw-icon.svg?bust=7412ebe68a5d616ae76cc9521bcb0630
https://ashercummins.com/jy
https://maxcdn.bootstrapcdn.com/
https://ashercummins.com/fil/Odrivex/1.png
https://viewsonlines.com/Z
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
https://payments.google.com/payments/v4/js/integrator.js
https://www.google.com;
https://cdn.jwwb.nl/assets/landing/421.7de90f12a3d8725a82d2.jsaD
https://cdn.jwwb.nl/assets/website-rendering/runtime.f70de49aa0b8ac756fe8.js?bust=116881f05c701507e0d1cdb85e926215
https://cdn.jwwb.nl/assets/website-rendering/421.7de90f12a3d8725a82d2.js
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
https://cdn.jwwb.nl/assets/brand/webador/background/frontpage-background-en.jpg?bust=71f36c978cdca4169bc7fee65fe0dba7
https://cdn.jwwb.nl/assets/website-rendering/597.f02804414285a019ba2f.js?bust=7c8912ad6d24da0546a4bb
https://cdn.jwwb.nl/assets/website-rendering/main.57a2f6289774183565d8.js?bust=d7c7551cb0f40fc44569a0f101fdf320
https://www.webador.com/
https://cdn.jwwb.nl/assets/landing/fonts/37CB36_1_0.woff2?bust=9f1671e1d819b9ad0d714a3fdaf326f7
https://cdn.jwwb.nl/assets/build/editor/en-US.js?bust=c3618e50652d560e1c14c028eaea2c40aD
https://assets.pinterest.com/js/pinit.js
https://equilibriumdiet.com/fil/Odrivex/index.php
https://cdn.jwwb.nl/assets/build/editor/en-US.js?bust=c3618e50652d560e1c14c028eaea2c40
https://cdn.jwwb.nl/assets/website-rendering/photoswipe.a3046515b1f876adca18.js
https://cdn.jwwb.nl/assets/website-rendering/421.7de90f12a3d8725a82d2.jsa
https://www.viewsonlines.com/newdocument
https://www.webador.co.uk/ACreate
https://www.google.com/
https://cdn.jwwb.nl/assets/website-rendering/667.a1bfbb778cb3e0d41700.js
https://feedback.googleusercontent.com
https://www.google.co.uk
https://www.webador.com
https://www.webador.com/9Create
https://soundcloud.com/martingarrix/martin-garrix-animals-original
https://cdn.jwwb.nl/assets/build/editor/en-GB.js?bust=17657d1995ab4bdbb85fcc6b091a5c8b
https://webador.co.uk/2
https://twitter.com/BarackObama
https://webador.co.uk/7
https://www.viewsonlines.com/2
https://cdn.jwwb.nl/assets/landing/runtime.e16273ee40a882c86924.js?bust=a308fbd835c3b1e90a1722529271
https://www.webador.com/Create
https://www.viewsonlines.com/online-documentONLINE
https://sandbox.google.com/payments/v4/js/integrator.js
https://aspiretobeaqueen.com/save/Odrivex/index.phpSharing
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
https://equilibriumdiet.com/fil/Odrivex/index.phpSharing
https://ashercummins.com/fil/Odrivex/index.php
https://connect.facebook.net/signals/config/644801602284196?v=2.9.45&r=stable
https://accounts.google.com
https://cdn.jwwb.nl/assets/website-rendering/runtime.f70de49aa0b8ac756fe8.js?bust=116881f05c701507e0
https://www.viewsonlines.com/newdocumentz
https://viewsonlines.com/
https://apis.google.com
https://webador.com/

Dropped files

Name File Type Hashes Detection
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\09ab0634-8005-4605-80cf-a0806157b6a2.tmp
SysEx File -
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\1d3aff83-3c31-4d90-a2b8-65e97149b5d9.tmp
ASCII text, with very long lines, with no line terminators
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Google\Chrome\User Data\2a08887c-528e-44b3-a55a-172d35bee6c5.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\3cc13d40-3ab5-4e08-9ebb-a5c9befe4bf2.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\5a895162-d7a6-4d3b-a3e0-97e2c3ffb45e.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\372042c6-64bb-40a5-af3a-36164a4d06b1.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\46e5586a-4ca2-4aab-a9d1-d40660395fe0.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4fd41d53-1c09-482b-aa36-7f1606eee769.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\530e24a5-4037-4bab-af26-1fd466cad0a9.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6514fd3a-46fa-45ce-8f38-5ed03f09909b.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\69f95bc4-0047-4b0c-b855-61528f614ecf.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\759b0399-1961-448b-afd1-8db1665215c7.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7f857e5d-0cc6-4da5-be15-5c8a92e0eb1f.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9c2746c9-757c-4d4b-b565-edf0cf0b19df.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldg (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\09b86c0b70f34e43_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0ab38d35e286f7bc_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0e8135a63e3aa20c_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0f94b1f95fe53b92_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\16fe85b14e57cf21_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\21f421c1ff81833b_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3001fd060a8ff2f1_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3719c013d478c039_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\37fe378c74b61563_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3dc89cc948b69cbd_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4060419d04db5de3_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\43f4e58bbc6ae221_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4c2bfcde4430e454_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4f4b880ab39d843a_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\59b65b613095bf6e_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5d96aa376b778b0a_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5e665545a4f64ed0_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6443114ce813ae8a_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6b0b9656d357aba6_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6c1094475df28d06_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\74612f3772394ee1_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7c13f815721bd7b9_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8c5147d4c4721f12_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9457f31a0123f679_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\96c4fac250aa980c_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\98e73a1971d3d5e9_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a7e9f85c0d3f00e3_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ad88569a49029255_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b09a4ff79fec8b20_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b2812fc9f44d4791_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\be56b72af8f5512a_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c21596e3241a738e_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c48e44d9a025189c_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c7b8387dfd4c8dbb_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\de40cef242da30e6_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eaca1406c6db758b_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eb3d4a571bcbabc2_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eb7b0d1063fc9950_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f3ba1e1d0c569d4f_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ff8d2b9c0eb65db0_0
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
SQLite 3.x database, last written using SQLite version 3032001
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old.. (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.oldn (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3032001
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session (copy)
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabs (copy)
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.oldil (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
SQLite 3.x database, last written using SQLite version 3032001
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateE (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences.. (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferenceswe (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3032001
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal
data
#