top title background image
flash

https://schlichtzr.editorx.io/invser

Status: finished
Submission Time: 2021-10-13 22:48:56 +02:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    502465
  • API (Web) ID:
    870041
  • Analysis Started:
    2021-10-13 22:48:57 +02:00
  • Analysis Finished:
    2021-10-13 22:56:55 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 76
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP Country Detection
104.244.42.195
United States
185.230.60.161
Israel
34.238.230.208
United States
Click to see the 36 hidden entries
185.230.60.97
Israel
108.174.11.69
United States
52.71.145.152
United States
142.250.203.104
United States
104.244.42.69
United States
104.18.99.194
United States
151.101.1.140
United States
3.224.194.150
United States
209.164.79.126
United States
104.18.11.207
United States
172.217.168.36
United States
52.222.186.38
United States
142.250.185.131
United States
34.102.176.152
United States
50.87.150.0
United States
104.16.19.94
United States
199.232.136.157
United States
52.2.188.208
United States
34.96.106.200
United States
216.58.215.230
United States
157.240.17.35
United States
172.217.168.45
United States
185.230.60.102
Israel
185.230.63.148
Israel
216.58.215.226
United States
216.58.215.227
United States
216.58.215.225
United States
216.58.215.238
United States
239.255.255.250
Reserved
192.229.221.185
United States
185.230.63.157
Israel
52.7.14.148
United States
185.230.63.96
Israel
74.125.133.156
United States
104.18.10.207
United States
157.240.17.15
United States

Domains

Name IP Detection
frog.editorx.com
0.0.0.0
www.editorx.com
0.0.0.0
code.jquery.com
0.0.0.0
Click to see the 70 hidden entries
clients2.google.com
0.0.0.0
use.fontawesome.com
0.0.0.0
clients2.googleusercontent.com
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
adservice.google.co.uk
0.0.0.0
ct.pinterest.com
0.0.0.0
bundler.wix-code.com
0.0.0.0
sentry.wixpress.com
0.0.0.0
manage.editorx.com
0.0.0.0
static.ads-twitter.com
0.0.0.0
4382365.fls.doubleclick.net
0.0.0.0
alb.reddit.com
0.0.0.0
logincdn.msauth.net
0.0.0.0
googlehosted.l.googleusercontent.com
216.58.215.225
d3ok6da481jyw8.cloudfront.net
52.222.186.38
clients.l.google.com
172.217.168.78
aadcdn.msauth.net
0.0.0.0
analytics.google.com
0.0.0.0
s.pinimg.com
0.0.0.0
snap.licdn.com
0.0.0.0
frog.wix.com
0.0.0.0
schlichtzr.editorx.io
0.0.0.0
analytics.twitter.com
0.0.0.0
px.ads.linkedin.com
0.0.0.0
connect.facebook.net
0.0.0.0
www.google.co.uk
216.58.215.227
apps.wix.com
0.0.0.0
www.linkedin.com
0.0.0.0
static.wixstatic.com
0.0.0.0
siteassets.parastorage.com
0.0.0.0
video.wixstatic.com
0.0.0.0
www.redditstatic.com
0.0.0.0
www.facebook.com
0.0.0.0
static.parastorage.com
0.0.0.0
t.co
104.244.42.69
stackpath.bootstrapcdn.com
104.18.10.207
q.quora.com
3.224.194.150
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com
52.7.14.148
www.google.com
172.217.168.36
cs1227.wpc.alphacdn.net
192.229.221.185
andrew-miller-mp.com
209.164.79.126
cdnjs.cloudflare.com
104.16.19.94
td-manage-96-63-157.wix.com
185.230.63.157
star-mini.c10r.facebook.com
157.240.17.35
p.adsymptotic.com
104.18.99.194
scontent.xx.fbcdn.net
157.240.17.15
platform.twitter.map.fastly.net
199.232.136.157
adservice.google.com
216.58.215.226
pop-eda6.mix.linkedin.com
108.174.11.69
dancevida.com
50.87.150.0
dart.l.doubleclick.net
216.58.215.230
td-username-dc11-60-97.wix.com
185.230.60.97
gcp.media-router.wixstatic.com
34.102.176.152
sentry-nlb-e70282e8a06dcc98.elb.us-east-1.amazonaws.com
52.2.188.208
td-verticals-96-63-148.wix.com
185.230.63.148
googleads.g.doubleclick.net
216.58.215.226
www3.l.google.com
216.58.215.238
reddit.map.fastly.net
151.101.1.140
td-static-34-96-106-200.parastorage.com
34.96.106.200
editorx.com
185.230.63.96
maxcdn.bootstrapcdn.com
104.18.11.207
gstaticadssl.l.google.com
142.250.185.131
www-googletagmanager.l.google.com
142.250.203.104
s.twitter.com
104.244.42.195
stats.l.doubleclick.net
74.125.133.156
www-google-analytics.l.google.com
172.217.168.78
accounts.google.com
172.217.168.45
td-balancer-dc11-60-161.wixdns.net
185.230.60.161
td-balancer-dc11-60-102.wixdns.net
185.230.60.102
pagead46.l.doubleclick.net
172.217.168.2

URLs

Name Detection
https://andrew-miller-mp.com/wbim/PDF/
https://www.editorx.com/features/design
https://www.editorx.com/features/business-ecommerce
Click to see the 74 hidden entries
https://schlichtzr.editorx.io/invser
https://www.editorx.com/collaboration
https://schlichtzr.editorx.io/invser2
https://www.editorx.com/
https://www.editorx.com/?utm_campaign=vir_editorx_wixad_live
https://www.editorx.com/features/development
https://payments.google.com/payments/v4/js/integrator.js
https://4382365.fls.doubleclick.net/activityi;dc_pre=CKm3mvWhyPMCFcxCHQkdxlgIkQ;src=4382365;type=count;cat=edxwebsi;ord=1;num=2190154711326;gtm=2wgad0;auiddc=1084599777.1634158212;u1=575d811d-1752-4352-aacd-d9fe090d55d8;u2=null-user-id;~oref=https%3A%2F%2Fwww.editorx.com%2Ffeatures%2Fdevelopment?
https://static.wixstatic.com
https://adservice.google.co.uk
https://siteassets.parastorage.com
http://llvm.org/):
https://4382365.fls.doubleclick.net/activityi;dc_pre=CLq1j-uhyPMCFf1DHQkdXl4H1Q;src=4382365;type=count;cat=edxwebsi;ord=1;num=8016456363718;gtm=2wgad0;auiddc=1084599777.1634158212;u1=575d811d-1752-4352-aacd-d9fe090d55d8;u2=null-user-id;~oref=https%3A%2F%2Fwww.editorx.com%2F?
https://www.google.com/images/x2.gif
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
https://static.parastorage.com
https://hangouts.google.com/
https://code.google.com/p/nativeclient/issues/entry%s:
https://adservice.google.com
https://googleads.g.doubleclick.net
https://www.google.com;
https://video.wixstatic.com
https://clients6.google.com
https://clients2.google.com/service/update2/crx
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
https://www.google.co.uk
https://feedback.googleusercontent.com
https://www.google.com/
https://4382365.fls.doubleclick.net/activityi;dc_pre=CMa38e-hyPMCFVdmGwodCZgMqg;src=4382365;type=count;cat=edxwebsi;ord=1;num=8617225602938;gtm=2wgad0;auiddc=1084599777.1634158212;u1=575d811d-1752-4352-aacd-d9fe090d55d8;u2=null-user-id;~oref=https%3A%2F%2Fwww.editorx.com%2Ffeatures%2Fbusiness-ecommerce?
https://docs.google.com
https://www.google.com/images/dot2.gif
https://clients2.googleusercontent.com
https://support.google.com/chromecast/answer/2998456
https://code.google.com/p/nativeclient/issues/entry
http://tools.ietf.org/html/rfc1950
https://www.google.com/intl/en-US/chrome/blank.html
https://play.google.com/log?format=json&hasfast=true
https://meetings.clients6.google.com
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
https://hangouts.google.com/hangouts/_/logpref
https://meet.google.com
https://hangouts.clients6.google.com
https://analytics.google.com
https://www.google.com
https://adservice.google.com/ddm/fls/i/dc_pre=CITZl96hyPMCFc-YhQodXmIPnQ;src=4382365;type=count;cat=edxwebsi;ord=1;num=9168544489404;gtm=2wgad0;auiddc=1084599777.1634158212;u1=575d811d-1752-4352-aacd-d9fe090d55d8;u2=null-user-id;~oref=https%3A%2F%2Fwww.editorx.com%2F%3Futm_campaign%3Dvir_editorx_wixad_live
https://preprod-hangouts-googleapis.sandbox.google.com
https://accounts.google.com/MergeSession
https://accounts.google.com
https://sandbox.google.com/payments/v4/js/integrator.js
https://4382365.fls.doubleclick.net/activityi;dc_pre=CITZl96hyPMCFc-YhQodXmIPnQ;src=4382365;type=count;cat=edxwebsi;ord=1;num=9168544489404;gtm=2wgad0;auiddc=1084599777.1634158212;u1=575d811d-1752-4352-aacd-d9fe090d55d8;u2=null-user-id;~oref=https%3A%2F%2Fwww.editorx.com%2F%3Futm_campaign%3Dvir_editorx_wixad_live?
https://www.google.com/log?format=json&hasfast=true
https://crash.corp.google.com/samples?reportid=&q=
https://play.google.com
https://www.google.com/images/cleardot.gif
https://apis.google.com/js/client.js
https://stats.g.doubleclick.net
https://www-googleapis-staging.sandbox.google.com
https://4382365.fls.doubleclick.net/activityi;dc_pre=CJiZo-2hyPMCFULjGwod55UP1Q;src=4382365;type=count;cat=edxwebsi;ord=1;num=7931738964857;gtm=2wgad0;auiddc=1084599777.1634158212;u1=575d811d-1752-4352-aacd-d9fe090d55d8;u2=null-user-id;~oref=https%3A%2F%2Fwww.editorx.com%2Ffeatures%2Fdesign?
https://ogs.google.com
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
https://dns.google
http://www.apache.org/licenses/LICENSE-2.0
https://www.google.com/tools/feedback
https://clients2.google.com
https://4382365.fls.doubleclick.net
https://support.google.com/chromecast/troubleshooter/2995236
https://github.com/madler/zlib/blob/master/zlib.h
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
https://apis.google.com
https://github.com/angular/material
https://creativecommons.org/publicdomain/zero/1.0/.
http://angularjs.org
https://clients2.google.com/cr/report

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\6360_194824465\manifest.fingerprint
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\c34a8ae9-15be-4e72-a1c5-eb383ff88dbb.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Temp\6360_194824465\manifest.json
ASCII text
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_platform_specific\x86_64\pnacl_public_pnacl_json
ASCII text
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\6360_194824465\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6360_1533116431\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\82583ae5-523f-4718-a7fc-fc1169545254.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.. (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old. (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\944b72bb-eb43-4c25-b61f-bcfcdda6aa92.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\909b2c0f-28d1-442a-87df-5676203d3623.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8b401344-25c4-4e2f-bf8f-5f14af5f9128.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\74573365-846d-4c37-92bb-c5fbcce5d852.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5d9253b3-5262-48ec-bb4c-ad0f0b7c89e7.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5a099c85-bc14-4b1f-8660-ce160c3b5a29.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\56bb20a8-a98a-4ae8-b0ad-e8f3acacd9d0.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3677a5ae-bb76-46ba-be35-dd001e063d1d.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2cd18b8d-aeae-492d-89a1-de95f38f0310.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1d4667fd-8566-4a72-9620-b61ad9d0717a.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\71c06935-6d6f-4400-8d24-475707b04c55.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\094fb113-564b-485a-8ae9-20aa442e1ce4.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT@ (copy)
ASCII text
#
C:\Users\user\AppData\Local\Temp\28b4b116-1eee-4d34-bca8-a98f3e295b25.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\157fea45-caf6-4706-bc80-ec5a3554e622.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\f4183730-a31d-4893-9e1d-9a8aa23a8d59.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\eb5c2ff7-62d2-48d0-822e-e188603ffcf8.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\de425f5a-5e4c-4eac-bcf3-0098ac1ca64e.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\d17b939c-2eb7-48f8-acb1-0934cff85a03.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StateMP (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fb8b75c9-d881-4e06-9b08-c78cafcf6c24.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 61157 bytes, 1 file
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d0986022-431e-4a3d-a3fc-1a36acc1f0cc.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c5ddd10e-a8f2-43a0-89c9-7ab8d6800555.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\ef4064dd-11a5-445e-86f5-cab02b78d79a.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\b89cd4cc-6612-4078-a26b-1c2a68e7bcd3.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State. (copy)
ASCII text, with very long lines, with no line terminators
#