top title background image
flash

https://www.klusbeter.nl

Status: finished
Submission Time: 2021-10-14 08:29:43 +02:00
Malicious

Comments

Tags

Details

  • Analysis ID:
    502661
  • API (Web) ID:
    870233
  • Analysis Started:
    2021-10-14 08:29:59 +02:00
  • Analysis Finished:
    2021-10-14 08:40:15 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 64
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 7/89
malicious

IPs

IP Country Detection
91.228.74.133
United Kingdom
18.198.126.47
United States
13.248.242.197
United States
Click to see the 37 hidden entries
154.59.122.79
United States
35.244.159.8
United States
52.16.151.94
United States
185.94.180.125
Netherlands
172.217.168.66
United States
91.228.74.226
United Kingdom
142.250.203.102
United States
52.57.110.162
United States
87.248.118.22
United Kingdom
185.64.190.78
United Kingdom
66.155.71.25
Canada
35.186.253.211
United States
104.18.11.207
United States
172.217.168.36
United States
54.85.225.229
United States
34.98.64.218
United States
52.56.187.155
United States
216.58.215.225
United States
18.184.251.131
United States
3.209.222.165
United States
172.217.168.45
United States
142.250.186.110
United States
142.250.203.98
United States
35.227.248.159
United States
192.132.33.46
United States
108.177.127.155
United States
217.182.200.20
France
185.33.221.11
Netherlands
172.217.168.2
United States
52.222.179.56
United States
239.255.255.250
Reserved
37.252.172.250
European Union
52.222.179.129
United States
35.244.174.68
United States
216.58.212.163
United States
34.98.67.61
United States
142.250.186.46
United States

Domains

Name IP Detection
clients2.googleusercontent.com
0.0.0.0
pixel-sync.sitescout.com
0.0.0.0
c1.adform.net
0.0.0.0
Click to see the 92 hidden entries
pixel.rubiconproject.com
0.0.0.0
odr.mookie1.com
0.0.0.0
ads.avct.cloud
0.0.0.0
match.adsrvr.org
0.0.0.0
beacon.lynx.cognitivlabs.com
0.0.0.0
casale-match.dotomi.com
0.0.0.0
dsum.casalemedia.com
0.0.0.0
token.rubiconproject.com
0.0.0.0
clients2.google.com
0.0.0.0
bh.contextweb.com
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
pixel.everesttech.net
0.0.0.0
secure.adnxs.com
0.0.0.0
pm.w55c.net
0.0.0.0
ag.innovid.com
0.0.0.0
edge.gycpi.b.yahoodns.net
87.248.118.22
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud
3.126.56.137
ib.anycast.adnxs.com
185.33.221.11
partnerad.l.doubleclick.net
172.217.168.2
dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com
52.57.110.162
lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com
3.209.222.165
e.dlx.addthis.com
0.0.0.0
loadm.exelator.com
0.0.0.0
sync.search.spotxchange.com
0.0.0.0
ib.adnxs.com
0.0.0.0
cdn.ampproject.org
0.0.0.0
cms.quantserve.com
0.0.0.0
dsum-sec.casalemedia.com
0.0.0.0
adservice.google.fr
0.0.0.0
pixel.quantserve.com
0.0.0.0
x.bidswitch.net
0.0.0.0
pr-bh.ybp.yahoo.com
0.0.0.0
pixel.advertising.com
0.0.0.0
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com
18.184.251.131
image2.pubmatic.com
0.0.0.0
rtb-csync.smartadserver.com
0.0.0.0
ads.yahoo.com
0.0.0.0
d.agkn.com
0.0.0.0
ups.analytics.yahoo.com
0.0.0.0
s2.2mdn.net
0.0.0.0
image6.pubmatic.com
0.0.0.0
sync.teads.tv
0.0.0.0
s0.2mdn.net
0.0.0.0
sync.mathtag.com
0.0.0.0
ssum-sec.casalemedia.com
0.0.0.0
cm.g.doubleclick.net
142.250.203.98
googleads4.g.doubleclick.net
216.58.215.226
stats.l.doubleclick.net
108.177.127.155
us-u.openx.net
34.98.64.218
pugm22000nf.pubmatic.com
185.64.189.115
rtb-csync-itx5.smartadserver.com
185.86.138.144
c.bannerflow.net
104.16.12.64
match.prod.bidr.io
52.16.151.94
id.rlcdn.com
35.244.174.68
cdn-content.ampproject.org
216.58.215.225
www.google.com
172.217.168.36
ds-pr-bh.ybp.gysm.yahoodns.net
212.82.100.176
maxcdn.bootstrapcdn.com
104.18.11.207
tagr-gcp-odr-euw4.mookie1.com
34.98.67.61
elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com
18.193.195.133
eventd-us.avct.cloud
35.174.6.234
googlecm.hit.gemius.pl
217.182.200.20
bttrack.com
192.132.33.46
rtb.openx.net
35.186.253.211
pixel-a.sitescout.com
66.155.71.25
eu-u.openx.net
35.244.159.8
global.px.quantserve.com
91.228.74.226
lga-bh-bgp.contextweb.com
198.148.27.140
pug-lhr.pubmatic.com
185.64.190.80
pixel-origin.mathtag.com
185.29.132.241
ums.acuityplatform.com
154.59.122.79
prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud
18.197.47.23
www-google-analytics.l.google.com
142.250.186.110
accounts.google.com
172.217.168.45
pagead46.l.doubleclick.net
172.217.168.34
pixel.tapad.com
35.227.248.159
www.klusbeter.nl
52.222.179.129
nep.advangelists.com
54.85.225.229
adservice.google.com
172.217.168.34
a97adde81b00f2ca4.awsglobalaccelerator.com
13.248.242.197
www.googletagservices.com
172.217.168.34
gstaticadssl.l.google.com
216.58.212.163
googlehosted.l.googleusercontent.com
216.58.215.225
s.w.org
192.0.77.48
clients.l.google.com
142.250.186.46
ams01.sync.search.spotxchange.com
185.94.180.125
load-euc1.exelator.com
18.198.126.47
pugm-lhr.pubmatic.com
185.64.190.78
googleads.g.doubleclick.net
172.217.168.66
dmp.brand-display.com
35.241.40.233
s0-2mdn-net.l.google.com
142.250.203.102
aragorn-prod-uk-lb.inbake.com
52.56.187.155

URLs

Name Detection
https://www.klusbeter.nl/apokalypsis/wp-content/cache/minify/a056f.js
https://www.klusbeter.nl/apokalypsis/wp-content/uploads/Onderdelen-HR-cv-ketel4.jpg
https://www.klusbeter.nl/apokalypsis/wp-content/cache/minify/3d726.css
Click to see the 97 hidden entries
https://www.klusbeter.nl/apokalypsis/wp-content/uploads/Aansluitset-van-een-keukenboiler-273x153.jpg
https://www.klusbeter.nl/apokalypsis/wp-content/cache/minify/5c20e.js
https://www.klusbeter.nl/apokalypsis/wp-content/uploads/KB-favicon_01.png
https://www.klusbeter.nl/apokalypsis/wp-content/cache/minify/a8151.js
https://www.klusbeter.nl/2
https://www.klusbeter.nl/apokalypsis/wp-content/cache/minify/afb37.js
https://www.klusbeter.nl/apokalypsis/wp-content/plugins/w3-total-cache/pub/js/lazyload.min.js
https://www.klusbeter.nl/#genesis-footer-widgets
https://www.klusbeter.nl/apokalypsis/wp-includes/js/wp-emoji-release.min.js?ver=5.7.3
https://www.klusbeter.nl/
https://www.klusbeter.nl/apokalypsis/wp-content/uploads/elektriciteit-uit-gas-100-40-273x154.png
https://www.klusbeter.nl/#genesis-sidebar-primary
https://www.klusbeter.nl/apokalypsis/wp-content/uploads/KB-logo_v20190208-03-1.png
https://www.klusbeter.nl/apokalypsis/wp-content/cache/minify/d2391.js
https://meet.google.com
https://d.agkn.com/pixel/2175/?google_gid=CAESEFa2i5Y_2BreBqBM-4PAc3k&google_cver=1&google_push=AYg5qPL8-xGZ_x2FwprwQJXjtqI0jQPxlQQ7paqy3U7CF767BfQaMcmKK9bgvt1tuYWbZve_7K-P74E5fEIF4srzm2EIKzAfhPwODg
https://apis.google.com
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEKNjbQGYLFePrCXu0dF2oGc&google_cver=1&google_push=AYg5qPLEOhVxDlVOOziNb3Yzi8gHm6LmeiYivdB9To04jP6YVIJRU4_IosJ4jUtvzzGRU0YwNQYOSfXMckxu5g8l9mXHnumY4-es
https://www.google.com/recaptcha/api.js
https://www.google.com/intl/en-US/chrome/blank.html
https://accounts.google.com/MergeSession
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}
https://googleads.g.doubleclick.net/xbbe/pixel?d=CLbFxQEQq9bcARjrj6qbATAB&v=APEucNUOs5ojUDJbgQna_QaMXkM9AV3GJETobSpFfyZvcs6C4hu1aui4ibWuJ1UkpgXKnWb6Dy7_CTFtsrLcdV1NVOS_OKsslBwr8E9_G2pvGrmb6l06wYCzIAInRPRNLn_hYcs2vuMqMkY_QL5h6l5ZgLAMt3flIt-778YFwYJNXSh2OkSflCE
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13Kw4YjmE9zc240y7Z1CD-T-tzl-2Ki-fy4uwJxRcKgvjBMX9hSmBHn490HBIZjTegd6M0sV
https://www.google.com/log?format=json&hasfast=true
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSsvH53_S8jFAD64OCwjuYQkDGmY-siQy6SJMaTAwilGpmnpVQO31c_c7i0mKb_1AhW9h7KmJCED_FYT1J9veYYjsErlQ
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEIPAikoVJPy_ZEL-dHt6vKo&google_cver=1&google_push=AYg5qPKXka1AYviCYEdqKzRgq6tkXYz6mO7C5qbymrjDZ6QBiYjsiWhGOj0p4h45ZE00E7vOsB1dtgVqawg5B014qfl3gW1RhEqK3w
https://odr.mookie1.com/t/v2/sync?tagid=V2_4531&src.visitorid=CAESEITNuvQiWdmWNt00pN1nnyc&google_push=AYg5qPJCu68cQpqQoYZzh8QBEWtmGc-8bhGFgAdWvOSEIFJ_z0ik5S43o9BJx6ywpKs7QtGWrfGJFfBexxmr5r-HxcY0vNvds9Y&google_cver=1
https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=48
https://odr.mookie1.com/t/v2/sync?tagid=V2_4531&src.visitorid=CAESEITNuvQiWdmWNt00pN1nnyc&google_push=AYg5qPIpn7vW59ccCyV3XRqsoEyyqnyRubVidpzUXRfJVOOfOTrXQO_ukz0govzqBEnbOTdgt9KOes0kRAwVaY8TSaz7aQ4KNiM&google_cver=1
https://eu-u.openx.net/w/1.0/sd?id=537113484&val=7420793207680378943
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEIPAikoVJPy_ZEL-dHt6vKo&google_cver=1&google_push=AYg5qPJnQQPXv1CPMdcrHWhl80fr1lUWf9hYa3tsgY3CeL8_S5bIxFSN8wnlIRgmhldElAEAN6X4iLoavVU7U8iJgR-D5nHHPD8p
https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESECfUoGIS770LLYLWgFA4rqY%26google_cver%3D1
https://rtb.openx.net/sync/dds?google_gid=CAESEIbvZskkAmVF-a0DcrC2JMs&google_cver=1&google_push=AYg5qPLmwV4otVCY9nudrya_NA43uX3631lbdUORQxtPNV0vvYTQueH9B9ib-jxk_TQ8jZ-5shbdK2ly1B2YHepAUfNNTM6gMJA0
https://clients2.googleusercontent.com
https://d.agkn.com/pixel/2175/?google_gid=CAESEFa2i5Y_2BreBqBM-4PAc3k&google_cver=1&google_push=AYg5qPJ5vR4KRzADPcmUZmxlU8NbTLI6Al8EUnrjWfSnMg1NQXhL5x5qkDm0lz4Qie9fc2UWQ-ikWw8zwb_Rkjyb6XVC3EipKvY
https://support.google.com/chromecast/answer/2998456
https://googlecm.hit.gemius.pl/googleredir?rid=tknhntsqez&id=ndBK6L_fzwx7rssCbe8.iLes3yi8eMbF6r2JE6Xu.b7.N7&google_gid=CAESEM8FZQ4Co9fNzoiuHFjuqbI&google_cver=1&google_push=AYg5qPKjGtineCM4WiCe2NtLwHAEW2-nD4nNE9orDA8DEhM8ppFCDNsTmouvg_SZJrsdOjCMOqpv-Oimh2FxooaacXxZEIXF7II6dQU
https://id.rlcdn.com/466606.gif?cparams=google_push%3DAYg5qPL1oDXEcnWfPkqbOuX4idUIbugNJgEZAxmM9pLA98Wj7wBHuWhT4cVnSKLjDvDcenSetEzFVuy7bAlZjHSYZcHnhtbicYITjQ&google_gid=CAESEOKOQtX_gS5LlQgtLiElRik&google_cver=1
https://id.rlcdn.com/466606.gif?cparams=google_push%3DAYg5qPINursmY3ye35ODaH9hx45PGLBLFwJWCKRAOve2B4TtECaX2kfnPVtbHndT1tLQXGnW5ZSd08JO6TXAiENG2N3tJdbgJQ&google_gid=CAESEOKOQtX_gS5LlQgtLiElRik&google_cver=1
https://ag.innovid.com/trk?tid=11711&google_gid=CAESEFBKvl14FujX593acXfTHas&google_cver=1&google_push=AYg5qPJSzvD3aVUJfQSQ6H9kXSd9A5MLt2tePjgAnf9ZBuZntK-UPB2UggE6Wr1JwNozNE0AueYNvwhMNrQHnG4RkGwyw9kNQGM
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSF5gNy3_AzKARUJ7njPCwl_ZFPGRFOJFNX__hWTgdxFydCTBr-Yb6FQhQL1VRlzCo5tWcNa19EoYVMKYZsR8yor1KujA
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRMGsCRrbP5YG_6BAeQhbEcKbObEXWtlbuBRGJlDMkWrJ4ZxKBwLCP_ScQC4ZaWroqFZTwahDHkKIwk0KPf_S6JQSIJLw
https://odr.mookie1.com/t/v2/sync?tagid=V2_4531&src.visitorid=CAESEITNuvQiWdmWNt00pN1nnyc&google_push=AYg5qPJ8KytgW-pzOVEBkLya81W09-Df9VGidWW-cA439iRSKnAq8TQ6tMku8P2GAjLgSWG5WFoyeDA2pCdC8lxrT-Hqq9mO1sQ&google_cver=1
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
https://rtb.openx.net/sync/dds?google_gid=CAESEIbvZskkAmVF-a0DcrC2JMs&google_cver=1&google_push=AYg5qPKLPzRl3LyKJoxzIZcUitV0c-UnWbjKqNVyIuurfSCyWWSRk1QZvCvrgGDGRYhq1R4QXYw5KcvXGF6ciUFEfDNOLIXj2pA
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
https://googleads.g.doubleclick.net/pagead/html/r20211011/r20110914/zrt_lookup.html?fsb=1#RS-1-&adk=1812271801&client=ca-pub-5561794038235243&fa=1&ifi=6&uci=a!6&btvi=3
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
https://us-u.openx.net/w/1.0/pd?ph=bbb82fae-1d27-4d90-bb10-e24164ecd7bc&google_gid=CAESEIbvZskkAmVF-a0DcrC2JMs&google_cver=1&google_push=AYg5qPJo1lXySARDDXQE-FoZ1RQAhzk9HUFbVrAbx0NYXx7ZmVxEQrmlkEGdY0NrfjKp3jR-rhTcmE3f6NvQ5qVZ32rCGL7hmeU
https://id.rlcdn.com/466606.gif?cparams=google_push%3DAYg5qPKUgj7znBe2Gwr9B-kr27jhH8DhpUf_djnVwceOhBMkyEjQdKKDfef5HcPp490J0i-ukrKlvoKoAXrMSJ8cZ9pQ0F44vsfF&google_gid=CAESEOKOQtX_gS5LlQgtLiElRik&google_cver=1
https://ag.innovid.com/trk?tid=11711&google_gid=CAESEFBKvl14FujX593acXfTHas&google_cver=1&google_push=AYg5qPKHrRESpwVC_iDXfBF3XdhnvF_ds97g1Z3ksuuMtVsfhcbtJeEkCx8EKObpkkcQlLWLK30IZ2Vn50YMMwQhkLI5T_bJOJn6
https://www.google.com/tools/feedback
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=YWfOz4lCb7d7hxEAW9qNawAA
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEKNjbQGYLFePrCXu0dF2oGc&google_cver=1&google_push=AYg5qPKBdLZGVzT-yysg14_SqjjA0-3HlszqJj_L6rfPcdjIeZ0khVHdAaM1izDQZ0MjYGx4qVV4E9M4zixyuYGyiV3DFRhI9sas
https://odr.mookie1.com/t/v2/sync?tagid=V2_4531&src.visitorid=CAESEITNuvQiWdmWNt00pN1nnyc&google_push=AYg5qPIpNRWzNs_UPakD6SM2eBkn7SDSeUCgqXdtPlC9zObDmhUmWqicp09pVyBx4RPLWlA369Tlv5dhfis09t7gjkM3eV7ngJU&google_cver=1
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
https://odr.mookie1.com/t/v2/sync?tagid=V2_4531&src.visitorid=CAESEITNuvQiWdmWNt00pN1nnyc&google_push=AYg5qPKzFG6vDc0genXxl7ClQeUZk0rIpM13t91s5Rujr1b3HVJAduE_9sdgS8qvQMzfGQ4npOrRudKgqZwpb5fr9YPFfMivvaWl&google_cver=1
https://cdn.ampproject.org/rtv/012109102127000/v0/amp-form-0.1.mjs
https://rtb.openx.net/sync/dds?google_gid=CAESEIbvZskkAmVF-a0DcrC2JMs&google_cver=1&google_push=AYg5qPIfAh1bWnjB1n68uH_iY7XSvlISpB1jNat1dgA_Kv3bF9_V1Kgbm4Mt3DrpnBE7MsURxQA_0uSkgKWRvZj-JxiRMQwUj2qN
https://cdn.ampproject.org/rtv/012109102127000/v0/amp-analytics-0.1.mjs
https://rtb.openx.net/sync/dds?google_gid=CAESEIbvZskkAmVF-a0DcrC2JMs&google_cver=1&google_push=AYg5qPKWyp4maJN2_jFdNkFSYirrKCoU4K0roGXOXnZjXo8jUFwkDlYy1VmLTGD8CwVls-1pix7hlO9C7XB0Jb-iNMs02dNHUSD4
https://preprod-hangouts-googleapis.sandbox.google.com
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
https://us-u.openx.net/w/1.0/pd?ph=bbb82fae-1d27-4d90-bb10-e24164ecd7bc&google_gid=CAESEIbvZskkAmVF-a0DcrC2JMs&google_cver=1&google_push=AYg5qPIsg-xG5dpXICqJ_3IWvwRWJ5FlMiiv-mttwQbp9qkWXlOXGES_qaIaofZsYYZPdo68jTE-RStWLGUJebKUj7x8KuXCDLo
https://googleads.g.doubleclick.net/pagead/html/r20211011/r20110914/zrt_lookup.html?fsb=1#RS-1-&adk=1812271801&client=ca-pub-5561794038235243&fa=1&ifi=5&uci=a!5&btvi=2
https://easylist.to/)
https://ag.innovid.com/trk?tid=11711&google_gid=CAESEFBKvl14FujX593acXfTHas&google_cver=1&google_push=AYg5qPLXMp2vD5XVX-XI1mw64gu1bjDoOeeYofoQA8qtccD3SttXDcwm-Gv7DtwBP3lV12wDJ7su-T425UkWGWIn9EdM5jWZ2fgv
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D
https://apis.google.com/js/client.js
https://googleads.g.doubleclick.net/pagead/html/r20211011/r20110914/zrt_lookup.html?fsb=1#RS-0-&adk=1812271808&client=ca-pub-5561794038235243&fa=8&ifi=4&uci=a!4
https://googleads.g.doubleclick.net/xbbe/pixel?d=CLbFxQEQq9bcARj-w6qbATAB&v=APEucNWrWy7k0VUASDM27z8yMLnfCnQ18KiIHSeiP8zXTdTRdfE8kgG99BWCAgc1pY1EsqRRsj5AITdZDbyLd0-fJ7CAg8tTH6fXteUiQpepzf8T9adUrKdqt3jaXdfVOlmCu2pzC44paWh2dP9D1gPVWUIbRGUMrLvnhKS3Et-RyEb_oQlHq74
https://googleads.g.doubleclick.net/pagead/html/r20211011/r20110914/zrt_lookup.html?fsb=1#RS-1-&adk=1812271801&client=ca-pub-5561794038235243&fa=1&ifi=4&uci=a!4
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEKNjbQGYLFePrCXu0dF2oGc&google_cver=1&google_push=AYg5qPKg2zwf0ihRofwv3qHpggqPAFhMjoZlDcVlSaQSCmiBy2vqcU81vVNYtJf1O4rOM2pvcaXGXD-a9VRUrF7WVx5kndRi4zA
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEIPAikoVJPy_ZEL-dHt6vKo&google_cver=1&google_push=AYg5qPKi3QoPQK5i1_LCXC9b_0zsBCiixSSsDdsHw0izFS_5fkIiH68ricsQyigoOkmQ7ZYWFEZmYWcbLfrAqU0dmzNrCh8IIkBFpg
https://feedback.googleusercontent.com
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEIPAikoVJPy_ZEL-dHt6vKo&google_cver=1&google_push=AYg5qPJmluAAuLdQAViIiqnyfIZE0MgVZJuQLh4Zrq0aCuI698bsxou2EJyCMPe0gPt3zkfZUZOcIgHXLwFMeVoGo1dwcdheTf4
https://googleads.g.doubleclick.net/pagead/html/r20211011/r20190131/zrt_lookup.html
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEKNjbQGYLFePrCXu0dF2oGc&google_cver=1&google_push=AYg5qPJErkBwqrW55GaFDpqv8vCE3HZ39SvuX-dTQFCxO_BT5-nHrhkhNEDBsJQY3XdHnUK1r2n5t66b6qRo1UYktx9jTE2WHMeL
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEIPAikoVJPy_ZEL-dHt6vKo&google_cver=1&google_push=AYg5qPLX1wpZU69s8ahtWkYCt1zrsYhkcSEI2vT4XhYPlgfkcnTfnWMUVjyxBtLAynW_RwxhOyGY4L1Ch3YPnpM74l7bGprH22-Z
http://tools.ietf.org/html/rfc1950
https://us-u.openx.net/w/1.0/pd?ph=bbb82fae-1d27-4d90-bb10-e24164ecd7bc&google_gid=CAESEIbvZskkAmVF-a0DcrC2JMs&google_cver=1&google_push=AYg5qPK2JufujYTCtqj-EwTMGNME2mCzPqfVd0gC9mw3EPrcssZyt6LzvY6Q1jLbg40bGExdHnRC8xB3j9AgBsJkaV_14BajyBvB
https://s0.2mdn.net/6343956/1626781241437/UK_GREAT_PRODUCTS_DESK-English-300x600-637623780399438408-89d793e1-322c-4232-839a-4c3e1bc6ee78.html
https://www.google.com/images/cleardot.gif
https://www.google.com/images/dot2.gif
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEKNjbQGYLFePrCXu0dF2oGc&google_cver=1&google_push=AYg5qPI35uODP-roJbLuaVANNiJI_MyABClynxwdcI2ZFTIa8HPPFqkfs9Qhdr__AUAaMO7b0KvMus7zlI-3sn6w2H-qrU0-RJG9
https://id.rlcdn.com/466606.gif?cparams=google_push%3DAYg5qPIVs5dm7gjRPTA_Ln06q_s3H-tdGuGijqtoyg2Eg4zDwG2tKrgmBZlJ6zirrWvmX_cfjFYkulYpW9fQzGSkgzLEjNUT2mFY&google_gid=CAESEOKOQtX_gS5LlQgtLiElRik&google_cver=1
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESEKNjbQGYLFePrCXu0dF2oGc&google_cver=1&google_push=AYg5qPJpMB5rjo1-Sz3QmP2cSdnDTCQQ2w1b2FWi_tfeI-KUth5yUeOpa7O17LdqV3JD1fHb7WrWDwyrwU7G-6Fm1o08zKKyda4
https://payments.google.com/payments/v4/js/integrator.js
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
https://ag.innovid.com/trk?tid=11711&google_gid=CAESEFBKvl14FujX593acXfTHas&google_cver=1&google_push=AYg5qPKY8d1XYkUvp5qEIZl7U-hN5hZUshKefqMlmT71B5FBbubaokP9T_gMjfKmATAzzVK924ypevoMAjG8FCTLv4LvE6dZ1Q
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEIPAikoVJPy_ZEL-dHt6vKo&google_cver=1&google_push=AYg5qPI0P9x9PIeq9tJz-SEUjHHYJazifwx_T7aFhhll9Thqo6c1f5ylyZauP0Sj2OIFZh_9LXaTrWiAibt9Scy0wNOIZWhIUaFojA
https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\ar\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\am\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Temp\af930a1c-2a5b-4509-b97d-0deb07d35d27.tmp
Google Chrome extension, version 3
#
C:\Users\user\AppData\Local\Temp\9308ba47-8193-4468-b718-ead4eedbfa4c.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\76dc25d2-ddad-403a-9929-9c90a23e7ef3.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Temp\6052_7203276\manifest.json
ASCII text
#
C:\Users\user\AppData\Local\Temp\6052_7203276\manifest.fingerprint
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
current ar archive
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_platform_specific\x86_64\pnacl_public_pnacl_json
ASCII text
#
C:\Users\user\AppData\Local\Temp\6052_7203276\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\6052_1230381870\manifest.json
ASCII text
#
C:\Users\user\AppData\Local\Temp\6052_1230381870\manifest.fingerprint
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Temp\6052_1230381870\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\6052_1230381870\LICENSE.txt
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\6052_1230381870\Filtering Rules
data
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\fil\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\kn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\iw\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\id\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\gu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\fa\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\en\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\scoped_dir6052_1117921317\CRX_INSTALL\_locales\bn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6d3dd490-bce9-4cea-8d4f-a7780eebadf3.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State.. (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9677d61f-9f0e-4515-a724-2e63e3a5577c.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\90713d8f-2ef2-4c31-b8ae-a1d8b9b370a4.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\86103b95-3154-4da3-bb8d-06d0ebead0a7.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7a944429-c0bb-4b4d-bedf-45a10678a26b.tmp
very short file (no magic)
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences. (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3ae9fa1d-08d8-431b-89c6-00edf0870051.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\39410ca6-3738-4f9f-ab51-c65e903f1f1b.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1e27ec11-f065-4970-a11a-3a532e2a8835.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\161f12d5-df45-4b1a-9d62-ea3eb30b27c2.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\114fc139-8188-410b-a2e0-690da3f8e06a.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\8f777a5e-02b9-497f-b640-120c7796f977.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\78473ad6-9df5-4c89-aad2-a04f65f0c30e.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\5815a339-cde4-4436-84ed-c05076f16b1b.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\4abd4e6d-a4e1-4f77-901a-db69c7d02cff.tmp
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\2943b11b-f427-4583-8773-76c5960bddcd.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\cd9191a2-7453-4d62-9f91-05f133cec7ff.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\eb8b9002-3950-437b-afe7-c020e4260535.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ce39e465-d8b2-4983-b68e-6b03fa35e4ee.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c9485949-7f7d-4d18-8f4c-11e48e64f746.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\bffd5acb-7a81-477c-8ef7-36657f0c072d.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b48a65a8-fd17-4949-af79-a7ab2e444859.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurityMP (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity4" (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
#
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\d7640508-4196-43fd-bff4-0ecf2663f44a.tmp
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesMP (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences3 (copy)
ASCII text, with very long lines, with no line terminators
#