Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

https://app.twilead.com/v2/preview/yn7vOTKQAH2FF4b9Mos0?notrack=true

Status: finished
Submission Time: 2022-04-20 14:50:17 +02:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    612085
  • API (Web) ID:
    979602
  • Analysis Started:
    2022-04-20 14:55:21 +02:00
  • Analysis Finished:
    2022-04-20 15:02:05 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
malicious
Score: 72
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

Open Full Report
malicious
Score: 6/92
malicious
malicious

IPs

IP Country Detection
151.101.0.176
 United States
52.41.199.178
 United States
142.250.185.205
 United States
Click to see the 10 hidden entries
151.101.0.119
 United States
34.120.211.235
 United States
35.244.153.18
 United States
35.190.80.1
 United States
142.250.74.195
 United States
35.202.49.152
 United States
142.250.185.65
 United States
216.239.32.21
 United States
239.255.255.250
 Reserved
142.250.184.238
 United States

Domains

Name IP Detection
googlehosted.l.googleusercontent.com
 142.250.185.65
bam-cell.nr-data.net
 0.0.0.0
cdn.myportfolio.com
 0.0.0.0
Click to see the 22 hidden entries
js.stripe.com
 0.0.0.0
app.twilead.com
 0.0.0.0
p.typekit.net
 0.0.0.0
clients2.google.com
 0.0.0.0
clients2.googleusercontent.com
 0.0.0.0
use.fontawesome.com
 0.0.0.0
office-access-documentcloud.myportfolio.com
 0.0.0.0
js-agent.newrelic.com
 0.0.0.0
m.stripe.network
 0.0.0.0
use.typekit.net
 0.0.0.0
gstaticadssl.l.google.com
 142.250.74.195
clients.l.google.com
 142.250.184.238
prod.adobe-prod-view.map.fastly.net
 151.101.0.119
app.msgsndr.com
 35.202.49.152
m.stripe.com
 52.41.199.178
services.leadconnectorhq.com
 34.120.211.235
assets.cdn.msgsndr.com
 35.244.153.18
stripecdn.map.fastly.net
 151.101.0.176
cdn.msgsndr.com
 35.244.153.18
accounts.google.com
 142.250.185.205
a.nel.cloudflare.com
 35.190.80.1
msgsndr.com
 216.239.32.21

URLs

Name Detection
https://app.twilead.com/v2/preview/yn7vOTKQAH2FF4b9Mos0?notrack=true
https://app.twilead.com/v2/preview/yn7vOTKQAH2FF4b9Mos0?notrack=true2
http://llvm.org/):
Click to see the 54 hidden entries
https://www.google.com/intl/en-US/chrome/blank.html
https://ogs.google.com
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
https://payments.google.com/payments/v4/js/integrator.js
https://cdn.msgsndr.com/_preview/cb3348a.js
https://www.google.com;
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
https://hangouts.google.com/
https://m.stripe.network/inner.html
https://js.stripe.com/v3/m-outer-23335cd0c833d03926d94e8fb5cb0381.html
https://office-access-documentcloud.myportfolio.com/site/translations?cb=cd81f8056bf78bbdba99c23111bbcd8486dc637d
https://www.google.com/images/x2.gif
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
https://www.google.com/images/dot2.gif
https://app.twilead.com/v2/preview/yn7vOTKQAH2FF4b9Mos0?notrack=true
https://assets.cdn.msgsndr.com/2XDkBvAJTC2RPZPKmXFm/media/624ae5bab871ee53e4546f5b.png
https://cdn.msgsndr.com/_preview/7e27dcc.js
https://m.stripe.network/out-4.5.42.js
https://m.stripe.com/6
https://clients2.googleusercontent.com
https://office-access-documentcloud.myportfolio.com/
https://www.google.com/
https://feedback.googleusercontent.com
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
https://clients2.google.com/service/update2/crx
https://js.stripe.com/v3/fingerprinted/js/m-outer-8828f6fcad654313f23d9a7d1f1eb715.js
https://office-access-documentcloud.myportfolio.com/dist/css/main.css
https://www.google.com/images/cleardot.gif
https://office-access-documentcloud.myportfolio.com/
https://a.nel.cloudflare.com/report/v3?s=wt4HBui%2Bi1AToVhWpM0fsS7fU8j29vPOLdLw1dbpTWtaRnXXLYHOoLUE5oFOUoATQQ3t76YxQGxkpcmKCpRGcijpirPVvq3XuI0%2B9t81757AhJJQXe3esmAAPFytd7co167mlIkD
https://office-access-documentcloud.myportfolio.com/dist/js/main.js?cb=cd81f8056bf78bbdba99c23111bbcd8486dc637d
https://sandbox.google.com/payments/v4/js/integrator.js
https://js.stripe.com/v3
https://accounts.google.com/MergeSession
https://m.stripe.network/inner.html#url=https%3A%2F%2Fapp.twilead.com%2Fv2%2Fpreview%2Fyn7vOTKQAH2FF4b9Mos0%3Fnotrack%3Dtrue&title=(2)%20Pending%20Document%20%7C%20Access%20Document%20Cloud&referrer=&muid=NA&sid=NA&version=6&preview=false
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
https://www.google.com
https://services.leadconnectorhq.com/appengine/funnel/event
https://cdn.msgsndr.com/_preview/a14acc7.js
https://msgsndr.com/js/user_session.js
https://office-access-documentcloud.myportfolio.com/2
https://accounts.google.com
https://cdn.msgsndr.com/_preview/6be6dd1.js
https://app.twilead.com/favicon.ico
https://cdn.msgsndr.com/_preview/26d7810.js
https://apis.google.com
https://office-access-documentcloud.myportfolio.com/2:
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
https://js.stripe.com/v3/m-outer-23335cd0c833d03926d94e8fb5cb0381.html#url=https%3A%2F%2Fapp.twilead.com%2Fv2%2Fpreview%2Fyn7vOTKQAH2FF4b9Mos0%3Fnotrack%3Dtrue&title=(2)%20Pending%20Document%20%7C%20Access%20Document%20Cloud&referrer=&muid=NA&sid=NA&version=6&preview=false
https://cdn.msgsndr.com/_preview/9f74505.js
https://www-googleapis-staging.sandbox.google.com
https://clients2.google.com
https://dns.google

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\hu\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\ro\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\pt_PT\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\pt_BR\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\pl\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\nl\messages.json
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\nb\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\lv\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\lt\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\ko\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\ja\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\it\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\id\messages.json
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\ru\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\hr\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\hi\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\fr\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\fil\messages.json
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\fi\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\et\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\es_419\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\es\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\en_GB\messages.json
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\en\messages.json
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\el\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\craw_background.js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\manifest.json
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\topbar_floating_button_pressed.png
 PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\topbar_floating_button_maximize.png
 PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\topbar_floating_button_hover.png
 PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\topbar_floating_button_close.png
 PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\topbar_floating_button.png
 PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\icon_16.png
 PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\icon_128.png
 PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\images\flapper.gif
 GIF image data, version 89a, 30 x 30
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\html\craw_window.html
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\css\craw_window.css
 ASCII text
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\craw_window.js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\de\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_metadata\verified_contents.json
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\zh_TW\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\zh_CN\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\vi\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\uk\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\tr\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\th\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\sv\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\sr\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\sl\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\sk\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\44f04ca0-2057-4c12-a294-917c51ab4fa1.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\1eee0dea-bcdd-45cb-9123-2b70669c6941.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\805b6798-5106-4f63-a45d-51b0ed2dba25.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7a3d724b-bd93-4261-a0b0-d3cf399f1fd8.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\68560d4f-1d1e-477e-b2a7-551ff87ea9c5.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3e4b5c55-263c-4d9c-9be5-6033104a88b2.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\33b37057-4fb2-4533-931b-9e5aa3d6cd98.tmp
 very short file (no magic)
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1fa2a788-9d93-4794-b1c7-b42b6f444a56.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0cf70d7c-3d89-4fa4-97ec-324360ca34b8.tmp
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\8750d148-a1c7-40fe-9459-28d1c42ec083.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\6727613f-432b-4839-8942-3a99202186f0.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\665ff1af-332b-4964-aac0-28e59a978970.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\4cfcae05-8467-4e26-99ee-d99226d1a890.tmp
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\342ca822-8a46-43be-ba15-a571ed05fd0d.tmp
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\1a4913fe-8f6c-4748-b011-b8b02e9273cc.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
 data
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\da\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\cs\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\ca\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\CRX_INSTALL\_locales\bg\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir6196_159758796\9b4545a3-05ae-49d6-b3ea-74f10879e272.tmp
 Google Chrome extension, version 3
 #
C:\Users\user\AppData\Local\Temp\c4716fdb-b5dd-4c12-a8eb-3aff24a4cc2c.tmp
 very short file (no magic)
 #
C:\Users\user\AppData\Local\Temp\b2bf5d79-af2e-4713-8898-6c68d5046833.tmp
 very short file (no magic)
 #
C:\Users\user\AppData\Local\Temp\a9602c68-c2e4-4314-8463-3cba230c27bc.tmp
 Google Chrome extension, version 3
 #
C:\Users\user\AppData\Local\Temp\9b4545a3-05ae-49d6-b3ea-74f10879e272.tmp
 Google Chrome extension, version 3
 #
C:\Users\user\AppData\Local\Temp\6196_509228749\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
 ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\c789961a-ef76-4543-9d4d-5c89c5ec5d32.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\af24084f-50a0-4475-a3e3-d9dead36dda0.tmp
 SysEx File -
 #
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ce48247d-21c8-4bb4-9d93-0bc0763892a8.tmp
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b29dc28b-68ba-4bed-ae5b-f1f3fb0e565e.tmp
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\bd60bf8d-7385-422d-a264-c7a937633a32.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)
 ASCII text, with very long lines, with no line terminators
 #