Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

https://outlookapp22662.wixsite.com/my-site

Status: finished
Submission Time: 2021-10-26 12:53:44 +02:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    509353
  • API (Web) ID:
    876920
  • Analysis Started:
    2021-10-26 12:53:44 +02:00
  • Analysis Finished:
    2021-10-26 13:01:48 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
malicious
Score: 56
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Full Report Management Report IOC Report
clean
0/100

Third Party Analysis Engines

malicious

IPs

IP Country Detection
172.217.23.110
 United States
185.230.61.98
 Israel
3.224.180.226
 United States
Click to see the 28 hidden entries
185.230.61.105
 Israel
34.102.176.152
 United States
142.250.145.154
 United States
172.217.168.35
 United States
54.152.82.197
 United States
172.217.168.72
 United States
142.250.203.102
 United States
199.232.80.84
 United States
172.217.168.66
 United States
172.217.168.4
 United States
185.230.60.169
 Israel
157.240.17.14
 United States
157.240.17.15
 United States
185.230.61.100
 Israel
142.250.203.110
 United States
185.230.61.162
 Israel
108.174.11.37
 United States
239.255.255.250
 Reserved
172.217.168.13
 United States
216.58.215.226
 United States
35.186.220.184
 United States
142.250.203.99
 United States
142.250.185.142
 United States
104.18.101.194
 United States
142.250.203.97
 United States
172.217.168.46
 United States
157.240.17.35
 United States
34.96.106.200
 United States

Domains

Name IP Detection
cx.atdmt.com
 0.0.0.0
googlehosted.l.googleusercontent.com
 142.250.203.97
4382365.fls.doubleclick.net
 0.0.0.0
Click to see the 58 hidden entries
v.pinimg.com
 0.0.0.0
manage.wix.com
 0.0.0.0
ct.pinterest.com
 0.0.0.0
adservice.google.co.uk
 0.0.0.0
stats.g.doubleclick.net
 0.0.0.0
users.editorx.com
 0.0.0.0
clients2.googleusercontent.com
 0.0.0.0
clients2.google.com
 0.0.0.0
static.parastorage.com
 0.0.0.0
i.pinimg.com
 0.0.0.0
www.facebook.com
 0.0.0.0
siteassets.parastorage.com
 0.0.0.0
static.wixstatic.com
 0.0.0.0
clients.l.google.com
 142.250.185.142
users.wix.com
 0.0.0.0
www.linkedin.com
 0.0.0.0
px.ads.linkedin.com
 0.0.0.0
connect.facebook.net
 0.0.0.0
frog.wix.com
 0.0.0.0
snap.licdn.com
 0.0.0.0
s.pinimg.com
 0.0.0.0
www.pinterest.ch
 0.0.0.0
analytics.tiktok.com
 0.0.0.0
analytics.google.com
 0.0.0.0
www.pinterest.com
 0.0.0.0
apis.google.com
 0.0.0.0
outlookapp22662.wixsite.com
 0.0.0.0
www.wix.com
 0.0.0.0
www-google-analytics.l.google.com
 172.217.168.46
dart.l.doubleclick.net
 142.250.203.102
98.www.sv5.wix.com
 185.230.61.98
179.www.sv5.wix.com
 185.230.61.179
105.manage.sv5.wix.com
 185.230.61.105
adservice.google.com
 216.58.215.226
scontent.xx.fbcdn.net
 157.240.17.15
p.adsymptotic.com
 104.18.101.194
www.google.fr
 142.250.203.99
www.google.com
 172.217.168.4
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com
 3.224.180.226
162.users.sv5.wix.com
 185.230.61.162
star-mini.c10r.facebook.com
 157.240.17.35
pagead46.l.doubleclick.net
 172.217.168.66
accounts.google.com
 172.217.168.13
gstaticadssl.l.google.com
 172.217.168.35
stats.l.doubleclick.net
 142.250.145.154
plus.l.google.com
 142.250.203.110
pop-esv5.mix.linkedin.com
 108.174.11.37
td-username-dc11-60-169.wix.com
 185.230.60.169
www-googletagmanager.l.google.com
 172.217.168.72
gcp.media-router.wixstatic.com
 34.102.176.152
td-static-34-96-106-200.parastorage.com
 34.96.106.200
100.users.sv5.wix.com
 185.230.61.100
www3.l.google.com
 172.217.23.110
googleads.g.doubleclick.net
 172.217.168.2
dualstack.pinterest.map.fastly.net
 199.232.80.84
collector-px35v5ygcp.px-cloud.net
 35.186.220.184
www.google.co.uk
 142.250.203.99
atlas.c10r.facebook.com
 157.240.17.14

URLs

Name Detection
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
https://4382365.fls.doubleclick.net/activityi;dc_pre=CN_DxI_15_MCFeLn5godcAAObQ;src=4382365;type=count;cat=websi0;ord=1;num=1423298878156;gtm=2wgak0;auiddc=162674012.1635278105;u1=e82bba38-574e-4c2d-af8f-2a0eeeeea6a9;~oref=https%3A%2F%2Fusers.wix.com%2Fsignin%3Fview%3Dlogin%26sendEmail%3Dtrue%26postSignUp%3Dhttps%3A%252F%252Fwww.wix.com%252Fmy-account%26loginCompName%3Dcta%2520fold%25203%26referralInfo%3Dcta%2520fold%25203%26postLogin%3Dhttps%3A%252F%252Fwww.wix.com%252Fmy-account%26forceRender%3Dtrue?
https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LfAOdsZAAAAAClPC2qOj9EtL_RxIjkwwJESOS_Z&co=aHR0cHM6Ly91c2Vycy53aXguY29tOjQ0Mw..&hl=en&v=YhkYx1k-yvvb8OonJPmOpoJY&size=invisible&cb=3fvdbuvyweyo
Click to see the 76 hidden entries
https://users.wix.com/signin?view=login&sendEmail=true&postSignUp=https:%2F%2Fwww.wix.com%2Fmy-account&loginCompName=cta%20fold%203&referralInfo=cta%20fold%203&postLogin=https:%2F%2Fwww.wix.com%2Fmy-account&forceRender=true
https://hangouts.google.com/
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=7e86d009-c017-4707-91e6-fec06ba500ff
https://www.google.com;
https://4382365.fls.doubleclick.net/activityi;dc_pre=CK_guIL15_MCFYkeBgAdfG8OxA;src=4382365;type=count;cat=websi0;ord=1;num=7302809676792;gtm=2wgak0;auiddc=162674012.1635278105;u1=e82bba38-574e-4c2d-af8f-2a0eeeeea6a9;~oref=https%3A%2F%2Fwww.wix.com%2F?
https://payments.google.com/payments/v4/js/integrator.js
https://www.google.com/images/x2.gif
https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LfAOdsZAAAAAClPC2qOj9EtL_RxIjkwwJESOS_Z&co=aHR0cHM6Ly91c2Vycy53aXguY29tOjQ0Mw..&hl=en&v=YhkYx1k-yvvb8OonJPmOpoJY&size=invisible&cb=qfqjx7tz1v5m
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
https://support.google.com/chromecast/troubleshooter/2995236
https://users.wix.com/signin?view=login&sendEmail=true&postSignUp=https:%2F%2Fwww.wix.com%2Fmy-account&loginCompName=cta%20fold2&referralInfo=cta%20fold2&postLogin=https:%2F%2Fwww.wix.com%2Fmy-account&forceRender=true
https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fusers.wix.com&rpcToken=909223592.8623368
https://ogs.google.com
https://www.google.com/intl/en-US/chrome/blank.html
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
https://4382365.fls.doubleclick.net/activityi;dc_pre=CKvAt_v05_MCFRscBgAdeIwByA;src=4382365;type=count;cat=websi0;ord=1;num=7055028197114;gtm=2wgak0;auiddc=162674012.1635278105;u1=e82bba38-574e-4c2d-af8f-2a0eeeeea6a9;~oref=https%3A%2F%2Fwww.wix.com%2Flpviral%2Fenviral%3Futm_campaign%3Dvir_wixad_live%26adsVersion%3Dwhite%26orig_msid%3D7e86d009-c017-4707-91e6-fec06ba500ff?
https://clients6.google.com
https://clients2.google.com/service/update2/crx
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
https://feedback.googleusercontent.com
https://www.google.com/
https://docs.google.com
https://clients2.googleusercontent.com
https://support.google.com/chromecast/answer/2998456
https://code.google.com/p/nativeclient/issues/entry
https://dns.google
http://tools.ietf.org/html/rfc1950
https://code.google.com/p/nativeclient/issues/entry%s:
https://users.wix.com/signin?view=login&sendEmail=true&postSignUp=http:%2F%2Fwww.wix.com%2Fnew%2Faccount&loginCompName=cta%20fold1&referralInfo=cta%20fold1&postLogin=https:%2F%2Fwww.wix.com%2Fmy-account&forceRender=true
https://www.wix.com/
https://play.google.com/log?format=json&hasfast=true
https://meetings.clients6.google.com
https://www.google.com/images/dot2.gif
http://llvm.org/):
https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fusers.wix.com&rpcToken=745963942.0458897
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
https://meet.google.com
https://hangouts.clients6.google.com
https://outlookapp22662.wixsite.com/my-site/_api/v2/dynamicmodel
https://outlookapp22662.wixsite.com/my-site
https://www.google.com
https://outlookapp22662.wixsite.com/my-site
https://preprod-hangouts-googleapis.sandbox.google.com
https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fusers.wix.com&rpcToken=395882134.5875125&clearCache=1
https://accounts.google.com/MergeSession
https://adservice.google.com/ddm/fls/i/dc_pre=CKvAt_v05_MCFRscBgAdeIwByA;src=4382365;type=count;cat=websi0;ord=1;num=7055028197114;gtm=2wgak0;auiddc=162674012.1635278105;u1=e82bba38-574e-4c2d-af8f-2a0eeeeea6a9;~oref=https%3A%2F%2Fwww.wix.com%2Flpviral%2Fenviral%3Futm_campaign%3Dvir_wixad_live%26adsVersion%3Dwhite%26orig_msid%3D7e86d009-c017-4707-91e6-fec06ba500ff
https://sandbox.google.com/payments/v4/js/integrator.js
https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fusers.wix.com&rpcToken=1631127867.7206066
https://4382365.fls.doubleclick.net/activityi;dc_pre=CNXK3pP15_MCFaYOBgAd0bUDFQ;src=4382365;type=count;cat=websi0;ord=1;num=7383986019300;gtm=2wgak0;auiddc=162674012.1635278105;u1=e82bba38-574e-4c2d-af8f-2a0eeeeea6a9;~oref=https%3A%2F%2Fusers.wix.com%2Fsignin%3Fview%3Dlogin%26sendEmail%3Dtrue%26postSignUp%3Dhttps%3A%252F%252Fwww.wix.com%252Fmy-account%26loginCompName%3Dcta%2520fold%25204%26referralInfo%3Dcta%2520fold%25204%26postLogin%3Dhttps%3A%252F%252Fwww.wix.com%252Fmy-account%26forceRender%3Dtrue?
https://www.google.com/log?format=json&hasfast=true
https://crash.corp.google.com/samples?reportid=&q=
https://outlookapp22662.wixsite.com/my-site2
https://www.google.com/images/cleardot.gif
https://apis.google.com/js/client.js
https://www.pinterest.ch/ct.html
https://apis.google.com
http://www.apache.org/licenses/LICENSE-2.0
https://www.google.com/tools/feedback
https://clients2.google.com
https://users.wix.com/signin?view=login&sendEmail=true&postSignUp=https:%2F%2Fwww.wix.com%2Fmy-account&loginCompName=cta%20fold%204&referralInfo=cta%20fold%204&postLogin=https:%2F%2Fwww.wix.com%2Fmy-account&forceRender=true
https://static.parastorage.com/services/wix-thunderbolt/dist/main.48ab1a70.bundle.min.js
https://www-googleapis-staging.sandbox.google.com
https://github.com/madler/zlib/blob/master/zlib.h
https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LfAOdsZAAAAAClPC2qOj9EtL_RxIjkwwJESOS_Z&co=aHR0cHM6Ly91c2Vycy53aXguY29tOjQ0Mw..&hl=en&v=YhkYx1k-yvvb8OonJPmOpoJY&size=invisible&cb=j3yg29nnumca
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
https://4382365.fls.doubleclick.net/activityi;dc_pre=COuOvYX15_MCFRXN1QodRsgMaQ;src=4382365;type=count;cat=websi0;ord=1;num=7501960122307;gtm=2wgak0;auiddc=162674012.1635278105;u1=e82bba38-574e-4c2d-af8f-2a0eeeeea6a9;~oref=https%3A%2F%2Fusers.wix.com%2Fsignin%3Fview%3Dlogin%26sendEmail%3Dtrue%26postSignUp%3Dhttp%3A%252F%252Fwww.wix.com%252Fnew%252Faccount%26loginCompName%3Dcta%2520fold1%26referralInfo%3Dcta%2520fold1%26postLogin%3Dhttps%3A%252F%252Fwww.wix.com%252Fmy-account%26forceRender%3Dtrue?
https://github.com/angular/material
https://creativecommons.org/publicdomain/zero/1.0/.
http://angularjs.org
https://static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.4bf37853.bundle.min.js
https://4382365.fls.doubleclick.net/activityi;dc_pre=CNatjYv15_MCFYjR1QodESYPdg;src=4382365;type=count;cat=websi0;ord=1;num=7510171416659;gtm=2wgak0;auiddc=162674012.1635278105;u1=e82bba38-574e-4c2d-af8f-2a0eeeeea6a9;~oref=https%3A%2F%2Fusers.wix.com%2Fsignin%3Fview%3Dlogin%26sendEmail%3Dtrue%26postSignUp%3Dhttps%3A%252F%252Fwww.wix.com%252Fmy-account%26loginCompName%3Dcta%2520fold2%26referralInfo%3Dcta%2520fold2%26postLogin%3Dhttps%3A%252F%252Fwww.wix.com%252Fmy-account%26forceRender%3Dtrue?
https://clients2.google.com/cr/report
https://accounts.google.com
https://hangouts.google.com/hangouts/_/logpref

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
 current ar archive
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\ar\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\am\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\8c5707f4-93eb-4c19-b037-cdeec338ac7b.tmp
 Google Chrome extension, version 3
 #
C:\Users\user\AppData\Local\Temp\8c5707f4-93eb-4c19-b037-cdeec338ac7b.tmp
 Google Chrome extension, version 3
 #
C:\Users\user\AppData\Local\Temp\64aa36cd-4a7a-4c55-8f1b-4a138748c536.tmp
 very short file (no magic)
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\manifest.json
 ASCII text
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\manifest.fingerprint
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
 ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
 ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
 current ar archive
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
 current ar archive
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
 current ar archive
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\bg\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
 ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
 ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
 ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
 ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_platform_specific\x86_64\pnacl_public_pnacl_json
 ASCII text
 #
C:\Users\user\AppData\Local\Temp\2840_810689066\_metadata\verified_contents.json
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\ff6dd668-9165-48ce-8361-558d81c4a3d2.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\b1c3807d-f589-49be-a949-d6bc6f1354eb.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Statekn (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Stateap (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StateVa (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\fil\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\lt\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\ko\messages.json
 UTF-8 Unicode text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\kn\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\ja\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\iw\messages.json
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\it\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\id\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\hu\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\hr\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\hi\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\gu\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\fr\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State. (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\fi\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\fa\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\et\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\es\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\en\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\el\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\de\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\da\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\cs\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\ca\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Temp\scoped_dir2840_1028567155\CRX_INSTALL\_locales\bn\messages.json
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5b8ede38-2656-42d1-99ae-54ae5779fe3b.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\000003.log
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\000001.dbtmp
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old.. (copy)
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7d7b1146-12dc-4d5f-9ef1-8395474e9f86.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5f7d9ff3-65f5-4d16-8fa5-ce8a4b4b8c11.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5e374d50-180e-467b-a710-8a514e52bb30.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5d5cc1d4-4c3e-4bb3-947e-c3f95fdc50aa.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5ca25340-6b3d-4b7f-a1c5-553374fbf934.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT*g (copy)
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4dd5e6f4-5f90-4c7d-b404-6afc79812445.tmp
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\36275263-294d-4d86-8eda-8f9887483210.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\310bca17-7dad-4c76-b208-b304437fc350.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\793d98cd-ea25-4c14-a5b1-958c4e964fe9.tmp
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\41943cda-e05e-4675-b4ec-b059ffd49dde.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\3f3a95f5-35e5-4116-b117-d05fb597bd50.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\13f913b5-ad53-4bfc-b78a-1c58d4959377.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\078eb0d1-28d7-4401-b617-7987a0e5d2ff.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
 data
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
 Microsoft Cabinet archive data, 61157 bytes, 1 file
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e4543aad-d5ff-428c-8f9a-17d955bf41c5.tmp
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c65f14dd-3317-448d-8b10-4e03f94dad49.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a29a592e-20ad-410e-9ce3-0153d8779573.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old (copy)
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
 data
 #
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\33ab818e-bbc6-457c-bb90-a658de8dd304.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\969ba7e1-c73d-4d42-ba53-cffcf57537fd.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager
 SQLite 3.x database, last written using SQLite version 3032001
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences. (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000001
 PGP\011Secret Key -
 #