hxxp://sl[.]amaicdn[.]com

Analysis

max time kernel
300s
max time network
305s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2023, 08:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://sl.amaicdn.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133409685512583578"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4868	chrome.exe
4868	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe
Token: SeShutdownPrivilege	4708	chrome.exe
Token: SeCreatePagefilePrivilege	4708	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe
4708	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4708 wrote to memory of 3064	4708	chrome.exe	82
PID 4708 wrote to memory of 3064	4708	chrome.exe	82
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 3880	4708	chrome.exe	85
PID 4708 wrote to memory of 412	4708	chrome.exe	87
PID 4708 wrote to memory of 412	4708	chrome.exe	87
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86
PID 4708 wrote to memory of 4012	4708	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://sl.amaicdn.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff79119758,0x7fff79119768,0x7fff79119778
  2⤵
  PID:3064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1692 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:2
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2224 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:8
  2⤵
  PID:412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3032 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3016 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4608 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3280 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5160 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5128 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:8
  2⤵
  PID:1108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4888 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2712 --field-trial-handle=1900,i,6627075502989991775,8295291946294692009,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4868

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1500

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2401a999-7e73-4c6b-a571-fe2fadfe54e4.tmp

Filesize
121KB

MD5
0027382e0c1696868dee6b19b6d4feae

SHA1
4faec77ca1b8c0ef0c351b3f32ea92336ed0bb80

SHA256
90de3055eefebda4f2a66d5c5dd5ff3d4013ae4ce0b75dee676f201a64f90ed8

SHA512
b601ab1a50bc9b82ce155b53d11c4db61cf844ce75a1894fa6712a98cd041ca4348cdd6ce8234ff13061fd488cd2b1ab420ed1b0f762b207b24e97d6863012a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
b54f537ee7e4f3aca284b4959048476b

SHA1
cce9b4bb516cc46123b9ff526c55b0ecec348b59

SHA256
24ebede6fec3c42e750593539557d470d104a6bc164d95473270cc299c01035d

SHA512
a019db3e2f158bb8221b2ad51aed53079c224ea46a6d2c13f31affc610c7f754f2c24b7bbaf8b22322c502f8dde8b979f7c7851685fe26d268f3a00719cc87a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
af3cd0b5dc3470a493fc73305f5d231a

SHA1
01ffeb8d8dc7d2ded636f353b2223b004e5baf81

SHA256
f9050457e0f82b1d669343a2f361d8ffa4727bd5b8baed356643bc2fb6ba6111

SHA512
bed0cbc96668ade65c99fd8ccf906f3d251b0d3261ea112cb29ee783b8adc3ff542c2011158a1c1641c86f7a0c67b259a1c5bbb05857bf19c7f0d9890df5df3d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
c3a32fe69e5914c2cdfda620b0abb392

SHA1
10756f928d774dd73cfb0752d6182d55d86a17f6

SHA256
3f30f6e976cf2db8866bd2e298bbad54d6b49daebbe3a6a1db8aca52c2f3fa7b

SHA512
b9e58a8cfb102d8078818fdfb24a2097ec081a16cd2bff9c6f3f29c01afe68f7eb5415315df19300b3f4b855f1b00c8dd9ff5fa74983ca7c5032e9a07d80b305

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
874B

MD5
2bdc764f1f91a2c0329bddbf9b3eb0c5

SHA1
5c2cd9df65974ffe02460575b6ea09a8ba99f5d0

SHA256
5d8720380e64318aec2dc487e7ec61e5c3a58c4c3bcfb5868c71ece5cd2f33ee

SHA512
c530c6cf2e7695461a39b9c4c5f57f8bf5fbc075575e9063109e7e5b33f5c802eab4daae50540aa500866ec430f0609d0b92764d41ab978971b0de4bc119463d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
874B

MD5
3a08e7b0ad29d95458b823646a41ba12

SHA1
4e198e3a8708bc1c03e1fd17b0a9a05dd4b499da

SHA256
e4514605120e28127f6ccec8a99a6f849e19e6b2e6246a5a7b4ff85f9ecaac69

SHA512
1763017325b0ad7642044fb4f6f21d77df70141992eebace1cf548e2f5c3d97406b67866beeaa6ef2eda4db5b006e3366538f98fcf9062e1008475a3992088c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
30f34f2b74d72acb2ef0bc6aff2058a2

SHA1
308430d60226cf2b45ca6580868c83fa781ef8fc

SHA256
ba6128d00beda85e87074433a0403f008029fb6b1bd327818dce362c4e3df3d6

SHA512
96c54c87bc7329a67d68bac8b15f3b256601f9d5c033ea31602f5633338028a022e396f19bcb0b274022d76685d7dcb40356d4f8fa81e8114db9c53e70d789f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
b70485e456ce5c24a66230a62549be4a

SHA1
ca69f5a077f3fd95c5775bb95e2c904161774e5d

SHA256
3ab0aa21897064afd00a849ca6cd36d96ec93e4f27403d4e9ff0e979b94b0c35

SHA512
1f9cf76ce0fe5642492d8b62d5bc9561566e8b3473fa4952ec4c884d21bd89167be0b58d2b016f06919272d568e60824fbc51800a8e25d7b09f76c7ecebfc71d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
987fac2bc4a18367ccbd1bfa6c1901a2

SHA1
f3df7bdb2bfbd06da838f1fee1da0caaa749d3c1

SHA256
5ba287b31751c010726b4c36d376def001b1fa89e0cf47ad6d3d56e0a95c409a

SHA512
a321f2e1a79e48cf5853b0fe945b11910af29b548ebf18b918a174d94d9aed6c97a9c388287a8d0909189121cc8280da758c5ed6fa748b24f511a95d5c758409

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c86dee95215dad6c88f9703e9e779677

SHA1
84e4115ed4bc43251354e27126a3cc2f4f71e971

SHA256
90d5af7e3b91dfb73dc682cc58147aa2fafab23628626e633bfa059bba8bcdcb

SHA512
a7bd31207b917893fb54c1aff834907a9c6a98238fb5f3eaca7bc3bbdc26de2560fca425b2155043768b445d43725360ec556ac27597abe1adc2e160bc5a22e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
ebc8d52c1b03e9c3004b4ab154dbbac8

SHA1
72fc964ff25897bf430d0ce8d864860412b25648

SHA256
62620d97e079e22d5c21db4c5101a2f84aeb30d3392057a5416d03df9fb95cdf

SHA512
4eb749f1df4900fd56b45ec0457034946fa4d0ace8113779a0ec5e34b15e138145c325ce7ae8c3cdc71e4bd0975a40dc2189741e64b0081d586db00652413bbb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
104KB

MD5
17ab6df0e2858a70c5cf9e74f18c0495

SHA1
b57d65a4ebbb80aa5cd224f10fcb65eaf0486216

SHA256
cb81db405a4034b4c23493a6aa60dafc0ec20ca1731ad3dab2d08cfde9027171

SHA512
d67fa28733042b609b6f6aa9460893205b78ef936958444d4fbc92202b888509654776a790a3efb4819531f98c15efb211f8cdbe888c25ada1c23da563875b4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
aa65fcef07802f4d40c659d384c0d304

SHA1
67086eac004a1e910e787414d5f62002fdbd4b66

SHA256
8d0e260ca27db552329d138b68033286d78f1396e5d44f8056c36ff1fdda4681

SHA512
80cb00095525c265992a5eb6ec904c86ce5a3a46ff16782eec0961f1b53b01df17142fad28700c31d8d74814bf433d0957b9232db8a8a5e2b7e70eae338e747e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
bcf6c65fee039761560bd60b4ccad9af

SHA1
20ec04d4dc2ef8bef4b0eccba7342483c48eee57

SHA256
a5bd17db3866ec22adc263ebe946595a11e5ba58d175615e77b3c8f069162bd2

SHA512
b2744c32d94f185d9a742ec08c674472ce5dddebde152f40412fdc8bef8a6141742f65a613a471e1d006832d573297dba9ac1ae9736c689e68d5af2594318333

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit