Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/07/2026, 03:16

General

  • Target
    DolinTools.exe
  • Size 390KB
  • Sample260727-dstcnavdkc
  • SHA256 ee41889e5944cb3e53f1a038596f65e5955eae720ff26b8e974aa132c1880d7c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 27 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 26 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DolinTools.exe
    "C:\Users\Admin\AppData\Local\Temp\DolinTools.exe"
    1⤵
      PID:2680
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3488
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd4106c728,0x7ffd4106c734,0x7ffd4106c740
        2⤵
          PID:2436
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,13719994253756202894,16636919991790557998,262144 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1948 /prefetch:2
          2⤵
            PID:1532
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,6238015669118057848,14088916940686616675,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:3
            2⤵
            • System Time Discovery
            PID:1684
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,16609947524440529948,121079812891486911,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2528 /prefetch:8
            2⤵
              PID:2116
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,2049833289196553305,14942655486635026299,2097152 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
              2⤵
                PID:2088
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,10886473974225382328,9319614331608406172,2097152 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3492 /prefetch:1
                2⤵
                  PID:2548
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4540,i,14116080443300744612,13910970993255143307,2097152 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4568 /prefetch:1
                  2⤵
                    PID:3040
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,18281411822358632659,10222211453477917884,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5376 /prefetch:8
                    2⤵
                      PID:664
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5536,i,3762068637399630487,12649296893343312765,2097152 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5436 /prefetch:1
                      2⤵
                        PID:1540
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3576,i,4697043025731523764,8391987668443434713,2097152 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3544 /prefetch:1
                        2⤵
                          PID:616
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,6481855515450428675,1521342719610572655,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:8
                          2⤵
                            PID:2052
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5836,i,1251871612205663643,14875345166221176601,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5856 /prefetch:8
                            2⤵
                              PID:2040
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,14753070024550554575,12281418297220668624,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:8
                              2⤵
                              • Modifies registry class
                              PID:2176
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,13643842510553813741,17739807082147140686,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6344 /prefetch:8
                              2⤵
                                PID:5804
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6408,i,9851139437568206837,271044429603090939,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6432 /prefetch:8
                                2⤵
                                  PID:5812
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6416,i,4385507066930886096,3442058006293752936,524288 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6488 /prefetch:8
                                  2⤵
                                    PID:5820
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5532,i,3101542197175163777,17923698096148584382,262144 --field-trial-handle=1952,i,3960208869294466939,10836585287795942959,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6128 /prefetch:8
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:5260
                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                  1⤵
                                    PID:3188
                                  • C:\Windows\system32\svchost.exe
                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                    1⤵
                                      PID:5024
                                    • C:\Windows\system32\taskmgr.exe
                                      "C:\Windows\system32\taskmgr.exe" /4
                                      1⤵
                                      • Checks SCSI registry key(s)
                                      • Checks processor information in registry
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SendNotifyMessage
                                      PID:5976

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          BookmarkMergedSurfaceOrdering

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                          • Size 6B
                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                          • MD5 SHA1 SHA512

                                          BrowsingTopicsState

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                          • Size 414B
                                          • SHA256 6b53eb51886361cd38bfc09c5829b62153683e7f5f690465772bff91f55b2b70
                                          • MD5 SHA1 SHA512 TLSH

                                          f_00001c

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
                                          • Size 56KB
                                          • SHA256 3f9b0c0a209ecaa2f816817bd374578d8ca9acbd0b1de8a110dfddf3c81435a5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00001e

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                          • Size 22KB
                                          • SHA256 c227a1af6376674c1ba6fcfda203a3787c1eb57bc222df372e44d3b5c10e4c7a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00001f

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                          • Size 34KB
                                          • SHA256 7fd55cb3eb1b4640925f976f995f37754ba88fcf13dde8bb6a3d6f43ea0e597e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000020

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
                                          • Size 280KB
                                          • SHA256 b0dfc85844c8d9b6ec5ad174c2c5c4233ca827ad347f7dee2ac5fdbb4f66678b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000034

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
                                          • Size 21KB
                                          • SHA256 dcdda869a4ef62bcf773687d2513404b718696c45502158a1e531675500886ae
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 1KB
                                          • SHA256 fb8848e615f48666af2306bc9dcb5a6ceef840b651befc1387e5979b80f38826
                                          • MD5 SHA1 SHA512 TLSH

                                          000003.log

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                          • Size 256KB
                                          • SHA256 12d8065428b307e1958f0a76d6adb155dedf042b9a77caee9f62498360741e3b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          000005.ldb

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000005.ldb
                                          • Size 101KB
                                          • SHA256 c352ae1af16c6a78764df288ca0c5982670d774107305bef179b89a16db63d83
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          000006.log

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000006.log
                                          • Size 203KB
                                          • SHA256 722bd1975529b8c418b584945b7b523fd31d178f1456bf30c4a9f1092b0149fa
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          000008.ldb

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
                                          • Size 6KB
                                          • SHA256 3d2ec9bf62400d6a4c856e1f814a248ff3ffe3ab074d7631df2981b38d0f1905
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          LOG

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                          • Size 512B
                                          • SHA256 1e8aceba0c5d821780509342e3520d236d14e09eadd30d382e21650f010bf2bd
                                          • MD5 SHA1 SHA512 TLSH

                                          LOG

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                          • Size 2KB
                                          • SHA256 871f8f14363df8d8449d65878197ed76b27fe24daf4ca32195559887fe92a73d
                                          • MD5 SHA1 SHA512 TLSH

                                          MANIFEST-000001

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                          • Size 23B
                                          • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                          • MD5 SHA1 SHA512

                                          MANIFEST-000001

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                          • Size 377B
                                          • SHA256 f36c3583d2d91b16c38abaad9cf322326558a1d8684af0b3f21e246c2d5a1486
                                          • MD5 SHA1 SHA512 TLSH

                                          Network Persistent State

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                          • Size 13KB
                                          • SHA256 1c3bf890db4c1d04c4eff40e79a28f6c61785ca0d721ad760dc887ae10110796
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          SCT Auditing Pending Reports

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512

                                          CURRENT

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
                                          • Size 16B
                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                          • MD5 SHA1 SHA512

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                          • Size 13KB
                                          • SHA256 8d9d7591d35fc6881f89fb8e719230fbb5d3278094ed286ec84695c668809396
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                          • Size 12KB
                                          • SHA256 366f464d87e2f54b110b9b151216f4f05556ea004dfab65d46f2710c023ac1f1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                          • Size 13KB
                                          • SHA256 d99fd08f456722dcc36869a99e0696d7ac40a694221dbafdce3f3dfb947b7dc1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                          • Size 13KB
                                          • SHA256 984d27d8b650a00f21b02ea2ceb3b8d57d708be26b2cacc3b6491effba244ced
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Secure Preferences

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                          • Size 13KB
                                          • SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\99edb2dc-a6d3-48e8-af21-9320d4d573a9\index-dir\the-real-index
                                          • Size 2KB
                                          • SHA256 bb0b415f99d6e0eb01daaaf973a2b0297d3ca508a9165a2a6ce9ff1861b03aa2
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\99edb2dc-a6d3-48e8-af21-9320d4d573a9\index-dir\the-real-index
                                          • Size 2KB
                                          • SHA256 26ad53c958d6a109a78f30d05111aab825f36168b208664571de5d4d87d08a07
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index~RFe5864fe.TMP

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\99edb2dc-a6d3-48e8-af21-9320d4d573a9\index-dir\the-real-index~RFe5864fe.TMP
                                          • Size 48B
                                          • SHA256 9f4739dfcb40dbb779e7dc076015095dc1c0443b54c3897fa80063fc10968029
                                          • MD5 SHA1 SHA512

                                          index

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cc22bcad-e591-41dd-a899-415c4191f117\index
                                          • Size 24B
                                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                          • MD5 SHA1 SHA512

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cc22bcad-e591-41dd-a899-415c4191f117\index-dir\the-real-index
                                          • Size 576B
                                          • SHA256 f01504b3f310fa77af6634add98b659e023c84b573365e49f85653633118b9d8
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index~RFe58c3a9.TMP

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cc22bcad-e591-41dd-a899-415c4191f117\index-dir\the-real-index~RFe58c3a9.TMP
                                          • Size 48B
                                          • SHA256 ce5e406190d06440f0b70d159583e21b003566cdf19d7f9afc0a107ac79890d4
                                          • MD5 SHA1 SHA512

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                          • Size 214B
                                          • SHA256 1e61779cbfe9dc77e34552364945df9921443031a291f40bb6e455e41e8efd6a
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                          • Size 216B
                                          • SHA256 90c2f169de2da9fdb7ee59f70e6db68e1f8520bad8760c1e45849e8e61599abe
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                          • Size 132B
                                          • SHA256 2bbd1957adf191b79c261b4e11ddd40a988af0e24f279bbdeeb6ce5398a63086
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                          • Size 243B
                                          • SHA256 6d6508f52903348b500498c67f1f1bdaebf518a19c81ef93ad756f448128ff22
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                          • Size 390B
                                          • SHA256 d2c29df95dcf59ca2e5d69fe8dd32c382ca9d7d2e627e13872404f9b3fd114a4
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                          • Size 130B
                                          • SHA256 ea51bc61f4b0187db3a6cf33e497d0c956134436bcb6d4739714dd5891f76c3b
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                          • Size 383B
                                          • SHA256 1bafb93612418326d270f80eeeea566537eeaf3cb949027013f6cb29817764ba
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt~RFe58587b.TMP

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58587b.TMP
                                          • Size 137B
                                          • SHA256 feeabf0052f16f59df6eb8999653e2a431cdddc090b17b265a7bf5d6af8e4382
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                          • Size 144B
                                          • SHA256 b0a02d1189c4338765c5ff6d596aa3fd34b339a1bab249633f9d526b3d846fc7
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                          • Size 72B
                                          • SHA256 2197be38fa7e09a87b41d8f4ddb16cde5bb750545735d46fd20662615dcb33a6
                                          • MD5 SHA1 SHA512 TLSH

                                          16.png

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3488_1017881645\Icons Monochrome\16.png
                                          • Size 257B
                                          • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                          • MD5 SHA1 SHA512 TLSH

                                          512.png

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3488_1800096905\Shortcuts Menu Icons\Monochrome\0\512.png
                                          • Size 4KB
                                          • SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          512.png

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3488_1800096905\Shortcuts Menu Icons\Monochrome\1\512.png
                                          • Size 7KB
                                          • SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          512.png

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3488_1800096905\Shortcuts Menu Icons\Monochrome\2\512.png
                                          • Size 9KB
                                          • SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                          • Size 236KB
                                          • SHA256 047cb316e95e35a28636017d589afb4341a2851cd6bc6a593e5d39512c826df1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                          • Size 236KB
                                          • SHA256 a1c69a7f2874dba5f668e241b40e610d33ae14d3bf087859a9867c1169da3cb1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                          • Size 115KB
                                          • SHA256 d1db299266b2b5395c04296f737a3a65496bf1db5268301f3ef895be69008822
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                          • Size 237KB
                                          • SHA256 afecd1a64bf1042237db0cfe720ed58932e7859306b558ac71f82382676d2365
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          memory/5976-772-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-763-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-764-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-765-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-770-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-771-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-769-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-773-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-774-0x000002267B2D0000-0x000002267B2D1000-memory.dmp

                                          memory/5976-775-0x000002267B2D0000-0x000002267B2D1000-memory.dmp