Overview

overview

3

Static

static

3

AirSense v1.dll

windows10-2004-x64

3

AirSense v1.dll

windows11-21h2-x64

3

Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    890s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    06/06/2026, 16:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AirSense v1.dll
  • Size 8.9MB
  • Sample260606-tsk92sav7l
  • SHA256 f7e77db91f903d1203bf7d4d7b224630f34448daaa4935a299c0a6559980b50b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 36 IoCs
  • Suspicious use of SendNotifyMessage 34 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 31 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\AirSense v1.dll",#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3688
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe "C:\Users\Admin\AppData\Local\Temp\AirSense v1.dll",#1
      2⤵
      • System Location Discovery: System Language Discovery
      PID:4308
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:708
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1716
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa1648c728,0x7ffa1648c734,0x7ffa1648c740
        2⤵
          PID:3932
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,13033000302386208689,9926200341394730144,262144 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
          2⤵
            PID:468
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,15204800844688791945,3399790257493276583,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2212 /prefetch:3
            2⤵
            • System Time Discovery
            PID:1288
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,3712968217393985307,4313863447776965008,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2508 /prefetch:8
            2⤵
              PID:4904
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,13640296619954600245,13326259627324604068,2097152 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
              2⤵
                PID:3632
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3448,i,1313945916233192472,362358983872466104,2097152 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3492 /prefetch:1
                2⤵
                  PID:4376
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4452,i,6203687624462456187,7942238566424835523,2097152 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4468 /prefetch:2
                  2⤵
                    PID:116
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4680,i,6935143225879573383,9268599673114140675,2097152 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
                    2⤵
                      PID:3844
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,6782902779625720472,6963004128701263603,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5380 /prefetch:8
                      2⤵
                        PID:5104
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5596,i,12139299067700243261,5876448583923287687,2097152 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:1
                        2⤵
                          PID:708
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3244,i,2343464542002167145,6781750787802324445,2097152 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3656 /prefetch:1
                          2⤵
                            PID:5088
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3252,i,16968842204886883973,15798390895479534302,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3520 /prefetch:8
                            2⤵
                              PID:1696
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,17191255862118124172,14511031981354948359,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3972 /prefetch:8
                              2⤵
                                PID:2212
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3696,i,15820909593513758479,15543632945750766968,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5752 /prefetch:8
                                2⤵
                                  PID:4480
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4568,i,11303302722700837234,7593820019625743784,2097152 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4576 /prefetch:1
                                  2⤵
                                    PID:3456
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3972,i,8699829674901216753,13881095161205112676,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4468 /prefetch:8
                                    2⤵
                                    • Modifies registry class
                                    • Suspicious behavior: GetForegroundWindowSpam
                                    • Suspicious use of FindShellTrayWindow
                                    • Suspicious use of SendNotifyMessage
                                    • Suspicious use of SetWindowsHookEx
                                    PID:2224
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3480,i,3368169388386414558,7796725366622897120,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3596 /prefetch:8
                                    2⤵
                                      PID:5188
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5728,i,15796246874919562522,1121316624809565459,262144 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:8
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2460
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,5099355586417328558,4577723635196108110,524288 --field-trial-handle=1912,i,18203086692971304018,5286906212063144895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1272 /prefetch:8
                                      2⤵
                                        PID:2836
                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                      1⤵
                                        PID:3764
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                        1⤵
                                          PID:2336

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              BookmarkMergedSurfaceOrdering
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              BrowsingTopicsState
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                              • Size 649B
                                              • SHA256 db9180d34a7bd275bd384bdbf3ccd933299f4d9a3a1f292d45a4f3a5af3640d9
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              f_00001b
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
                                              • Size 374KB
                                              • SHA256 ab86af68c9996e75bd4fd76238647ff5b5ab4995cdcf567ae4fa544ee090af4d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 720B
                                              • SHA256 78a673edfb06d8fbf7f059c18452893b362871092129352b402a02af3318fea7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 8KB
                                              • SHA256 299d42f48f9063e416fe8a91f32a1b8cab032085488d8b4b5b98150cb7e90003
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 9KB
                                              • SHA256 beec331dbd9d499bb695a596fb20e901c763e201ee60b6b6e1018cee9c2e578f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 8KB
                                              • SHA256 97ee7254d99cbf1a532e838d534f366f1199d0580c5440da5405fbdf5635f389
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 10KB
                                              • SHA256 ff23dad44f3002ae19c5304831ea2ce04fa4d9fd7811cac925194070e0fcce35
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              SCT Auditing Pending Reports
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              TransportSecurity
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                              • Size 1KB
                                              • SHA256 d2749d09e29ef55b3ac88719fda201bfa2aad6dd694f577e3dc04fc2498d5a2a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 045326be2f6e09edda3df5d1eaec938dd9b701c34f439ece3eea4b11a09fdcee
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 f1f98b469092b177f47a9e0b1e5d8e8e7fe5f5f589c34f0bd0fb1da4c4ec6eb1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 0d131dcd6d352f5937363841cdb8654bd029513b4fb89d0c86433f65f22da315
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Secure Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                              • Size 17KB
                                              • SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 144B
                                              • SHA256 53c8871fc74f03d826c4a42c5e8dc5eeffbd14cf01f6bb4266c241db73735f61
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 120B
                                              • SHA256 7e303abc8aa4de48dc65b431ac1b563e9aa0db5abcdc31eede64c25a39ca5a37
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index~RFe591004.TMP
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591004.TMP
                                              • Size 96B
                                              • SHA256 c65264c896f2f5e4804b563ff4a16cd1c77e016ec004fe9441c1810ed7a247e8
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 c160df2611d0e649d989e33f8380be6cf7b87f11f49e157f405f1250f8645330
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 232KB
                                              • SHA256 9d35811e9c133f5bfcdd3f232c8499ddfa72cf5a58bd8f9f8176f3d570f9831f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 233KB
                                              • SHA256 9ff6921be3012d3b92d706ecf55f384cd3d2fcef95f34dc9e008ae9f54bd8532
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 115KB
                                              • SHA256 9841012f6af96e43397a7bb7c374d4bb745c7fd3cc10b64eda2b46389f43127b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 231KB
                                              • SHA256 e265a2de2d717cafde4046da605b2b7e6c429a871e38a2312c40d46b6d8ca0f8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 232KB
                                              • SHA256 76401fdc1a8c820c61ae66f0c2a5c66a069e28dc0be3532acb3738fade39f97d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              memory/4308-0-0x0000000074490000-0x00000000754DE000-memory.dmp
                                              Download