Resubmissions

28/05/2023, 09:18

230528-k91lmafc2z 8

Analysis

  • max time kernel
    330s
  • max time network
    333s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    28/05/2023, 09:18

General

  • Target

    Voice.ai-Downloader-alphaver-994600f200c4460982e991a798b63aca.exe

  • Size

    98KB

  • MD5

    2a08f537ca29735e25fc479034f46e43

  • SHA1

    003fbfa6c1b854ee5832bb11546a1996dfe863ac

  • SHA256

    c9b0c9b6a4df508c7355509807c67fcf144a2065c21679c6c484f47e91e2d16f

  • SHA512

    0a0d9a7bf0971c5d504b80c979b6d4d385104d909e1dc5c90fdf895f545c22b615e26d440958645dd6b2b318acb7048a57a6221f35734b981de495c02c003a49

  • SSDEEP

    3072:xkBGWOsTIJgIDU5A/czY6tMDD9ZGY7fxOS:x1ssjuttMD6W

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 25 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • NSIS installer 4 IoCs
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 16 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 53 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 61 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Voice.ai-Downloader-alphaver-994600f200c4460982e991a798b63aca.exe
    "C:\Users\Admin\AppData\Local\Temp\Voice.ai-Downloader-alphaver-994600f200c4460982e991a798b63aca.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2528
    • C:\Program Files\Voice.ai\VoiceAI-Installer.exe
      "C:\Program Files\Voice.ai\VoiceAI-Installer.exe" /path "C:\Program Files\Voice.ai"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:4600
      • C:\Program Files\Voice.ai\tools\vc2019.exe
        "C:\Program Files\Voice.ai\tools\vc2019.exe" /q /norestart
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:4996
        • C:\Windows\Temp\{4BE56A3D-90D2-4147-8F5F-DEDAEB1BEF4F}\.cr\vc2019.exe
          "C:\Windows\Temp\{4BE56A3D-90D2-4147-8F5F-DEDAEB1BEF4F}\.cr\vc2019.exe" -burn.clean.room="C:\Program Files\Voice.ai\tools\vc2019.exe" -burn.filehandle.attached=592 -burn.filehandle.self=600 /q /norestart
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of WriteProcessMemory
          PID:4140
          • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\.be\VC_redist.x64.exe
            "C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{FF02E66F-9925-4C03-A20E-8FF2F7D1D6DC} {505E2158-B825-43C6-B6CA-D3300632D029} 4140
            5⤵
            • Executes dropped EXE
            • Adds Run key to start application
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:164
            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={2aaf1df0-eb13-4099-9992-962bb4e596d1} -burn.filehandle.self=960 -burn.embedded BurnPipe.{A01A75FB-8DD4-4B7E-BFFA-FA98865885BC} {325AAA04-903E-428E-AAB9-EC11CFA4C0C0} 164
              6⤵
              • Suspicious use of WriteProcessMemory
              PID:2084
              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=512 -burn.filehandle.self=532 -uninstall -quiet -burn.related.upgrade -burn.ancestors={2aaf1df0-eb13-4099-9992-962bb4e596d1} -burn.filehandle.self=960 -burn.embedded BurnPipe.{A01A75FB-8DD4-4B7E-BFFA-FA98865885BC} {325AAA04-903E-428E-AAB9-EC11CFA4C0C0} 164
                7⤵
                • Loads dropped DLL
                • Suspicious use of WriteProcessMemory
                PID:2664
                • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                  "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{FDDDC6B7-4CC0-4133-800F-8C0987F56F79} {C53BF82D-E630-41F1-AF4C-05E92251A96F} 2664
                  8⤵
                  • Modifies registry class
                  PID:3580
      • C:\Program Files\Voice.ai\VoiceAI.exe
        "C:\Program Files\Voice.ai\VoiceAI.exe" installdriver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Modifies system certificate store
        PID:4168
      • C:\Windows\explorer.exe
        "C:\Windows\explorer.exe" "C:\Program Files\Voice.ai\VoiceAI.exe"
        3⤵
          PID:440
    • C:\Windows\system32\NOTEPAD.EXE
      "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\WriteRemove.txt
      1⤵
      • Opens file in notepad (likely ransom note)
      PID:4356
    • C:\Windows\system32\werfault.exe
      werfault.exe /h /shared Global\6e87ffdd6e9c42d18d29effb40f94519 /t 4328 /p 4356
      1⤵
        PID:3920
      • C:\Windows\system32\vssvc.exe
        C:\Windows\system32\vssvc.exe
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2140
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k netsvcs -s DsmSvc
        1⤵
        • Checks SCSI registry key(s)
        • Modifies data under HKEY_USERS
        PID:2148
      • C:\Windows\system32\srtasks.exe
        C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
        1⤵
          PID:4892
        • C:\Windows\system32\msiexec.exe
          C:\Windows\system32\msiexec.exe /V
          1⤵
          • Enumerates connected drives
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Modifies data under HKEY_USERS
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1240
        • \??\c:\windows\system32\svchost.exe
          c:\windows\system32\svchost.exe -k dcomlaunch -s DeviceInstall
          1⤵
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Suspicious use of WriteProcessMemory
          PID:896
          • C:\Windows\system32\DrvInst.exe
            DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{cc2fcee0-c545-2a41-b837-270f860617c0}\voiceaidriver.inf" "9" "46b7f3743" "0000000000000180" "WinSta0\Default" "0000000000000184" "208" "c:\program files\voice.ai\voiceaidriver"
            2⤵
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            • Modifies data under HKEY_USERS
            PID:4560
          • C:\Windows\system32\DrvInst.exe
            DrvInst.exe "2" "211" "ROOT\MEDIA\0000" "C:\Windows\INF\oem3.inf" "voiceaidriver.inf:ed86ca11bfc96d40:VOICEAIDRIVER_SA:16.36.0.99:root\voiceaidriver," "46b7f3743" "0000000000000180"
            2⤵
            • Adds Run key to start application
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            • Modifies data under HKEY_USERS
            PID:2568
        • C:\Windows\explorer.exe
          C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
          1⤵
          • Suspicious use of WriteProcessMemory
          PID:1196
          • C:\Program Files\Voice.ai\VoiceAI.exe
            "C:\Program Files\Voice.ai\VoiceAI.exe"
            2⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies system certificate store
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:1572
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:\Program Files\Voice.ai\VoiceAI.exe" --type=gpu-process --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files\Voice.ai\debug.log" --mojo-platform-channel-handle=2284 --field-trial-handle=2452,i,959740425382481911,15899639907940040241,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2 --host-process-id=1572
              3⤵
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:3804
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:/Program Files/Voice.ai/VoiceAI.exe" discord 1572
              3⤵
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:5004
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:\Program Files\Voice.ai\VoiceAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --log-file="C:\Program Files\Voice.ai\debug.log" --mojo-platform-channel-handle=2924 --field-trial-handle=2452,i,959740425382481911,15899639907940040241,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 --host-process-id=1572
              3⤵
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:4672
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:\Program Files\Voice.ai\VoiceAI.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --log-file="C:\Program Files\Voice.ai\debug.log" --mojo-platform-channel-handle=2916 --field-trial-handle=2452,i,959740425382481911,15899639907940040241,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 --host-process-id=1572
              3⤵
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:4168
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:\Program Files\Voice.ai\VoiceAI.exe" --type=renderer --log-severity=disable --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Program Files\Voice.ai\debug.log" --use-fake-ui-for-media-stream --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3284 --field-trial-handle=2452,i,959740425382481911,15899639907940040241,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker --host-process-id=1572 /prefetch:1
              3⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:1136
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:\Program Files\Voice.ai\VoiceAI.exe" --type=renderer --log-severity=disable --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Program Files\Voice.ai\debug.log" --use-fake-ui-for-media-stream --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3256 --field-trial-handle=2452,i,959740425382481911,15899639907940040241,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker --host-process-id=1572 /prefetch:1
              3⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:4100
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:\Program Files\Voice.ai\VoiceAI.exe" --type=gpu-process --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:\Program Files\Voice.ai\debug.log" --mojo-platform-channel-handle=3556 --field-trial-handle=2452,i,959740425382481911,15899639907940040241,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2 --host-process-id=1572
              3⤵
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:3360
            • C:\Program Files\Voice.ai\VoiceAI.exe
              "C:\Program Files\Voice.ai\VoiceAI.exe" --type=gpu-process --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --log-file="C:\Program Files\Voice.ai\debug.log" --mojo-platform-channel-handle=3560 --field-trial-handle=2452,i,959740425382481911,15899639907940040241,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2 --host-process-id=1572
              3⤵
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:4964
            • C:\Windows\System32\Wbem\wmic.exe
              wmic diskdrive get model,SerialNumber,size
              3⤵
                PID:3304
              • C:\Windows\System32\Wbem\wmic.exe
                wmic baseboard get serialnumber
                3⤵
                  PID:2668
                • C:\Windows\System32\Wbem\wmic.exe
                  wmic baseboard get Product
                  3⤵
                    PID:5020
                  • C:\Windows\System32\Wbem\wmic.exe
                    wmic baseboard get manufacturer
                    3⤵
                      PID:2932
                    • C:\Windows\System32\Wbem\wmic.exe
                      wmic computersystem get name
                      3⤵
                        PID:4852
                      • C:\Windows\System32\Wbem\wmic.exe
                        wmic os get caption,version
                        3⤵
                          PID:4704
                        • C:\Windows\System32\Wbem\wmic.exe
                          wmic path win32_videocontroller get name
                          3⤵
                            PID:976

                      Network

                      MITRE ATT&CK Enterprise v6

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      • C:\Config.Msi\e5a78ed.rbs

                        Filesize

                        17KB

                        MD5

                        6192103ae43301c0c3c8058c53768d01

                        SHA1

                        ae05bd05513f21e975639a8d5773645a5ded10ed

                        SHA256

                        8f5becf41e63725e84d344d195839223df46105e7db8d966505b71f34a158e7b

                        SHA512

                        22e78b7258662bd648b09f98b76a8e81d3b4bc28a2751810809fd637cc45bc1a6cdab8f3aaec3073a14b4e0180ef09b5bf79fcf7ab3d8b36a70e0a1c7792b6b9

                      • C:\Config.Msi\e5a78f9.rbs

                        Filesize

                        16KB

                        MD5

                        f8d7903e3b94b8a2056343f4e9b6f411

                        SHA1

                        1683b56c70d9bdcaff67163b0dbbfb7c8942ba12

                        SHA256

                        55effaad170df5852b209284d41f5fa6e9a3195ba0388943c2ff532db49834bc

                        SHA512

                        5247bd7550d3f9008a7e0fa3e4fab7510e0946cb92feafd5e1fbb3f366110a8080fa0239b184efaf0133116dfda3d1b1931f0efd45e19d7b901d0d1e6027e306

                      • C:\Config.Msi\e5a78fe.rbs

                        Filesize

                        19KB

                        MD5

                        00a3aa89c5c8c82fd0fadbac5558466e

                        SHA1

                        6e0823573bc27224d0b53a04e2dbb04e668763eb

                        SHA256

                        b6ae0524aebcaf570432cadaf1126ff5df88df42a0dcfd006e84ebaf007470ef

                        SHA512

                        3b2fe754d464c2398f884eb8920c88e60bc10668cd2a1f9c3270a230e46a9e65e2c1084267e6fc65004bfaf1896d4c77d03acb2223aa8f2ed90e162cdb0c2006

                      • C:\Config.Msi\e5a790d.rbs

                        Filesize

                        18KB

                        MD5

                        8fb3ed5d6e18cef6724f60d6b4d7305a

                        SHA1

                        79e422f6a58079da157b22a5a7935937168daa40

                        SHA256

                        d723ccb33a45d565f2a065d88c9115d6bc6c1a4b438eb533ab00c37713b58148

                        SHA512

                        58abf5ce42d0fde0739f2b3e9f76ba9b75aef725f730f4a327bcd77a77a0cc3bb1b4d1808a030d49267883aee71d50a4757a2d2cc187e5440b789b46168716f9

                      • C:\Program Files\Voice.ai\AudioConverter.dll

                        Filesize

                        425KB

                        MD5

                        b04e48b901fb6af35220e806267a9bfe

                        SHA1

                        dc3a4063c447afe3147520a3959dc0d93cbb7193

                        SHA256

                        993bbb79a9b5b196b55accec8a5af15f5546d8d3eb553c3b7ce2902804d46202

                        SHA512

                        6aa935e33a2c08db47da813a9e530fc185194af4f94cd78f4eaf7cf10096cc8e7ffb0e98bdfb2d09ddadccd45b8290e78fd940d78a8e109d0a4a59abe8453021

                      • C:\Program Files\Voice.ai\BsSndRpt.exe

                        Filesize

                        352KB

                        MD5

                        47a491c852aa6c26272902afb9f38bcf

                        SHA1

                        4e4ddfa91b7b5dc2b5741834dcd8e2f755092c8a

                        SHA256

                        e5c436a85b2472040bdcfadfe37f1926395fc87ee40c108936665c5616f90a4f

                        SHA512

                        08c019778b2a98b5cf1c65102e64bb3016483041413a6353135e95ee621fa101aa2f170a15626f903030963f870c7450c4e3b1d3c7e3f6e6c73fe75b3885196a

                      • C:\Program Files\Voice.ai\BugSplatDotNet.dll

                        Filesize

                        29KB

                        MD5

                        c765c4d36d0732377a332a16bdf7cee6

                        SHA1

                        34f33c99f42eb0fefe401e620aac70be29718295

                        SHA256

                        0a9b58d71d745440b0d6cbba64fd0d2dcda8cbd831f62b1dfa4cb6e3fb203ee1

                        SHA512

                        e89874d044eb3b184ebef52f5bad296001aba18390b090bf79d78e451de8ff731283159dec314ada74926fc7cc5fb74654c8f57663bb2fb13a6a88937f62dfd9

                      • C:\Program Files\Voice.ai\BugSplatRc.dll

                        Filesize

                        282KB

                        MD5

                        5363af67b580f6f08c2d8324e78c052b

                        SHA1

                        e9c5b1925555875325c3f304e29198177768c222

                        SHA256

                        753935123466d852acdfc24b23d8ea7700394809d01679fbd64f12b95ae43528

                        SHA512

                        685d17b6e01ea05125dc2a6cbc72e057b2faa2030ad8dbef8f0c316b33049558d515c103c29a9f2928ef3fe56f9c52416a720eb19fe6c395f1a686521622ceea

                      • C:\Program Files\Voice.ai\CefSharp.BrowserSubprocess.Core.dll

                        Filesize

                        1.1MB

                        MD5

                        ae2bd5b01f68bfc00e9a5b105354f3f6

                        SHA1

                        f4bfe78666db12f06841889269ab33abc34ae5f4

                        SHA256

                        a4b63108af66f2caad573b51c6de0412aa0f271ad2ff8c5f0a5836f8f8b3ef85

                        SHA512

                        9be46f88fba97fe1eca08165f1ed21800ebf032018d005b4275d19a09e727fd271b515e0d9b96c3950a8ccc34a11dcea088f891538da598539db92b7e9ca77f1

                      • C:\Program Files\Voice.ai\CefSharp.Core.Runtime.dll

                        Filesize

                        1.7MB

                        MD5

                        b248baf8c715fb3e853d7945b01efb80

                        SHA1

                        379b1982c9069a4e675f73a4dd94cd4460858340

                        SHA256

                        0e2074751c0b19ebf7ed6ede1f4dc468d6459d5b973fcfda1b6957aec1417520

                        SHA512

                        90d39295babd0825b2b3e3d2fdf1b36a31eee3b96e0a535145e9f48a808540997706e1e2674475ddfa8b02a77909cebafb3618f606ba292b4c68a3d29a1ac020

                      • C:\Program Files\Voice.ai\CefSharp.Core.dll

                        Filesize

                        47KB

                        MD5

                        97847eb086065d89bab93d34a9fd8936

                        SHA1

                        112fe59b07619176492eb75b2c25370d32c2900f

                        SHA256

                        a8d06260c75804e61facd47c3a70c1256f6277bf488d6e4015fcc9770af795cb

                        SHA512

                        7c13235b7015417780b74db7f202f5c41f2c86f8c26e81aa9376a778ba91f4450deba091f2a06188cc92a456f9a395ae51ba8d06e2fe95eeffc637d129fceb14

                      • C:\Program Files\Voice.ai\CefSharp.WinForms.dll

                        Filesize

                        58KB

                        MD5

                        c56a240a4eb7bf9a43cf7a0b8a394b9e

                        SHA1

                        408d8ff47127691f911e4ba701a6aad618ce58f1

                        SHA256

                        0370050112c026ec1b4b280d953c2c9e04a0ea54e27b40b202509103eb4ce521

                        SHA512

                        5560257688421301258ced279e650179b42a3d8fc67d9e55e3303f4e3920b81a7e40b33275470cf89b33868681ed68a9ee11f4a2ae1f0f159bc535d1b5630edb

                      • C:\Program Files\Voice.ai\CefSharp.dll

                        Filesize

                        1.0MB

                        MD5

                        69f79d227400c5c5a17e4fe6b5719009

                        SHA1

                        d7ace396db95eced9b4f98badc4282f359999d28

                        SHA256

                        7be25c5ddbbad217fcb40dbef92ba783bb8a155d3db48cde5a4c32e13761cbf7

                        SHA512

                        49262793c3b64fd454522381856761e456999d36e84ee228a894cefa4e19473302e9d7941d49b3a4d6faed98b136a18d60fb1dfdeaf4119f6fddb4c82da6f24c

                      • C:\Program Files\Voice.ai\DriverManager.dll

                        Filesize

                        82KB

                        MD5

                        d89a90d47a7da632ab122f9d24b121f8

                        SHA1

                        b3b049f5663eda2b725201929a6359142dfd8c96

                        SHA256

                        2c83950750fecdfbc251e51898f36c1d4ea219733ef0f03478fe88b1784c708a

                        SHA512

                        f36da2637991f1086bcdf550303baf1ac2e5fbfc7299d0867dcb6c5fd3d3b2e6b38dfcd3ca6055b3492916a645dae199421fb38a38adf01c2297378034905f08

                      • C:\Program Files\Voice.ai\VoiceAI-Installer.exe

                        Filesize

                        697.4MB

                        MD5

                        e2d8dacfd3616d0e3ed3714410d65db7

                        SHA1

                        46b06821c0adf25d47c18b60a609df264bc27f17

                        SHA256

                        c4b66422cfc40a1f09f998e85940f42da123d286f2bea1be68ea9bd24be75cc3

                        SHA512

                        cd7e20ccc6d6c6402b945a2f31c4f6e04b28469a5469e64c584105dd1225b5c2b87a78c1af714508607b438d888e48a1bea13aa0ac3a98b6684bc0f4ed608864

                      • C:\Program Files\Voice.ai\VoiceAI-Installer.exe

                        Filesize

                        697.4MB

                        MD5

                        e2d8dacfd3616d0e3ed3714410d65db7

                        SHA1

                        46b06821c0adf25d47c18b60a609df264bc27f17

                        SHA256

                        c4b66422cfc40a1f09f998e85940f42da123d286f2bea1be68ea9bd24be75cc3

                        SHA512

                        cd7e20ccc6d6c6402b945a2f31c4f6e04b28469a5469e64c584105dd1225b5c2b87a78c1af714508607b438d888e48a1bea13aa0ac3a98b6684bc0f4ed608864

                      • C:\Program Files\Voice.ai\VoiceAI.exe

                        Filesize

                        3.7MB

                        MD5

                        3b634e1ee95efa30f066e08196d1fddb

                        SHA1

                        26fa5ae36935f6e9da788f0de32b3ecec683b16c

                        SHA256

                        be4a1f1c2eac75101d4861dc95b42999d9b95f7983b7cf421e8ccb09121ba9cd

                        SHA512

                        cabdbecffa5c9c4854a53a7907a6ce532d0fadd16a658f2fbf403228661be495fdaa671285309cf1a3ded6eceb4a6f7eeed64618ba4d3c19334dcdb2ab499323

                      • C:\Program Files\Voice.ai\VoiceAI.exe

                        Filesize

                        3.7MB

                        MD5

                        3b634e1ee95efa30f066e08196d1fddb

                        SHA1

                        26fa5ae36935f6e9da788f0de32b3ecec683b16c

                        SHA256

                        be4a1f1c2eac75101d4861dc95b42999d9b95f7983b7cf421e8ccb09121ba9cd

                        SHA512

                        cabdbecffa5c9c4854a53a7907a6ce532d0fadd16a658f2fbf403228661be495fdaa671285309cf1a3ded6eceb4a6f7eeed64618ba4d3c19334dcdb2ab499323

                      • C:\Program Files\Voice.ai\VoiceAI.exe

                        Filesize

                        3.7MB

                        MD5

                        3b634e1ee95efa30f066e08196d1fddb

                        SHA1

                        26fa5ae36935f6e9da788f0de32b3ecec683b16c

                        SHA256

                        be4a1f1c2eac75101d4861dc95b42999d9b95f7983b7cf421e8ccb09121ba9cd

                        SHA512

                        cabdbecffa5c9c4854a53a7907a6ce532d0fadd16a658f2fbf403228661be495fdaa671285309cf1a3ded6eceb4a6f7eeed64618ba4d3c19334dcdb2ab499323

                      • C:\Program Files\Voice.ai\VoiceAI.exe

                        Filesize

                        3.7MB

                        MD5

                        3b634e1ee95efa30f066e08196d1fddb

                        SHA1

                        26fa5ae36935f6e9da788f0de32b3ecec683b16c

                        SHA256

                        be4a1f1c2eac75101d4861dc95b42999d9b95f7983b7cf421e8ccb09121ba9cd

                        SHA512

                        cabdbecffa5c9c4854a53a7907a6ce532d0fadd16a658f2fbf403228661be495fdaa671285309cf1a3ded6eceb4a6f7eeed64618ba4d3c19334dcdb2ab499323

                      • C:\Program Files\Voice.ai\VoiceAIDriver\VoiceAIDriver.inf

                        Filesize

                        14KB

                        MD5

                        fa4ddfa2231dc2c50e26794ae7356e0b

                        SHA1

                        463f4c2ac4f7505f2361c7853505b19fbe08f257

                        SHA256

                        a3554efa382a84130393a4d8656b31f06b20b9387e27fcba978162213fb7be90

                        SHA512

                        be11de31cdea93320a03892b572b17985a66d8b8483d1568afcba9d6cd73cfc8f86c628736d9c8649cb9af0acba17dc26c14fef55b2951520236f650b5a55946

                      • C:\Program Files\Voice.ai\chrome_100_percent.pak

                        Filesize

                        620KB

                        MD5

                        e05272140da2c52a9ebef1700e7c565f

                        SHA1

                        e1dc01309fca499af605f83136d35e6d51fcd300

                        SHA256

                        123092a649b8def6efca634509fb20ba4fbf9096d6819209510b43b5f899c0a3

                        SHA512

                        476907363a0d1e1bf81d086aff011b826fd28a885e2eabd2e07e48494eafbd48d508b1a9050efe865585f7c4d92a277886440876846cba8a2226033ff35a7a81

                      • C:\Program Files\Voice.ai\chrome_200_percent.pak

                        Filesize

                        933KB

                        MD5

                        0d362e859bc788a9f0918d9e79aea521

                        SHA1

                        33abea51f76bde3e37f71b7e94f01647bb4dcbd5

                        SHA256

                        782f475d56e62c76688747a22ba4ae115628c5c3519c3c1e3d1a51a4367bfc28

                        SHA512

                        37ca08bbe5525d0f2d45a9fe65a45f6c5d8366330fc60304822d4c7470dd66b8733d92803ce6aabdf4175ad0cf43d6e4a9ff9d4e49ff89d8eddc5f7083e7f067

                      • C:\Program Files\Voice.ai\chrome_elf.dll

                        Filesize

                        1.1MB

                        MD5

                        2fe263f11bd372ba2387746f03ee049a

                        SHA1

                        736a667a1f65bb2c442feeae3349b67d4ab5ccef

                        SHA256

                        81f7d9017bd1ffead821d3f64adf5019dd478fa4dcfd6b55ddffb9a5ded4c750

                        SHA512

                        0a63bab6ed1240c42c444de4949fad71a1de32b374ff2aa7973ec8b42d7c40a09e3150fe01949e355325a6fd01e8a21c518a3145028a1a6ba86e2b7f84848b97

                      • C:\Program Files\Voice.ai\cudart64_110.dll

                        Filesize

                        517KB

                        MD5

                        3d1aa9921f514a71a3618e34cd24b6af

                        SHA1

                        82cbad4e7bca6e517220eb7b62f43ba81ce6f2de

                        SHA256

                        3aa5e83056c54f8e7e3268892798e8dabbfb058f5978ffe5c1be811a221155b2

                        SHA512

                        fda21400bb37c12023e8fcd68049ef29aee7a9649763ac5838b5b81fbebf5702e877bc71a8168c781f971e122411c5e14411d4a08b86673438a24baa08e91731

                      • C:\Program Files\Voice.ai\d3dcompiler_47.dll

                        Filesize

                        4.7MB

                        MD5

                        17d15d3b58b49616ab78d06afd59c88c

                        SHA1

                        bd97c066f60b18ca0300b19668f7d34464e73421

                        SHA256

                        29625035f173c9d4bfd7694c6f238cb6623669f627f8b7f80e45204ad94f066e

                        SHA512

                        94d5bc63d92716f9602dfb86b10b3bc0ce800486576c9ca711f2d32120f994698c7018637e2327e38468edcb52b9054f904ae8253bc91f67ed22c2e24b4db413

                      • C:\Program Files\Voice.ai\dbgshim.dll

                        Filesize

                        138KB

                        MD5

                        d6351ad083a0df208716ada161f04004

                        SHA1

                        db85969e468305d077bfae154704dbdbf7f7da06

                        SHA256

                        7694359992c0088699e60136be26029d3d8529c4286a2da0a8e2971474cf6adf

                        SHA512

                        9b05ce96a7a5fd56c028895ca7e30e7d0c97c5f4c7a13b303f64b048edd7b0ef50d50fd4f06475510900c7ef818ef16fb5551398b9fb1968f9fe095a7e3f38cb

                      • C:\Program Files\Voice.ai\meta

                        Filesize

                        65B

                        MD5

                        c53578a046cbab7dfdce672ccd1edec7

                        SHA1

                        29b1ea4e67cefa19d1ff9cf8bf33f1ec22801808

                        SHA256

                        202e3df0766d19a10cc8db16ced618bee4767354912f3c8f5e19c54bb3418573

                        SHA512

                        84372b67ff83e8cee3fc8b0e18c0f93bd0432547a5f93c516a944054c5cbbea641503ea44cde390882d53f82eed1cbb258a5301a581ec7d278eccf4a3db7b942

                      • C:\Program Files\Voice.ai\tools\vc2019.exe

                        Filesize

                        24.1MB

                        MD5

                        4a85bfd44f09ef46679fafcb1bab627a

                        SHA1

                        7741a5cad238ce3e4ca7756058f2a67a57fee9d1

                        SHA256

                        37ed59a66699c0e5a7ebeef7352d7c1c2ed5ede7212950a1b0a8ee289af4a95b

                        SHA512

                        600e61332416b23ef518f4252df0000c03612e8b0680eab0bdf589d9c855539b973583dc4ce1faab5828f58653ed85a1f9196eb1c7bbf6d2e3b5ab3e83253f98

                      • C:\Program Files\Voice.ai\tools\vc2019.exe

                        Filesize

                        24.1MB

                        MD5

                        4a85bfd44f09ef46679fafcb1bab627a

                        SHA1

                        7741a5cad238ce3e4ca7756058f2a67a57fee9d1

                        SHA256

                        37ed59a66699c0e5a7ebeef7352d7c1c2ed5ede7212950a1b0a8ee289af4a95b

                        SHA512

                        600e61332416b23ef518f4252df0000c03612e8b0680eab0bdf589d9c855539b973583dc4ce1faab5828f58653ed85a1f9196eb1c7bbf6d2e3b5ab3e83253f98

                      • C:\ProgramData\Package Cache\{2aaf1df0-eb13-4099-9992-962bb4e596d1}\VC_redist.x64.exe

                        Filesize

                        635KB

                        MD5

                        9bd591625766a7330708b2c6380dc1d7

                        SHA1

                        18018a3d12278187a8dc26eae538a799511bbdfc

                        SHA256

                        21503f265452414f3960b33ba000ab2cbe0a335901e3a585b0935ac4806fdd79

                        SHA512

                        58c90b7889d92f31e76d0559258023cb4693982288721c3c7fcd820e40f6c1ee972d9ffd3c95016c2126314a260da5faabdeb1a8528eb23d469a7ecbe391c1a5

                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

                        Filesize

                        471B

                        MD5

                        1ef9bb6d2a7097994183a5be2bbe2d2a

                        SHA1

                        4630a8281d7bce00845850afdf6541c5531f7690

                        SHA256

                        03f7911e0c777ac7ac9adbaa7d3b798b986286bc0cdb1a8ef91edf075bf014a4

                        SHA512

                        79c99ee57a5f142e1f7ed3e7d7e2ad93ed1643bfc0a36dca8704edcfc6553780ecce426fe5a855e191d1520d71d9ae8322bf7ed89e8641ea849e0e7ac0413306

                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_F230C79A832D263CC3447DEF17298F5A

                        Filesize

                        727B

                        MD5

                        b65b58da4f78073b83168538f982ef1f

                        SHA1

                        eb2ed0b0093b988a7bd6f43ea42ec80f1da75e9a

                        SHA256

                        0c469cb6ee903b0386676d67c1b71d0fd80d2483ac31fc7df6260b8412fee110

                        SHA512

                        a90049eeefa49d6b41c08688b678dbd0cbf746f2984161d2c901986e178bfdc03bfa3610f92aed9df4fdfd4c691e01a8c061b446f266895b74f3269b80f1ee02

                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

                        Filesize

                        727B

                        MD5

                        c9cf48b97144ed7bbb08788089ac5e41

                        SHA1

                        d7c00ee8fcac943d83713242c9fc6f9c51622650

                        SHA256

                        d29e7eaef6a0550bca5b165feb3209ba232138105fdce84de42997323597deac

                        SHA512

                        03143d812fa81a85eb86d0868615256dd3d137996b713ac2b760f685f6e36d6ba8f4dcf03e3f8efab97b3a66067a1a6b29a9fb0282f2c44aa99a55ce1ddc0368

                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

                        Filesize

                        400B

                        MD5

                        b27c37733a276c96f6b2e81eafddec4a

                        SHA1

                        d127fb62010a98862b22cbccc3e5779223fdf911

                        SHA256

                        a62132e555dee8e3d87578417728e02ecbdab9ab082752ea05092e33cc0cb61f

                        SHA512

                        003ece08d3a9e988330b39148976f7ea1767088c43d1589f68eae45b09649489975a90caacbe088f536874eb18e7bc0868d847a8d3de0b65f036aed4fad16450

                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_F230C79A832D263CC3447DEF17298F5A

                        Filesize

                        438B

                        MD5

                        ae97ad1893b643f5149611933212f9c8

                        SHA1

                        8195e3ab27dca056151f7d6275fe29de0b240051

                        SHA256

                        39dcb678f3762b5e34ab271482d94b30892e8e9e4e074db8b4103662ee603f9f

                        SHA512

                        4126046d2c9d1d6d7f6da30242f0882e5bc740d5e7fd90bc9652a5778354ac6b976daa8eba0407efd5eb2238972256b2ff181bc3bbecbc2f44cf85995692b3a1

                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

                        Filesize

                        412B

                        MD5

                        0d7549826e3091c9bae80dd2b4437bc6

                        SHA1

                        4d6afb02c78e51ffc11a6f890edf9d301dbdf883

                        SHA256

                        3712b1864c79fac9fc2661705a66b5cc24df0fa47387c96c0b5c0b4fd4d4568e

                        SHA512

                        780f7edc0a95f6b9f52286e0fd54cddfba7046b35ace17beac274ce8f5c5d50f8ffd3d2fed7f91a3bd9d991754ed3e4edd7e3a881ba117729ee87d66b365ca03

                      • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\VoiceAI.exe.log

                        Filesize

                        1KB

                        MD5

                        d63ff49d7c92016feb39812e4db10419

                        SHA1

                        2307d5e35ca9864ffefc93acf8573ea995ba189b

                        SHA256

                        375076241775962f3edc08a8c72832a00920b427a4f3332528d91d21e909fa12

                        SHA512

                        00f8c8d0336d6575b956876183199624d6f4d2056f2c0aa633a6f17c516f22ee648062d9bc419254d84c459323e9424f0da8aed9dd4e16c2926e5ba30e797d8a

                      • C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20230528092333_000_vcRuntimeMinimum_x64.log

                        Filesize

                        2KB

                        MD5

                        ee2ce87cfc874693e07e6faf3d82036b

                        SHA1

                        2122d995938c03dab641c8daaa7b9e882a4b7345

                        SHA256

                        7e417bbc1f4ddf6109733e163a9939120f330a9df0d20680f96bc626d63115e2

                        SHA512

                        660708da9be417a2652ff3cb07287e364699142ac6dc31283160245b09109313d82e34826df818c2254116e7751d1992b2787c88d18983e0334f8db92a409e13

                      • C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20230528092333_001_vcRuntimeAdditional_x64.log

                        Filesize

                        2KB

                        MD5

                        52ddd0f734952bc4166a90c88a13d24f

                        SHA1

                        edde40a528faac03ec9b1b52fd5ca15d3e75d089

                        SHA256

                        9b9f880a62299e69df1ebdfb1f0f88861d790aebb67e3dc1fb3957d069ba955e

                        SHA512

                        3fe30206889931f51531fb73d92c177125cc9227199b61982ce827fae7bb20a68b423065b3487c926c1724e07559f97efdfb023e2fb4f84e539b74d0b448acde

                      • C:\Users\Admin\AppData\Local\Temp\nsdDBC0.tmp\System.dll

                        Filesize

                        12KB

                        MD5

                        792b6f86e296d3904285b2bf67ccd7e0

                        SHA1

                        966b16f84697552747e0ddd19a4ba8ab5083af31

                        SHA256

                        c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917

                        SHA512

                        97edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c

                      • C:\Users\Admin\AppData\Local\Temp\nslE900.tmp\INetC.dll

                        Filesize

                        21KB

                        MD5

                        2b342079303895c50af8040a91f30f71

                        SHA1

                        b11335e1cb8356d9c337cb89fe81d669a69de17e

                        SHA256

                        2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f

                        SHA512

                        550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47

                      • C:\Users\Admin\AppData\Local\Temp\{CC2FC~1\VoiceAIDriver.cat

                        Filesize

                        12KB

                        MD5

                        8a3e5641b08845e5b288dc7246dfa6dd

                        SHA1

                        3248d92614fa84a4bd7fd4ac1c4286bce1ce3ec0

                        SHA256

                        8637d605c58fd03fde8737f6bcbca8d5dd3cb7f0f1a28c4f635115edc7d9a9b2

                        SHA512

                        d086d36b90a7c55ab800dc52b600f03cd1956081cec948bf06d78e873925ff9202ada7b77fc7adccecb90a73953735157c96308b132f652b1a1bef69e6d378c0

                      • C:\Users\Admin\AppData\Local\Temp\{CC2FC~1\voiceaidriver.sys

                        Filesize

                        71KB

                        MD5

                        e508a4b3baf2661e7b8d079830b3f753

                        SHA1

                        ca318950e09e4c79458bba56121c4c950a57dcaf

                        SHA256

                        2a1aff3b51d87d9c9ad8933c2241e183ef15b911d06e41d64c5c61ca20f88195

                        SHA512

                        a3503c85f19791e1ff8ef4af71552e316c1c8940045602eb6e7eeb4f0c921c98b91f0e6556fa8f97e2b6ce406687d34fa019e42f671db7d2a2ada3c21f24d65f

                      • C:\Users\Admin\AppData\Local\Temp\{cc2fcee0-c545-2a41-b837-270f860617c0}\voiceaidriver.inf

                        Filesize

                        14KB

                        MD5

                        fa4ddfa2231dc2c50e26794ae7356e0b

                        SHA1

                        463f4c2ac4f7505f2361c7853505b19fbe08f257

                        SHA256

                        a3554efa382a84130393a4d8656b31f06b20b9387e27fcba978162213fb7be90

                        SHA512

                        be11de31cdea93320a03892b572b17985a66d8b8483d1568afcba9d6cd73cfc8f86c628736d9c8649cb9af0acba17dc26c14fef55b2951520236f650b5a55946

                      • C:\Users\Admin\AppData\Local\Voice.ai\Cache\Code Cache\js\index-dir\the-real-index

                        Filesize

                        48B

                        MD5

                        c481bc16638cfe8c7e5e6a6c0082dde9

                        SHA1

                        402b5bc5fad5bb68afb5d870891f87ddd4721a8b

                        SHA256

                        0ca8f4b237105548aa2cfbaf8160f72152d72b4a57aa39e6811e93ed41934a6c

                        SHA512

                        0954ca7e449348554d5dcdc02511f92095410311d71a187f4b19f1b56b9109a9153930c75ba3ae2dedc30f55d16bdeeb434ec03df68ac28cb02841b75b2a2e83

                      • C:\Users\Admin\AppData\Local\Voice.ai\Cache\Code Cache\js\index-dir\the-real-index

                        Filesize

                        240B

                        MD5

                        2211b8ac899d830a7971ee066254c4a5

                        SHA1

                        1f65cf4640dbbc68dd2ce59fcdf26b0a86537b80

                        SHA256

                        f12d2d7c083a5119a548979723225c00be2cf96974c07327463d0a0be15b712d

                        SHA512

                        061bbdccffbcd56454a9f0f879a76559caf2d9d8d27310472fea1be0fdb90b4626e0ee4cf5bf9a94468313a0512c96000772b9b73e1db91fe3ced62dfd9ee32f

                      • C:\Users\Admin\AppData\Local\Voice.ai\Cache\Local Storage\leveldb\CURRENT

                        Filesize

                        16B

                        MD5

                        46295cac801e5d4857d09837238a6394

                        SHA1

                        44e0fa1b517dbf802b18faf0785eeea6ac51594b

                        SHA256

                        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                        SHA512

                        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                      • C:\Users\Admin\AppData\Local\Voice.ai\Cache\Network\TransportSecurity

                        Filesize

                        1KB

                        MD5

                        f7cfcf6f4a380b82bc60adf66ddf42d6

                        SHA1

                        852ef6acc33188da890c503e1398bd6eb036c04c

                        SHA256

                        2d5fd6b7ce213677dd42773c4e714e21b731e22364587310cff984df999e7902

                        SHA512

                        1a276ee7eaaedc4dba2cbcd08d2b44b3cdb1eeec25114a003482d061aee1ccd786f8aa73ec9ca818a1e748b3f31a265567ff16e91f00f15764a850247277211d

                      • C:\Users\Admin\AppData\Local\Voice.ai\Cache\Network\TransportSecurity~RFe5ba620.TMP

                        Filesize

                        1KB

                        MD5

                        e1c1394e57475d6437dc088ce27d81a3

                        SHA1

                        a7c115fe262a36fea67191ed97d01aad9c615f9c

                        SHA256

                        3d2ed8eb535513bfcc04817b6c7fde62ee8aaccf3db00a7627318dfe60858e68

                        SHA512

                        8b4c91101ea95e4e3760d12670a72ddc169b8ef29f723bd4941a784e8010a3d4070f7d9adf2a7bad28afba1153e9798f596c5a13de66a2ddbca1036ec8d5782c

                      • C:\Users\Admin\AppData\Local\Voice.ai\Cache\Session Storage\MANIFEST-000001

                        Filesize

                        41B

                        MD5

                        5af87dfd673ba2115e2fcf5cfdb727ab

                        SHA1

                        d5b5bbf396dc291274584ef71f444f420b6056f1

                        SHA256

                        f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                        SHA512

                        de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                      • C:\Windows\INF\oem3.PNF

                        Filesize

                        18KB

                        MD5

                        4a0d9b8104cd0e87fee71ce1c648b2e1

                        SHA1

                        565c32375e79d3bd3417e2603210bbfa83577cd8

                        SHA256

                        e9df12f1fff3ad9a65c4c0be352affb132fd732ebee64a924fd34be8dd6e3b84

                        SHA512

                        0badc6ede4dd268cfa741c615278d4286506562a4bdb6d549b7b57cbd1ce37a17202118dea7b4a2b1ee9ac8b685c777d057d4228a22c90bbcf10b25f8c7dcd9b

                      • C:\Windows\INF\oem3.inf

                        Filesize

                        14KB

                        MD5

                        fa4ddfa2231dc2c50e26794ae7356e0b

                        SHA1

                        463f4c2ac4f7505f2361c7853505b19fbe08f257

                        SHA256

                        a3554efa382a84130393a4d8656b31f06b20b9387e27fcba978162213fb7be90

                        SHA512

                        be11de31cdea93320a03892b572b17985a66d8b8483d1568afcba9d6cd73cfc8f86c628736d9c8649cb9af0acba17dc26c14fef55b2951520236f650b5a55946

                      • C:\Windows\Installer\e5a78fa.msi

                        Filesize

                        180KB

                        MD5

                        143a2b9f1c0ebc3421b52e9adcb4db2e

                        SHA1

                        06e01b8cc855fd9a31f99b430f8c8745e706c677

                        SHA256

                        5d0416e45819d555ad27e5efc1aeeb465cbb8e2937b3221852bea0f7d9c3a954

                        SHA512

                        7e17309cdaa856bd1bf17535e0f65db585226262a1c9ffcaadb19eb0822a578ad9036487870b97fc86b7167848f69d495aa51c380ba9890a71f8f9a94061fa05

                      • C:\Windows\SYSTEM32\VCRUNTIME140.dll

                        Filesize

                        95KB

                        MD5

                        7415c1cc63a0c46983e2a32581daefee

                        SHA1

                        5f8534d79c84ac45ad09b5a702c8c5c288eae240

                        SHA256

                        475ab98b7722e965bd38c8fa6ed23502309582ccf294ff1061cb290c7988f0d1

                        SHA512

                        3d4b24061f72c0e957c7b04a0c4098c94c8f1afb4a7e159850b9939c7210d73398be6f27b5ab85073b4e8c999816e7804fef0f6115c39cd061f4aaeb4dcda8cf

                      • C:\Windows\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\VoiceAIDriver.cat

                        Filesize

                        12KB

                        MD5

                        8a3e5641b08845e5b288dc7246dfa6dd

                        SHA1

                        3248d92614fa84a4bd7fd4ac1c4286bce1ce3ec0

                        SHA256

                        8637d605c58fd03fde8737f6bcbca8d5dd3cb7f0f1a28c4f635115edc7d9a9b2

                        SHA512

                        d086d36b90a7c55ab800dc52b600f03cd1956081cec948bf06d78e873925ff9202ada7b77fc7adccecb90a73953735157c96308b132f652b1a1bef69e6d378c0

                      • C:\Windows\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\voiceaidriver.PNF

                        Filesize

                        18KB

                        MD5

                        5556a5a97a308012306c117b35dbeafc

                        SHA1

                        4a9b6efcb571cc5a71d78692daef5118f0354cb5

                        SHA256

                        a6bf742970d84ead9f0c91a2aa247edec5489cea4f5e1c165e08c28b75d94d70

                        SHA512

                        37112e62e20ac2de1960b73327d1fdbf759c7927f8dbb24dec4c810b43ec81d90e30e925679dabe03ab6fb20ba6f8f1605171d23be564978f0c3c8b6f92bfa5f

                      • C:\Windows\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\voiceaidriver.inf

                        Filesize

                        14KB

                        MD5

                        fa4ddfa2231dc2c50e26794ae7356e0b

                        SHA1

                        463f4c2ac4f7505f2361c7853505b19fbe08f257

                        SHA256

                        a3554efa382a84130393a4d8656b31f06b20b9387e27fcba978162213fb7be90

                        SHA512

                        be11de31cdea93320a03892b572b17985a66d8b8483d1568afcba9d6cd73cfc8f86c628736d9c8649cb9af0acba17dc26c14fef55b2951520236f650b5a55946

                      • C:\Windows\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\voiceaidriver.sys

                        Filesize

                        71KB

                        MD5

                        e508a4b3baf2661e7b8d079830b3f753

                        SHA1

                        ca318950e09e4c79458bba56121c4c950a57dcaf

                        SHA256

                        2a1aff3b51d87d9c9ad8933c2241e183ef15b911d06e41d64c5c61ca20f88195

                        SHA512

                        a3503c85f19791e1ff8ef4af71552e316c1c8940045602eb6e7eeb4f0c921c98b91f0e6556fa8f97e2b6ce406687d34fa019e42f671db7d2a2ada3c21f24d65f

                      • C:\Windows\System32\DriverStore\Temp\{55c2b499-2a94-5a4b-9d5e-02c5d3950e43}\SETBEAE.tmp

                        Filesize

                        12KB

                        MD5

                        8a3e5641b08845e5b288dc7246dfa6dd

                        SHA1

                        3248d92614fa84a4bd7fd4ac1c4286bce1ce3ec0

                        SHA256

                        8637d605c58fd03fde8737f6bcbca8d5dd3cb7f0f1a28c4f635115edc7d9a9b2

                        SHA512

                        d086d36b90a7c55ab800dc52b600f03cd1956081cec948bf06d78e873925ff9202ada7b77fc7adccecb90a73953735157c96308b132f652b1a1bef69e6d378c0

                      • C:\Windows\System32\DriverStore\Temp\{55c2b499-2a94-5a4b-9d5e-02c5d3950e43}\SETBEAF.tmp

                        Filesize

                        14KB

                        MD5

                        fa4ddfa2231dc2c50e26794ae7356e0b

                        SHA1

                        463f4c2ac4f7505f2361c7853505b19fbe08f257

                        SHA256

                        a3554efa382a84130393a4d8656b31f06b20b9387e27fcba978162213fb7be90

                        SHA512

                        be11de31cdea93320a03892b572b17985a66d8b8483d1568afcba9d6cd73cfc8f86c628736d9c8649cb9af0acba17dc26c14fef55b2951520236f650b5a55946

                      • C:\Windows\System32\DriverStore\Temp\{55c2b499-2a94-5a4b-9d5e-02c5d3950e43}\SETBEBF.tmp

                        Filesize

                        71KB

                        MD5

                        e508a4b3baf2661e7b8d079830b3f753

                        SHA1

                        ca318950e09e4c79458bba56121c4c950a57dcaf

                        SHA256

                        2a1aff3b51d87d9c9ad8933c2241e183ef15b911d06e41d64c5c61ca20f88195

                        SHA512

                        a3503c85f19791e1ff8ef4af71552e316c1c8940045602eb6e7eeb4f0c921c98b91f0e6556fa8f97e2b6ce406687d34fa019e42f671db7d2a2ada3c21f24d65f

                      • C:\Windows\Temp\{4BE56A3D-90D2-4147-8F5F-DEDAEB1BEF4F}\.cr\vc2019.exe

                        Filesize

                        635KB

                        MD5

                        9bd591625766a7330708b2c6380dc1d7

                        SHA1

                        18018a3d12278187a8dc26eae538a799511bbdfc

                        SHA256

                        21503f265452414f3960b33ba000ab2cbe0a335901e3a585b0935ac4806fdd79

                        SHA512

                        58c90b7889d92f31e76d0559258023cb4693982288721c3c7fcd820e40f6c1ee972d9ffd3c95016c2126314a260da5faabdeb1a8528eb23d469a7ecbe391c1a5

                      • C:\Windows\Temp\{4BE56A3D-90D2-4147-8F5F-DEDAEB1BEF4F}\.cr\vc2019.exe

                        Filesize

                        635KB

                        MD5

                        9bd591625766a7330708b2c6380dc1d7

                        SHA1

                        18018a3d12278187a8dc26eae538a799511bbdfc

                        SHA256

                        21503f265452414f3960b33ba000ab2cbe0a335901e3a585b0935ac4806fdd79

                        SHA512

                        58c90b7889d92f31e76d0559258023cb4693982288721c3c7fcd820e40f6c1ee972d9ffd3c95016c2126314a260da5faabdeb1a8528eb23d469a7ecbe391c1a5

                      • C:\Windows\Temp\{53BAC7F9-C82D-4206-A11A-B8A2EF2DA12C}\.ba\wixstdba.dll

                        Filesize

                        191KB

                        MD5

                        eab9caf4277829abdf6223ec1efa0edd

                        SHA1

                        74862ecf349a9bedd32699f2a7a4e00b4727543d

                        SHA256

                        a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

                        SHA512

                        45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\.ba\logo.png

                        Filesize

                        1KB

                        MD5

                        d6bd210f227442b3362493d046cea233

                        SHA1

                        ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

                        SHA256

                        335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

                        SHA512

                        464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\.be\VC_redist.x64.exe

                        Filesize

                        635KB

                        MD5

                        9bd591625766a7330708b2c6380dc1d7

                        SHA1

                        18018a3d12278187a8dc26eae538a799511bbdfc

                        SHA256

                        21503f265452414f3960b33ba000ab2cbe0a335901e3a585b0935ac4806fdd79

                        SHA512

                        58c90b7889d92f31e76d0559258023cb4693982288721c3c7fcd820e40f6c1ee972d9ffd3c95016c2126314a260da5faabdeb1a8528eb23d469a7ecbe391c1a5

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\.be\VC_redist.x64.exe

                        Filesize

                        635KB

                        MD5

                        9bd591625766a7330708b2c6380dc1d7

                        SHA1

                        18018a3d12278187a8dc26eae538a799511bbdfc

                        SHA256

                        21503f265452414f3960b33ba000ab2cbe0a335901e3a585b0935ac4806fdd79

                        SHA512

                        58c90b7889d92f31e76d0559258023cb4693982288721c3c7fcd820e40f6c1ee972d9ffd3c95016c2126314a260da5faabdeb1a8528eb23d469a7ecbe391c1a5

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\.be\VC_redist.x64.exe

                        Filesize

                        635KB

                        MD5

                        9bd591625766a7330708b2c6380dc1d7

                        SHA1

                        18018a3d12278187a8dc26eae538a799511bbdfc

                        SHA256

                        21503f265452414f3960b33ba000ab2cbe0a335901e3a585b0935ac4806fdd79

                        SHA512

                        58c90b7889d92f31e76d0559258023cb4693982288721c3c7fcd820e40f6c1ee972d9ffd3c95016c2126314a260da5faabdeb1a8528eb23d469a7ecbe391c1a5

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\cab2C04DDC374BD96EB5C8EB8208F2C7C92

                        Filesize

                        5.4MB

                        MD5

                        6ce5097b19cf57527651840bb438adf3

                        SHA1

                        49d0b725e5819a076562fd007490eca0bbb69003

                        SHA256

                        f24a3bc5df7e7c07c0d13f46348c989eae7f597f428b20cc9044bba47785b7f0

                        SHA512

                        9152301c4f87018d166b624d73919fc2da7e7ef74b2c1ecf8ad01c31c2b2239013cc3bc22237c81940ae96a5fd1b3698d260c3d3e0a9d0318cdc053e28328d83

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\cab5046A8AB272BF37297BB7928664C9503

                        Filesize

                        879KB

                        MD5

                        8e288dd0b5e0468ed8ae01ee566e77e8

                        SHA1

                        fbd11237ae3300a2202444d339601d1ac6bbf310

                        SHA256

                        c80addc870825e9a1aa9281e105e583973ec2846bbd74f1e97cb60911ba7a2e1

                        SHA512

                        facc72bdcdd5de47c0d18ecb5288962b04d9e4924a9a07ee807a3bf0eaa77eac05f086906b680bcf97c3bad5fab0038b47c0e09cd2bbec1d0709eba015bc1c04

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\vcRuntimeAdditional_x64

                        Filesize

                        180KB

                        MD5

                        e6df9f55e20905f77b136844a3844dd6

                        SHA1

                        b7c1fb12bda508a62fdd9ffa9e870cae50605aaa

                        SHA256

                        f8745f3523ea73806d591fa4e666e86c30c7e5240a07211a0c11a7633d16c4f0

                        SHA512

                        7c71c2b9a7d3d768d1686cb037362efb9e38c50b652bfaeb22cf86c6c47a85962f9893cbf5e2f86880c9c8fc8bc0278edeb47088813e022ef05d7db15efc0713

                      • C:\Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\vcRuntimeMinimum_x64

                        Filesize

                        180KB

                        MD5

                        143a2b9f1c0ebc3421b52e9adcb4db2e

                        SHA1

                        06e01b8cc855fd9a31f99b430f8c8745e706c677

                        SHA256

                        5d0416e45819d555ad27e5efc1aeeb465cbb8e2937b3221852bea0f7d9c3a954

                        SHA512

                        7e17309cdaa856bd1bf17535e0f65db585226262a1c9ffcaadb19eb0822a578ad9036487870b97fc86b7167848f69d495aa51c380ba9890a71f8f9a94061fa05

                      • \??\c:\PROGRA~1\voice.ai\VOICEA~1\voiceaidriver.sys

                        Filesize

                        71KB

                        MD5

                        e508a4b3baf2661e7b8d079830b3f753

                        SHA1

                        ca318950e09e4c79458bba56121c4c950a57dcaf

                        SHA256

                        2a1aff3b51d87d9c9ad8933c2241e183ef15b911d06e41d64c5c61ca20f88195

                        SHA512

                        a3503c85f19791e1ff8ef4af71552e316c1c8940045602eb6e7eeb4f0c921c98b91f0e6556fa8f97e2b6ce406687d34fa019e42f671db7d2a2ada3c21f24d65f

                      • \??\c:\program files\voice.ai\voiceaidriver\VoiceAIDriver.cat

                        Filesize

                        12KB

                        MD5

                        8a3e5641b08845e5b288dc7246dfa6dd

                        SHA1

                        3248d92614fa84a4bd7fd4ac1c4286bce1ce3ec0

                        SHA256

                        8637d605c58fd03fde8737f6bcbca8d5dd3cb7f0f1a28c4f635115edc7d9a9b2

                        SHA512

                        d086d36b90a7c55ab800dc52b600f03cd1956081cec948bf06d78e873925ff9202ada7b77fc7adccecb90a73953735157c96308b132f652b1a1bef69e6d378c0

                      • \Program Files\Voice.ai\DriverManager.dll

                        Filesize

                        82KB

                        MD5

                        d89a90d47a7da632ab122f9d24b121f8

                        SHA1

                        b3b049f5663eda2b725201929a6359142dfd8c96

                        SHA256

                        2c83950750fecdfbc251e51898f36c1d4ea219733ef0f03478fe88b1784c708a

                        SHA512

                        f36da2637991f1086bcdf550303baf1ac2e5fbfc7299d0867dcb6c5fd3d3b2e6b38dfcd3ca6055b3492916a645dae199421fb38a38adf01c2297378034905f08

                      • \Users\Admin\AppData\Local\Temp\nsdDBC0.tmp\nsProcess.dll

                        Filesize

                        4KB

                        MD5

                        05450face243b3a7472407b999b03a72

                        SHA1

                        ffd88af2e338ae606c444390f7eaaf5f4aef2cd9

                        SHA256

                        95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89

                        SHA512

                        f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b

                      • \Users\Admin\AppData\Local\Temp\nsdDBC0.tmp\nsisdl.dll

                        Filesize

                        14KB

                        MD5

                        6ab807f51b07da5d1ad43e82ad1fee42

                        SHA1

                        886bbf732e5f872642541e8adabfca1b6b264d74

                        SHA256

                        074996a2d3d99cb5b10d4c4f1ff92bacd45605c8103cb465091d78bc894f73f9

                        SHA512

                        8ccedbc10394e0dd9763c7c25ea025b6fedeb0bd3d3a83c2e8dc45c8a2d30e3f0366513961a98ffc3ee872f31b009a7e179806f41c65528992299816295588b5

                      • \Users\Admin\AppData\Local\Temp\nslE900.tmp\INetC.dll

                        Filesize

                        21KB

                        MD5

                        2b342079303895c50af8040a91f30f71

                        SHA1

                        b11335e1cb8356d9c337cb89fe81d669a69de17e

                        SHA256

                        2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f

                        SHA512

                        550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47

                      • \Users\Admin\AppData\Local\Temp\nslE900.tmp\INetC.dll

                        Filesize

                        21KB

                        MD5

                        2b342079303895c50af8040a91f30f71

                        SHA1

                        b11335e1cb8356d9c337cb89fe81d669a69de17e

                        SHA256

                        2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f

                        SHA512

                        550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47

                      • \Users\Admin\AppData\Local\Temp\nslE900.tmp\System.dll

                        Filesize

                        12KB

                        MD5

                        792b6f86e296d3904285b2bf67ccd7e0

                        SHA1

                        966b16f84697552747e0ddd19a4ba8ab5083af31

                        SHA256

                        c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917

                        SHA512

                        97edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c

                      • \Users\Admin\AppData\Local\Temp\nslE900.tmp\nsDialogs.dll

                        Filesize

                        9KB

                        MD5

                        f5b0c649b0cfc103fb113d013d48cacb

                        SHA1

                        f89286966000cb053b7e94100c76ec6d1129af07

                        SHA256

                        a87bd092fa5bc00661525455b9f866b68c14c29224520c4e38f56f47234cfc1e

                        SHA512

                        e184101a03ee1c8896efb0029a02a23e46d422bc0f250ef15349c8214d44156afe2b5f739d8a2339bc2d1c05984fc55651c36c71897cd4b14f41dd37a25cfb01

                      • \Windows\System32\vcruntime140.dll

                        Filesize

                        95KB

                        MD5

                        7415c1cc63a0c46983e2a32581daefee

                        SHA1

                        5f8534d79c84ac45ad09b5a702c8c5c288eae240

                        SHA256

                        475ab98b7722e965bd38c8fa6ed23502309582ccf294ff1061cb290c7988f0d1

                        SHA512

                        3d4b24061f72c0e957c7b04a0c4098c94c8f1afb4a7e159850b9939c7210d73398be6f27b5ab85073b4e8c999816e7804fef0f6115c39cd061f4aaeb4dcda8cf

                      • \Windows\Temp\{53BAC7F9-C82D-4206-A11A-B8A2EF2DA12C}\.ba\wixstdba.dll

                        Filesize

                        191KB

                        MD5

                        eab9caf4277829abdf6223ec1efa0edd

                        SHA1

                        74862ecf349a9bedd32699f2a7a4e00b4727543d

                        SHA256

                        a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

                        SHA512

                        45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

                      • \Windows\Temp\{7D83F54E-F5EE-4EE4-8BA5-F10506428971}\.ba\wixstdba.dll

                        Filesize

                        191KB

                        MD5

                        eab9caf4277829abdf6223ec1efa0edd

                        SHA1

                        74862ecf349a9bedd32699f2a7a4e00b4727543d

                        SHA256

                        a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

                        SHA512

                        45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

                      • memory/1136-985-0x000001B700000000-0x000001B700001000-memory.dmp

                        Filesize

                        4KB

                      • memory/1136-984-0x000001B7676E0000-0x000001B7676F0000-memory.dmp

                        Filesize

                        64KB

                      • memory/1136-1068-0x000001B7676E0000-0x000001B7676F0000-memory.dmp

                        Filesize

                        64KB

                      • memory/1572-708-0x00000258803C0000-0x00000258804C4000-memory.dmp

                        Filesize

                        1.0MB

                      • memory/1572-1090-0x00000258E7550000-0x00000258E7560000-memory.dmp

                        Filesize

                        64KB

                      • memory/1572-977-0x00000258E7550000-0x00000258E7560000-memory.dmp

                        Filesize

                        64KB

                      • memory/1572-978-0x00000258808F0000-0x00000258809F0000-memory.dmp

                        Filesize

                        1024KB

                      • memory/1572-1065-0x00000258E7550000-0x00000258E7560000-memory.dmp

                        Filesize

                        64KB

                      • memory/1572-1066-0x00000258808F0000-0x00000258809F0000-memory.dmp

                        Filesize

                        1024KB

                      • memory/1572-1101-0x00000258E7550000-0x00000258E7560000-memory.dmp

                        Filesize

                        64KB

                      • memory/1572-711-0x00000258802F0000-0x0000025880302000-memory.dmp

                        Filesize

                        72KB

                      • memory/1572-713-0x0000025880560000-0x0000025880721000-memory.dmp

                        Filesize

                        1.8MB

                      • memory/1572-1089-0x00000258A6300000-0x00000258A64C2000-memory.dmp

                        Filesize

                        1.8MB

                      • memory/1572-710-0x00000258804D0000-0x0000025880554000-memory.dmp

                        Filesize

                        528KB

                      • memory/1572-1091-0x00000258A6A00000-0x00000258A6F26000-memory.dmp

                        Filesize

                        5.1MB

                      • memory/1572-686-0x0000025880000000-0x0000025880001000-memory.dmp

                        Filesize

                        4KB

                      • memory/1572-685-0x00000258E7550000-0x00000258E7560000-memory.dmp

                        Filesize

                        64KB

                      • memory/1572-709-0x00000258802C0000-0x00000258802CA000-memory.dmp

                        Filesize

                        40KB

                      • memory/1572-712-0x00000258802E0000-0x00000258802F0000-memory.dmp

                        Filesize

                        64KB

                      • memory/1572-1059-0x00000258E7550000-0x00000258E7560000-memory.dmp

                        Filesize

                        64KB

                      • memory/3360-1009-0x00000276226F0000-0x00000276226F1000-memory.dmp

                        Filesize

                        4KB

                      • memory/3360-1008-0x000002763CB30000-0x000002763CB40000-memory.dmp

                        Filesize

                        64KB

                      • memory/3804-983-0x00000279A2E50000-0x00000279A2F6C000-memory.dmp

                        Filesize

                        1.1MB

                      • memory/3804-980-0x0000027989B80000-0x0000027989B81000-memory.dmp

                        Filesize

                        4KB

                      • memory/3804-979-0x00000279A2520000-0x00000279A2530000-memory.dmp

                        Filesize

                        64KB

                      • memory/4100-1010-0x00000200FE1D0000-0x00000200FE1E0000-memory.dmp

                        Filesize

                        64KB

                      • memory/4100-1011-0x00000200E4020000-0x00000200E4021000-memory.dmp

                        Filesize

                        4KB

                      • memory/4100-1073-0x00000200FE1D0000-0x00000200FE1E0000-memory.dmp

                        Filesize

                        64KB

                      • memory/4168-561-0x000001F5850B0000-0x000001F5850B1000-memory.dmp

                        Filesize

                        4KB

                      • memory/4168-559-0x000001F5849D0000-0x000001F584D82000-memory.dmp

                        Filesize

                        3.7MB

                      • memory/4168-560-0x000001F59F3E0000-0x000001F59F3F0000-memory.dmp

                        Filesize

                        64KB

                      • memory/4168-1070-0x000002423EB30000-0x000002423EB40000-memory.dmp

                        Filesize

                        64KB

                      • memory/4168-989-0x0000024224980000-0x0000024224981000-memory.dmp

                        Filesize

                        4KB

                      • memory/4168-988-0x000002423EB30000-0x000002423EB40000-memory.dmp

                        Filesize

                        64KB

                      • memory/4672-987-0x000002BAF4350000-0x000002BAF4351000-memory.dmp

                        Filesize

                        4KB

                      • memory/4672-1069-0x000002BAF65B0000-0x000002BAF65C0000-memory.dmp

                        Filesize

                        64KB

                      • memory/4672-986-0x000002BAF65B0000-0x000002BAF65C0000-memory.dmp

                        Filesize

                        64KB

                      • memory/4964-1076-0x000001EB28BA0000-0x000001EB28BB0000-memory.dmp

                        Filesize

                        64KB

                      • memory/4964-1050-0x000001EB28BA0000-0x000001EB28BB0000-memory.dmp

                        Filesize

                        64KB

                      • memory/4964-1051-0x000001EB10180000-0x000001EB10181000-memory.dmp

                        Filesize

                        4KB

                      • memory/5004-982-0x000001E6F43C0000-0x000001E6F43C1000-memory.dmp

                        Filesize

                        4KB

                      • memory/5004-981-0x000001E6F5D40000-0x000001E6F5D50000-memory.dmp

                        Filesize

                        64KB

                      • memory/5004-1067-0x000001E6F5D40000-0x000001E6F5D50000-memory.dmp

                        Filesize

                        64KB