Overview
overview
8Static
static
1voicewave_...32.exe
windows10-2004-x64
8voicewave_...32.exe
windows11-ltsc_2024-x64
4$TEMP/evw_...er.exe
windows10-2004-x64
3$TEMP/evw_...er.exe
windows11-ltsc_2024-x64
3$TEMP/evw_...ap.dll
windows10-2004-x64
3$TEMP/evw_...ap.dll
windows11-ltsc_2024-x64
3$TEMP/evw_...xe.exe
windows10-2004-x64
3$TEMP/evw_...xe.exe
windows11-ltsc_2024-x64
3$TEMP/evw_...up.exe
windows10-2004-x64
3$TEMP/evw_...up.exe
windows11-ltsc_2024-x64
3$TEMP/evw_...rl.dll
windows10-2004-x64
3$TEMP/evw_...rl.dll
windows11-ltsc_2024-x64
3$TEMP/evw_...40.dll
windows10-2004-x64
3$TEMP/evw_...40.dll
windows11-ltsc_2024-x64
3$TEMP/evw_...b1.dll
windows10-2004-x64
3$TEMP/evw_...b1.dll
windows11-ltsc_2024-x64
3Analysis
- user interaction
yes - max time kernel
142s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/09/2026, 22:29
Static task
static1
Behavioral task
behavioral1
Sample
voicewave_installer_20260929.17907209202007b4768732.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
voicewave_installer_20260929.17907209202007b4768732.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$TEMP/evw_setup/1.0.0/46free/EDownloader.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$TEMP/evw_setup/1.0.0/46free/EDownloader.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$TEMP/evw_setup/1.0.0/46free/aliyun/AliyunWrap.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$TEMP/evw_setup/1.0.0/46free/aliyun/AliyunWrap.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$TEMP/evw_setup/1.0.0/46free/aliyun/AliyunWrapExe.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$TEMP/evw_setup/1.0.0/46free/aliyun/AliyunWrapExe.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$TEMP/evw_setup/1.0.0/46free/aliyun/InfoForSetup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$TEMP/evw_setup/1.0.0/46free/aliyun/InfoForSetup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$TEMP/evw_setup/1.0.0/46free/libcurl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$TEMP/evw_setup/1.0.0/46free/libcurl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$TEMP/evw_setup/1.0.0/46free/vcruntime140.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$TEMP/evw_setup/1.0.0/46free/vcruntime140.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$TEMP/evw_setup/1.0.0/46free/zlib1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$TEMP/evw_setup/1.0.0/46free/zlib1.dll
Resource
win11ltsc2024-20260911-en
General
- Target voicewave_installer_20260929.17907209202007b4768732.exe
- Size 3.6MB
- Sample260929-2eet4swdkc
- SHA256 2ec319eeabd3ec839cc82f28dcb6e86e6f2d5c6e09a4ac1b444e80fe4413aca5
- MD5 2e192fbc97db5f2644cb74624550bb1b
- SHA1 af0331038b1d263941b1602cd726807b4522a4d1
- SHA512 453c2a77007b2d9052acf42817c25443a6ad2126e956e18c1025132213f45cb5fa439a819135d812bc117159690de833e9620b9889e7f3f9bc0d086730d099a2
- SSDEEP 98304:TA4HXq5Y68xio+Q3Wf8q6rVfV9WxSKFG8ZCv4:XHxiQ3s8qUxV9WxAmCA
- TLSH T1E406231AAE63DC8FCF626C34B5520C1D1A3D5ABFD0124AD317BE1E384C693827AA7553
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
pid Process 2120 powershell.exe - Drops file in Drivers directory 3 IoCs
description ioc Process File opened for modification C:\Windows\System32\drivers\drmk.sys DrvInst.exe File opened for modification C:\Windows\System32\drivers\portcls.sys DrvInst.exe File opened for modification C:\Windows\System32\drivers\VirtualMic.sys DrvInst.exe - Downloads MZ/PE file 2 IoCs
flow pid Process 94 3452 EDownloader.exe 97 3452 EDownloader.exe - Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
ioc Process \??\F:\ powershell.exe - Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 131 ip-api.com - Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000\Control Panel\International\Geo\Nation EDownloader.exe - Drops file in System32 directory 17 IoCs
description ioc Process File opened for modification C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\SET86B7.tmp DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\virtualmic.inf DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\SET86B8.tmp DrvInst.exe File created C:\Windows\System32\DriverStore\drvstore.tmp DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\SET86A6.tmp DrvInst.exe File opened for modification C:\Windows\System32\CatRoot2\dberr.txt DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96} DrvInst.exe File created C:\Windows\System32\DriverStore\FileRepository\virtualmic.inf_amd64_c3fe406700890b58\virtualmic.PNF devconX64.exe File created C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\SET86A6.tmp DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\VirtualMic.cat DrvInst.exe File created C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\SET86B7.tmp DrvInst.exe File created C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\SET86B8.tmp DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\virtualmic.inf_amd64_c3fe406700890b58\VirtualMic.sys DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\virtualmic.inf_amd64_c3fe406700890b58\VirtualMic.cat DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\Temp\{0c3cae9b-5c79-bb4f-85b1-c53cf41b4a96}\VirtualMic.sys DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\virtualmic.inf_amd64_c3fe406700890b58\virtualmic.inf DrvInst.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\virtualmic.inf_amd64_c3fe406700890b58\VirtualMic.sys DrvInst.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\EaseUS\VoiceWave\bin\is-1PO4V.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-40MB3.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-QPENE.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-8PIFA.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\vst\is-B4RB3.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-I52LB.tmp evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\iconengines\qsvgicon.dll evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\library\vst\eyeq.dll evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\msvcr100.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\conf\is-8D922.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-IC3E7.tmp evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\x86\api-ms-win-crt-process-l1-1-0.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-L2Q1E.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-61B5F.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-RVO9F.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\mixers\is-N1RAF.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\InnerBuy\res\is-ESR6S.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-7UTHD.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\res\resources.new\logo_round.png easeus.voicewave.exe File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\x86\api-ms-win-crt-string-l1-1-0.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-U6KK0.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-KHMT6.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\x86\is-CI4H7.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-UCAIG.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-BM4H5.tmp evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\api-ms-win-core-interlocked-l1-1-0.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-5DJGO.tmp evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\msvcr110.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-OHIOI.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\x86\is-9A8AI.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\mixers\is-K34G3.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\category\is-HOH2G.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\tempInfo.web AliyunWrapExe.Exe File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\library\vst\mutatorevo.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-097MT.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-LEK1R.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-NK014.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\voices\is-880OU.tmp evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\api-ms-win-core-fibers-l1-1-0.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-332SH.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-AI1J3.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-NKHBF.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\category\is-IBBL7.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\category\is-IM0O3.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-VCT02.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-NULH6.tmp evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\api-ms-win-core-synch-l1-2-0.dll evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\is-7QEDH.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\vst\is-IST0M.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\vst\is-55EFO.tmp evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\devconX64.exe evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\imageformats\qwbmp.dll evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\library\vst\tubesaturation.dll evw_free_easeus.tmp File opened for modification C:\Program Files\EaseUS\VoiceWave\bin\staging.txt UserInfoRunner.exe File created C:\Program Files\EaseUS\VoiceWave\bin\x86\is-E1NKJ.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-L24HH.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-KGH6K.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-MVI9S.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-RJHH8.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\default\sound\is-2QMFJ.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-PS5D1.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\category\is-N2HBH.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\category\is-JJ9DN.tmp evw_free_easeus.tmp File created C:\Program Files\EaseUS\VoiceWave\bin\library\icon\soundboard\sound\all\is-GUIN8.tmp evw_free_easeus.tmp - Drops file in Windows directory 7 IoCs
description ioc Process File created C:\Windows\inf\oem3.inf DrvInst.exe File opened for modification C:\Windows\INF\setupapi.dev.log DrvInst.exe File created C:\Windows\INF\c_media.PNF devconX64.exe File opened for modification C:\Windows\INF\setupapi.dev.log devconX64.exe File opened for modification C:\Windows\INF\setupapi.dev.log svchost.exe File opened for modification C:\Windows\INF\setupapi.dev.log DrvInst.exe File opened for modification C:\Windows\inf\oem3.inf DrvInst.exe - Executes dropped EXE 61 IoCs
pid Process 3452 EDownloader.exe 2020 InfoForSetup.exe 2352 InfoForSetup.exe 4564 AliyunWrapExe.Exe 2164 InfoForSetup.exe 1244 InfoForSetup.exe 1712 InfoForSetup.exe 860 InfoForSetup.exe 176 InfoForSetup.exe 1840 evw_free_easeus.exe 5028 evw_free_easeus.tmp 2160 _setup64.tmp 3012 EUinApp.exe 828 InstallDriver.exe 888 devconX64.exe 4148 InfoForSetup.exe 3404 FireWallAssist.exe 808 AliyunWrapExe.Exe 2860 FireWallAssist.exe 4696 SetupUE.exe 3720 InfoForSetup.exe 604 InfoForSetup.exe 4992 InfoForSetup.exe 944 UserInfoRunner.exe 2284 InfoForSetup.exe 4208 InfoForSetup.exe 2756 easeus.voicewave.exe 964 EuDownload.exe 3364 firebasefetch.exe 5116 EuDownload.exe 4340 InfoForSetup.exe 3808 firebasefetch.exe 3836 InfoForSetup.exe 1236 InfoForSetup.exe 4296 InfoForSetup.exe 2432 InfoForSetup.exe 3224 InfoForSetup.exe 956 InfoForSetup.exe 2816 InfoForSetup.exe 4408 easeus.evw.vchanger.exe 396 EuDownload.exe 4184 EuDownload.exe 1704 EuDownload.exe 2592 EuDownload.exe 376 EuDownload.exe 4476 EuDownload.exe 3640 EuDownload.exe 2940 EuDownload.exe 2856 InfoForSetup.exe 4068 EuDownload.exe 4568 EuDownload.exe 1712 EuDownload.exe 4692 EuDownload.exe 5656 EuDownload.exe 5668 EuDownload.exe 5680 EuDownload.exe 5692 EuDownload.exe 5700 EuDownload.exe 5716 EuDownload.exe 5724 EuDownload.exe 5736 EuDownload.exe - Loads dropped DLL 64 IoCs
pid Process 3452 EDownloader.exe 3452 EDownloader.exe 3452 EDownloader.exe 3452 EDownloader.exe 2020 InfoForSetup.exe 2352 InfoForSetup.exe 4564 AliyunWrapExe.Exe 2164 InfoForSetup.exe 1244 InfoForSetup.exe 1712 InfoForSetup.exe 860 InfoForSetup.exe 176 InfoForSetup.exe 3012 EUinApp.exe 3012 EUinApp.exe 3012 EUinApp.exe 828 InstallDriver.exe 828 InstallDriver.exe 828 InstallDriver.exe 828 InstallDriver.exe 828 InstallDriver.exe 828 InstallDriver.exe 4148 InfoForSetup.exe 4148 InfoForSetup.exe 808 AliyunWrapExe.Exe 808 AliyunWrapExe.Exe 3404 FireWallAssist.exe 2860 FireWallAssist.exe 3720 InfoForSetup.exe 3720 InfoForSetup.exe 604 InfoForSetup.exe 604 InfoForSetup.exe 4992 InfoForSetup.exe 4992 InfoForSetup.exe 944 UserInfoRunner.exe 944 UserInfoRunner.exe 944 UserInfoRunner.exe 944 UserInfoRunner.exe 944 UserInfoRunner.exe 2284 InfoForSetup.exe 4208 InfoForSetup.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 964 EuDownload.exe 964 EuDownload.exe 964 EuDownload.exe 2756 easeus.voicewave.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 42 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EDownloader.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain AliyunWrapExe.Exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname UserInfoRunner.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname firebasefetch.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain firebasefetch.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EDownloader.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname firebasefetch.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain easeus.voicewave.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname AliyunWrapExe.Exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname easeus.voicewave.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SetupUE.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain AliyunWrapExe.Exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain firebasefetch.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SetupUE.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname AliyunWrapExe.Exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain UserInfoRunner.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname EuDownload.exe - System Location Discovery: System Language Discovery 1 TTPs 14 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AliyunWrapExe.Exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language evw_free_easeus.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language evw_free_easeus.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language EDownloader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language voicewave_installer_20260929.17907209202007b4768732.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 860 InfoForSetup.exe - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/1840-273-0x0000000000400000-0x0000000000533000-memory.dmp innosetup behavioral1/memory/1840-561-0x0000000000400000-0x0000000000533000-memory.dmp innosetup behavioral1/memory/1840-1876-0x0000000000400000-0x0000000000533000-memory.dmp innosetup - Checks SCSI registry key(s) 3 TTPs 62 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\UpperFilters DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000 DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Service DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Service DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Service DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Filters DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\UpperFilters DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Filters DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\LowerFilters DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Filters DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Filters DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LowerFilters DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Phantom DrvInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 svchost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\LowerFilters DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Service DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID devconX64.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs devconX64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 svchost.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID DrvInst.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\LowerFilters DrvInst.exe - Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 easeus.voicewave.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString easeus.voicewave.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz easeus.voicewave.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\easeus.voicewave.exe = "11000" EUinApp.exe Key created \REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION EUinApp.exe - Modifies data under HKEY_USERS 41 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates DrvInst.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates DrvInst.exe - Modifies registry class 18 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\DefaultIcon evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\DefaultIcon\ = "C:\\Program Files\\EaseUS\\VoiceWave\\bin\\easeus.voicewave.exe,1" evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\shell\open evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\DefaultIcon\ = "C:\\Program Files\\EaseUS\\VoiceWave\\bin\\easeus.voicewave.exe,1" evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\shell\open\command\ = "\"C:\\Program Files\\EaseUS\\VoiceWave\\bin\\easeus.voicewave.exe\" \"%1\"" evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\ = "URL:EaseUS Client Login Callback" evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\shell evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\DefaultIcon evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\shell evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\shell\open\command\ = "\"C:\\Program Files\\EaseUS\\VoiceWave\\bin\\easeus.voicewave.exe\" \"%1\"" evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\ = "URL:EaseUS VoiceWave Protocol" evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\shell\open\command evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\shell\open evw_free_easeus.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\shell\open\command evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeusvoicewave\URL Protocol evw_free_easeus.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\easeus-client\URL Protocol evw_free_easeus.tmp - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2756 easeus.voicewave.exe - Suspicious behavior: EnumeratesProcesses 5 IoCs
pid Process 5028 evw_free_easeus.tmp 5028 evw_free_easeus.tmp 2120 powershell.exe 2120 powershell.exe 2120 powershell.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2756 easeus.voicewave.exe - Suspicious use of AdjustPrivilegeToken 13 IoCs
description pid Process Token: SeDebugPrivilege 2120 powershell.exe Token: SeAuditPrivilege 760 svchost.exe Token: SeSecurityPrivilege 760 svchost.exe Token: SeLoadDriverPrivilege 888 devconX64.exe Token: SeRestorePrivilege 1672 DrvInst.exe Token: SeBackupPrivilege 1672 DrvInst.exe Token: SeRestorePrivilege 1672 DrvInst.exe Token: SeBackupPrivilege 1672 DrvInst.exe Token: SeRestorePrivilege 1672 DrvInst.exe Token: SeBackupPrivilege 1672 DrvInst.exe Token: SeLoadDriverPrivilege 1672 DrvInst.exe Token: SeLoadDriverPrivilege 1672 DrvInst.exe Token: SeLoadDriverPrivilege 1672 DrvInst.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5028 evw_free_easeus.tmp - Suspicious use of SetWindowsHookEx 11 IoCs
pid Process 3452 EDownloader.exe 3452 EDownloader.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe 2756 easeus.voicewave.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1276 wrote to memory of 3452 1276 voicewave_installer_20260929.17907209202007b4768732.exe 88 PID 3452 wrote to memory of 2020 3452 EDownloader.exe 89 PID 3452 wrote to memory of 2352 3452 EDownloader.exe 90 PID 2352 wrote to memory of 4564 2352 InfoForSetup.exe 91 PID 3452 wrote to memory of 2164 3452 EDownloader.exe 101 PID 3452 wrote to memory of 1244 3452 EDownloader.exe 111 PID 3452 wrote to memory of 1712 3452 EDownloader.exe 112 PID 3452 wrote to memory of 860 3452 EDownloader.exe 115 PID 3452 wrote to memory of 176 3452 EDownloader.exe 116 PID 3452 wrote to memory of 1840 3452 EDownloader.exe 117 PID 1840 wrote to memory of 5028 1840 evw_free_easeus.exe 118 PID 5028 wrote to memory of 2160 5028 evw_free_easeus.tmp 119 PID 5028 wrote to memory of 3012 5028 evw_free_easeus.tmp 122 PID 5028 wrote to memory of 2120 5028 evw_free_easeus.tmp 124 PID 5028 wrote to memory of 828 5028 evw_free_easeus.tmp 126 PID 828 wrote to memory of 888 828 InstallDriver.exe 127 PID 760 wrote to memory of 1236 760 svchost.exe 130 PID 760 wrote to memory of 1672 760 svchost.exe 131 PID 828 wrote to memory of 4148 828 InstallDriver.exe 134 PID 5028 wrote to memory of 3404 5028 evw_free_easeus.tmp 135 PID 4148 wrote to memory of 808 4148 InfoForSetup.exe 137 PID 5028 wrote to memory of 2860 5028 evw_free_easeus.tmp 138 PID 5028 wrote to memory of 4696 5028 evw_free_easeus.tmp 140 PID 5028 wrote to memory of 3720 5028 evw_free_easeus.tmp 141 PID 4696 wrote to memory of 604 4696 SetupUE.exe 142 PID 4696 wrote to memory of 4992 4696 SetupUE.exe 143 PID 4696 wrote to memory of 944 4696 SetupUE.exe 144 PID 3452 wrote to memory of 2284 3452 EDownloader.exe 145 PID 3452 wrote to memory of 4208 3452 EDownloader.exe 146 PID 3452 wrote to memory of 2756 3452 EDownloader.exe 147 PID 2756 wrote to memory of 964 2756 easeus.voicewave.exe 148 PID 2756 wrote to memory of 3364 2756 easeus.voicewave.exe 150 PID 2756 wrote to memory of 5116 2756 easeus.voicewave.exe 152 PID 2756 wrote to memory of 4340 2756 easeus.voicewave.exe 154 PID 2756 wrote to memory of 3808 2756 easeus.voicewave.exe 155 PID 4696 wrote to memory of 3836 4696 SetupUE.exe 157 PID 2756 wrote to memory of 1236 2756 easeus.voicewave.exe 159 PID 2756 wrote to memory of 4296 2756 easeus.voicewave.exe 160 PID 4696 wrote to memory of 2432 4696 SetupUE.exe 161 PID 4696 wrote to memory of 3224 4696 SetupUE.exe 162 PID 4696 wrote to memory of 956 4696 SetupUE.exe 163 PID 2756 wrote to memory of 2816 2756 easeus.voicewave.exe 166 PID 2756 wrote to memory of 4408 2756 easeus.voicewave.exe 167 PID 2756 wrote to memory of 396 2756 easeus.voicewave.exe 170 PID 2756 wrote to memory of 4184 2756 easeus.voicewave.exe 172 PID 2756 wrote to memory of 1704 2756 easeus.voicewave.exe 173 PID 2756 wrote to memory of 2592 2756 easeus.voicewave.exe 174 PID 2756 wrote to memory of 376 2756 easeus.voicewave.exe 178 PID 2756 wrote to memory of 4476 2756 easeus.voicewave.exe 180 PID 2756 wrote to memory of 3640 2756 easeus.voicewave.exe 182 PID 2756 wrote to memory of 2940 2756 easeus.voicewave.exe 184 PID 2756 wrote to memory of 2856 2756 easeus.voicewave.exe 186 PID 2756 wrote to memory of 4068 2756 easeus.voicewave.exe 187 PID 2756 wrote to memory of 4568 2756 easeus.voicewave.exe 188 PID 2756 wrote to memory of 1712 2756 easeus.voicewave.exe 296 PID 2756 wrote to memory of 4692 2756 easeus.voicewave.exe 190 PID 2756 wrote to memory of 5656 2756 easeus.voicewave.exe 195 PID 2756 wrote to memory of 5668 2756 easeus.voicewave.exe 349 PID 2756 wrote to memory of 5680 2756 easeus.voicewave.exe 197 PID 2756 wrote to memory of 5692 2756 easeus.voicewave.exe 198 PID 2756 wrote to memory of 5700 2756 easeus.voicewave.exe 342 PID 2756 wrote to memory of 5716 2756 easeus.voicewave.exe 370 PID 2756 wrote to memory of 5724 2756 easeus.voicewave.exe 201 PID 2756 wrote to memory of 5736 2756 easeus.voicewave.exe 202
Processes
-
C:\Users\Admin\AppData\Local\Temp\voicewave_installer_20260929.17907209202007b4768732.exe"C:\Users\Admin\AppData\Local\Temp\voicewave_installer_20260929.17907209202007b4768732.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1276 -
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\EDownloader.exe"C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\EDownloader.exe" EXEDIR=C:\Users\Admin\AppData\Local\Temp ||| EXENAME=voicewave_installer_20260929.17907209202007b4768732.exe ||| DOWNLOAD_VERSION=free ||| PRODUCT_VERSION=1.0.0 ||| INSTALL_TYPE=02⤵
- Downloads MZ/PE file
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3452 -
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/Uid "S-1-5-21-939655444-3071939294-1401108526-1000"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2020
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Web_Installer" Activity "Result_Run_Installer" Attribute "{\"Country\":\"United States\",\"Pageid\":\"17907209202007b4768732\",\"Timezone\":\"GMT-00:00\"}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2352 -
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\AliyunWrapExe.ExeC:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\AliyunWrapExe.Exe4⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
PID:4564
-
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Home_Installer" Activity "Result_Download_Configurefile" Attribute "{\"CDN\":\"http://download.easeus.com/api2/index.php/Apicp/Drwdl202004/index/\",\"Elapsed\":\"2\",\"Errorinfo\":\"0\",\"Result\":\"Success\"}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2164
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Home_Installer" Activity "Click_Install" Attribute "{\"Country\":\"United States\",\"Install_Path\":\"C:/Program Files/EaseUS/VoiceWave\",\"Language\":\"English\",\"Os\":\"Microsoft Windows 10\",\"Pageid\":\"17907209202007b4768732\",\"Timezone\":\"GMT-00:00\",\"Version\":\"free\",\"Version_Num\":\"3.5.3\"}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1244
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Downloading" Activity "Info_Start_Download_Program" Attribute "{\"Downloadfrom\":\"https://d1.easeus.com/evw/free/voicewave3.5.3_free.exe\",\"Pageid\":\"17907209202007b4768732\",\"Testid\":\"\",\"Version\":\"free\",\"Versionnumber\":\"3.5.3\"}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1712
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Downloading" Activity "Result_Download_Program" Attribute "{\"Average_Networkspeed\":\"10.69MB\",\"Cdn\":\"https://d1.easeus.com/evw/free/voicewave3.5.3_free.exe\",\"Elapsedtime\":\"23\",\"Errorinfo\":\"0\",\"Result\":\"Success\"}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- System Time Discovery
PID:860
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Installing" Activity "Info_Start_Install_Program"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:176
-
-
C:\Users\Admin\AppData\Local\Temp\evw_free_easeus.exe/verysilent /norestart /log Installer /DIR="C:\Program Files\EaseUS\VoiceWave" /LANG=English userInstallType=New GUID=S-1-5-21-939655444-3071939294-1401108526-1000 /Recommend=17907209202007b47687323⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1840 -
C:\Users\Admin\AppData\Local\Temp\is-G6G67.tmp\evw_free_easeus.tmp"C:\Users\Admin\AppData\Local\Temp\is-G6G67.tmp\evw_free_easeus.tmp" /SL5="$C0090,256634777,1204224,C:\Users\Admin\AppData\Local\Temp\evw_free_easeus.exe" /verysilent /norestart /log Installer /DIR="C:\Program Files\EaseUS\VoiceWave" /LANG=English userInstallType=New GUID=S-1-5-21-939655444-3071939294-1401108526-1000 /Recommend=17907209202007b47687324⤵
- Drops file in Program Files directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5028 -
C:\Users\Admin\AppData\Local\Temp\is-1RT48.tmp\_isetup\_setup64.tmphelper 105 0x4705⤵
- Executes dropped EXE
PID:2160
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EUinApp.exe"C:\Program Files\EaseUS\VoiceWave\bin\EUinApp.exe" easeus.voicewave.exe5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies Internet Explorer settings
PID:3012
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell.exe" Add-MpPreference -ControlledFolderAccessAllowedApplications 'C:\Program Files\EaseUS\VoiceWave\bin\easeus.voicewave.exe'5⤵
- Command and Scripting Interpreter: PowerShell
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2120
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InstallDriver.exe"C:\Program Files\EaseUS\VoiceWave\bin\InstallDriver.exe" install5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:828 -
C:\Program Files\EaseUS\VoiceWave\bin\devconX64.exe"C:\Program Files\EaseUS\VoiceWave\bin\devconX64.exe" install "C:\Program Files\EaseUS\VoiceWave\bin\Driver\X64\VirtualMic.inf" "Root\VirtualMic"6⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Executes dropped EXE
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:888
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window \"Install\" Activity \"Result_Install_Driver\" Attribute \"{\"Code\":\"0x0\",\"Result\":\"Success\"}\"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4148 -
C:\Program Files\EaseUS\VoiceWave\bin\AliyunWrapExe.Exe"C:\Program Files\EaseUS\VoiceWave\bin\AliyunWrapExe.Exe"7⤵
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
PID:808
-
-
-
-
C:\Program Files\EaseUS\VoiceWave\bin\FireWallAssist.exe"C:\Program Files\EaseUS\VoiceWave\bin\FireWallAssist.exe" /add "C:\Program Files\EaseUS\VoiceWave\bin\easeus.voicewave.exe" easeus.voicewave5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3404
-
-
C:\Program Files\EaseUS\VoiceWave\bin\FireWallAssist.exe"C:\Program Files\EaseUS\VoiceWave\bin\FireWallAssist.exe" /add "C:\Program Files\EaseUS\VoiceWave\bin\easeus.evw.vchanger.exe" easeus.evw.vchanger5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2860
-
-
C:\Program Files\EaseUS\VoiceWave\bin\SetupUE.exe"C:\Program Files\EaseUS\VoiceWave\bin\SetupUE.exe" /Enable "{\"Language\":\"English\",\"Version\":\"evw_free_setup_3.5.3_20260928-17907209202007b4768732\",\"Version_Num\":\"3.5.3\",\"Pageid\":\"17907209202007b4768732\",\"UE\":\"On\"}"5⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:4696 -
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe"C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe" /Enable6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:604
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe"C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe" /SendInfo "Window" "Install" "Activity" "Info_Userinfo" "Attribute" "{\"Language\":\"English\",\"Version\":\"evw_free_setup_3.5.3_20260928-17907209202007b4768732\",\"Version_Num\":\"3.5.3\",\"Pageid\":\"17907209202007b4768732\",\"UE\":\"On\",\"Country\":\"United States\",\"Timezone\":\"GMT-00:00\",\"OS\":\"Microsoft Windows 10 64-bit (10.0.19041.1.256)\",\"BuildNumber\":\"20260928\"}"6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4992
-
-
C:\Program Files\EaseUS\VoiceWave\bin\UserInfoRunner.exe"C:\Program Files\EaseUS\VoiceWave\bin\UserInfoRunner.exe" --window "Install" --activity "Info_Userinfo" --attribute "{\"e_language\":\"English\",\"e_version\":\"evw_free_setup_3.5.3_20260928-17907209202007b4768732\",\"e_version_num\":\"3.5.3\",\"e_page_id\":\"17907209202007b4768732\",\"e_ue\":\"On\",\"e_country\":\"United States\",\"e_timezone\":\"GMT-00:00\",\"e_os\":\"Microsoft Windows 10 64-bit (10.0.19041.1.256)\",\"e_buildnumber\":\"20260928\",\"u_is_first_day\":\"true\"}" --user_profile "{\"u_install_product_name\":\"EVW\",\"u_install_version\":\"evw_free_setup_3.5.3_20260928\",\"u_install_country\":\"United States\",\"u_install_language\":\"English\",\"u_install_os\":\"Microsoft Windows 10 64-bit (10.0.19041.1.256)\",\"u_install_time\":\"__NOW__\"}"6⤵
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
PID:944
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe"C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe" /SendInfo "Window" "Install" "Activity" "Info_Disk" "Attribute" "{\"Diskinfo\":{\"Disk0\":[\"WDC WDS100T2B0A2.5+\", \"255.99GB\", \"GPT\"]}}"6⤵
- Executes dropped EXE
PID:3836
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe"C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe" /SendInfo "Window" "Install" "Activity" "Info_Device" "Attribute" "{\"Computer\":\"Desktop\",\"CPU\":\"12th Gen Intel(R) Core(TM) i5-12400:[6]\",\"GPU\":\"NVIDIA GeForce 210\",\"RAM\":\"DADY:4096MB\",\"Manufacturer\":\"Gigabyte Technology Co., Ltd.\",\"Model\":\"B660M GAMING X DDR4\",\"Family\":\"B660 MB\",\"SKU\":\"Default string\",\"OS\":\"Microsoft Windows 10 64-bit (10.0.19041.1.256)\",\"MainBoard\":\"\"}"6⤵
- Executes dropped EXE
PID:2432
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe"C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe" /SendInfo "Window" "Install" "Activity" "Info_Graphics_Card" "Attribute" "{\"VendorId\":\"1414\", \"DeviceId\":\"8c\"}"6⤵
- Executes dropped EXE
PID:3224
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe"C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe" /SendInfo "Window" "Install" "Activity" "Info_Graphics_Card" "Attribute" "{\"VendorId\":\"1414\", \"DeviceId\":\"8c\"}"6⤵
- Executes dropped EXE
PID:956
-
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe"C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe" /SendInfo "Window" "Install" "Activity" "Info_User_Type" "Attribute" {\"Type\":\"New\"}5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3720
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Install_Finish" Activity "Result_Install_Program" Attribute "{\"Country\":\"United States\",\"Elapsedtime\":\"26\",\"Language\":\"English\",\"Pageid\":\"17907209202007b4768732\",\"Result\":\"result_success\",\"Type\":\"New\"}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2284
-
-
C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe/SendInfo Window "Install_Finish" Activity "Click_Startnow"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4208
-
-
C:\Program Files\EaseUS\VoiceWave\bin\easeus.voicewave.exe"C:\Program Files\EaseUS\VoiceWave\bin\easeus.voicewave.exe"3⤵
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2756 -
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://update.easeus.com/update/evw/innerbuy/evw_Free.ini" "C:\Program Files\EaseUS\VoiceWave\bin/../InnerBuy/res/download.ini" 0 "" 1 "" 23644⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
PID:964
-
-
C:\Program Files\EaseUS\VoiceWave\bin\firebasefetch.exefirebasefetch.exe4⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:3364
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://update.easeus.com/update/evw/innerbuy/evwlisence_free.ini" "C:\Program Files\EaseUS\VoiceWave\bin/../InnerBuy/res/evwlisence.ini.tmp" 0 "" 1 "" 35004⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:5116
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Home" Activity "Result_Firebase_API" Attribute "{\"Result\":\"Success\"}"4⤵
- Executes dropped EXE
PID:4340
-
-
C:\Program Files\EaseUS\VoiceWave\bin\firebasefetch.exefirebasefetch.exe4⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:3808
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Home" Activity "Info_Start" Attribute "{\"Build\":\"3.5.3\",\"Version\":\"Free\"}"4⤵
- Executes dropped EXE
PID:1236
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Home" Activity "Info_Monitor" Attribute "{\"Number\":\"1\",\"Resolution\":\"1920 x 1080\",\"Scale\":\"100%\"}"4⤵
- Executes dropped EXE
PID:4296
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Home" Activity "Info_Activate" Attribute "{\"ActivateResult\":\"Fail\",\"ActivateVersion\":\"\",\"CDK\":\"\"}"4⤵
- Executes dropped EXE
PID:2816
-
-
C:\Program Files\EaseUS\VoiceWave\bin\easeus.evw.vchanger.exe"C:\Program Files\EaseUS\VoiceWave\bin\easeus.evw.vchanger.exe" --port 645454⤵
- Executes dropped EXE
PID:4408
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/soundboard/sound/all/02412.svg" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02412.svg" 0 "" 1 "" 32244⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:396
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/soundboard/sound/all/02415.svg" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02415.svg" 0 "" 1 "" 3724⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:4184
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/soundboard/sound/all/02414.svg" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02414.svg" 0 "" 1 "" 35964⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:1704
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/soundboard/sound/all/02413.svg" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02413.svg" 0 "" 1 "" 21044⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:2592
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/soundboard/sound/all/02416.svg" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02416.svg" 0 "" 1 "" 33644⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:376
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/soundboard/sound/all/02417.svg" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02417.svg" 0 "" 1 "" 43284⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:4476
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/soundboard/sound/all/02418.svg" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02418.svg" 0 "" 1 "" 21524⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:3640
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01317.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01317.mp3.tmp" 1 "54985298b55c15d8f8349e7fcff006db" 1 "Global\evw_download_interrupt" 39444⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:2940
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Home" Activity "Info_Start" Attribute "{\"Build\":\"3.5.3\",\"MicDriverStatus\":\"Yes\",\"Version\":\"free\"}"4⤵
- Executes dropped EXE
PID:2856
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/a0be715ea939349fb9fd7a8f6176996017c4212a7c68f391dddfe9d903216f47.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/a0be715ea939349fb9fd7a8f6176996017c4212a7c68f391dddfe9d903216f47.png" 0 "" 1 "" 38524⤵
- Executes dropped EXE
PID:4068
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/824683a80eadc222e323f58cbfcfb8f0467821d34082ced918832d23d00a6c65.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/824683a80eadc222e323f58cbfcfb8f0467821d34082ced918832d23d00a6c65.png" 0 "" 1 "" 23484⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:4568
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/8e0feedced188df20c9fdc7fbf9a21751f0cf484953f58263db079cdcba681d9.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/8e0feedced188df20c9fdc7fbf9a21751f0cf484953f58263db079cdcba681d9.png" 0 "" 1 "" 47284⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:1712
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/45ed858a9aa8a8437db04c68ae4cea2439fdb2ac13702299d6df24f3818b14ca.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/45ed858a9aa8a8437db04c68ae4cea2439fdb2ac13702299d6df24f3818b14ca.png" 0 "" 1 "" 33604⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:4692
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/10754.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/47f00b31cb23f2aa_10754.png.tmp.ui.990c2828-c9eb-4902-a40d-9d78119891f1" 0 "" 1 "Global\evw_download_interrupt" 44804⤵
- Executes dropped EXE
PID:5656
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01141.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/3f43c4c8e6e33140_01141.png.tmp.ui.14b1f621-c3cc-4ed6-ac06-a7d055156bba" 0 "" 1 "Global\evw_download_interrupt" 45484⤵
- Executes dropped EXE
PID:5668
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/06494.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/67a990051ba67352_06494.jpg.tmp.ui.31b0078b-0b88-4aca-810a-7e5743f10080" 0 "" 1 "Global\evw_download_interrupt" 3964⤵
- Executes dropped EXE
PID:5680
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/25220.f9331367.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/0ea7b6480d3431b2_25220.f9331367.png.tmp.ui.7641e424-7044-4965-9e42-424bfa960e7e" 0 "" 1 "Global\evw_download_interrupt" 32244⤵
- Executes dropped EXE
PID:5692
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260712/59/59445e998c024759859c607e8476cd5a.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/a3945c704020cd42_59445e998c024759859c607e8476cd5a.png.tmp.ui.61c6a720-8a30-452a-b468-087c1d2f86cc" 0 "" 1 "Global\evw_download_interrupt" 33684⤵
- Executes dropped EXE
PID:5700
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260711/51/51d6304fa4a84645ac8a7e0d5ce5a329.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/c186a28c9c12df3c_51d6304fa4a84645ac8a7e0d5ce5a329.jpg.tmp.ui.a7757e67-3b8a-48f9-944b-f1c0f29922ab" 0 "" 1 "Global\evw_download_interrupt" 42244⤵
- Executes dropped EXE
PID:5716
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260625/e4/e415f44ff59148579f06b28a479295ad.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/c717b276f0350ace_e415f44ff59148579f06b28a479295ad.png.tmp.ui.6fd6936c-7ec4-4288-ad14-dbf64558a616" 0 "" 1 "Global\evw_download_interrupt" 18364⤵
- Executes dropped EXE
PID:5724
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/07364.jpeg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/c31646ad443f8540_07364.jpeg.tmp.ui.9a4c8ce9-c472-444e-bbe6-f97eb724d7d4" 0 "" 1 "Global\evw_download_interrupt" 27844⤵
- Executes dropped EXE
PID:5736
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01401_20260312170525.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01401_20260312170525.mp3.tmp" 1 "f9af918921c11902c1597ac4468c4544" 1 "Global\evw_download_interrupt" 60764⤵PID:2376
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/02f6e2e2fd26866d8e348dbfe7acb9c12aef10e41ebde8c13d016cf637f8e0c3.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/02f6e2e2fd26866d8e348dbfe7acb9c12aef10e41ebde8c13d016cf637f8e0c3.png" 0 "" 1 "" 53324⤵PID:5468
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/8ec553c91bed2c01b0a06b096c9a1d4b49ff9db938ceacff6c2aad901181ce38.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/8ec553c91bed2c01b0a06b096c9a1d4b49ff9db938ceacff6c2aad901181ce38.png" 0 "" 1 "" 52924⤵PID:5476
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/b7747151c03a1150730996d7eaaa18487c5689d1c1aeacbfa018211209603cfe.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/b7747151c03a1150730996d7eaaa18487c5689d1c1aeacbfa018211209603cfe.png" 0 "" 1 "" 53084⤵PID:5480
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://update.easeus.com/update/evw/promotion/giftbox/en.ini?&x-url=17907209202007b4768732&testid=FR353_20260928&uid=S-1-5-21-939655444-3071939294-1401108526-1000" "C:\Users\Admin\AppData\Local\Temp\evwD87F.tmp" 0 "" 1 "" 58284⤵PID:2156
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260614/c0/c08acaaf04084f8b88dea2fbe4436102.jpeg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/cf1d1ad5b1cc5996_c08acaaf04084f8b88dea2fbe4436102.jpeg.tmp.ui.b145691f-1eff-40cc-9261-c05bb5e1708d" 0 "" 1 "Global\evw_download_interrupt" 58644⤵PID:3944
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260615/6f/6f01c33ad562408c820a111697ce6327.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/c776437afbc859fa_6f01c33ad562408c820a111697ce6327.png.tmp.ui.307f4870-68b0-4305-8366-b3edeb9351b1" 0 "" 1 "Global\evw_download_interrupt" 58684⤵PID:2940
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260624/df/df96272d495a41bfab82c08d5df457a2.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/921297d7b8d7f9ff_df96272d495a41bfab82c08d5df457a2.jpg.tmp.ui.99bd17ad-a442-4029-bd69-92e49bd89bc1" 0 "" 1 "Global\evw_download_interrupt" 58724⤵PID:5056
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/08050.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/53deb0691c2e8840_08050.png.tmp.ui.62b24957-748b-438b-8e33-e339b5deb131" 0 "" 1 "Global\evw_download_interrupt" 58764⤵PID:436
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260706/6b/6b1541f117204c979b47d10bc0d616a4.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/9e8b57238c8f2289_6b1541f117204c979b47d10bc0d616a4.png.tmp.ui.4c700577-e4e1-492b-99f4-56e7dd7b64bc" 0 "" 1 "Global\evw_download_interrupt" 58844⤵PID:1800
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260703/14/14d50e74e68b461f9a6e119dc5a6b355.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/5fdf56367a761cda_14d50e74e68b461f9a6e119dc5a6b355.jpg.tmp.ui.9b457d63-d3de-454c-80d3-4d11aa229f88" 0 "" 1 "Global\evw_download_interrupt" 58804⤵PID:1292
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260709/cc/cc899675ae594cdc925361c2ce368680.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/22a40f4ae585439b_cc899675ae594cdc925361c2ce368680.jpg.tmp.ui.1db7703e-c1e6-4e41-81a0-8b9a8adaa522" 0 "" 1 "Global\evw_download_interrupt" 51604⤵PID:1916
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01319.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01319.mp3.tmp" 1 "fa2f785b3031b6dec58f6a49c1d00579" 1 "Global\evw_download_interrupt" 52004⤵PID:5296
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01204.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/d5caa6f3e598f73e_01204.png.tmp.ui.95268155-df66-4890-b4d9-4d4ec98b0f8e" 0 "" 1 "Global\evw_download_interrupt" 26404⤵PID:5304
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Home" Activity "Info_Start_Time" Attribute "{\"Time\":\"13s\"}"4⤵PID:2784
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://update.easeus.com/update/evw/voicewave.ini" "C:\Users\Admin\AppData\Local\Temp\ereD96A.tmp" 0 "" 1 "" 52884⤵PID:5552
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/257eedc82561a6b23ab81a3785be2e8d29851655ddb978a537d812fc91b79ec0.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/257eedc82561a6b23ab81a3785be2e8d29851655ddb978a537d812fc91b79ec0.png" 0 "" 1 "" 12604⤵PID:5776
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Device_Setting" Activity "Trigger_Device_Setting"4⤵PID:5152
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Device_Setting" Activity "Info_Device" Attribute "{\"Input\":\"\",\"Output\":\"\"}"4⤵PID:5788
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/1485d58270fc9297bf50c9fee4c278aa7a677bdf8a2cb44d43ae125f6d44dccb.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/1485d58270fc9297bf50c9fee4c278aa7a677bdf8a2cb44d43ae125f6d44dccb.png" 0 "" 1 "" 41684⤵PID:2096
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/c859da928d6600a1eef121992a4234db4416063a72c064314e75dc6a6259b934.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/c859da928d6600a1eef121992a4234db4416063a72c064314e75dc6a6259b934.png" 0 "" 1 "" 55924⤵PID:2628
-
-
C:\Program Files\EaseUS\VoiceWave\bin\InfoForSetup.exe/SendInfo Window "Home" Activity "Info_Update" Attribute "{\"Update\":\"No\",\"VersionNum\":\"3.5.3\"}"4⤵PID:5264
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260708/f0/f0eb6b64815540a9b5fb4ffe972b361e.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/e30e7bd73f905dbb_f0eb6b64815540a9b5fb4ffe972b361e.jpg.tmp.ui.078b7a0a-7075-497d-ac0b-0164827b66dc" 0 "" 1 "Global\evw_download_interrupt" 56164⤵PID:3364
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/246ad003d55fd926fe90bf48aaa2023ff72c47cef27588c2a7f56456f0e09c44.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/246ad003d55fd926fe90bf48aaa2023ff72c47cef27588c2a7f56456f0e09c44.png" 0 "" 1 "" 52164⤵PID:3836
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260618/f3/f3d365d38097463590330e304e800da2.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/40978a2c30196980_f3d365d38097463590330e304e800da2.jpg.tmp.ui.4e2e86c4-83ea-40e3-9594-45c712814f01" 0 "" 1 "Global\evw_download_interrupt" 24684⤵PID:5568
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/07829.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1fb0ad1057a292a3_07829.png.tmp.ui.9b3b32a1-5d6c-4e43-8dc2-8df3b77dcca3" 0 "" 1 "Global\evw_download_interrupt" 55004⤵PID:4380
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01285.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/430e5674e00635b9_01285.png.tmp.ui.4dd4479f-feb5-4e92-bb6b-219098e2be05" 0 "" 1 "Global\evw_download_interrupt" 41844⤵PID:4824
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/08183.jpeg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/72b67dead20190ce_08183.jpeg.tmp.ui.c9c5dec5-4d14-41b8-958c-e4c03dc0ea19" 0 "" 1 "Global\evw_download_interrupt" 6324⤵PID:1816
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/82ec890554497fc6ec6b4e9f616e13b3bdaf5711149e7939163ebc91ee614b46.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/82ec890554497fc6ec6b4e9f616e13b3bdaf5711149e7939163ebc91ee614b46.png" 0 "" 1 "" 38084⤵PID:5716
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01051.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01051.mp3.tmp" 1 "3b2a0945cc35a47afc701b4922ae5c5f" 1 "Global\evw_download_interrupt" 53324⤵PID:5320
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/15614.c320104a.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/e567d82ed45552f6_15614.c320104a.png.tmp.ui.e9e48916-0049-4cca-846f-db8135757df0" 0 "" 1 "Global\evw_download_interrupt" 57084⤵PID:6132
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/09548.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/273f771e5ca29a0f_09548.png.tmp.ui.218200f0-ff29-4da9-af83-1a6e6ae26e41" 0 "" 1 "Global\evw_download_interrupt" 56324⤵PID:6048
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/10327.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/8ca29b1b4030830c_10327.png.tmp.ui.52175559-e656-460f-977b-bdb2c257d8a2" 0 "" 1 "Global\evw_download_interrupt" 43004⤵PID:6016
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/fdde8d7f62efa355bf4a7c996c576baf469b32e29ddbf6cc9350e5b5708d1303.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/fdde8d7f62efa355bf4a7c996c576baf469b32e29ddbf6cc9350e5b5708d1303.png" 0 "" 1 "" 55124⤵PID:5504
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/06237168205a9fab70a3860a9e8208a1c2443d7052ae53c2552b6a758c4fb342.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/06237168205a9fab70a3860a9e8208a1c2443d7052ae53c2552b6a758c4fb342.png" 0 "" 1 "" 61164⤵PID:1704
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/eb8ce14d638c2dcb52a0daa26a2c96d0f1fe95b3e01f99e8c7dd48f8216bf549.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/eb8ce14d638c2dcb52a0daa26a2c96d0f1fe95b3e01f99e8c7dd48f8216bf549.png" 0 "" 1 "" 45684⤵PID:5996
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/12667.2cf6c923.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/d998c1339f2495bf_12667.2cf6c923.png.tmp.ui.cf29dff7-420f-4b2a-8a99-0e405069a629" 0 "" 1 "Global\evw_download_interrupt" 55484⤵PID:3368
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260624/13/13cd19b31dfe4237a6bc096459f0ac8d.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/a8b28e294ac386d2_13cd19b31dfe4237a6bc096459f0ac8d.png.tmp.ui.7de93402-f40c-439a-9040-886e8d6f969f" 0 "" 1 "Global\evw_download_interrupt" 51404⤵PID:1804
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260711/d5/d526195014d84002a90f95e3db30370b.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/3c3406e59830be3b_d526195014d84002a90f95e3db30370b.jpg.tmp.ui.75c30cc1-69aa-4eac-aa35-d0fc6a9e32c4" 0 "" 1 "Global\evw_download_interrupt" 53524⤵PID:5780
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01101.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01101.mp3.tmp" 1 "57481febab77f6be207921c8e834190d" 1 "Global\evw_download_interrupt" 24764⤵PID:1824
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260711/ab/ab00d4222ef3414c84be7c9ef562cc48.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/c20057a5283f55ee_ab00d4222ef3414c84be7c9ef562cc48.jpg.tmp.ui.c636d697-d6b2-48ab-9f2a-795dad118c9b" 0 "" 1 "Global\evw_download_interrupt" 35204⤵PID:5904
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260630/67/677fc01283cc4a83acd7906dd32ddf9b.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/316be1de24df6206_677fc01283cc4a83acd7906dd32ddf9b.jpg.tmp.ui.7877603d-715b-4644-bd68-65818cbc952e" 0 "" 1 "Global\evw_download_interrupt" 57364⤵PID:5284
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/3602d181b5fe26374e9c5315af395c09bf977c918cfd8626f34b6b993227dd28.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/3602d181b5fe26374e9c5315af395c09bf977c918cfd8626f34b6b993227dd28.png" 0 "" 1 "" 56484⤵PID:4476
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260618/1e/1e98f76f2ecc4ad286a335bcfd69c982.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/2605f931c00ec4ce_1e98f76f2ecc4ad286a335bcfd69c982.jpg.tmp.ui.f306f6fc-2df8-4aa5-b1dd-4af7dc54d4ac" 0 "" 1 "Global\evw_download_interrupt" 48844⤵PID:5152
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV15⤵PID:1712
-
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260616/0b/0b91b97f12e74522820e51b366d5ec93.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/02ad2a9842a57ded_0b91b97f12e74522820e51b366d5ec93.jpg.tmp.ui.64466616-3ae4-42a8-b614-e16bef762bda" 0 "" 1 "Global\evw_download_interrupt" 56044⤵PID:1124
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/02361.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/0eae13020bcb5597_02361.png.tmp.ui.5a61846b-b536-4542-83dc-e626efaa546f" 0 "" 1 "Global\evw_download_interrupt" 27844⤵PID:5516
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/c368f5f9d7eef6278fd31419e9d0b238a6847fdee67bd1cbfca633f67b071e7f.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/c368f5f9d7eef6278fd31419e9d0b238a6847fdee67bd1cbfca633f67b071e7f.png" 0 "" 1 "" 23484⤵PID:5472
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/d2397add260c7b4aba082f007f6f55edd9559fcbe18ad1fc5f42a5b682125c92.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/d2397add260c7b4aba082f007f6f55edd9559fcbe18ad1fc5f42a5b682125c92.png" 0 "" 1 "" 44444⤵PID:6068
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/6568c34648f07a603d69f93b1fd08bad3fc6ea52064f9ccff364c54aa57ba32c.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/6568c34648f07a603d69f93b1fd08bad3fc6ea52064f9ccff364c54aa57ba32c.png" 0 "" 1 "" 59284⤵PID:5668
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260626/dc/dcbc9d1876a74a1abe9516aecde02d19.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/37a7ee902cb993d2_dcbc9d1876a74a1abe9516aecde02d19.jpg.tmp.ui.832532c0-a203-4a7b-9001-3001cf619391" 0 "" 1 "Global\evw_download_interrupt" 60084⤵PID:5188
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/03842.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1d30a2fdeac8bb50_03842.png.tmp.ui.b7f1fd95-acbb-4949-9d3d-985829e6f804" 0 "" 1 "Global\evw_download_interrupt" 61124⤵PID:5168
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260701/b9/b90635a0fe914fdd927c611b94a53a81.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/798c95cee487f558_b90635a0fe914fdd927c611b94a53a81.jpg.tmp.ui.9912f83c-d415-4f08-9bc5-62fc40fc055c" 0 "" 1 "Global\evw_download_interrupt" 53324⤵PID:6100
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260705/1b/1b73f73251ea4b64a4b2b4f898f04c2b.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/e3f42fd5dac64a12_1b73f73251ea4b64a4b2b4f898f04c2b.png.tmp.ui.e9da22ab-ce76-4493-bd2f-4d23e41590f6" 0 "" 1 "Global\evw_download_interrupt" 51324⤵PID:5292
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/f6c0e1f6715d1ab815be4893f87d91e2edb866da50493da76c4f492d9a61a458.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/f6c0e1f6715d1ab815be4893f87d91e2edb866da50493da76c4f492d9a61a458.png" 0 "" 1 "" 57124⤵PID:6032
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260702/59/59d1dae55c614e43bce6a2e4457d7eb8.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/397984ae4b289b53_59d1dae55c614e43bce6a2e4457d7eb8.jpg.tmp.ui.1bdc2f83-c630-433c-92ef-991fd353a50d" 0 "" 1 "Global\evw_download_interrupt" 54804⤵PID:5496
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01021.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01021.mp3.tmp" 1 "46e543fb902646ab489d0831e6b87b30" 1 "Global\evw_download_interrupt" 51244⤵PID:5368
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260703/10/10170b02587f482391e19a1485feef9e.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1d4bb0637c1c8cdc_10170b02587f482391e19a1485feef9e.png.tmp.ui.4395b17f-0228-4b9d-858f-1d9f6ca404b0" 0 "" 1 "Global\evw_download_interrupt" 51724⤵PID:1704
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260706/ad/adb127c8cd3b496c90112969ec6d1aa3.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1f5c5aec700ad468_adb127c8cd3b496c90112969ec6d1aa3.jpg.tmp.ui.b6556c0a-a3f5-4b4f-ac6e-d7c630d1f9a5" 0 "" 1 "Global\evw_download_interrupt" 18364⤵PID:5972
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260706/31/316658a06e8741d88c4c2472ec66b200.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/6c4902c8bbb746ca_316658a06e8741d88c4c2472ec66b200.jpg.tmp.ui.71d76444-7f55-4489-98f6-d7c79f660ecd" 0 "" 1 "Global\evw_download_interrupt" 24604⤵PID:5812
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/fe26cca57f20e7fcc202281599fb7a3de222fb68d5fee3946f3182ed821e9499.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/fe26cca57f20e7fcc202281599fb7a3de222fb68d5fee3946f3182ed821e9499.png" 0 "" 1 "" 55244⤵PID:5836
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/ff605687d9317da8a101835f6ffffc3286a1f1f88cff7d5ff79a87c2a586e5d2.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/ff605687d9317da8a101835f6ffffc3286a1f1f88cff7d5ff79a87c2a586e5d2.png" 0 "" 1 "" 54844⤵PID:1664
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/81d265a03672e13e6057b7f3d34cb602935ce23472cb91e23631a2b1a2e47780.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/81d265a03672e13e6057b7f3d34cb602935ce23472cb91e23631a2b1a2e47780.png" 0 "" 1 "" 61244⤵PID:5684
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01140.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/89901bbe89a353d3_01140.png.tmp.ui.b64f71af-76c4-4b01-819e-5f2f2cac3b58" 0 "" 1 "Global\evw_download_interrupt" 57804⤵PID:4352
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01139.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/d68b4471db279983_01139.png.tmp.ui.748fa447-60a0-482b-903a-15b6d3ec6ae0" 0 "" 1 "Global\evw_download_interrupt" 52084⤵PID:5416
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01472.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/bdbe4c9468f7e859_01472.png.tmp.ui.8c7c7743-2138-4766-8dc8-5886220dc664" 0 "" 1 "Global\evw_download_interrupt" 24764⤵PID:6108
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/4486ec54a8e1b7511e1f1f0fea0740acd17e62798ffaee12ff755a5bf01e8cb8.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/4486ec54a8e1b7511e1f1f0fea0740acd17e62798ffaee12ff755a5bf01e8cb8.png" 0 "" 1 "" 51644⤵PID:5396
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01166.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01166.mp3.tmp" 1 "0b83099226b191f102d450134a275551" 1 "Global\evw_download_interrupt" 28564⤵PID:5504
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV15⤵PID:5700
-
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01258.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/20b45b0f7b9fcb97_01258.png.tmp.ui.45f89462-81a4-4500-983e-e80d3ce0e02b" 0 "" 1 "Global\evw_download_interrupt" 47604⤵PID:5512
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01440.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/8c5d9dc043d6b81c_01440.png.tmp.ui.f8176b81-da58-4ecc-966c-d5283a2c2152" 0 "" 1 "Global\evw_download_interrupt" 55924⤵PID:5696
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01397.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/b9c0d703617fe3d1_01397.png.tmp.ui.4e7fd4ea-2392-41eb-89f1-c7afc08ac30c" 0 "" 1 "Global\evw_download_interrupt" 52844⤵PID:5472
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/26662.c1650854.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/6d26b5f08751c425_26662.c1650854.png.tmp.ui.37165427-600b-4062-8c10-8eddbc748e82" 0 "" 1 "Global\evw_download_interrupt" 28084⤵PID:5384
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV15⤵PID:5668
-
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/26000.f97dfa97.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/29694653125d4184_26000.f97dfa97.png.tmp.ui.02e12afa-9751-42eb-afec-6ec48a8df43c" 0 "" 1 "Global\evw_download_interrupt" 45924⤵PID:6084
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/5d2db76ad20ff09895598b4b3439373c0f71e0e582b984a22698b58cc00ebb3f.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/5d2db76ad20ff09895598b4b3439373c0f71e0e582b984a22698b58cc00ebb3f.png" 0 "" 1 "" 59284⤵PID:5180
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/d1d97c27aabfba90d4e0f1a6ecb11adefbc8f9759abef1ce76419549c536ae28.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/d1d97c27aabfba90d4e0f1a6ecb11adefbc8f9759abef1ce76419549c536ae28.png" 0 "" 1 "" 57844⤵PID:6132
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01356.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1ab672fa79a2083a_01356.png.tmp.ui.aa13b439-7c35-4c2f-aec8-0401f7dc345d" 0 "" 1 "Global\evw_download_interrupt" 48924⤵PID:5820
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/29d1b777dd7d2f0dea039cc2c312b9ae5098a047a5180c5883d9674661768927.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/29d1b777dd7d2f0dea039cc2c312b9ae5098a047a5180c5883d9674661768927.png" 0 "" 1 "" 55604⤵PID:5776
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01302.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/aecde04361c9fe5f_01302.png.tmp.ui.9ecaf279-4cca-438d-ba10-7dcca7c493f6" 0 "" 1 "Global\evw_download_interrupt" 17204⤵PID:5612
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01355.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/fca943e10ad06187_01355.png.tmp.ui.ae8b2872-b5f5-43be-b016-9879134dd4e4" 0 "" 1 "Global\evw_download_interrupt" 51244⤵PID:6064
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/1235b5ec-0c9f-4d33-9d6c-df7bd2bd2a3f.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/1235b5ec-0c9f-4d33-9d6c-df7bd2bd2a3f.png" 0 "" 1 "" 54604⤵PID:3960
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01399.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/9189a337ea537c9f_01399.png.tmp.ui.71ce0922-0c50-4b20-ad5d-1cbc6053bad4" 0 "" 1 "Global\evw_download_interrupt" 54084⤵PID:5672
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/26010.5c94ef1a.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/9d2b65666db68ccc_26010.5c94ef1a.png.tmp.ui.13a2669a-8f4f-423e-bbc7-9ae97002677c" 0 "" 1 "Global\evw_download_interrupt" 24604⤵PID:5804
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/18056.92367265.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/150a00209171f995_18056.92367265.png.tmp.ui.7bb03ecf-6ed8-441d-9da2-1c2dbe74618f" 0 "" 1 "Global\evw_download_interrupt" 24684⤵PID:5604
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV15⤵PID:5716
-
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/19986.1a4953d4.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/2ea762d65a504d6b_19986.1a4953d4.png.tmp.ui.8ab4ae7d-44a8-4e22-ab74-bf20be6f96e1" 0 "" 1 "Global\evw_download_interrupt" 58764⤵PID:5360
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/3f890dfc751fea96eb7252b52b395531fe290914198f6e18807f125f7f6202f9.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/3f890dfc751fea96eb7252b52b395531fe290914198f6e18807f125f7f6202f9.png" 0 "" 1 "" 54484⤵PID:3276
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01003.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01003.mp3.tmp" 1 "c00b2593108051a8c1323b43222a3c74" 1 "Global\evw_download_interrupt" 55244⤵PID:5816
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/13686.5df77080.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/e9ded2293dfe5a1e_13686.5df77080.png.tmp.ui.050e24d6-7abc-4af3-8701-f1e27be4a98b" 0 "" 1 "Global\evw_download_interrupt" 39444⤵PID:5864
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/eb9d9893ba35727a743e081802146d7417e194cf8e2b9df867969a679abd30d5.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/eb9d9893ba35727a743e081802146d7417e194cf8e2b9df867969a679abd30d5.png" 0 "" 1 "" 53244⤵PID:5432
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/c6438e3df07086cd463798a972b5cb28ca1cdff3862ce30c39fb5318e16a21a1.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/c6438e3df07086cd463798a972b5cb28ca1cdff3862ce30c39fb5318e16a21a1.png" 0 "" 1 "" 52084⤵PID:6128
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/12122.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1a33fb9a8f4bf53b_12122.png.tmp.ui.6cb1e0c8-008d-449e-9598-c0471e6b589f" 0 "" 1 "Global\evw_download_interrupt" 41444⤵PID:5164
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/13198.d9cc36bb.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/3f7ee0864edde219_13198.d9cc36bb.png.tmp.ui.f8cd1439-7da4-4420-93af-fcbbab25629b" 0 "" 1 "Global\evw_download_interrupt" 55404⤵PID:4248
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/13191.5d36a7ea.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/5cacc6c9e190e416_13191.5d36a7ea.png.tmp.ui.f86f055e-11de-49aa-9136-8e3cbb4decff" 0 "" 1 "Global\evw_download_interrupt" 58804⤵PID:5228
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/25237.63df1655.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/3c370edd33fb2e9a_25237.63df1655.png.tmp.ui.a3df84d2-924c-4e15-bd19-37a504933a55" 0 "" 1 "Global\evw_download_interrupt" 4124⤵PID:5652
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/18087.9926eec0.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1cefa6d789f1a8b2_18087.9926eec0.png.tmp.ui.ea2f8926-8f0c-41e0-ac4f-a98ef239ca3f" 0 "" 1 "Global\evw_download_interrupt" 16524⤵PID:5596
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/6997a0dd3d937f2e55ddc8b2209871e931821f09384602d0557b4362f192657a.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/6997a0dd3d937f2e55ddc8b2209871e931821f09384602d0557b4362f192657a.png" 0 "" 1 "" 29604⤵PID:5184
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01027.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01027.mp3.tmp" 1 "c4ba6d8c2ccfecbc98135956e561e17b" 1 "Global\evw_download_interrupt" 56204⤵PID:2920
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/a1a79e4739d5d40c156ce898809d37302b8c2ae8cca4989ef0d0b09f8eabfea0.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/a1a79e4739d5d40c156ce898809d37302b8c2ae8cca4989ef0d0b09f8eabfea0.png" 0 "" 1 "" 48244⤵PID:5840
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/08947.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/2acf7dc076be175f_08947.jpg.tmp.ui.7f69c315-e71d-4dd3-b4bd-4d560931c68a" 0 "" 1 "Global\evw_download_interrupt" 17084⤵PID:4692
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/07482.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/ada65fa3c1cbf130_07482.jpg.tmp.ui.7f10d5e8-f3e1-4468-b12e-7a9a5331ea7d" 0 "" 1 "Global\evw_download_interrupt" 53484⤵PID:5236
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/5cd9ee409777fd5cb9d9660c9c45d5098f2ae0ba544e808856ef882714b64087.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/5cd9ee409777fd5cb9d9660c9c45d5098f2ae0ba544e808856ef882714b64087.png" 0 "" 1 "" 53804⤵PID:3940
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260703/55/557d6ae3493b40d28953dfdcf243db77.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/c386b37c452c9da2_557d6ae3493b40d28953dfdcf243db77.png.tmp.ui.e114c7c6-6312-460b-aac3-042455f1830f" 0 "" 1 "Global\evw_download_interrupt" 52804⤵PID:3348
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260626/c6/c6914d2a1dd8459f9dc01721a3f66b6e.jpg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/f13ef1c760964771_c6914d2a1dd8459f9dc01721a3f66b6e.jpg.tmp.ui.7036037e-8c1f-410d-9b65-1f4823bd4f27" 0 "" 1 "Global\evw_download_interrupt" 38644⤵PID:4568
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/ugc/prod/uploads/avatar/20260705/13/13b2381038284caca495a7f82dd098cf.jpeg" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/3ca4fbc28497388d_13b2381038284caca495a7f82dd098cf.jpeg.tmp.ui.1dfef3c9-12ec-4187-8895-11b9c87eac2b" 0 "" 1 "Global\evw_download_interrupt" 57244⤵PID:5512
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/6f0bdd6ad4e12953a54d8986812a1aa4b189364a18822ba95f6f43c8140a7a97.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/6f0bdd6ad4e12953a54d8986812a1aa4b189364a18822ba95f6f43c8140a7a97.png" 0 "" 1 "" 55364⤵PID:5432
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01019.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/33311162eb842772_01019.png.tmp.ui.5d162944-7bda-4e4d-8c09-80bf94465d11" 0 "" 1 "Global\evw_download_interrupt" 34004⤵PID:6108
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01087.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/bbec99473ca50099_01087.png.tmp.ui.c9b899f1-bf07-44cd-82fc-fc3832ba5bd3" 0 "" 1 "Global\evw_download_interrupt" 26404⤵PID:5884
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01020.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/20e7c0d8c9163e12_01020.png.tmp.ui.03ebe2ca-0971-4880-92eb-8fb54fed98ff" 0 "" 1 "Global\evw_download_interrupt" 52044⤵PID:6024
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/3f35eb24-5f8a-43e7-82b1-e6671339ad3e.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/3f35eb24-5f8a-43e7-82b1-e6671339ad3e.png" 0 "" 1 "" 55244⤵PID:1664
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://d2b3nx20irvy44.cloudfront.net/images/prod/3095dd8ad254c019a6b2574b02e9f6d823088213fe4ea9f6445b820c3b2caf2f.png" "C:/ProgramData/EaseUS/VoiceWave/soundboardWebCache/webImages/3095dd8ad254c019a6b2574b02e9f6d823088213fe4ea9f6445b820c3b2caf2f.png" 0 "" 1 "" 52164⤵PID:2940
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01022.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/7c0858b25487d1ac_01022.png.tmp.ui.aef8b088-43d2-41a7-bf2e-8a60632534c1" 0 "" 1 "Global\evw_download_interrupt" 46284⤵PID:5900
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/sound/ai_voices/01249.mp3" "C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\sound/ai_voices/01249.mp3.tmp" 1 "35ca21921cb05a7e2a0e92936a5f2406" 1 "Global\evw_download_interrupt" 53524⤵PID:3796
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01227.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/8bd0a62299f5a2b9_01227.png.tmp.ui.a1bd69af-80c9-41b9-9b6f-8ee70c395689" 0 "" 1 "Global\evw_download_interrupt" 9644⤵PID:5612
-
-
C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe"C:\Program Files\EaseUS\VoiceWave\bin\EuDownload.exe" "https://public.easeus.com/media/evw/library/res/icon/ai_voices_v2/01023.png" "C:/Users/Admin/AppData/Roaming/EaseUS VoiceWave/Materials/icon/ai_voices/1876b1bff7a0d1df_01023.png.tmp.ui.21e72cd9-865e-4e1b-b23e-2028840e5a93" 0 "" 1 "Global\evw_download_interrupt" 54684⤵PID:5172
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:760 -
C:\Windows\system32\DrvInst.exeDrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{bf7f8f09-754a-6a4d-b790-532f3856a980}\virtualmic.inf" "9" "477c6effb" "0000000000000148" "WinSta0\Default" "0000000000000158" "208" "c:\program files\easeus\voicewave\bin\driver\x64"2⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies data under HKEY_USERS
PID:1236
-
-
C:\Windows\system32\DrvInst.exeDrvInst.exe "2" "211" "ROOT\MEDIA\0000" "C:\Windows\INF\oem3.inf" "oem3.inf:f1d97002abe11bd1:VirtualMic_Device:15.59.29.77:root\virtualmic," "477c6effb" "0000000000000148"2⤵
- Drops file in Drivers directory
- Drops file in System32 directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:1672
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x570 0x5201⤵PID:3092
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\EaseUS\VoiceWave\InnerBuy\res\evwlisence.ini.tmp
- Size 14KB
- SHA256 0df776e45244119e347a4a7f636c11f9e2ed08c7ea9d27ce95374080e05d4f4c
- MD5 e3cae7749440b40067855a9628b73b94
- SHA1 8a97646f1cfa768b8cd0a603ea6537ac3229f5ce
- SHA512 cbd5527cd83b95ae145a1009df030ee0da58d1cef2ed58cf7074373cfca19fa51783d775bf157599d0a786ecee28dbc859192bb1956ecdb4c70a1fdcdd20dba7
- SSDEEP 192:SatP0v6JDR8ZovctUX85UvvizTC8PNUvOLxGZ8NSvjbgL8bUvSxoZ8R0vtJ4R8be:5tUel1pV0aOq3szNhyKRb/pA5
- TLSH T162625153BBF95B92F2E69E15D4F89C344A3F78D15A18D28C00E002CC29F1EA1A9577E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\AudioDriver.dll
- Size 135KB
- SHA256 ee5b0a3483230f2cbf0b10fc8516511413402d9409671dfadfc197fc81ed085a
- MD5 46b66cacbb747e5a18997225ab74d752
- SHA1 396ee132402ab5a7cb5c2ef3116265b2e663a4c0
- SHA512 f0e3db7e3c4cb1acc916c121b4ecc6a3239f9ff6a165b811cf204757a3497e8e7bfd8879a954f1d9ea136b03dba2a93fe527d756156de85e2ba0df1690b51f53
- SSDEEP 3072:rshq4NW88OR4LDup1FvkD2t6T/XP726o+F56ZRHclHUEEh/7i:rshq3c4frMUHUJh/u
- TLSH T149D3848BB6B600F1C5BAE239B592612BFA713095473857CB57E0491B1BE1BE4EC7E340
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 910B
- SHA256 92d50581aca9350cbb3e96d5a486723aff82b669c341ad863fb3cf0961fa52a3
- MD5 c676c8e3dae63dc700a35a1d3915699b
- SHA1 ff7e8dbf4e1ae0af162a6be76d4bf5c096e5d489
- SHA512 d6729130704918bd026549d64aac916cad10c67e6214f3ee41102c323da46f4c120b579ccbff37f7f07a115430d8d2725bd81bb58d0b9cbb10e781371df38904
- TLSH T16911E11B1DE810A6B5B7691ADBE8CD279717B8C6088CCD4C24E22B1F14D0501E4539FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 41e26f89c08a2b9688a5eccd96c8692f5326b6da9f658fb2a60378611a29100f
- MD5 1e0de7f877aff046eded3cd81aa31e35
- SHA1 d79c0d875dc7e1ad3996f71ff401f7d453442965
- SHA512 f43b5391310b3d554dac25b072e9fa2d2c8a81858443b50a554a8a40927a07f1a566c5a0b80e3fa63682e22485ecc651d4a56b96610cd9d857147f42dc4e6afe
- TLSH T12F31C45B1CE821A6B4B7551EDBE4CE27572BB8C5084DCD4C24E22B1E14D0501E4579FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 2KB
- SHA256 8cc3239526f151fd7e0af97a934190a44bdfbe74ed8822d38893bb041d8d784c
- MD5 b658e75fe36eaf378c3696c1bb59d7ec
- SHA1 72c299fc5bd3f27a82b5bc33178c479fedc8e43d
- SHA512 f876205ea05ecb5d868465300626fca7730698e9b6b55ebf942c4cf8584bff5e0bc71ad52123a71f47ec8a1f64037f5feeec51663a2ff8f1ad3fc1d852a0bf53
- TLSH T14251D36A1CE811A6B4B7961ADBF4CE276727BCC6185CCD4C10E62F1E04D1101E457ABF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 2KB
- SHA256 00c47268dd8c24ed4afa7f8e05c9920a0b43a8c7dc63d59a9a34872afa7dfd60
- MD5 baba9349dbfb969a072539d5ec108f7e
- SHA1 e78e236dc3e27a2da5c28e66cd8bcdc63897af4f
- SHA512 40c6d81afd13256df289e13baf9f9530c2abde975a04702773f529758d06b1a9506713d7d95f75677a1c23d2aaee3148a2c9018591ac554239a8505c2a94322d
- TLSH T1BF41F56E1CE811AAF4B7961ADAF4CE2767277CC6185DCD8C10E62F1E04D1101E457ABF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 a1971d35549859056dc6b542f1eed67d6f9c1f49aa738dbcc0f4f0858eb232a5
- MD5 5e9a4959adec41029a34d4d08bb4454f
- SHA1 8de4a539bc2667fdd4eec7d8bf49eb852f70cbb6
- SHA512 6a219b26058f8504d651f92bac9f5003950ee65de317dc601be88361c4bce1dcf588e63a17556e77ceacf2f2e10dc1789f1c9bf939975f087e2fefb2e34425c6
- TLSH T17E21082E58E8116AF4F7961ACBF4CA2763277CC6185DDD8C10E62F0E45D1501F452ABF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 862B
- SHA256 7f7a85627af65fa62728f46b3ebda2eeb86c3412a0ef5ea09973366f4ea3d680
- MD5 47aec40cf21d04d21573bc37471da436
- SHA1 9b35f15d333b1f8ddfdedcbfb3d25f2a945537e4
- SHA512 d72e420af51d9f94e748e6b15d83791d0b008b2e668b0aa415879d610480dd748ea17a680fc96f74bc5424cfc67156b607430173d00fe1a488eda78f86147244
- TLSH T11B11D2671CEC21A6B5B7691ECBE8CE279717B4C6084DCD4D20E2271B54C0501D4139FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 938B
- SHA256 4eca9ff2a7664585ff246b1b5de1e3777b09160381549f2e960ad2463f3b12fc
- MD5 3856f589446a9dafadf22c27ba64e6e6
- SHA1 be6bfbfa9803c3c06abbd74cdf114812a2c7e210
- SHA512 a9c9b71d9107d752010eeed7dbe63f36eb0aeb7612e161f1d1f3594b5231123789a8d955eaf8a32f60a824aa0ebb975cc194a1614b512701d5204b1180e7e6fe
- TLSH T17911E16A1CEC21A6F4A7AA1ADBD8CD37971778C5544DCD8D20E32B1E44D0501E0636FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 872B
- SHA256 9163f737aa512f55681da50459bdf5c207835e57a1929d55167116c582d579b4
- MD5 ddde3eefb87ade280e90723e8324ff6d
- SHA1 26249268515a96b007d29b7b42594a06fa815968
- SHA512 c3be27563f4e0de172231a0339e781b2ae3a642dd8d78dfdffe19e41f378c12320e17c8d9971a4160cd2c11bf212f82100611b896d82742b47c8c04cdbf38147
- TLSH T1CE11D62B18EC11A6B8A7651ADBE8CE37672778C5044DCD4C24E62B1E54D0501D403AFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 45de8400068f901c8c51a658d3c5e85b98045e3208ca4f443e01aad915282883
- MD5 fb46d09815c6891807feec0bd8402ad1
- SHA1 3804e35e645fd9449c4d521cd5278a625ffd3152
- SHA512 11466bb8e8e61431a3d4a5613035c396d95ecc4d13b5d445ab1458217e274bd516e9592cc5bd740eb5d14a58b0d1218ec1d5d2aaff15939f2492ec76c7a225c2
- TLSH T12631C42B1CFD21AAB4A7951ADBE8CE27672BB8C6044DCD4C24E22B1E54D1501E447AFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 920B
- SHA256 d1d28f4da9d4fddc6548cf9bd0421863f80a67fd79fce39544ffe8b48f1c0138
- MD5 508e8782a125489ef770b9283c46f354
- SHA1 46abfb4f14d278454774b1e8e81cfe8e9cb8abc1
- SHA512 85c947eaeabdce8befb864df40abccc5930e950a134819942d3154237d61b3714b3d231bb62b0b806bc71c296b705be884adbfac3d9dd72c1396646ac5a1e116
- TLSH T12C11A12B1CED10AAB5A7A51ADBE8CE27676BB8C5144DCD4C20E22B1F44C1501A5036FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 c7276c7f196868492cbbc8ba0245222c593a86e7b52790bbbe7284e2f9f2e4bf
- MD5 59e96f8cb623cc10132d0fc52f965636
- SHA1 7f1768f5a43535066c04a7dd77eeb789970c6805
- SHA512 e117fded45b3ab893e00962319846964f64681f41effa0e7e19a7b6d123ed12d8000638f82cf86479e6a35fe00c15be3c867aed77f582c832eb5066e196f862e
- TLSH T1E121361E59FC115AB0A3661F9BE58D67673BB881642CCD8C10F21F1F04E1901A4177BF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 2KB
- SHA256 2d80929793523cb71f2b2ab1601ff0ac5ed129a22f581162aea6f686754b39d9
- MD5 e35d046faf5d31a62113060594f57be6
- SHA1 b53c3c73d33c7fb2c7ca5289e0c850726c156cca
- SHA512 34f185fce67975b689e33735604fbefd6955b9d1a3af01441de00d89b06bab39c870f19052dc1161a8b9a1cc392994c2588615b6033f29fcc304b43f9de27d21
- TLSH T19C41135A29FC21AAB4A3661E9BE4CE23A73BB8C1546CCD8C10F21F1E04D1901A4177BF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 898B
- SHA256 57f9a7712595d7aed9293c04996a84bbe9fd6873bc410790819b492422ee1f12
- MD5 37f56beb5fe5bf121ba71a85770772e2
- SHA1 c5c5ee56fcbfbea4e9b44874263d9f5d1cb8cedf
- SHA512 f951841f58d70f49aa53a22309cf4a972715ec71d7b59091c9ee89804d9b761831e224d3c3f0d9552c11d1dcc1953f26aa0c7dffbe60a62427db09fe585857ba
- TLSH T1EA11265B2CED21A7B4A7651ADBE8CE26572BB8C5044DCD4C20F22B1E08D0602D4535FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 ae6037c86d30e005064360da86e38561bf0f1861e8da02824beb7b29daaa1ac7
- MD5 b8c04554cd49f75733cd786bf54567b6
- SHA1 b1d547598bc79465de85e50720f884c83346942c
- SHA512 aca5d39f67148f108d7e22427f36b2972f33384be7e0fef49a3fe3dabf96681e05fa27a432fb827c95793e3b0f59b1e19ed8ef8ff6a1d8a1b516406f8251b456
- TLSH T18E31375B2CED21A7B4B7551ADBE4CE229B2BB8C5044CCD8C20F22B1E18D0602E4535FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 898B
- SHA256 c78f049a61d22cbe0c8eb90458098941657b0347412242dcd1cf7e109d8260a4
- MD5 7221d9179ea8fdfbcce44f33c3d6bc5e
- SHA1 575bf103cfdbcb29b2ab969d8a9638db1f4764b6
- SHA512 170eb29885a0fcb5d014480fd5edec65795a8f1141ab07f3f23b54f3d0044014b9a03ee038a3872c1e2f3b718cb5681fac101db93bb01871ffbb613060d83a8e
- TLSH T16511265B28ED21A7B8A7651ADBE4CE265B2BB8C5044CCD4C20F22B1E58D0602E4535FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 920B
- SHA256 de320e18bd6a945e968fac0e08ca69ece677319b854dd71280015a357d900bf6
- MD5 b8136ff74c8dc335ec322b7b02ebf6d8
- SHA1 fb65c85f3f35cf222d49afe6879a35a763bfb0e7
- SHA512 12fa2cc3eb96c7fe02b14bea1f2af1574fde341fa22bc3ec57c84029821faed28f7261f343c3f5444b0c54cfbcf06435cee3673abd07dc6eb9d4092d7d9280f7
- TLSH T1DD11006B18EC20A6F4B7651ECBE8DE26AB27B8C9144DCD4C20E62B1F14C0501D4836FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 920B
- SHA256 5319363a28675f344ac91ef5bff9e4252ca4ed75964f124e0f4d198156d81a6c
- MD5 820a471397a73a89088fb5c3ccabb248
- SHA1 4e097263fa6246e3140eb0f4e0411fa7e681a2ed
- SHA512 732314a9ed5640f3da7cc9d562bb717f85d7127750c6c95b128847001463bb14b591dd6a2cd6a61904626b0208e95e32a7161aa997746d4e471004599cbe6cf7
- TLSH T16711E12B19E811A6B4B7651ACBE8CE26972B78C5084DCD4C20E22B1E54D0501D413AFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 842B
- SHA256 a74b3bf7d7bb62cf7abf49971c358f7a9e704d1ee0484b630a061f95176ef274
- MD5 c5a1cb23641911c2e517dc55657d7739
- SHA1 a7cde782ea96abc39b79ccf0534254cfd3c73f66
- SHA512 dbdcab9b13df51e6c868212b839e7cf6599383147bdfd3ec098a89bc44914567e209813302aa8169f2e9ba5f79f49c35a26aa8da80f6e7ef6f2681f41a2acf7b
- TLSH T124019E6B1CEC21ABB4A7651ADBE8CE26672BB8C5048DCD4C20E2371A54D01019417AFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 fe9f6fec58fb7c3dde519be53d4161f59afa3c71f1eff907bb83633296d91086
- MD5 298177d3b117d69d2acec6524dc7c058
- SHA1 0362e2e7b6882a19fe05783300e5bd106b63ec38
- SHA512 b5312e7a6f7b3017fef2bd92ce21209fe54d70144e491518834a282bf12a03308fe9b619f8f13854cbce33867293f91dbf160e2d2acbc285d5e9e6e23a5908bb
- TLSH T14531816A1CEC21ABF4A7551EDBE8CE27672BB8C5448DCD4C20F6271A54D0501D447AFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 794B
- SHA256 b430a84efc36eba22866098c235a85ad0c73e5dab0558d7990c9ec229168f91a
- MD5 20cec10c3f5d5d991183d2329aaf8526
- SHA1 728f9ebdd804245036ed8ab8dcd04e64b6e03f17
- SHA512 d91bd02b153ee6084c3e62fc2a312a667185d1c60b5388154227353a3da3a24e09407b1b6289b489b16aaa51e473d37f7294f094a988010bd2efcf681c39c097
- TLSH T1D30184571CEC21BBF4A7651ACBE8CE27A71BB8C9444DCD4C20F6631A58D060194475FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 e9e36dbdbdb25f43c6f1b19848ca1a2ff91908f571007622c75af76cb150a8b0
- MD5 6e3761ecc599a2652977edfcccdb255e
- SHA1 9e51ce85fd6872006b36cf41a066dfa0ceb3f4aa
- SHA512 6316e6bc9f86cfa190f08661624b9226fd4d1497d8d2189ab4b9071c9c2b604e33c8654ede4cfe73f4168e08311e1810ae996da4000de9564e8a2082394f38cf
- TLSH T10C31B45A1CEC21ABF5A7551ACBE8CE27671BB8C5544DCD4C20F6271E18D0601D4475FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 874B
- SHA256 de1a1ec7350e217f5f83ea3ff3e694392aaf809f83155873a6a1b9cc082b3274
- MD5 e5198cbbb4de9e55650c4b30d88dcc49
- SHA1 ef33996688bf72bd6a84afcc7cf03a833d0ba838
- SHA512 ae6c2c346df7b834127c05dacf8ff2ae11b36c9c603137e8e753e44c47bf07cc22c56df73358b3313e7155c4d87aafd3149f2306af51dbad6d4bb81c8af700ba
- TLSH T14B11D61B18EC21ABB5A7651ACBE8CE26571BB8C5144DCD4C20F22B1E14C090194075FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 1KB
- SHA256 5a3ffb4557738fcdda7829ff3a671c8580f99d5593d5664ddced267a8fcb5869
- MD5 2be2309048a9f7b2471ab710747eb0ba
- SHA1 e3bee1014456a16d7a724983be1eb4fbb89ee1fc
- SHA512 908f8742b7b9036a5e01c7734eb81df6dfea7ad527698bade4c205eefda53c9d1014a01031934bedaca44156ead2fa9c914dec07230f441361e13c553a97d06d
- TLSH T14231E46B1CFC21ABB5A7651ACBE8CE26672BB8C6144DCD4C20F22B1E14C1601D447AFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\DataFile.ini
- Size 878B
- SHA256 37060e2c555aec81fbc829473d826e442ead345a715232c94a3bf623fc591eb0
- MD5 579266a4cfaa6984c3fa2c7e32def9ed
- SHA1 04c3926c35086c140a91e7bf9a369b1224a18bf5
- SHA512 b225605906f98c8857ae73e0fda820616c6655b2b2887b66378c76616f07be01dc95c9652223947e5ac012478113fda8921441b4f67e63e2daf761a6ad8edb27
- TLSH T14B11F96B1CFC11ABB4A7651ACBE8CE26572B78C6144DCD4C20E2275F04C0101D413AFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\EUinApp.exe
- Size 42KB
- SHA256 b9636bb4d918a796c3cc7e213905a22aef4ede852ad683481dea5778bd684ea6
- MD5 2dd3ae1bab7e55bf6d58b7efbc98a872
- SHA1 c23df605b3d174be7ac0569c72faf88d2fc93ecc
- SHA512 82bc3769d95e930620323f2eeb713ed44286bc4a39e20d79c34fff022a3f1f0e9a701ef473e9bb3b050a74b64529227ce0d146ec62275fb97ccc0d41efa51ee8
- SSDEEP 768:l/P0yxsZNdO01+9EWtwNz52Yi5G+sh5ALGV:NPFsN+9EWtuz5275yLV
- TLSH T15A13E826CD66A02BD34A8D74D9538C15DD63BCD79BD1A5CBB7400CE20A75BE4AF3E202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\InstallDriver.exe
- Size 65KB
- SHA256 7e27deb5e82829aaf1d1052f5261ceaeb69620e85fa40e422357da794396a61f
- MD5 ad824ac0ee6ece018937d5be99deeac5
- SHA1 c90bcc7c8b405273b5bd0230d7674c41d9d088f9
- SHA512 6422012cf34178e0403daa296bdee40c696560ad33167ed9d105ee4387b74d5067ff3b8598652e38550a3de8049744d9c0416834c3a2b7d0b87b0b2ad3d3af5c
- SSDEEP 1536:sBL82vB0V1bDj6rigpH7g4/KBgvkPELonYFsa/n:RSO1bDxgpH7g4/KBgvkPETsa/n
- TLSH T167636B57AB9800E8E5A6C23DDDB69563D7B2B846177192CF0B4091268F333D0AE76F43
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\avutil-56.dll
- Size 776KB
- SHA256 dd6b0ebe83af8a270dc6afcec0f9153c7ea9b01c95845a23d685b4496d01837a
- MD5 df21869ee880c30b6cb283aeaa490b57
- SHA1 652cecdb203ca525b9168c3e414095889e283fef
- SHA512 e93076c153d64ce51901d6db115a01bc36b88e1dee8a1cac7692ede9f3da21816e64f15c164485789d96723ede19e60a42f2ade42ab2cbd142e401bf8fc67bcc
- SSDEEP 24576:eE4O3k5BKVhYouxhdzS/7YHEahDgArycuYoVzjSuTrc9:eE4ONVhYNQ4uYmuug
- TLSH T19D056A03F6E224FCD13BC13156ABA333B671B41912246E6F1664DA353E74F902E5B72A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\easeus.voicewave.exe
- Size 14.5MB
- SHA256 597b8312af1ea7f0705392eec9c9368203f0f16090fe3c44f8f3432965748189
- MD5 f381d6ce41f7883737f435cb079c3870
- SHA1 aa27a661031d0cb5dc51e449a032160f8b53b70f
- SHA512 c8710e7031037338ebfe605e1bedbf31b3370759a3a0597b3adc2c778a49b7486c9d84ebc70be3e9b34f7fae1d05122c264339879cf17e2996bbc7af8af4b00f
- SSDEEP 98304:eG2qxUmbaWiJ7ytSAZIlZrcoFwLc5a4wKO4B+1lr:eG9xRavQtSlZBiLQa4wKOxlr
- TLSH T1C4E6624AEB7691E1D4BAD079C252BA27FC313C6EC32467D39B519B121F25BD4A93E300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\library\conf\soundboard.dat
- Size 251KB
- SHA256 d9dc6d52c44baef3b8b90423a6282d055fa0ca9edb632f183c1f34fed2dc6f70
- MD5 48abdb52d451a7f5dc07487cd08004e2
- SHA1 3025c9f55c37f6907d9e2c74ce3e2ab331ae3ee6
- SHA512 ff8dc3bd8d18a9e656699976f2e5cd1e6f0ecd5c32e34099b4fde0996882174380c9e8edfab13f906317e5d16f1a66ae2c89c0c24547319d06353b306dae71c8
- SSDEEP 6144:Jm34+I5lP5zv/RBoEMj/cJP74ntNR7AOij:J8kJkcpiJCj
- TLSH T1B444CFC7DA818BD463975C5E77A5239751DECFB807B0D2D6113C0BA0EE8F46840EE62A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\msvcp140.dll
- Size 544KB
- SHA256 90bc62d4947a5878f1dc1057312f3be2137eb376039f4afda2f64c06353f2198
- MD5 90821c2537f28a115b3d6364ef3f2b8e
- SHA1 51e0112f33a4e1771535ee7f925a287004f1dddb
- SHA512 ec7b55aed5c8183973f8e03e520fd79ae6090a66920e6b40d1860b0cb1a0eb305d7b9d5212adff991310350fdeb3d454302daf92c259e969fa5c04e2a1b9b3e8
- SSDEEP 12288:ddkDYbKloU7/7mozO39V5WZyhN0dQEKZm+jWodEEVLa6c:ddnGoU/7m/V5WZNdQEKZm+jWodEER7
- TLSH T119C41A27F74906B0E195E3B8A1838702D7F1BC4A8322E3C752EB955D2F573D0A67B690
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\swresample-3.dll
- Size 634KB
- SHA256 c619c3b201c360c035baa82571a2463467fff63a8f42cb4558fa2343516479a7
- MD5 7131b0cfb4f209106e7df347923bcf7d
- SHA1 f154865862cd36eceaa934f9a4b026ebd97dd059
- SHA512 3a883a5005dac946a02a7bfc7cbad6dfa6e81b4bef00786cc004899072c658135d9b13dfd4d8ad499aa9bf33291b65dfcf84e7a1ebd11677816932a94caaab1c
- SSDEEP 12288:Dtu3VIafKFQmJeC0vs2/rLlQHf1diB3KG3za:Dtu3VpfznC0vs2/rZQHTy3ra
- TLSH T146D48D46E1B365BCD67BC07052ABBA37B631B46901387E3B02E1CA346E65F401F9B725
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\vcruntime140.dll
- Size 121KB
- SHA256 dfec5c8efcdb4a44f8adb18504c9a76ea3eb440d61a250c07685359b8b3c706e
- MD5 c5323d2c77fcb6957ae19c373c92e086
- SHA1 58169ae869df6288b41028e921c72af4810f1fc3
- SHA512 ab140e3eac07880e025f06f950bfbc94979774dbb7050f552ccdf1f72e23cf56a0ec9377553b010c168ef3082da3eceb14e96443fb99aa289dc9f74f7542e236
- SSDEEP 3072:GtkenID0f6aifkHWBXjGTluecbfmc3p1jT:bWSIHWBXjGUecbfjfP
- TLSH T167C37C42B2F442FBD16AD174C2A6AE23FB76B40647609BDF07A59A640F13BE06C3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EaseUS\VoiceWave\bin\vcruntime140_1.dll
- Size 48KB
- SHA256 a535ba88d242ad1924077f1cb6f3287eb053a83d27a1aacb61e6e8ab277e81bd
- MD5 12104966c078618c036a6ac3a03a79bb
- SHA1 bf4212f2ca9e6aaa571994ba5ee193b79b1333bb
- SHA512 05f6c37a41f2312f986a48f621cc2c30c2309e12cba5c60b90745e5143e8f5bacfc49535eec814587d8a800ef6be377f644511db3e639c34066793817397395d
- SSDEEP 768:N3oZYctpzcx0pdEShTM8bjZgU9r88R9z84iMf9z+oR:lc6ohbjZ3r/zxikzNR
- TLSH T160236CE597A85082D46BE87081E7EE17BD38F7A61750568B07A5D14C0E637C0EB3932F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\EaseUS\VoiceWave\settings.json
- Size 55B
- SHA256 62f377db39569636191e47814e0b398a164e13b3cec5e22c9e3c3a09404d93ca
- MD5 fd934bc53e96558a6c01796bc2314e76
- SHA1 8e8c4dd7edf69e1d4edcabee4ea6dc6a1e1574e5
- SHA512 f0b4f5517eb87a5f4740dd98965559d500040ee138e2c3f461ec01aa6c21f20a60a98ed9be84db1fd852988503ceef1811e62fd83717ea25e3a05bb0df55df06
- TLSH T13E90022DC55028E116CE168511EC5901651C409352680B54760E46C88F148309FCCA40
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\EaseUS\VoiceWave\soundboardWebCache\webImages\b7747151c03a1150730996d7eaaa18487c5689d1c1aeacbfa018211209603cfe.png
- Size 20KB
- SHA256 fc963c3a2a62bb7e6f3b751596eb59630acfbfaccdeda84c6448efb328db1ea9
- MD5 cea49b8b0d9c4c25af5190749b69bcf6
- SHA1 079cbe2661407263a12b000243efc545fb2fbe6a
- SHA512 3aa676e42cc6bdfce925af5bed6cd7998164b538e09d881acfc52a7a5fd8171760728e63adbac9b49481d41b096f669f73ad4ffc9bbc759f957bec1420b79c0b
- SSDEEP 384:W/7SPNlsqwBiS6WT67L8xEkdwabv3jyTv3S7lFVM19YhN3:C74EsyTIyEc/uibM19YhN3
- TLSH T1BC92E0CAE23AF0959EC36C0677C25029CC7DD139B2910FB08E684D85667A378179BB5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3FE2BD01AB6BC312BF0DADE7F797388F_D700B3BF42AE699B26DDBDD3E4CB7EDD
- Size 471B
- SHA256 0460bd6f0e2b3c4f5d685778e164b30638ae146621f82596e01c04eca76a2f11
- MD5 66a43e505dd00a56b33fd36480b1e5d1
- SHA1 299b834cd66931535118b5af92facd3f0f824737
- SHA512 7f6d3a02015054cc58090792fb3a4d15e66b06f9c3b7a35d6d0be92771ab74d64da31736d9ea8f1ad4ebe4be10be65f5a813c67d7e6683130074363cb653754c
- TLSH T1F0F09E0501F224641A094A3569D2A520B038958DDDABE4F8FED017555221FF5E86D5A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\773CFF2C7835D48C4E76FE153DBA9F81_485E9FCE63C92D01DB751053885B915B
- Size 471B
- SHA256 22a879a198ade1f5d05387183e1a6b1d4ffb80851db44b58d1a2c3c2deb7c24c
- MD5 8f304286c7efc7abb8768c201574b1ae
- SHA1 c5a6b57895422d0054a13d9d6d88ec47031fc3f8
- SHA512 df0acdc664c873c78de6d408e81161467862e0b1cf23ed1c60823eea19116576d3c13e2f058ae1f22c46f28a32f5370f325a53abdc84786b13432deeb2ac55e5
- TLSH T1D8F0540F50F590327EA3C4C98888A9383050B0E936E54943113B41AB08CFB290902340
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE
- Size 471B
- SHA256 117084ea1c122117a35335db88c0079ffc2139ddc1c602c2e77631ef8b80978e
- MD5 45d69b16767f0899d934e7fe022a0544
- SHA1 aa91cec311267ffb7b5d0e2038f84c7b6d120c38
- SHA512 fe6f0f06f0edb390b301be99cfb6a0af79e076cd9ccf40cc2ce26ff12316412a21d5225f130fb5f4f5d4dc0f54b1ef5250dbfcdc26a12c54c37d102f649d0fda
- TLSH T115F0D4768039DC273AC518EE69A84637B8B0E3BF4DE55047775C06A24571D796958830
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3FE2BD01AB6BC312BF0DADE7F797388F_D700B3BF42AE699B26DDBDD3E4CB7EDD
- Size 402B
- SHA256 1daa2127a2d3f017257a51f9a68ffbe8290c6f96d20d513e4a5622845ad2af27
- MD5 f9cbaaf0834cf9cc7fb27bea62b3e264
- SHA1 f157bcfb8a68c89eb44ff9535dabf4dec90ba787
- SHA512 a30412e9a4aa2ef0a097201d5785053e6bf74940cb2338df71d24e62bc48a17ef0a3de425a8022bf6add1fa3d41487b97953899b4c16f9ebf8b082267aaa754d
- TLSH T127E0202455F9027CF1B1EE740BCA9566045FF1016C68937A27D00619E71B940DC71D34
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\773CFF2C7835D48C4E76FE153DBA9F81_485E9FCE63C92D01DB751053885B915B
- Size 404B
- SHA256 249ede47b5c0280bf395752ec0234bf317803b748a220660657a94ca711f4056
- MD5 f773ddf439ce0b3fba6fc0adf60de248
- SHA1 9e3aa84ec82c00f456e381bf31c66811f8880f21
- SHA512 4172aa382215899a8af02bf44d89abe78823138a791d7844c3718b96172cbb04087d05c2b8c898f521cea5e40830a1f6b026254ed058a3a1be5f1cdd065616ba
- TLSH T1B1E0C63D06F9A14CF2768D7487CEA159AB0FF1271C0096F61B040A6BA12F986EC3297C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE
- Size 412B
- SHA256 19c713cbd69f3f8506a9b6c1f14e1c9e0362f0e955a98cb3026aa8387c84ab96
- MD5 d473de0755dfa93442f4e84a869ffc85
- SHA1 c492f8295acb8b195d2001b48272bcdda0c5c72e
- SHA512 41ba8d3d973f6bf00b01d70f2188c2fc10cf1a52b789e53d7acb560b30889c79cb9d0d7035541ba116e9670d86fed3eff447b064c0aaf39c35d1ce4a5470cdf6
- TLSH T160E0C02C22FE411CF1E8E4356BC5F435895EF0250409A5F019C02704A317B00FC57E25
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0TVW3OXT\index[1].htm
- Size 1B
- SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
- MD5 cfcd208495d565ef66e7dff9f98764da
- SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
- SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_aebwdklm.1yb.ps1
- Size 60B
- SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
- MD5 d17fe0a3f47be24a6453e9ef58c94641
- SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
- SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
- TLSH T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\EDownloader.exe
- Size 3.4MB
- SHA256 09fc252661481ea65e23c90babdb7801be6b77dc5db3095cf726372d0d80ff0a
- MD5 83aaf734d620f4a1b4aab6d5f0cf6819
- SHA1 e6e2d128d260c9a52e0ee3cb32023ddb9d1b9d66
- SHA512 22c34ed55fa0149f72bf2ad4751eef52897bb5dd4f300cc5d0cbadc566c33b7907114cca567ad12edd58c1aef811014bbbe81599ccb9e28a2af8007347e92df1
- SSDEEP 98304:H+gzEdPtI8TzKPrqSUiyk++U3AfqkQHLtrBUnKR:eVbNSokU3Oqko5rBU4
- TLSH T108F5E12176A28037F5B304B59D7F6B6ED46CBE32072494D7A3C40E2D0A71AD27A32767
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\VCRUNTIME140.dll
- Size 78KB
- SHA256 44aca93d4a046252c60f0cbbe5259d9509b912aa07e5379b2cdbe842700c7e9c
- MD5 b8f25e1833429fd8f529c5fdd2a4f3b4
- SHA1 7ae7ca5e695e6cdb590022a0602879bc2f56a65a
- SHA512 077007237e7ddfd280dd08f145a0f3c775c461bbf61574cbefc4f7c29ba6308c16b52da94dc8f78345fec1cdac25f5e604b890669124a7e38e205e54a68729e7
- SSDEEP 1536:JbiyVUrqIQsn1xtg6RxkkBGCGHDWbWzaecbGaBLL+/o8:liyLyt/xcRjWazaecbGCu/o8
- TLSH T1A9737D4335E082B5D9AF05F4D8BAA70A9A7DF8500FF26EE76B944949DF60AC09770307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\AliyunConfig.ini
- Size 1KB
- SHA256 3765af591bf87dd186963a3ad60be8d5d64da19942c556ce6d615a9305295a74
- MD5 bf817158b7bf6be6c624299bc6780937
- SHA1 71fadb592c27241e26064e42cf3ae5f9c22224c3
- SHA512 ce1b251d51ff9f095fc9a4c10f66c302941268a13268cbf48ea36b7d59429f81deeb2210cb87040fcbfe6f66316b58c1e8758f1a2f4b6514a942996dc38c1650
- TLSH T16631472639F910189073BF4AEFE8E5F7DB6A78116849C85940D1034F49E5A80DE13ABF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\AliyunWrap.DLL
- Size 482KB
- SHA256 544b2bf4ccdaeaf6ce8f3e0d4faa98281ad17f65fc2defaec915d16d320dbda6
- MD5 90a1760397db7be8a7a82b82cfb72d2c
- SHA1 774f0a6c25a61b0e3c2c80fc4bc5830d4c77db55
- SHA512 29439377953068d75902c205f2db5f40b0bc9925e6761082dcd0da722ed1301df8d1dbe93f8f0e301322a4e6c680139f0c21e0974387d3c20a00c6ca947b9ec4
- SSDEEP 12288:laK0OuDBlYPIj/q9DQsEfExtrlp87pMaIPuboWMlyF0Pas:39DeuBc/IPu8WMAF0Pas
- TLSH T1FEB4BF53AA80C1B3D18A017516B6B77B2E39A7355364D8C3F3D81D785E207E27A3938E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\AliyunWrapExe.Exe
- Size 107KB
- SHA256 2cc207dd14110192c642536432166a1ec77ee4aae071d206707425b7fc969cd3
- MD5 f9a22315670147c91e2e044403f8e791
- SHA1 a0407ef0c23fc82c831b2e2fef48048e98c17e56
- SHA512 865f71d0ddc09506fea34aaf481f79469c7fbcb523dcf4f6967a4f55ad4d17907e1294c21f5e7dae96844d54a5e16174579b11256c8836ab3c17403f9a259d7f
- SSDEEP 1536:M554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAU+/I0:vswTbD6LLraInhEdlg5BJU+/I0
- TLSH T107B37D217980C032E8A714738DFCDA699A6CF9311B5598C7B3C84A6E0F617E1BF35267
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 1KB
- SHA256 ff264268e51934b9490b6be04769f38d0450b6b62536892289a75bf3831adb28
- MD5 6f4fca901855983d3d7ac29b71c06c84
- SHA1 b71d04ee2bbe36efc2d9f698e4a97cb68e15b76b
- SHA512 67f98dc8c4fb7cdbab232054aa982f7c3f8f16d87cda6005e9ebde92a58fc54d1fd03391b910ad0769bd4f75d4fd4a53c2d1b385b25bbb6ff9e7f11e1f71564b
- TLSH T18C21CD6A6AE91159F5B3A61EEFF4C936533B78C54C4CD98C10E22F1E04E4501E0633BB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 700B
- SHA256 94774b859d4ae4ba988e0a6d4046f5b89011958fa1d60464bb608d75746964af
- MD5 af25314474d76c4c49b6f4db08f30e77
- SHA1 231865833924f3cf05e26dcc7dcb26e477d0a1a0
- SHA512 272a5aef61c3916ff449ab929585e83f1164f323b915ece825bafcb6c678591b88249d298ecf626f3555224ca30633ac190b10f78253248f95c3e47574aa4b28
- TLSH T13101D65A6AE91155F5B3661EDFB4D925573B74C54C09C54C10E12E1F08E0910D5133BF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 1KB
- SHA256 2bc7c6afc23393140011926d7c335196ef5aad084138a925cbd1eea9dc621c10
- MD5 0cb05001ba241a667f800a3db066a2f3
- SHA1 7b5333754e7f8e0d48ae7eff2608f81bc7a7d47b
- SHA512 67d6b728a8e1de2ba6c3831fd5d18eadc80f97c130ca22880b593c30bfc347bf52997e0e902982197627c97e189e34868e1f5801ba7544b2977ab54fef73dd49
- TLSH T1FB31FDAA9AE91158F4F3661ADFF5CA2613377CC54C1DD98C10E52F0D00E0401E5A23BB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 994B
- SHA256 87f2ef3193f6824627c4e9b5fde5d2e76d937f250948a5c81d23fc1aeacc4759
- MD5 35813bf422fab3db26565312bcb0b12b
- SHA1 e7dc9b67a2c776081a5c0c09a474a3ab347f6b02
- SHA512 3537287a8216169050fede011025aea0b0c20c3995a7fd18c8a7c80d45705d239a2b30eee2ba56c1f04c44a5f5b0e8a8c6801bbfefbf16ba6f56c5f7dc394404
- TLSH T1F911E06A5ADC2058F8F3A61AEFE4C926272B78C91C4CD94C20E12F1F40E0501E1632FB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 760B
- SHA256 22e9fe9662aa1e98eacf3f8d616af079a8926fad665fa6f019b3613f95189138
- MD5 e69f1d64db35fc50b92b21c19df1ca19
- SHA1 b9f7751aaf6904c58e2a28fb3b82c8352d9ba9b5
- SHA512 591538cb3e7c44e66e4ac8d3ff5c333b0f57031e4dc23a32798ef668518c769f74917c875d0ce645d87aeeca249ed1f1646aa457eb98d9aad50ffb47a684852f
- TLSH T1E501F2AA5AED1125F4B3652DCBB4DA35133778C5880DDA4C20E62F0D48F0100A5927FB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 366B
- SHA256 0d1c287c2d77de0961e1032d7d825b6cf1a8204ea25f2f1e2b8d431346ee8b75
- MD5 006b7a144b5353071cbc67900003f265
- SHA1 1575c82a52fc4996f87c8b97de6f2639f70ec5c5
- SHA512 7ff821838e9917809953c66a083e77d86e50ba4a12465066e35a017c358f64f776c32a83f614ef28bcf156d616d62e9c83f2d7e6f972ec71f555627f7b17ef72
- TLSH T1B3E086671FDC2059F8A3B155EF88CD352B5B68C8444DC94C70E5221E44E0401E1532FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 88B
- SHA256 ae89726af2bd0c0218fbf63af20d4464f44dced5156364d817b6e73afc8e9f87
- MD5 7f411750d07619f38537e7fd612b8b44
- SHA1 cda241a1ce5141288582c8f0ac4850992b427bdc
- SHA512 35dad46325060004a66e01e10af6a3ebfd94b6751347b6ec64840c4ec03d81480fc324494ea39dded03bf2f1a1ce352b15ab518d14214c15567af17fb32f16b8
- TLSH T1A6B0027757CD540AFD2A346ACBC8A43F5B47A1AC501F995E60C13647C4D4C5127130F7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 734B
- SHA256 9ce25e9e6083e3962ccd3c07af84fc8f87f76aef24ba0bc2350eaed8a733f5a4
- MD5 f9798806119f0e14eecec9112ac81ee7
- SHA1 392704f4fd09ffaee21a16dcb6fac92b4b8a3e06
- SHA512 8e522e5293a9fbbbb5b4a706639874d6e65c592c8fbb4218c6a1cce565f20f171c85c9d133a7090c37bd319375d9fe34550e777fd7e7511bce7ce7f0b76fa346
- TLSH T1AB01D69B5AE91159F973652D9FF5D925433B70C5884DCA8C20E22F0F05E0511C5627FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 382B
- SHA256 df16638ea4a4ac25352a786ccc1b773572b3affdbf6618487e8a3acee1f0b8cb
- MD5 20a1ca2a45da33c6f77d12ba907b8f68
- SHA1 b4d5f191bede8d401f80c17908624bef143dc09e
- SHA512 898c430b81bd617d6a25075350ddabf2bf8397cf7f66099c6be9a5dac049c14624aa65556836b24518ebc37a039147934942aaa4439016aad7fada7a63cb39b0
- TLSH T1EFE04F676ADC2059B8B37155EF88C9371B2B78C8858DD94D20E5221E44E0400E2633FB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\DataFile.ini
- Size 598B
- SHA256 97c7c9014a060750cfd05ff38d98e7d0df73d4568b6d36b07cfc4cd206a375da
- MD5 3f9d8f2ffb43dc35773782efd93af39f
- SHA1 c844f74380e9e270a66b06224f7af3a4066c6d11
- SHA512 53ae03729369e035b624a3bd67840fea8d4f3bfe895fc9cb6a3af12c25605cea5359ac2f4e2ee398b693550f601e4c63e93b55cbe863fd72e9ec201bd03b5ada
- TLSH T104F0906B5AD91059B8B36216DFF8C937132778C5189CE94C20E12B0F40E4001E0932FB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\aliyun\InfoForSetup.exe
- Size 65KB
- SHA256 b7e0bb05d2b6673dae04d3a008b516e3c2803e6d388dcae3405b94e7f7ddcf3f
- MD5 f20f89694c7ff9e0c84d8b55ddabcb5b
- SHA1 1ac86fa7877c09e9132958171260c12ef289fbfb
- SHA512 3d27047339e6c70876778a90bdde84dd758be397dcc1453f26d4dffc4d6eec378b58eb88ef88c0eba24fb8c43099e8d50d8dbeb26dada81f1a3216d27d039ca8
- SSDEEP 768:AVyp8XwXEXrjOgRXvLH4IE3jDnIoiiBbIADgykhUMId50BLbVTkK/Ws5ALH:AECwXShvLYIE3nnInie2khc50H/a
- TLSH T12F638E127890C033CC5A88B55868D7A09F6FAA6217E494C77FDD16BD4FA13C06F3936A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\cacert.pem
- Size 232KB
- SHA256 5a03d0cf132b66659edcf43c087c4cb1b3647f341ace02dd84c693c804a0a5dd
- MD5 3548d8825b94ecf3cb6fc617e32e8989
- SHA1 54edbb080d5505f03dff5bbf71efa31794d0e064
- SHA512 fc5a5d81a9d052701ddcbf62437a7c64813d22a842468fbaa530ff3a5541cbbf2270b885974627c468d6af217806e39ea20802e7a3b79ee76e9700fef56fa024
- SSDEEP 3072:VhGvwW6Jj7ITWYv0yoVH283rz9WqIAsjjg4DsUQS88UP4TFf3xVOVkCC554jMN/V:f5W+j8chWf8xyvp5iIzB9Nxza/MT+K
- TLSH T18434BF9BCF526C5918D3E094C9AB025DD81E4263DDDB78A32D0A3801DF89B3E66FD48D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\installer.log
- Size 2KB
- SHA256 57dab723e78bbe5942e3d00d3546d0a13c5b2b8c73cb9cf991328c4856947e63
- MD5 a40de59b38332307816e47d3a322543b
- SHA1 e5791ec3b6daab91ea7456dbb9d47476f41f3ff0
- SHA512 fce0052d00b5cb8d4c039d0305ae7d1032695246e6e87134a1c9ffc629a1033bcf3ec1adf9ff67ffc00bcb8612efe2439ab099f2be8be0f48275b3686e68b991
- TLSH T11041EF4FCB71E3AAFD125FC4A94C5ED38189112EF5E0C010B9233709FB7A092966D2A3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\libcurl.dll
- Size 359KB
- SHA256 683bb7b131576fe7bc8efbd3c5b00b9ca5fd91b763774f51f4fb71a746cd896a
- MD5 2fc4f35490fa25908c2963a0fa586cb7
- SHA1 ba80bfe3ef6eb07f060100f231491de63001d35e
- SHA512 fb23525ac35f66cad45dc505f40553b1a1556752b18ff2259f11515a33546b5d6f2c44d9a2e7dc3f2d7336e656ade9ec9291434c5e038bbddb696c055d89dc7d
- SSDEEP 6144:lj9yPDdfoOVjXiNATUHtpt71vYSriO77CjZh9mXoSsXzimTt0V9nFEzl+/y:lj92GTLRrii7Cth0AXd0V9FEhCy
- TLSH T13C745BA2FC018032F6D21175E6FA9FB76C6C5125271AD0D3EAD044A49D749E3B23EB47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\evw_setup\1.0.0\46free\zlib1.dll
- Size 84KB
- SHA256 b4ad7ba65fededaa11befbfcbd688a1da96031c88e2324075b42e5057f04c6b8
- MD5 089c6e80c5d506ca980f4fe2f6747dde
- SHA1 f59e5441c43b008ff49a67cdc9960d33be5425f7
- SHA512 dec10d21a229557624b47e9d2e3e011dba592bf9e31d67cd25b6237ba23cf6661ec4475559d06be6a0447260d142856bafbc57cc3cabb96654762dc03feec4f8
- SSDEEP 1536:F2lVj7uRxDXVJ3DD7fGcg/hiOrN/GyrZlIOsIOI/QxVDIJ/D:FQVjSHTXbg/hjdZviI/QxVDIJ/D
- TLSH T19783AE82FAD053A2D9F6007490F7877D9A3670214B97ECDBE38DB66849113D1AB362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-1RT48.tmp\_isetup\_setup64.tmp
- Size 6KB
- SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
- MD5 e4211d6d009757c078a9fac7ff4f03d4
- SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
- SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
- SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
- TLSH T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-G6G67.tmp\evw_free_easeus.tmp
- Size 3.3MB
- SHA256 b3118bed7dbe9a94c14b1f933c9673f6a55aefbb7d6bedc49d7692037ee26613
- MD5 83c44d763c6de0a20a51fd0bc6ddd6de
- SHA1 41c75cba08093751a174fb4d5956ff759fc0bca0
- SHA512 65128b2eeabde63ac8ef782a96453fc4b0e315ef6c7bd025520dd444050ff7d335009c1e9576a46641aadd9a34f886b567403434d113d3a892f875316fdd9a77
- SSDEEP 49152:OLJwSihjOb6GLb4SKEs3DyOMC2DlUt0+yO3A32ASNTvdC1O:KwSi0b67zeCzt0+yO3kSLP
- TLSH T191F55B27F788BD3ED46B0F364A37C650983BB76279128D575BF4090C8E395902E3EA46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\resource.ini
- Size 237B
- SHA256 324e0e753b7f5d69d52a89a085329e9dac9b4a33b1bd34cad8cb81530d00cfa2
- MD5 b452f9529880ca4668ce2f603ab147f6
- SHA1 5fb906044b5e01e482b7ca6739a27ca317b3bdae
- SHA512 0965f455912e62ba2c40134d48dbfc631f383db7b71033743c8f06533ab7b338e8947478002da3fa92390f15eed0d90d251aa6b8ed7d49e33a30563aa392bf46
- TLSH T1A9D0A7BBCB4A00FFCE0083C839002F97F703491A4423CD1098A01A08F02281AE8878E7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\voicewave\EaseUS.VoiceWave.log
- Size 1KB
- SHA256 14a14e198286555f291fb3bf384cefb7fba7083b16b6f4620c19b046e3126fe2
- MD5 449749b1f67ecc1133ffa045e3bffbe5
- SHA1 450531b6e3e447958831f7bfcd553824575b740a
- SHA512 b8447d962d8d0cb9fedb2e9a655e9cdb1e0cb429fb31113294bc84e6cd7ba0981194f75a8229462b3d25869ab785372ecc8721ea57f5e06213ab2fab9c9c9c25
- TLSH T155317A0D5EE81226B0E3C767A8E7A40BADB23CC62D39FC4D05D2074C59A6B027904B6E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\voicewave\EaseUS.VoiceWave.log
- Size 4KB
- SHA256 6cfc630fcbe9e0a3c58e86ed7c6cebf51d2c7efed8f0e72aef30e64b65d01b18
- MD5 3851b60aa4bf18b23de57e36ad013fa9
- SHA1 79dbc58e1cd400b67b26e763216541df0ba82775
- SHA512 67702f3f84c0c579fadbea1820b9921d336e22841cabee9ca2399d341dcc1cc353dbd390feb53e41382c81ec86a1a9b1f1a445e5b01b3cf7bb468c91ccf645b8
- SSDEEP 96:rCQDjQDjazh4W/PDjwjARl9ljFVgryFaMwNbvYqD:eQDjQDjazh4W/PD8kRl9ljFVggEAm
- TLSH T104A1901D4FE80666B1F7C757A8F7900BAD723C866D38FE0E01D2074D58B6B06B950B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\{bf7f8f09-754a-6a4d-b790-532f3856a980}\VirtualMic.cat
- Size 11KB
- SHA256 33167cd2a65d15339614b6b4183f6121faf11441e61417506e796583d76a6656
- MD5 e4b11622a942c08c20b4fa56dcef514a
- SHA1 bc615a8591bb5c0e510e45569d872474867ddc42
- SHA512 69bff76dbc625bb8d052b8f5ac120efb0052570d5e9ac2c4340eb4ad551192aeff43e682ff017425692a48a0606e7cefbba6628c61251cb08ab257e7313b128d
- SSDEEP 192:Rh0EyJC1T+/OXJEwlLdthYCU4YTsX01k9z3Awp2ZWrefB:S+T+/ORdth3lYoR9z1p2ZWrU
- TLSH T1914227A2856C5183FE9BEC6003E8E5977D3D27CB5C10456962AFF21908973C9F62816E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\{bf7f8f09-754a-6a4d-b790-532f3856a980}\VirtualMic.sys
- Size 60KB
- SHA256 6728c34e4ba3e5b005059b9668201b0f8cd518f4a9b39c1b29f0fbea5ef5409b
- MD5 5d0403a4180db669fca6209e755eae76
- SHA1 1f15115560c36c6b370e405f9d4fafc33202e3aa
- SHA512 e542cd8ad09f31d527c20aba2056c3f73a294241a9ce8c2d29c1ed788291c52147294249501172c1e68b8ae953125099255499645341e52566726b3f51af5412
- SSDEEP 768:eEDReiuhqKU7/2MsDIq/yEWTdVn1sUlJfkYrS0+hJTkKR55AL8kq3GF9zUh:OFqKZMqnWTfnl+0G/bmz4
- TLSH T10E538DA696B428C6E95AD174C1D1C50BFFB4F5822B8283CF11A4C35E0F537D5AE38729
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\{bf7f8f09-754a-6a4d-b790-532f3856a980}\virtualmic.inf
- Size 6KB
- SHA256 c89d21359aa043f2e8ecd387b28be3edf1353d97af730ae4d837dc16a8460300
- MD5 ccad104c427efc2e8431687c264b4043
- SHA1 4df0bb5336ac61fd7927719da1db7e89727fbaa2
- SHA512 a93f3ad63b48997c172adf59bdb050f0924b67c5421eeaaabd8df097b835508873bcb9733748df5f6a2b5b01aca97d4de5ffe6db3e826415c29949ef9550b3d1
- SSDEEP 192:INuAZWm+jO+2WiJciJDgzvgzyq8CgGUd9BM:wuAT+0F8z4z58jBM
- TLSH T136D1FFDF8A6BAD004161D45FDF131F85ED2754C4C9CA0B08F67E968272D8A9CB36E362
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\02ad2a9842a57ded_0b91b97f12e74522820e51b366d5ec93.jpg
- Size 102KB
- SHA256 0ece014a6c400f53b28e9baeb1095b0b57ee8591a17d61e97797d19816404d07
- MD5 096ccdca8b2be9372c923775d29bbfde
- SHA1 ef1dc7911e7b5f6f2b0f338f7752287a198d38be
- SHA512 a3dd189c5088a5299a6969bba3b5f060c23d4f29a7104e9ce05507c2c1bccf4895887f73c7313e3d945b131b7d345c96efaad9a43aca7e61a9e9ca6b54870d4f
- SSDEEP 3072:3tnT4VKDBB4aDsr8T2+Pv8gtUINT4N3syJPH:3xT4QDBaaor8hH8gOmTOr
- TLSH T1D3A302AD4B6EDD4A9994DE7D64DD2F38CB41925CBA1F1428B2C05700821D8B827DCDBF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\0ea7b6480d3431b2_25220.f9331367.png
- Size 49KB
- SHA256 2cc2b8e31efb04fc5228ac23fab4fe0c7db9d4d2e0ed9d4ed3a18be031199358
- MD5 f9331367e44b5321b21eee7f554eea80
- SHA1 2fe084bdd6c940fc9a5b2bde2cc6a0ffd794eb59
- SHA512 7701743f6c111ea8903c1d53af50aab2983377cc1802f3ac32534ff0b385983267407f9f9df65f6318ce8be048df34e0a434d9e8b11c84223dca89220b6ad9af
- SSDEEP 1536:rtUM7MUopTL7uEU+eC4nsWk7XWJQ21SCN:hUgopTnu274nHkL01BN
- TLSH T1DE33023EBD475331DB7737BE65668069B6B584E15FCB06110B0BD3250B06B2E63849CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\0eae13020bcb5597_02361.png.ThZKOJ
- Size 51KB
- SHA256 4082ad6cbea13bc84fac7070441ee495480f528540d47d44c326f428e9b8c617
- MD5 d0efaef94ecc06809e93de1b65da8f5e
- SHA1 33b21c988f6abf0e1a211e41badbaaf6610205fc
- SHA512 597a8401ed7f02472eb77a3758cceabe2fb46638b6bebeac5645e29a728f3dc7c299f42415aff4aca1d1aa5a446644cd7bc9fa76e9ebe0f492cffee111fbe382
- SSDEEP 768:x/tCTxmxPJ2OvX94KQ7YxJTJ8ItaehM403gkvaCRD5bet3kpWh0bcjC68Kpo:x/2xOkOvt4JYZmIgehM40weaChiZGCo
- TLSH T17B3302B5ED1EA6568CAC649FBCD478EDEA229314572E0DBBB3901009BD7BA335430D90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\150a00209171f995_18056.92367265.png
- Size 1.9MB
- SHA256 ad1368f9966a721356553a9fbac21cc2aead806da6947ed8e242f3056a2b906b
- MD5 92367265120d8cdbc61a9bac87904646
- SHA1 21cabdaca6a4baa2be732575f0e39a3544ae90e2
- SHA512 18b13729f598dbcd5d4078f7d5f96004e86bce7cccde862e1a6218ab98fc5623df90a0ecfed2f706766089aafb50657f7abfdb40df5b0c47d08307f8786f5268
- SSDEEP 49152:mcezBAKitueNh1+LxnSxVYMvk7xqkp8OMLh1Rvlkt:mtBAHtueNh1uOVkITVLv9yt
- TLSH T1099533D7DA3366DCD80232BFC15EA721C95EF7423713458F4B92C804BC99A164EEE15A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1a33fb9a8f4bf53b_12122.png
- Size 47KB
- SHA256 55cbfd867817fd66a499b7d4d2f607434e04779734f9d699e21edec995bd6a5c
- MD5 24802a43a17658a65ad9ed6ba33639be
- SHA1 ab39aca8feed6f7e37388f62de5617c60db948c6
- SHA512 2c74088fa36a080c4d5d02581d5ed88a667b8156ebeec66a05dd7d09fac597fe1c6290e86fe896a9c121e8ffd333caa60cfea6c4c39cca7e2c47d559735631ca
- SSDEEP 768:p9C8SNgr2Moke221koyKHxmduRHnvIiCCPp7uOWV+OqUHnTr6vjY:pwFI21ke221ZZxBvIiXxaOWVlHn/8jY
- TLSH T11E23F2C8C6125477B88854C04EB2F607FA4AEC4BF79C8ED84B041A01787E6599ED1DB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1ab672fa79a2083a_01356.png
- Size 32KB
- SHA256 6f1c46bf9803881228afd36c289c042b509b8fe88f24ad13ace81649c4f0077a
- MD5 99c9a1e8e2bd6783ce5c08207391d0c5
- SHA1 47fc12af2243bff5b03896b68e0e65ec43b0c734
- SHA512 5663fc63e2ff4b0d4e113b992144cb8db65bde3031fd7a0a4e8be09388b4b0634c707194452aeebf02172d6e93d5d26ae805c14ce5532125dce2453bf50d5ea5
- SSDEEP 768:w2tf7vc3jIxsa7trzHeR8kMJVB/V/QgNgVTDr8llN36xk3ig0X:fzvcUb/kCB/VQEMDr4lN36Wyp
- TLSH T1FEE2E02F82BEE45D40E1954C78F05C9579406EDB8C4292C773F96A981353E1789B3B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1c2511757dcf41f3_girl-voice.svg
- Size 3KB
- SHA256 7b4dbcabd061452f7cee460bd83f272e6755693eb5080c94faeb751d5948fae3
- MD5 63f5ae08e563050f284a9d9e60cb2f69
- SHA1 9cc73313dab948c756d423d0bc982ef1244502e4
- SHA512 ae042a4712131837fa12054c8a1cfbd542b3f04df09a6e1f8900e93b9f19995ecdf6d966a3ff6f0f979cbc13892543f33e4048d9306fdb8aedbfbeb61da0253e
- TLSH T1767182E4536812FEE309B7FCD2265076619B7CECAB119509C3B07E1B301A1290E99CDF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1cefa6d789f1a8b2_18087.9926eec0.png
- Size 48KB
- SHA256 b290d4f304520f332d38364c18a5272998e31829e51b7311628695f13f5f8b41
- MD5 9926eec05d81ee0e04a99449c3e09987
- SHA1 65953ef4ffa32e852944e39613b451740449441e
- SHA512 03284a4b0577623ae0dfa37a51a6516d8e81e5232a2080c4dbc9eefcd56268582bbbef9c1dfbcd78810109e1eb353f77757563d2cbdffe9ca229ceea5742b9f4
- SSDEEP 768:BsG+px76MGh2hP7+ddAMkv2c3aUwNSbcOHUkppL++dapGpI7MiOee/l5bDarKU0:BsTzDGhldav2c7wNc1LQwI4iOhlNa+7
- TLSH T13823F1EEE77AD81BB71630091B85C904D2ACD52B601610626CCEF84AED4CD4BB967A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1d30a2fdeac8bb50_03842.png
- Size 44KB
- SHA256 070aba4b975fc50682695dd4e433e951a0e1d136293e3bd6e77d554873b7fca5
- MD5 41d65d303d47826c8f40d8c85188763e
- SHA1 86a8e15c6b73a50f3ba3e85eec4e7680c98273f2
- SHA512 b0f00a51d18baa80eb294c33dae0ad1dfbb6535292cdad3b950ed3c154d3a2b7f6c0635a49eb0febeced852e4ef8ea505f0cba9071d8498d3e15a80f4e29c8ac
- SSDEEP 768:4xrusIDmkyNZxb4bb16gaJ7Ta9YOWRfofbLLcLkJYa6jPSZc2mLya:4xru3DmkyN7s6gcTa9YOWRA/J14PC8
- TLSH T11C1302036BC92910F8A9BCAB1E6205EDF9CB0301F13EA63715D759909CB0949716BEE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1d4bb0637c1c8cdc_10170b02587f482391e19a1485feef9e.png
- Size 88KB
- SHA256 ac21eb97a5f31191a34ec4b939d21de19af62873f11e757865c14ec22581d8c2
- MD5 619835d8366f12255d74f864214f51cd
- SHA1 0b33bf6f134edba585bdfb0b42062e891f501901
- SHA512 420cff98beaa6bd84320f57c1708acfea3cae255431cc90cfa44e93b6269bc2ac1fddbff980177a3afe26375433a8c6b78ec30be5584f9d89a8479923c7a168d
- SSDEEP 1536:ILLsMox1rQZ1iVTaM80gLCsR2bUTJRSK2xcLjA83HdGV+wfYC5F/ER8RBe:IfsMUGZMGR3dRHaKEc//3M+aYC5CAI
- TLSH T1AB9312643954134FEFDEF85C8B3AE7EC9915472066EC4AA124BCFC83B52B5D480BC6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1f5c5aec700ad468_adb127c8cd3b496c90112969ec6d1aa3.jpg
- Size 68KB
- SHA256 7386de6f3da0158d3ef4de9d5c052ca4e07eab89aa2fb113df0135f1db1febc7
- MD5 63e7880672f53edf82f2cfd44162ca95
- SHA1 47a41103bd3b885fba3a649324fa5c9c9d7e46a7
- SHA512 6f037c914ff5c01cf65ee9875a357e6509db16acf99af63b27ef4396b93c8eb067b9eb372b048cd51cbaabd8712ea19e99277f64b0cd3bd4edacadb718eb4201
- SSDEEP 1536:XfzbiEe5rgZ5Zptf6oCcL/B3GojWdTdmhrqzxa73gl5:X7bk5rk5Zpl68/lnW+h1gf
- TLSH T1D563020328CEBA103827E6765302A7977B1CEE23671C68BE1952570E917F2EF9721375
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\1fb0ad1057a292a3_07829.png
- Size 33KB
- SHA256 5240bbc34c472777e858b9edd14c5fb29fef1900cb34116ec12f0bdbafa3fbd6
- MD5 22461824b10c1e37b7010611433e8c7d
- SHA1 16d70b4b8ecb8d3d6c752ff1ba4cbf397bd5b235
- SHA512 e58c61f713d19ea6ea2f8764150050c1a9958d1aa6c2f2de75ff872a464b3d21ba1070df4498b4f5bb39b91ed13ded43845aae7671546a0be095f37fa8799599
- SSDEEP 768:aBKHUrnbghuRHSfMntqPIAWNUeo8tIFRO8sF5CP7WyHLIV:aBy+bgYEfkHNUn8tAO8svqZHkV
- TLSH T1E0E2F125C39BDD24AF2D51A0831903D1E168EC949E4BA1A029AFF05E6D793F1F21D3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\20b45b0f7b9fcb97_01258.png
- Size 39KB
- SHA256 7c704f74d80c5d81fd54774382ab7ea39d7005e11cead1934fda116fe647f324
- MD5 251482e8b0e46fe5d54f6d7db01a3502
- SHA1 5b6f7eed1fb4e58112d529bea51b7be5a1556821
- SHA512 61b40389c08f1355d9d4e5a653b34a9fcd00b4836cc5abb8a9aed5960102d07a95c479a29220a517f9a049ade47e7efb60ba9247969e2a5e8c45abb560d87b8d
- SSDEEP 768:qRpPA1CW4RfBknv3jsJxaY70FfG3zIhUm9LKIgMjLqJ/R1UC/C7I64EuxyV:qTPI4R5E34JxaY7kG3Mm+LtgMKJ51t/e
- TLSH T11A03F1A4978C58452BA0E0E9C7788852C5AA138F1BB27E73BAC7D165E0F2D92CF4F154
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\22a40f4ae585439b_cc899675ae594cdc925361c2ce368680.jpg
- Size 288KB
- SHA256 340cb9508760d1597b56bb305c0fd3b796574dd9bc6ff188a03eb0647a9e3ff3
- MD5 cfb9554a1551afc981229666111af814
- SHA1 e46eebaa6b1771123a770050be29a67bea241b8b
- SHA512 b37a862bc290455b0583820520083950bfcac29e7886f152ce7ee561ff20ebc8ec1fd11e47c23ef6f8a2d6fd9d6329c7762c499759e68b592572f01d30614617
- SSDEEP 6144:qNhwf4PHN68n9FVxibkV6dkBDtmBBezO9C+0S:qNhwfr4FribkyMMBBmL+0S
- TLSH T1C3542387BB2A5B1DC1C76DB95EE6794972EE3B241581CA7D2C734220A3717F211EC488
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\2605f931c00ec4ce_1e98f76f2ecc4ad286a335bcfd69c982.jpg
- Size 13KB
- SHA256 38865f223eeadc05a54fd8a6063b363bb34bee085cd0ddd44d51e8f795a860ff
- MD5 d5a6a9b9bd5910cb33e5dda13db46185
- SHA1 0267c0af8173fa3c3ef332d76b6fd559693c1d25
- SHA512 057f98fefe94b5dc3ab21b3c9003462db354f7fb9a7018fd9448e15c04de629929bf6628070b5a0ecf7292052dc9244fb970d8d39ced0f271c659086e040e013
- SSDEEP 192:DlWNINK+ieCqQu2VfUYooF8IdG5b1VAluoffBcHt72x4WVqepiWRjjE9+CpjKnHc:/A+iWVh1o8r5b1A6HtkVVrjI9+C5KXM
- TLSH T1DF52BF643340894DE559F2360D873C24FD4B7E92A5A15A4FE686A02C84BF6F33B891CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\273f771e5ca29a0f_09548.png
- Size 283KB
- SHA256 ad065e32ec412ba8c619bef57b3b00e47e32380119c8e80834a1f23f5cf3e7db
- MD5 30041ac53f0e55cd4cbb9680c82b0030
- SHA1 656b07f1d4aad458f0626a4001cc87e872db984a
- SHA512 614136ad39b5c6e1e2c7061a400a937bf2708961dcecfb4fae6d8a2f0fd3f21661f854906b50d4fbff2f10540a438f523ca234a073ec0b34690b8dae8fb65b96
- SSDEEP 6144:D4GD3FileikEANcDNXuopKcp+SVrbB4VSLVCiDqa6Tcgw:D4c3Ule3EANcDFDp+SVr6UkYZZ
- TLSH T11354234D179C4CE87DD12ABBA3646E8DBB9B48A6B7744440340C87520EDD6FB8F14CAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\29694653125d4184_26000.f97dfa97.png
- Size 27KB
- SHA256 88dd11b659b5960e1f247c7e82e26c2f6ab379adee8c0bfdb314735704b172ba
- MD5 f97dfa979081840308b93bccf694b612
- SHA1 2fca9883a82e25598c5ace5537a32561c73f4344
- SHA512 e4833f19603d1faf0edb86c00eb0914b40509a1b6ab7f69133fcfe37053a67e3d291420ce8dc62004d0815de2bb47881d74469f74c261c98b794fd5454584ac5
- SSDEEP 384:F0lydf2Bq8xVs6lrY5wkkmY7Y+VI3eIMs9xyYxflTjysWA8XPnjKnapJxG14MSOO:2Ip2waByFYM+Qu6jysj8XPmaA4XOO
- TLSH T182C2E1C2CDC446546892C97EBD9A0ED5DFA9AC9CE282867393E7CE040D4911CF1AB762
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\2ac9d6d9f7350fb0_original.png
- Size 26KB
- SHA256 fc6fec4fe2741d14e518336ec2020f8827487d4c47fc67ad2fe0d9b9a50a413f
- MD5 863e35ea7ff80afedcaa873ddf462e1d
- SHA1 9ff63ff9855bd6f1d1aab54e5fe858fe027bb768
- SHA512 035ea0cf7faba2033d86259ae81de1e42792cd5b856570b380e69265f1b536b8434ca5377092b1d9dd68fe14073259f7c5fb73f9072070e5a91f5af895656b36
- SSDEEP 768:kT5NwQss6LoZg969eapX29iofQIXCfccQ:kTj7lOo29KeaBLqTaQ
- TLSH T147C2E2DC44FD09DCA5B6874C10FCD66EA70FC58B6B5A03B6125FC446192286EFE088E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\2acf7dc076be175f_08947.jpg
- Size 34KB
- SHA256 2d14a77a655259d1cabe9dc95bb42dd0439154acb5148b2187f365605b20a2b5
- MD5 e6ec4bdc27774576c6e804d01ccb2fed
- SHA1 23d752b97a3bb1a74b75bda54fae1c107134bc67
- SHA512 c4033452c8a96571927c6b843f9a54ed901e573a0dbb04ad1c2f1b22aec2949ec31d5d97bb848d3b47977d264a4a7093407944e489e00da3e9db3222c9b05b5a
- SSDEEP 768:YYf0kn3lw6ld62PYhopbE2KhAeUC/y+d3o9rbBk1GfaqGPfNvcF:YUHkBibE26pa+d4JO1Gfaq+fNvcF
- TLSH T1B9F2E0B2641D9FDB34DCA562FE94ACDCFA4BBB30BED7ED0941215C50B8C410B5CA0A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\2ea762d65a504d6b_19986.1a4953d4.png
- Size 42KB
- SHA256 e72be54518c6e348e5ef2063412d80051070ac5883bef5336f5e5db2ab2e5fd3
- MD5 1a4953d45e4bfc4d4feab921701575f8
- SHA1 aad59ad23fd0a54fcb5b7d0c10c105cb3b8ea35d
- SHA512 8815121bf8286402b8ab85c70a54a77c439850e9a4dedd2c6872b91e2756dae9a351eb183dea64a6c5b384ed0407c43180a3d812871842292f190744b5d665e5
- SSDEEP 768:UTiSVlGLb3mOcHV+AGWfuEZ43lhTFVe0p3WCqPmRpTG:0w+OcY4e1hTne0pVqODi
- TLSH T1571302C9A7853D62F8AA254483828817A5777EB4B5E74648F7B80E77C24A4C33CF9F05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\316be1de24df6206_677fc01283cc4a83acd7906dd32ddf9b.jpg
- Size 209KB
- SHA256 396a8a622dfae70fa67129a58e86c52894d3edf8a48be3532e63a23cdafd68e2
- MD5 fea19f4e4c7bec9768064439d5663972
- SHA1 2af6676616bfe26a53f1179bed0337b0ebd91abc
- SHA512 4345a7e597c7520c375273c082259dd5898bdb89637ba32578c3e3e960d135c87d0825df16b54652060bca1f3a4657bf70e38828c609c63b3aa3418a361012f6
- SSDEEP 6144:J698Tcfka9FHTasbTQaUpvIU6sGfFZWtwzvX:E8Tcl1TDNTpbWovX
- TLSH T10B2413EFFB49EEA3CA973234150D8139BF7760A5D6430E36AA83E17021E4B676D6D101
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\37a7ee902cb993d2_dcbc9d1876a74a1abe9516aecde02d19.jpg
- Size 9KB
- SHA256 c490f8bdb37bb9d5b6a5851f1ae6713eba7848b10bbe9f5a29bb5bae499f50c6
- MD5 d9b78cd550d2010e4b19458722eb22bd
- SHA1 5d33f62a0987a6e3e5e0e6af938e3b68a734aabd
- SHA512 8b0da2ce667d44aa45a710023b39dd1da11eb99bd97e2c19e256a7a004e6b4cef6ac40b5ece421c76dca0f1dd3f795834a9c8483f8d136ef6dabb7cf10ae5b8e
- SSDEEP 192:KGqewAUpbCGJUVlogngQRw21ZguMrp6286kYCnOWoPHg9rNWaAJnA:ipeGiVDnfRwwezhtREOpPHwgd2
- TLSH T1B812A0D77DFCA15A8C51CD352D258E31EDFE06AF89150BD6342C0C25523B0CBB4D9A85
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\397984ae4b289b53_59d1dae55c614e43bce6a2e4457d7eb8.jpg
- Size 82KB
- SHA256 27d85dc6b19342043098fdcdcf0222bc53b705200d34176b6bf1d1ac2463fbc8
- MD5 db1f47a2e42386444878c080de4fc081
- SHA1 94503b70754f925737ccf4c7385125c649e8258b
- SHA512 8f9614202c01a634aeebcc5f91b84dcd397b91b510946e4fbb208582fcb43875d23086e59579cd44e971596a93150d1759950fb1c442688c1088384fe25d3a6d
- SSDEEP 1536:WgLNUVhTmFvQtczHyTYIPirs3inow+X6Jw4vR2eSS0GQnQ5:W9VwRmcbyUVrwBYvsTS6nK
- TLSH T1D48302451F1A4143D5A25AF5FAED23FF31349A914EDB6D1EB72E3C8008B13BA34815AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\3c3406e59830be3b_d526195014d84002a90f95e3db30370b.jpg
- Size 102KB
- SHA256 14577010a6dca4f9e72321e6a542e3e1da9b748c32201d3b9d1f3107fe245010
- MD5 f86049141e9d9fc20429b91150c28eb8
- SHA1 486273ff6a3c005c94b8258f8401c555d3cb47f7
- SHA512 a55a6a3b0657a40da944b63908e42d1a54c88891632bc385154a25df80b5a15f520c25e2da0856a47a67d483ec2e89ac090ecac419d93d0a5411802cc4899774
- SSDEEP 1536:tWgJGFvDDZgs5DZi9n/rnXfgIEWuo8mnJSA7f290g7mZP5/CksbnrQSr9cLZnnvG:tveByTnYIdNKSZB/MbrDrwxvIajWqS
- TLSH T1E4A31243375EABAA2C97C668C51956737F52E330E24FC51F1721606610128F2FB3B9EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\3c370edd33fb2e9a_25237.63df1655.png
- Size 35KB
- SHA256 d9b8445edc6da3743a49432bcf9f6c4fa4ebca04d6721adcf2056b62f7863d4e
- MD5 63df1655688e95969fd0ffb483133341
- SHA1 adcb278cfcbc1195df2fcda7911249d32d42fbc9
- SHA512 c032c5a79fa7647ac8515ee6fdaaf2716d6a42e4a0c15efcb1fba389d766abb55a6425fbd4e47ad71824a499dc5101b9d42134dabfd93446157afeb6e73bb3c0
- SSDEEP 768:46UBcy5TJUFHKB73scZqsJemf3+JpfMS5DpEmlkuT:8BcVFqB73femGJpfMM6WtT
- TLSH T1BDF2F1AFE75D7B4520FA48C0BE33D268187DAE6A35EA6A30237E440114FE58C0B71BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\3f43c4c8e6e33140_01141.png
- Size 20KB
- SHA256 9d9b61aadd6f2e0f43b283ee7cc0ffa029f9f8e6c08a395bc595fe2c2faf8257
- MD5 5a867e3a6f5c369bb29edcb35acb4f17
- SHA1 9495ba3490ac7c711d2417f897e477d38d2a08a7
- SHA512 73911186e3683ee4d97613d285f08af0b24df5588fc09fe883ae14f8f8a26572f02588879c381f11b2249335d104e6d8077b3308723ff57502223d34886b6069
- SSDEEP 384:dOOuPdOKK46CJRdw+kzyniQH6NSeIesG5tCMQR8nVyb3xjWqE32L:wOu1p68yzyiQHmROG5OR8neBqti
- TLSH T14092F1C727C8D9ED365E2B91B7AC25468D3317CFA6F910B2FE6C53328A046812F40D89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\3f7ee0864edde219_13198.d9cc36bb.png
- Size 48KB
- SHA256 171bc6e4b3ffa567ff734c5bcd25ac06172acf54a9820846505137f7549aac80
- MD5 d9cc36bb8e9507234ef63737dd5877da
- SHA1 8deff0ddba32bbcff57030e5180bd4b122b98256
- SHA512 75e3698846bdc639083160d9162835f75835b24a0d6f7500d2e5904627b37715f1d4f108b6e8372d64afba2b81d34a93c4504de507b9afa1c05b938aa0fa8247
- SSDEEP 768:wunYQXWGzg8Ox/WpoZzbSwvQoNv7/hANZGEug8E2BJAvODNKu+njnZVaUoCluyjX:zGugBPzbSwvQ2v7a7GTDNMbZVaFmuyb
- TLSH T1CB23F2E7879FB4A4D9F4C3E2435A54B05702D530C9563198C4E779AA2068C3BAA8E93B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\40978a2c30196980_f3d365d38097463590330e304e800da2.jpg
- Size 56KB
- SHA256 5a53bcde986d9b3a82e4d6a63a53979b9a7ae4c4bc257570913eb6ad7b0a04f6
- MD5 808cae4913bddb255dcc8ee8de8e9020
- SHA1 b2a6e0b2665e6498289d954c61a2985cbf80191e
- SHA512 b7bfd803843720733a438448c540eee40343083d48c35d43c8d8097fe9288f3e92bbb8c40015e8074dc64396cc7af9e90244368bd5928be95ab279746435dd65
- SSDEEP 1536:WwvVWRNXgKIXvKhg5h75Dafca0K6vuL7D2z:Wwv8NXgzSO5hlq0iD2z
- TLSH T1D7430152261BFF83E601D3F4F2041AB26BDDB419A2394B1DA370A710CB5D6BEEA51CC5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\430e5674e00635b9_01285.png
- Size 29KB
- SHA256 d0b98aa6e33e3cb60f99847afee47eb48559639bcbaf7b23f526a6119dbb2ef3
- MD5 82b0e9c1cbe77ae5bc24c16bd974f688
- SHA1 1147e69b9ccba7703f77f5d640c5ce53baa4d045
- SHA512 0ac76d74dacba9844ca2152786473abb0a7d096842c76358cdce0f3eb63d452fff1c131e839199bcdf55c6b213f8ff34e93f205d871c900bc5c43fd5e639b912
- SSDEEP 768:5M89mwQOFHzQ3p9BApYL+s7UpzOVCiJVFW:5ZFTQ3popYis7SB
- TLSH T1FDD2E1BE84B0093AB57DE201E36697978B357B260EB3C61D90D13D7C4ACB1C59706299
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\47f00b31cb23f2aa_10754.png
- Size 39KB
- SHA256 8016c7647675447f35c3cc01c9ae9a7528d5faa3dcb46d1c010c8d77fe7f4eaf
- MD5 13a31ccb3cc74fddbb439a64e21622f9
- SHA1 979600fab9ecf788e05b43b2d813c732dd1508aa
- SHA512 98b94e49e0afb70cc7419ad1a5bedcad2586de4d40b7d497674d3083e032d6a989b4bdf572202f37e24e7a77be0bc4f580ac04c7cfe4547d78d64821dffb49e7
- SSDEEP 768:7KqkT4OnrKtMCa9vNLV1HyEX3fkJ/dBs6U5V5Y/OxUpdhVbg:7KqkTrmeVvbtySPwrU5VC/QUpdhV8
- TLSH T1F603F23840E4ED94810A2EE6C5F1E33616F5868356FF229D1B83B8718E5B78F95443D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\53deb0691c2e8840_08050.png
- Size 127KB
- SHA256 eb202dbe864f2d7fab95a66711e9c8ff14a0c0783905a554c9aa428a8bb79527
- MD5 1e2f86c8b77d15522ec08570ee37b82d
- SHA1 8a9f7c27b9e7a11e85d3ce28fae4252690064e02
- SHA512 31d63a93b8bbaceb77927d90864f3b96656a33d3585883e55017446b18067f866cbc4a6e29436e46521d3800da89e7906660eb16423b82dcd33c9c61636ab059
- SSDEEP 3072:YZOE2VkpSao/MXZILLnB5a5eUqz38v/J+EfBloGc:YEmSD0XZIL15a5eUqz38v/J+YO
- TLSH T19FD3127B5AE887B5C655E5052C153480062EBCD6DB61CF340CCC2A7AA1839343E7ABBF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\5cacc6c9e190e416_13191.5d36a7ea.png
- Size 43KB
- SHA256 7b975d45af5c1836f85534eff6b2e044cc5a642b42d431cdcc650a43832e8a97
- MD5 5d36a7ea23bf9f08d4eeeb4fd32d2a7a
- SHA1 2be7c32e1473e34796684e0d1bae9b5de2c93bda
- SHA512 fc566cbe395754d79426301ee819af47f1d2ca449d6e89420b2b2b0a938ece64f5d0ac48e1fdd332e59a1cf0cffb7e43588ac04af2460e7ee00e99d86d8b43ec
- SSDEEP 768:NuVUvnnkj0t4SGPBkHgqrqqv4fsy4X2r86bjpDwsWziZZG:NmWnkj0t4SGgLqyy4mrzXpDzWzb
- TLSH T17B13F2AF4886BAA2613B37531B2D94F5C94B0755EB437FC6E8612E1720BAFC181A1342
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\5fdf56367a761cda_14d50e74e68b461f9a6e119dc5a6b355.jpg
- Size 164KB
- SHA256 cb077e857319ff5979000410dd8ad253ad0814128ac66045216d9c2052c70ef3
- MD5 07efd6d302163bc25eea206637c3ba98
- SHA1 30bbdcaf7856c23b7a4b3154ed00056c42d17a08
- SHA512 b2c2b39e0aae4d94792284201da69d6cdf5b6888051ed7c8799c89e08fb9dc8d4ed24a8a2bd53bf40074e8ee3808a9a8679c38109d6d1310371f7e52ed131512
- SSDEEP 3072:nCgY25ygC8MSiDG3qGQza95dMl3ZBzt+z7VmF/RucE3iulmbXQT1f+YezL2h:CniygSDG3RQzHlpr+zs1scpuYbXQT1fh
- TLSH T1C7F3124B6C9849BDC8CA3227DD320513EB45603BB912974FA6E8C59D58DCA8C91F2F18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\67a990051ba67352_06494.jpg
- Size 434KB
- SHA256 c8b24aeb4d04c62142e843063d472688efee4af34961a1bc35a9b7648202d5ae
- MD5 a4f9211a552b5ea80462f05ac18c85c1
- SHA1 116fa850f6a8ddcfcaddb856d8ad224077f127d7
- SHA512 cd6d22a297552ed636a839e0a055922aa05a1336dbc353ea51e560f89de5d0abdaae073773988c69c0da229ecff76f8687be9c576cb8703255afa300a0ea9f57
- SSDEEP 6144:6bb4FAS1wEoWmenH9kB5IEw3uabsG+WpY35Z4uQjIStjgKtaV+qfXzDnr17VSpl:m0Fh9k/J9L55NQc6gKtGpfFVK
- TLSH T105942353600AE1793B08C5BEFB435D905DEA2E1264B47864673618C836EF763B4FB29C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\6c4902c8bbb746ca_316658a06e8741d88c4c2472ec66b200.jpg
- Size 38KB
- SHA256 fc47d9ae792d1fd4f3d5043e7b41afa811dc38b69691cb31cfa953b848a3de25
- MD5 ff3761201fda85490f4ed444acac1fcd
- SHA1 12664f1b6d16fb4fd9386fb3f2c3c69f632f1b58
- SHA512 66129384bf5a215d3af0259b86f523b5dae7217ee0b2445d8dcf1f21843dd62d6dda3a7021b8cb53d3e29645159de221c0df892f97231e6ef6c456a75bb3f927
- SSDEEP 768:nxqEP7EVaI3pt8dfFQr7FDtuWRVR6nPef5ng5+IXNNZ17xjm90yad:nl7qFv8dtQ/ruWpGefU+IdNZx1ya
- TLSH T16503F1167E0486DDD4927BFFA6F0B5FA191C3AC7F0A289A454D2B9C871D12BE08441EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\6d26b5f08751c425_26662.c1650854.png
- Size 46KB
- SHA256 8ef68f6aa6cdcdc89218aad82490f982bd35ccf23176d7d714cce852bfa14178
- MD5 c1650854808b841fdf3e95198600c8d1
- SHA1 810c15b069c27c149f51ef6576f0c82925f74bfe
- SHA512 e780c7085f6b5e1544e12a8fc1a41a0ceff966ff4f4d2c9435ebef0ec63317972f6a72d77f55447a06d89d9d2888fd624a9f9156c076d6ddcf880d71b716455e
- SSDEEP 768:sMWDjN/xHd7+mVP+/Gd70ThMAH/JdjeV9yRAqIJynabA83Q4hc3AWR:buj1xh+mVB7Yfo93ds8Aehc3bR
- TLSH T1A52302DB8439FA8A9EAA6E5DF3188482307F7C008725F3465D43FE6D8516DE782C01B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\72b67dead20190ce_08183.jpeg
- Size 161KB
- SHA256 1be76450d87b56eb27b4dfc36183a2ff8d873115ac59cd4f379c7f48584dc578
- MD5 8fdd1b2c689010a920594ce0aa166fd5
- SHA1 ff14e4a6e3ff0ce168deb00987d7555b79eaa20e
- SHA512 4bed9b4441a19684317fecc19551c7f37f55a5bed534044d8c9725a883a4f768e8bf4578755e6b3e8f8109df9ed478303556ceef93db6c4ce8a7849bf77bd4a8
- SSDEEP 3072:3aCy+HM/U+PY7ZsOyAb60R3nAdWRrgh0apLZTXYwE7jDKvgNgTvVQ8z9wNn:qaM/5PYFZ5uITroTZswETqmMQ8zU
- TLSH T189F3125EBFAB74FE70DA4AD454221E09C6583B2D02D20D4CAF74DE17E46CCE9D560B18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\77d7b8e796f9492b_mature-male-voice.svg
- Size 4KB
- SHA256 9487864482253fe71fe37f35fdec3daf3c17d0290c79a44569b5c8e39e428219
- MD5 1ef19bce5151790801139ecd4d02a2e9
- SHA1 c031bdc1be00f3d176fc6b5ddec7d8c1e55a21fc
- SHA512 754363918b1bebcbddf336d9ef4dac7a1b6f04f541d3708fdfbe7b9fbfe572efc3b49f902149dfd80646787fb6dc1d3852988078f67bbcd0a071e62c91380014
- SSDEEP 96:rQmw6ikBz6sbOlP7luM26HkEbLMKivhdG89HrMDhIi6:rK6ikl6WeuMLHFGvhd4DhIB
- TLSH T1AC9197D0269891F8E644F3BE8514E880BEE328FCA354C5C8C7513C51E99955D4DB8DCF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\798c95cee487f558_b90635a0fe914fdd927c611b94a53a81.jpg
- Size 78KB
- SHA256 0e8902be0099287923547c0873b2309ddd4c7e6b96feea57404ba29cf368554e
- MD5 8e34625b67ffd23580214bbc3bf286a2
- SHA1 e38e0d0fb005061da502c532f55a130846c3e82a
- SHA512 247cd354d81574deb5c4dbe47af1e5128e31c8a11928be7e6c30e3b5518e0fab76ae3e3060861e540441f422d07aa242930506338af8d6dac56437296eaa5818
- SSDEEP 1536:0JnqegNCUrj+Sii+EqfKbDXfy+URuO43BaWdGGDQv4+0vEOrO2q:0Bqegnrj+SXIybDLURuOabGGq4+/2q
- TLSH T10C7301DFBFE32EE1C454D737326EA456A628DD50C29B071C2BCC5D875B6B1A8308B04A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\89901bbe89a353d3_01140.png
- Size 23KB
- SHA256 9dc0a95555c2f7ccb06ae98aa13215aded6ec3b5e696faefac22b786d642e740
- MD5 e58199f4ade44463b8a082e5b12fe779
- SHA1 9511bdbd4fd8e09b2cf276554f400f7d2ed57fbb
- SHA512 0e0e60d098602d2489305f302e6db17da8bcc922710dd6fb394f51c24d32f44185e3df957190863772075da18a5886df66cd4141ca2e76bb985e05782722d308
- SSDEEP 384:0JVB126oBRUCZA7E7Dxcid4pgLh9asb9MLen5YJG4d/asOpLtUSvC/SMSI:OBEMCZyE7z4IR9MSnG9oTpLeSgSM7
- TLSH T1D9B2D1AED54614D90648DDF7213067AC32B128D08A084646EDBBBF3F72B42FC1D5675A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\8c5d9dc043d6b81c_01440.png
- Size 42KB
- SHA256 3760933292ead1807f95977de4e3ccb69c00fa3ff0530c272112b168869f635e
- MD5 b634eae392473847ee0d523c45a3739a
- SHA1 d05ccabd63dd818865f8d3e60fcb9048a2b44a11
- SHA512 83226eb3d734e96427cfd94bb85887721259d7121a51a66ededa0a2c91a23f0c65eddafc21128038bd95e50b3daff9465a4f05712692e76f118deb5069485e8f
- SSDEEP 768:9uJPWKvpfztJuQ967y+b2E6uHOQF3tmxuwwq/O7LfM1+q079l+7ewJB6IsOzokqb:KPlvp7XsONuuQFtmA/K0Bk7e+B6IzokC
- TLSH T19513F122EEB0D561D582E1D7C53DFAC81A0A49A8C803F29A95C7C46B4872F63FAD4528
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\8ca29b1b4030830c_10327.png
- Size 49KB
- SHA256 e63247fb3bf0c568d50e92c600d5ab80029fa8a2b56c7784e07f1ab608aaa234
- MD5 400f402709c4bcbcf7ff2e3ceb000b76
- SHA1 15c521d92b3bccbcb3a9d2efd736c486ba3da667
- SHA512 b28ebd31345181a58f9c16b59c7ab821096422ebc85d1bfeca9d7ce890a962375c2f9ec50fa946dd78203873e2c6b1da7c8189f0ae804b6f4c078d1df54059a2
- SSDEEP 768:NRcDhyNzfyeMvzq98B3jQ79H9gEzfX+LIpxVGxx1szxNOe1onEgRvhPsax:voyBLMO2pUXgWOBfMEeCtXEax
- TLSH T14A33025150636E586B41EFF209D5CE94BFD74663A2F82B4F06CE61F42673990A307E90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\9189a337ea537c9f_01399.png
- Size 56KB
- SHA256 3059570785a5bf7b4f4b3c217b07187d4097b84f71777390165e8f9a9393c995
- MD5 7212bc94f4142f946d7e90c70d63b17d
- SHA1 a065d5e432eb7e148b5dcec2a504bf4fefcb3df7
- SHA512 7395de9aa546011a839bc7defa70bd969e1ddb555d1829fc7290e230a0645554550e95e32a33943f1b3bf54b5698cb1cfd8fd4fc46e65e2240a8ba69ffea7dc5
- SSDEEP 1536:hOBLMVtkGl2eDiwtU3qsAaMtFAGsVwrTEeG6rzkN:lV+oC3qsAaMEGHrla
- TLSH T18F4302D266023DE8E29DE7C6DC33E207992ED28CD11E94179BAE5E8BB45A57C0634214
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\921297d7b8d7f9ff_df96272d495a41bfab82c08d5df457a2.jpg
- Size 9KB
- SHA256 ca8450d5dbc7596d2a28b4a5a31e3745115bef4fbc7639ff3d4605af0a7d4087
- MD5 b53da8cf7e398f47ba42f691ad7b03bc
- SHA1 2b6699d33d213fc30cccda23921cdfa4966d8fa6
- SHA512 d39a6cfee6fb41147982bfa59756f4dab24bb77a6dddd9329c0ae08f105b60a2de124853cd196ee35d1943d6ee90495a3ea59d9e44f205604f25d2ad1e1ee48f
- SSDEEP 192:05VZIbo33AD8OmogPnUS4KF5v0mzvfIna1tiwnNwCPmg59vKu:0Zgo335tVUSZj0yHIqjN
- TLSH T13222B0C38F43CBFAF752D4F2F289116B8C18520E60455B9B48B697A4D6A929E091C426
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\9d2b65666db68ccc_26010.5c94ef1a.png
- Size 43KB
- SHA256 9fd1db2fbcb452dc5a90d0666fa1d47ca975dfa030c97ac517ad3a19db90cc5a
- MD5 5c94ef1a1fbc7f5758add5689068d452
- SHA1 cb5260a03355c73d3d6d0009a3ed9a2c000b00a0
- SHA512 2777ef5ef7e2baf07c3696fa0631a2d896353c085bc97f874e6362ff06e50c76965ceeb36e5c3c41d0e14fea1c51f0349267d255e3989af1bddd55885b7011f9
- SSDEEP 768:QKAndOCY+Q1idJ/U/un+0W2JF3O/kbYYPn9wNxzna4UbTJmQDYbDS:QKGOCbFdJs/ExbWKgxznRPbDS
- TLSH T14E13F1995E1757E26919B9F46472090D42F78842027E71CFDB32F09A087B21E9FEF9B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\9e8b57238c8f2289_6b1541f117204c979b47d10bc0d616a4.png
- Size 19KB
- SHA256 701704dca6c897e118562373a1b6da3f1496966b3e7dab2e3df9adbdc2b8a95c
- MD5 e7175f047420b153b7278362ae5496d3
- SHA1 520cd8be9a80c7b70af6420a27e561241a9699b0
- SHA512 27604d54e8ac1fc2d5d6acfdab5f58b570c9f32a9e13ff7a2d91d9b307be7bfcd2e920c35b5e26a4bbbb7b062c61a7814e58024004551357bddbaa3ad54f504b
- SSDEEP 384:+9yKM4W1q0+B1eK3CnbsTRQUkQZKn1bpidqlIrjD7LwzbUQaQWUA/NqljqW1:+MKpW1q0+B1tCoTR/4WaIPLwHUAWnVGr
- TLSH T12E92E1DEE5E8E081894BE13199F48365E8FA4562F0F2081E098C35940FEF7F5989BD55
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\a3945c704020cd42_59445e998c024759859c607e8476cd5a.png
- Size 319KB
- SHA256 a8264fefabe4506bde2cd597a7f9157ace19d882deedf34af8978ba171b2bdd8
- MD5 8e0e4e10108465f7ef44b49a496105b2
- SHA1 1cee59a4b0c59807dfed17b2c04f38b01552e7b4
- SHA512 8f5d7872e21d2f065cdb45e41ddfacea40d4196b2ce500467215099445d7b32d0e8bb7c517b5231cf1dd0fd0509ca1f2162dfca4677d5d7827c1524ea8862ca3
- SSDEEP 6144:ToFjbDSb75/SfXnlr9LAkmZ7yN8F23LvhsTq8aunDBdx+GS8zRBgsruD:TIf0qlj+FgppCBdYGS8zRBgsr+
- TLSH T15964239BC2892DE1DD566471F4904B52CA7B4BA90BA3D7D2F46452F38227E1F8EB2210
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\a8b28e294ac386d2_13cd19b31dfe4237a6bc096459f0ac8d.png
- Size 36KB
- SHA256 ff9fe68cad25622263560b7693a801b4eca4ecb2bc09e65d8f7717571d625a3b
- MD5 6a9a10777f9989a06a2e8a7af75b7662
- SHA1 54ba5b362786ca5362fd0253ffdb003eee221800
- SHA512 260440529f8915ac76b10a5c142b301698499047152e5727d4a1e09981822f284e401d098c4178bd873d0115490b933d0ab842d93787ead3d9459d27c3354d58
- SSDEEP 768:SQSw01Msq/4RgYRCmIcRGyGviZpMF8Yf0B8AonT9iRJghsp4u65qu1frfk:SQSw01McRg7mhbnZpMF8YfC8rhGGhspL
- TLSH T1DDF2F292AED17A5CEC3E674859DCC4DD892CFE34E3D6CAE1E978B45AA300801F9358C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\ada65fa3c1cbf130_07482.jpg
- Size 349KB
- SHA256 4aa7fd681b3f8fc223fcbac5f94e82f720cad878da4b7e2dd6a14b9ef2403839
- MD5 a4bac68ff970e49fb42fdb390550a6a6
- SHA1 5f03b6cb41d0d5a5e9565a97619dd966742bb180
- SHA512 43d22455bdba72043663937e8a07a1cb3c7de58d1939cbabf52b33aea49444bbefcfb9cc1809ee4b3708c70dbf8537901945d4dabc7e0e4ef41be84b7cca744f
- SSDEEP 6144:9pFUsWQdkSMIN/8dUewVvc5p3u1HFD/GbUHazBNVcef3O1B5JH3n5Cd5KgXf7GvV:9pmQdkSMIN+U/c5p3upZGbUHaVNV5O1N
- TLSH T12A742302BADF8411B7AFE052BF9B49D6F87463012D5A73DA2DFC194DE423A3814394E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\aecde04361c9fe5f_01302.png
- Size 39KB
- SHA256 3162024d9dd2f500ac27009991bd68385a6d5fde00a0d279aed4cc5fa6151e07
- MD5 57568bb46fdc14b52dd274940b08bc1f
- SHA1 048198f59f0bb3a1441fb41a11c3c6c27a0a9cef
- SHA512 fe33e6938373b5bc3484df4fa8eacf705ce175d009c8cc933f10bf0ac022f381c05365c0e91b81d7e72eedf6e41e4c02c43f3849e1012c362015a5ac43077c0f
- SSDEEP 768:xD0b87gjgKr4xaVOuQhpb/VSk0MMmVOqm5HHdDc5mxr6QFeC:xD0egjnrgaiZVMMMmVoxd6Qp
- TLSH T1FE03F1A8D584F2284E5430473BF76A4683FBCA548C83349E916A3B6F136B50CF91BB5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\b9c0d703617fe3d1_01397.png
- Size 37KB
- SHA256 831218824705702a53e3d6e27324925f5f7f4b1ff2c27635bb08467de68eeb53
- MD5 15729798300bda0edf01809da7227ee9
- SHA1 07d1325576ddb116a8b6f686e51132c6a8c72e3d
- SHA512 e9d934bc22baa9bdac332eeb0f9fb0d1be7aa8c9e717362ca1e02e03a78e129719c2b0455e1c5b5248063af9a5613af5be89a937692d0cad24f104b5ba7917d6
- SSDEEP 768:1o0Hu3/GLVNd82ZHkyCTooW8oXXNsvbX7QubXjxzEJTBgW9d+BM8syNu:1FHuOpNd8248jnNobXfTxyyQd+681Y
- TLSH T18603E126CDCA3D3625CADE44B8EC63D6447009FC2574C74695DDA71527EDC32E198E83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\bdbe4c9468f7e859_01472.png
- Size 19KB
- SHA256 4b1ae6bc93f16c996b33a144e114d3b31c189b86add5b33efb12597f541fbbfb
- MD5 7b08adb14d019dc49bb13472f9ba1aec
- SHA1 405c1d1d2e01eef3e65d30f7ec6d5c064554a1be
- SHA512 44562cf2a5e3a9d5cf75852cbb97821d3d2663f98536d41d68fdad6ffb80d6bc5ba865a6f5af5bd99b57dddec91c210e998eda498c126847ad74e1148a97f4fb
- SSDEEP 384:h/4zCaJ1IE16vvh8Ksi4iNL74AmyfNnwzaQBYOukhrvfS:hoCa3IHGKyi36/dukhzK
- TLSH T10F92D162536C532A08C13F27ECE042BC2D46949313E8295EAFCDF09BD7C3C1A7498B99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\c186a28c9c12df3c_51d6304fa4a84645ac8a7e0d5ce5a329.jpg
- Size 5KB
- SHA256 b3d5ece275ac3056515e944ec8382cb2e33ad729f98cf2b7500f375e87dd6449
- MD5 292f3ab9cfafd16d7c87a85d4edc24e1
- SHA1 0f52338e1e5e0a8a8272cc3738118b1efd573c0c
- SHA512 d652edc3802baf55df8d1d66e120a1eee36724ab4efc543502c442549b512fb923d4f075cb8a8f6bb6eb336009b2ba695007a66db6542fd18f3269eb0007eaaa
- SSDEEP 96:x7z3AeQd4t44OEiNDO2d4PcDa0xV9ylulJjWemqEQK28Ah75i7Ki4hALXejCAFuE:x7D2dm49E4O2dA9iV9yo3mfQK2v7InXk
- TLSH T17DB18E499240FC1AD4CBB33A62E628B2E2D43CC4F7849C61207C6496E6FC868F5BD609
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\c20057a5283f55ee_ab00d4222ef3414c84be7c9ef562cc48.jpg
- Size 28KB
- SHA256 20167741ecde38c919ca63f6228b5283a8f585a3b661de8676f7b5b06bf74fe0
- MD5 b0c39df2f0013945a48a93d91f122091
- SHA1 572c7eb53b34bb35f914934fcb107e468cfe2826
- SHA512 3a09c4e02e346bea681ed6798fa37f7effc91f398b65f5bdccb008e9e2f4a8c7a6f0ee5035531388ecb6d5d8d0414cb99d5bcb33300908508637b883c40d9098
- SSDEEP 768:pWJ/B2DvnXKeBZBxvsRv5kGuO7LphQIIfiVojS6moNV:4hU7aePBxvsRvm2LIausaV
- TLSH T1E8D2BF486F578ECBCE689B6741D47E09E60782783B581BF081A6EF69D506B38D70F780
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\c31646ad443f8540_07364.jpeg
- Size 11KB
- SHA256 879c46e2e289ef3ef233137a25b3fb7fe9004b0c348d3e869c0f8441336148b5
- MD5 4c1b47553b1d69d185ec6d20d3c92358
- SHA1 f643bece58d740cdd55c1b4823146286a1507073
- SHA512 cf01afe836b25804b47757c1255b8c003f53522c3744953938dac193d5a664d3cf8b5d005415ab6bfc0d63135fe0543b04b6ae20dd700ec98de18b0f98b2e10d
- SSDEEP 192:sUBwUgIs//UShIIl07ulvHenfXre4zd4oaMZE6ArOCoWl5VBwE:3wks0ShI49ge6dG0EJb5VBh
- TLSH T1C232AFE8E3310D173217C8DB6722675EE48E1B32599EC49B97C86736086D6C0B894772
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\c386b37c452c9da2_557d6ae3493b40d28953dfdcf243db77.png
- Size 627KB
- SHA256 2e7d69e5cc0ca34f15989f3fcbf8a422c1f398a457e877c455a3d71f321de787
- MD5 912261b231063c3a28be9eb4b2904df0
- SHA1 120377b57d84cc34d664932b3c7087163e9f18d8
- SHA512 57571281543c792712035cd657137c7dcd911abcdfcc56f590a0d33d20fbc143d499109b9c39f01ccc80debbd9fc9f25ad4f7bdb43bfb2a9b670e5a0714b2e96
- SSDEEP 12288:eKlVSSl0RSde6WZ1mgsPeux1zJjRJaoccofNB9ZYujVBpswrZD8:N/zlUSdEZ1CDbqcoVDLjDO
- TLSH T14CD4235A77B001E852766BCF93CB55F00E3C1563858835BE16B5C8A8A77D07D22B88FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\c717b276f0350ace_e415f44ff59148579f06b28a479295ad.png
- Size 40KB
- SHA256 7c96b0a4bc1731d5a2c317afaf3b5658404eddd1f460939090d9ef1e56c0c8e3
- MD5 d2b9e67ab378c9eb098c8be6c329ea9c
- SHA1 de45843a8eccd21c072cfa0e85ca588658d83e6b
- SHA512 22fffbcc32cb95269889bf05cdf2760daab03700e4fdb34c35f4b1cd877472f138b2ab3a94fcf0c5237187f03bd4a2f06e3e2b4543a80b61be863cc6fd3a8640
- SSDEEP 768:FpfqE40ObDXih5C2MkEbtrIIHL8GMy7w0gbNPtr0nFOOeVmxxG3DcHqY:zp4RniykEbfHLNH7w0gxPVyFOJVmxoq1
- TLSH T1FA13F1D20A16243DB7105A93D492196AA04C5D4FE1F38DCC2AA7EEAF4CB4DE248D706E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\c776437afbc859fa_6f01c33ad562408c820a111697ce6327.png.kMfnSe
- Size 259KB
- SHA256 e97650cf5ceea382a4ebc9a06c475ffcfa60a1abe9c611706563c4eb7400a92e
- MD5 2a8975b6418a3fa53aeb84c357669ebd
- SHA1 5bd00f73cf12406c2ffcf0c4599da333f245e892
- SHA512 fabe357626f71b1f0cfb1af48ec73bbe430eae68334380b14d7ecf7f030bb7e86e05cda9b2aeef737f8c00e19c3111e818604e5d1286a3b0c684642e246f7478
- SSDEEP 6144:awxPzLanuO8V8SPHbqbpDtDGALcWOMv37fLruH7NQ:RPsuO48QubpZDGAL4K7b
- TLSH T1DB4423A402391969AE7B206BFAC6E975BD0047A2CF6166F4844CD365EB33C3563F4C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\cf1d1ad5b1cc5996_c08acaaf04084f8b88dea2fbe4436102.jpeg
- Size 21KB
- SHA256 aa386d01b144655dba353f17d8dc5dc99fed240f70bb8e45e0bbb49a399d4405
- MD5 559684290afc41f18bf034b1cf4fe74b
- SHA1 1d9e31b90dbd1476fb1acb0b1a6dbe4f86b8b054
- SHA512 a5ec57354be287f8dca916f6690d8be1653fe9d3e33572f4d08bca678c940f5bb75f3a1ec013a22bb10609fdad9bb23e8f98040b7c8df756ef75865e9a76b99b
- SSDEEP 384:RQJXrpaBNcPMTnsDWcx51hhVHqH31ZJNYJPCIBUeRAiCvsmZRqPztPfcMWY7:aN0BNcPMoDz17VHi5UUeiiCvsmnqPBPX
- TLSH T117A2C0E334CAC057B42385B5A936048EBE9F598180DB67803D191A3BA3FCC5BBAD54C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\d5caa6f3e598f73e_01204.png
- Size 41KB
- SHA256 97e467966524d900788dc690c78acfc6115314d2ca527b867f41acf40cbbd174
- MD5 ccf87160cbce77061bce7d65bd7cc44b
- SHA1 293e6f3d2f744d2bac076ea0c49565a75f0a9434
- SHA512 f2d532c9bc3059435d8315d637c69cbc2dfbe3efde3f4667730b316a2b53724fe15057a6e8deeae073b6b283fe5adbe5d91f5ed45f5f4f9507c45a79e285b727
- SSDEEP 768:OudLCr7UrZ/JLvrtzh1N9Lypqk2XbRon7nRf+8ntR7+QNJPUNOLOaG6e5XzEkN6E:OoLCr7U1BdhnbzOn7RW2R7hNJPUILOa2
- TLSH T11013F1FFFF54A806B64B9AB7165C8716CCCAB63828A7CB086052B48D7C321959F5D007
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\d68b4471db279983_01139.png
- Size 28KB
- SHA256 3e85a660d2fe6af20c4deeb56f3de251f39aca0ac80a46ff817e2933acac9284
- MD5 b0aeb309a3463f86dcfc325367b39454
- SHA1 eb2b0dbb515714e31cb67c88cab120bce89dc0d3
- SHA512 82b6024b7891feaceeeb9f9490ad78b6af1d9178d7b5520695b32bd4d517ffe8b5f9423e6c49d75bff08072a9c2716668047befefc6ba6dc842bb52b3614d965
- SSDEEP 768:KEXOXYkH+TrqMsrsA2/ltzabZ8KU2peHOQzeC+OamAPmfHT:KEXOXYBrqbrPklNabZiHOQz7+OayfT
- TLSH T19BD2E0E592D2C8A5FF2EE28C22C6C9039EC8DD527958DD020727AC191E6F714750BB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\d998c1339f2495bf_12667.2cf6c923.png
- Size 43KB
- SHA256 f253797bd5cb24b9795de76e36766643aee13fbcf0ad3f0640f0ccfe936e5c3a
- MD5 2cf6c9239416bc1364af1a10776e332d
- SHA1 1b623a0956c4d2efd7b011e7fe3542a1bdc441fa
- SHA512 676f7d4ddd05d7113fc2d7c42831692bb9fb957dd5c28f36356996a0734bdd3857eba4a494176f9215e6c165d609fbcc81c847a389b20da9e451306dd8f5e443
- SSDEEP 768:J96UCKxHnXuluoRpfta4R+Xo3E4wDXgI1bstdJADd192u9rzwP1+hRHiZ1Pqf:J1nHUplEXaE4m/GADv9rrzwP8aQf
- TLSH T1101301AAFB1C7CE75D943CD7A9FB919ECC811D88196F22130392BCBA80EF27D5098541
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\e30e7bd73f905dbb_f0eb6b64815540a9b5fb4ffe972b361e.jpg
- Size 21KB
- SHA256 842ebaf7f19e477981a21b5c8aa3522fbef2b57583dcadbb9ee40ceac1982ae8
- MD5 a106bcfda507ad7c9ccbda138fca1653
- SHA1 84317912912123de772b9027df8f85e3f55a65ba
- SHA512 974a1d14f543c7fc2dc95bf17cf41bd57979a409ca6e508564c490ee184e73319647e6026009caaf40864d276e7dd095816ed5e33a0b88ebd872d7f1144311aa
- SSDEEP 384:ZtZ9IxCfKf/FCWM/YWbHGGVsEpz3RKBYpbKn8D6M2BWpPqB+ZPvIh:ZtZ9tKfwPHHBR3RKBZn8OvWW+Ah
- TLSH T1C0A2E1B4B9D95B7D840EA2340DA1DCDE80E27AC30E70B1FA199891F371E5A488D1F1F5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\e3f42fd5dac64a12_1b73f73251ea4b64a4b2b4f898f04c2b.png
- Size 210KB
- SHA256 cac1d58569e35e44d2070b1ca1ce1ca329746349d11988273f706afa2973c5a4
- MD5 c4ba17f5cc2880397372c15118e348db
- SHA1 87c1e5ee225354756831efa89922d029ca3ba891
- SHA512 2547302c5737ca3c097114889fde20c013e6f341341b958bb146ee402a57e37f0572f3ffdf80cdb15994a3cc8600ba89e1c0c716301ed722eda3c8cec302b097
- SSDEEP 3072:GgRDCYbttRxEuprvRrcOYh2hLlQ1H//l1vP52UXEQb2TftHzzdR1JoCCn206ugHP:GNiREuprvZRYmL8j4Ud2zzX7I20sb7/
- TLSH T1882412AEA3BFD8709D4B64B069D89E3F88C677F341DE4A34F0B0B64CE19DD2505A1650
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\e567d82ed45552f6_15614.c320104a.png
- Size 37KB
- SHA256 3a306a4cd921bc6bd2452dde5e09ba2380b9e54f2dac7e7c974716d78dfb1359
- MD5 c320104af21f0e2e91db9301b806f266
- SHA1 bb0804346abad05bfdff2a1b31a2ea069180e869
- SHA512 2036b257a4deded7f14534f5ccec70597ca4e7231615eabcd68b2e315bd1a7f5a7b496a41e6d67447c1e5213ac62ad3b8d6996a25e81cebbec9ee2a0a9c1902e
- SSDEEP 768:K9ZUko7UBN14+hYFhZUys/dxq3zj+ViFuZU4ahAnkN6lZFLj4tY7C2mj7:GURw+hZ+/do2Hrva6jFv4tY+2mv
- TLSH T1E203F23F7391D69186AFC6415F11A9DC8EC218B426268C305D5BCC71EAB4EEF5189F06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\e9ded2293dfe5a1e_13686.5df77080.png
- Size 48KB
- SHA256 5234a110ead7b36cf3c015b23f5bfc8867c8d6e4bcabb92338fdb9e1f2d07b30
- MD5 5df77080792dc00b361472ad63336fa4
- SHA1 8366b7ba0160b55e7d742fc54ac09c6d897ea630
- SHA512 eea8dd7de7090ac01562ecdaeef9c86e0288fc6f681b15221ae307a262a73cc1ebf4a4f6199cee06722de651cca26b66483136c30aca8ed1b2d9013c947621e8
- SSDEEP 1536:hpBXQCU16z+mTzdkDFLyRSClC2JQ9CUyMApQQ+RUo:hHACU16z+Q0gRSClC2y9u/+qo
- TLSH T17C230263635D16D67C64F03949207473367A6A97E80B68DE3C6696CF3C3B6283D43209
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\ai_voices\fca943e10ad06187_01355.png
- Size 36KB
- SHA256 da53d365a5f773ed2ce9dd32be270d8d603729dd3323d4e9ee6ec30cee3fd578
- MD5 4f9cc7ca12ca534ced52575a9921264a
- SHA1 95ac4f38706001f1554ffda227c0ccb3c5bab2c9
- SHA512 90dcef3cbe6bbf6d17960880648234e020776a20317cab0e293500d047fde1502ace72566e7ba00af33649506b3f2aa5d9fd7b1a0fb01d18fcf0e2dd00aa806c
- SSDEEP 768:Izkzks0WMVy9VioxzSHQeYlzroaJCBEtMUoE3ehvJnxpnMkD+aIGHb/qSPa:AsmRyKoxzpeWrLJWEtMr/HD+RGNa
- TLSH T1EE03F13F7E5EDFF69ABEAC09224184DE881DA54909020203462CB91A98FF35D5D77BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\Materials\icon\soundboard\sound\all\02414.svg.eud
- Size 24KB
- SHA256 4fee43d4773bb7d00b25b724fdb4e12d04b2d3764c0002044643ce781323e489
- MD5 4ad6974687624d2556eb15d66b48e2c3
- SHA1 e415f4a35045982dc673e1682b4ab0298eee63ca
- SHA512 77bee573da63ae66376e7f5a127f375a38ca073a82cb621211dab0351fd45fba5eee0a5ceacaa3043a0fbad0441012de5921d5cf021d461eae7c03168cc08531
- SSDEEP 3:el/:el/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\VoiceWave.ini.lock
- Size 69B
- SHA256 3b98c26e87705d5366b6ae9d476e52d36c16c5ac69193a5066cec45324f471ba
- MD5 e79588d2b4293b6058bed1f6a22b0ef6
- SHA1 f6ad2bf172a87db5d639f0b2233e30b4a836487a
- SHA512 0f8e04a00dcf99a222fa6895f36bcefa3f8fface1ce8a436425e3bbbda6faa990efb213df8c7b5dbc6bd5b6f4cae4422cd60c80fdc8e260803db6a5f74154ef2
- TLSH T1BBA002BEAA1F34C88DCC292F2700CE84B107B94844479E51145B392B74EED277E6F466
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\EaseUS VoiceWave\VoiceWaveCache.ini
- Size 35B
- SHA256 7e80ef49ed1c95e62954a51f66106e6cef414aaeb726bf89de4719c344b833c4
- MD5 3f3035ff370cca327e43efa4d3d092e2
- SHA1 1d787174daac4d0f40a39a18da0688d3ea3c7d69
- SHA512 271a0fe9a3b7d8455c9e442a1e3e6ae67178947207845f154cc311d66a8bcbbf120b538120a3719437f8efa43b4c9b9988b7282edbda3fddd787180a21868f42
- MD5 SHA1 SHA512