hxxps://pixeldrain[.]com/u/5joHX8pb

Resubmissions

02/10/2026, 11:26

261002-nj8fbs1s2m3

02/10/2026, 09:34

261002-ljsnrsfa627

Analysis

user interaction
yes
max time kernel
803s
max time network
791s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 09:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pixeldrain.com/u/5joHX8pb
Sample261002-ljsnrsfa62

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4868	Lewd Avatar Simulator 3D.exe

Loads dropped DLL 6 IoCs

pid	Process
4868	Lewd Avatar Simulator 3D.exe
4868	Lewd Avatar Simulator 3D.exe
4868	Lewd Avatar Simulator 3D.exe
4868	Lewd Avatar Simulator 3D.exe
4868	Lewd Avatar Simulator 3D.exe
4868	Lewd Avatar Simulator 3D.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Lewd Avatar Simulator 3D.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Lewd Avatar Simulator 3D.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Lewd Avatar Simulator 3D.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Lewd Avatar Simulator 3D.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1724	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	Lewd Avatar Simulator 3D.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	Lewd Avatar Simulator 3D.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	Lewd Avatar Simulator 3D.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	Lewd Avatar Simulator 3D.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	Lewd Avatar Simulator 3D.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
3304	chrome.exe
3304	chrome.exe
4868	Lewd Avatar Simulator 3D.exe
4868	Lewd Avatar Simulator 3D.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe
Token: SeShutdownPrivilege	1244	chrome.exe
Token: SeCreatePagefilePrivilege	1244	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe
1244	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4868	Lewd Avatar Simulator 3D.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 1244 wrote to memory of 4744	1244	chrome.exe	87
PID 1244 wrote to memory of 3512	1244	chrome.exe	88
PID 1244 wrote to memory of 3512	1244	chrome.exe	88
PID 1244 wrote to memory of 1724	1244	chrome.exe	89
PID 1244 wrote to memory of 1948	1244	chrome.exe	90
PID 1244 wrote to memory of 1948	1244	chrome.exe	90
PID 1244 wrote to memory of 3152	1244	chrome.exe	92
PID 1244 wrote to memory of 4488	1244	chrome.exe	93
PID 1244 wrote to memory of 3152	1244	chrome.exe	92
PID 1244 wrote to memory of 4488	1244	chrome.exe	93
PID 1244 wrote to memory of 3232	1244	chrome.exe	94
PID 1244 wrote to memory of 3232	1244	chrome.exe	94
PID 1244 wrote to memory of 4532	1244	chrome.exe	99
PID 1244 wrote to memory of 4724	1244	chrome.exe	109
PID 1244 wrote to memory of 5116	1244	chrome.exe	110
PID 1244 wrote to memory of 4588	1244	chrome.exe	111
PID 1244 wrote to memory of 3304	1244	chrome.exe	116
PID 1244 wrote to memory of 2440	1244	chrome.exe	121
PID 1244 wrote to memory of 2440	1244	chrome.exe	121
PID 1244 wrote to memory of 4476	1244	chrome.exe	122

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pixeldrain.com/u/5joHX8pb
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff93fe3c728,0x7ff93fe3c734,0x7ff93fe3c740
  2⤵
  PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,4533249632144458254,16638518940335321007,262144 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:3512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2204,i,10876269031842022454,8225739182021374480,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1616 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,13373529059307163577,7718335447721846049,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,9793928165362620294,8711867270860447203,2097152 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,4438541502076617036,14603847598882919590,2097152 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3916,i,5783547536209562293,5192718963191500763,2097152 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4444 /prefetch:2
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,12558485324224668512,14844859288435933585,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,13163464037135505147,8188914478402668508,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4760,i,12617609337030217349,9304809936743095780,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,9126121209272250350,15684920698882430666,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5628,i,1701689623436217023,15685701705422994583,262144 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,11105687992818807468,15030054373026684259,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4524,i,1826115783806194141,3743426941843363655,524288 --field-trial-handle=2028,i,5556875919263360736,7901231519606938864,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:4476

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4620

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2712

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4772

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap13553:152:7zEvent5922
1⤵
PID:4604

C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D.exe
"C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies trusted root certificate store through registry
- Reads the TCP/IP host and domain name from the registry
- Checks SCSI registry key(s)
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4868

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4f8 0x4ec
1⤵
PID:3320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

avatar_prefs.json.tmp

Path C:\Users\Admin\AppData\LocalLow\miyuproject\3D Lewd Avatar Play\UserData\avatar_prefs.json.tmp
Size 6KB
SHA256 1765c8c36753ede59c2494c28adf5ff751d14694bffc3b68ff17478fb3f49fcc
MD5 e68877ae7008d910363e7f96f8eb99d5
SHA1 b28c894c370b39b2ba6d4b27fa2c60ff8540be29
SHA512 c1c854ab8dc11090f3ec0a2b4ee80b3a75f3e04df1a409940c82b167a50e00c30d45210ea77f65ddfa996d409da7b52f670b4f7f6fe4ea2254af71b90e5c417d
SSDEEP 48:TtsCtKHDD8SDn7+6Nh8czP5cfUNZSRvfaWh+G3bDB7:+OJ7
TLSH
T11CE10A28F0B58CF38409222972EB96137590248B8DE57A46779C407CAFDDD0F59BE64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16471049-737c-4186-a573-7fbed7207e8c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\16471049-737c-4186-a573-7fbed7207e8c.tmp
Size 132KB
SHA256 b204694f25227e2d58c64e6e056f5c3d6ba789d26d20b2d7a1c97b2cd9c08245
MD5 85a1340b768bf8c1951bee282f49a364
SHA1 b7b74b8dacb4987955d372c60d43949c300ea162
SHA512 8e9fcbdb9f92b07cd17d2801186bb8db157e76d3cd6b89f8ad32166ff8d8826715ece870a37dbfac626ac2fa44b06968eb1ad842fc5b085bde157e9627d5221f
SSDEEP 3072:t+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:t+hFD+7t56OD9ZfSApprr
TLSH
T1B9D31232AA95D8BBC9FD7541F147A300DD7668ED45DE2A0984465F8EA09FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

398c250e-3ecd-45d4-bbbd-a9265fe6af43.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\398c250e-3ecd-45d4-bbbd-a9265fe6af43.tmp
Size 131KB
SHA256 77d26f2b3bba144cb9f98b169aa78d5d1c8581695764e98dee3b3d4aeb5a0ab6
MD5 8c59200cd312c7f79fbc5c257be87099
SHA1 41b06bdad379f6e0931234501802b97604d36125
SHA512 0f18ae482c7f4da8343f8d07c14f29a5539871bf5a7e2de5ff7f82d5ed0a98cc8752f49c72362e7b244e47c1a3fcc3fa8c939f067132a5ef7a0a826b98b4e74a
SSDEEP 3072:1g+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:W+hFD+7t56OD9ZfSApprr
TLSH
T12AD31232AA94D8BB89BD6541F147A300CD76A8ED45DE3A0984465F8EE09FD4C03B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

509560f8-80bc-4d64-b3aa-db61529e92ea.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\509560f8-80bc-4d64-b3aa-db61529e92ea.tmp
Size 130KB
SHA256 b91d914dc2372c57ac096d9aebf4bfb0630a66b9818018c4fd7edb84175cffc6
MD5 db583f07a4574b8a7b954c296f6faaef
SHA1 52064f4e1b89fd158a82631f661d8bd343dffecb
SHA512 016e1bbe6b56aaba171d88e146eb804c22432a3328b5b8e8bc3da0981419cd8f7b67bb1f4cb08ae7c5d0ca99b6a0b355c3834b80585f502e5bf97ae347f1ed9a
SSDEEP 3072:h+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:h+hFD+7t56OD9ZfSApprr
TLSH
T144D31232AA95D8BBC9BC6541B157A300DE76ACED41DE3A09444A5F8EE09FC4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76078cfa-92b0-4876-947b-0ea257c978f4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\76078cfa-92b0-4876-947b-0ea257c978f4.tmp
Size 171KB
SHA256 02c7921f45c6844d98e0c782c4b657e73334b5851175b75b90de0ec67989df92
MD5 1a5964d30e4085e4f028a79fb9ef1402
SHA1 2c1601bc36481426420de5d19497630c0e98ee85
SHA512 eb17fbf25d595108e46899784b31718b6aad0dd04c4cc7e77cf7565ec98bcbb4482370c5849164eb9586f857afb11237163f8f25aac0902785bcc0415cd2a539
SSDEEP 3072:gPqke0bnsfChPQ8VeI+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8PP:oqkHjsqh4HI+hFD+7t56OD9ZfSApprr
TLSH
T137041273A968C9BB89BC3281B0537354EE6664DE50EF394E48465D8AE1AFC0C1363D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96e83888-2449-46a6-a9d8-08b7cba53c30.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\96e83888-2449-46a6-a9d8-08b7cba53c30.tmp
Size 131KB
SHA256 345c011caee77472234d88927ed6164172fa4213ba81b357b721721598af5fc9
MD5 1d69755f673ae5075bcebcec6f1495d3
SHA1 32aa8866b9e081e7dcf36fbe35b4867ba68ff095
SHA512 49f4e6c49b71b9348b7b86b8f5a9e714749935d468f2c09193cddaa17e3eaf628f08b916ec6a4c8b4f67dbed28e76a2ece9fc298866038616cb1584523835c74
SSDEEP 3072:G+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:G+hFD+7t56OD9ZfSApprr
TLSH
T118D31232AA95D8BBC9FD6542F147A304DD7668ED45DE3A0984464F8EA09FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9853655f-ee48-4f4f-8e44-6749a6fa11bd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\9853655f-ee48-4f4f-8e44-6749a6fa11bd.tmp
Size 131KB
SHA256 0a5fd76fd9ad69336dfc91c96f26028049fecfa118f0c97530eb49ba50b2e90e
MD5 886643cdde7f25225fb58953c8a07d25
SHA1 4852d2ac26b261d8f75b78be9de98dac6e159bdb
SHA512 841f9198ef588e38d6fcf82a05816d8d7e577277dd3fb94f79a2fa11b0c1c5e1d357155dfcc1f912f049880a1212870bc3d979882cab09f3e57bffeae9cfcdac
SSDEEP 3072:Sg+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:F+hFD+7t56OD9ZfSApprr
TLSH
T169D30232AA95D8BBC9BD6541F147A300DD76A8ED45DE3A0984465F8EE09FD4C03B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 8256c1e7622729c8ed5e3789587c3ee8d4f8f07403fa02195eb6fba9ec13911f
MD5 dfa4630601879ef786557c05c9d5aed3
SHA1 382d14423cbbb0e30a4d37eb87354c5ce473accc
SHA512 ba04920f41d72c2b3df7980dc5f18022ec63082e0efb2a715c828b7d8562263f888712a38dbdf71fe8975006b0dd2dda662ab387727ffba0ec6b21a77d3d811f
MD5 SHA1 SHA512

Submit Download

1a05e90e-f242-4421-a037-408c1792fb85.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1a05e90e-f242-4421-a037-408c1792fb85.tmp
Size 12KB
SHA256 c6932c5788c194f7fa9b3553bb4dbe449497347bea578399896922095696076f
MD5 e14bcd1a5c1757ac3ebeb6ac2b95268a
SHA1 219fa41f19893c2a912a72c4d7c06f7b02f3c2d0
SHA512 cf3a8b6ce807a3ce13364286a447700103602cce77a5e26153b2a7dd66d7a48ac246029c58b492a10fe231706a2b6476770d08cfa806425cc59169bd0beae363
SSDEEP 192:NRxmoHJJ7felWv7VNDpWPRpPVhp9QHsb+WNnH8DfVe1sakwPUHVyIsnAUgE:NRxmSIiZxKX9/WwcheJvaE
TLSH
T19652D72EAD10797F9CDBC22AFA667B53E7F5102160952E88E6FD893C11E76CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f0a4796-7c0a-489c-aab4-0bf9dd60fa4f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1f0a4796-7c0a-489c-aab4-0bf9dd60fa4f.tmp
Size 12KB
SHA256 920f2c6ff9fd2a2e76dac66e196cdfdd7f86eadb4a35de59047792827ff946e6
MD5 2a1971a77a6d1d747ac4e3cfbd1f44ea
SHA1 78ae6da54ecb71799008f12d586e2f0e29b61d87
SHA512 222aecba494fbcb9afd639a6fc498b05e9195d140a5cb8eddb749470057b9df623f977bd7a20f0d64587350a9918f0ff53202b2235cc1ffb7ffb12b7dc09c6af
SSDEEP 192:NRxmoHJJ7fel5v7VNDpAPRp2Vhp9QHsb+WNnH8DMC20sakwPU3VyIsnAUge:NRxmSIZZxUXi/Wwcp2WvUe
TLSH
T15C42C52DAE10B97F5CDBC22AFA667753E7F5102160952E88EAFD893C11E79CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45fea12e-fac5-4c01-9c02-e2c226cf6554.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\45fea12e-fac5-4c01-9c02-e2c226cf6554.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

72fc7299-8bf6-48f0-bc68-a5604c9d6db7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\72fc7299-8bf6-48f0-bc68-a5604c9d6db7.tmp
Size 12KB
SHA256 d43ca77a17905650b9fdf285fc81287108774f599ee5201978d0361fadacc180
MD5 1665437073438f5044fea6eae30fd57b
SHA1 c6de7559bfe45fc33868f1c5351a009a18622c8c
SHA512 94b2f2c7a99e5b21e97daf4b700f74be137bc86711ae0c41593e7a3554d9db0145036a44cdb9ad8db33ab3caae58bad353cdbfad3ce8e6aea0adf903e208210e
SSDEEP 192:NRxmoHJJ7felFv7VNDpWPRpPVhp9QHsb+WNnH8DfVe1sakwPUHVyIsnAUgE:NRxmSI1ZxKX9/WwcheJvaE
TLSH
T12552D72EAD10797F9CDBC22AFA667B53E7F5102160952E88E6FD893C11E76CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

973cc847-0d5a-49fa-8708-0a6c9f099719.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\973cc847-0d5a-49fa-8708-0a6c9f099719.tmp
Size 12KB
SHA256 882952d460698c9755906a059f619b01e83646189fd8cfc36e32b60e822f9fc0
MD5 5f807b67374bf5b085cd5db6b7d6ae6b
SHA1 7e4e578c34c558b8b0aaa232c7f281f352472487
SHA512 c4895ce557a77719bf831a935bbbb4282483925c5b5f5f5677a2a4ccd0483e8a509226b4a41f97432053173f4432130ce28b2b252e4717096ab24bf827526480
SSDEEP 192:NRxmoHJJ7felHv7VNDpAPRp2Vhp9QHsb+WNnH8DfVessakwPURVyIsnAUgE:NRxmSIPZxUXi/WwcheOveE
TLSH
T17542C52DAD10797F9CDBC22AFA667B53E7F5102160952E88EAFD893C11E79CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a62fbe5-2bd7-4097-a44e-e96e28ecd5cd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9a62fbe5-2bd7-4097-a44e-e96e28ecd5cd.tmp
Size 12KB
SHA256 57bc6b9b2672994005819c315204b8abced42a40071507915275c0b06ed6f321
MD5 87b667437049a2e7dce38f6bdac9903e
SHA1 d1b262c34595e242e9036a5dc30e636961d896fb
SHA512 a08cc03ce82efae222aeabb429fc61faad95a605feb0b48b3aa46243564e1c4e098cf15a42f648382102bdc3485d74b1e66b2c1215c1869e6f97cfaadd93472f
SSDEEP 192:NRxmoHJJ7felZHv7VNDpAPRp2Vhp9QHsb+WNnH8DfVessakwPURVyIsnAUgE:NRxmSIlZxUXi/WwcheOveE
TLSH
T1CE42C62DAD10797F9CDBC22AFA667753E7F5102160952E88EAFD893C11E79CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 120B
SHA256 47c73d51bc566b82eba2ac91090df70ed2cd5566b21953f37708148207bd5c26
MD5 cf77355ef2c61711acc824c1ad9ed783
SHA1 3c5b647e477647ccb7ff26464309896e0d2f4081
SHA512 6fa69d816390dfaa677de37290a0d556a50f9eac6ce2309fea851b1e59e0e1ff47f33abc2d7481a36244a0d2a05b5189291d2f4abdcfa5b357d2c6d46ff1cb66
TLSH
T1E7B01280A4C250B3FF40A231194100643330380401014766D2D00450FC3E7B88402008
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 77ced0e5e04b029c3ce6d0f036e62b25377380bc8dc574d514b8a80535ad530d
MD5 c247d1d1666f704bf77bbc263a1a125f
SHA1 848e9b9a1f884c58401c2fb922f76341f13bbc0a
SHA512 e5a556c3009634da3acccbf688068d39d5de9d6905670a4df7fd210e80a9e0e24559c72f3cc2fc29ca3859a8ec52919fc8acc00d2fa8036d9d34126cc2716b63
SSDEEP 3:MsEllllkEthXllkl2zELlhxlll:/M/xT02zwb
TLSH
T10D44040C7FD04C15C70410344033C35413F1D4300515574335517C737CC55D10CC0414
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

214a14f7-bcdd-4695-b2dd-b642d8d54f43.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\214a14f7-bcdd-4695-b2dd-b642d8d54f43.tmp
Size 2KB
SHA256 488c0fdff98db102a8dfc3b07d58cf3c40b280bc47794591e6aeae5d3c284718
MD5 61bb70b75628d170a284bd8bc80ca2f9
SHA1 449caa28932a0519831b3c90df8ba24a183064a9
SHA512 41098055379813ac696d25cc2f5aecf56c216dde9daebaf9c26867be468c163d110893c6681e2a9d97fe73425d87e58083aacd7b70c899117de5045874d680ff
TLSH
T1C8516CB7C3E8867DC90156F4AB256E1FCE6D0A14632C3C56D9D4AE1B53E28B1D20059F
MD5 SHA1 SHA512 TLSH

Submit Download

5b390b05-92b6-4dbc-920e-138134c47dd4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5b390b05-92b6-4dbc-920e-138134c47dd4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7d7d655d-f24a-405c-a247-6c98757ee974.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7d7d655d-f24a-405c-a247-6c98757ee974.tmp
Size 2KB
SHA256 d3053f993a38fbb40a2200c3d9835c235b9276c3423f16661d8419353d13f8bc
MD5 f5c175433fe411fa4c3efb0af02383d8
SHA1 b78e961e25a08490a38d50de6998136175f940b2
SHA512 1ab5627db11b0c387908b53942e2206299f9928a12c0b1d57f8e09b0cd779a465f3e86972e9d3d172b1e4a3b52b6dc4720619d7d714e7e8fa4691f4f560d1236
TLSH
T16F518BF7C3E8867DC91156F8AB256E1ECE6D0A14632C3C56D8D8AE1F53E28B1D24058F
MD5 SHA1 SHA512 TLSH

Submit Download

d004eb9a-91b5-47a9-ab68-0b07460eae66.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d004eb9a-91b5-47a9-ab68-0b07460eae66.tmp
Size 691B
SHA256 0986348fbac8cb40b1459eaab17f52d6e5784edbc3e1c4d30bc9485954975067
MD5 dc58c48d72890b3805f7cd32617882dd
SHA1 a076f72ecfead55806b00091d97179349701f4a6
SHA512 2ccb7deb6324c8e66c03849f0ac794e0b51312180c2ab30b8451b3b94a9be496001aa79a8c4a84062453ee116f03c73647ed5c5128154b0c57536cc4ec9c2d4a
TLSH
T1A2019EEB8ABE7467B17D8D676D0678062ABA7836018158F0CE56C26C70E19E31B07013
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 a0510e107e06387f7b76109af60c4e252d319eb444e781e6a44bbb92b4492bf0
MD5 4153151376d19550613617f6336f6edf
SHA1 49524cb1b2e82bf655da2a106f2a94ba820f9fea
SHA512 9bad70f5a195650a650ef7d3ec0f0255424478c6a93333dbf2e9d17d97b17aca189bd6aa228a90f15ac7ebd03dc51d53b557b94f849bb953a4ebe0e7d70fd0f5
TLSH
T13AB0124980435321C04202B01250559C3158EF10AB15130161F41D01D835161C42B05A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 f548be63f708627e043f697d88d82f294d0f2cab4ea9fff4036aae130f496508
MD5 139ae3b71f6aff4ff61f7035c4dc46fb
SHA1 3511dc48b02b255eff33331d260b8dafc0552a9c
SHA512 ad1a4cb6feb94d218da8413c8825a7cd7f9e024e937e1a20066908f56a2b29acac463b642ca737f62ddc2419fcbf75fa0921092f5d031672e9473ed17aff1f25
TLSH
T167B00295C2077222C2CA03B12595E5FAB170EF67CA07275297E02BAAEC656714635161
MD5 SHA1 SHA512 TLSH

Submit Download

ac11e689-1375-471f-a6fb-4fa4569015d8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ac11e689-1375-471f-a6fb-4fa4569015d8.tmp
Size 649B
SHA256 94225dc8f3a95154b1f9bbd92488d8bc57ad93e24a002ce8aa6cc081380ac5d1
MD5 8ad8b7376ca3ce8c06f57bf606db60bf
SHA1 73557599effa558b0ef03d67b30df00f0c8743ab
SHA512 9b35e5d4abbf09416436428e68bc09a1c4060bcc89653ab5627434e8757a4ae7f32b16442b1e5725fb0ae5afdb612d9db5e13835676e4a1de77bb0a7308758d3
TLSH
T18CF02DA9D821EC3B18FD0B2D6165474AFB50135B3741495B3B3D811C4F70677458685C
MD5 SHA1 SHA512 TLSH

Submit Download

e484af04-c68d-4935-aa5d-fcbae8964470.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e484af04-c68d-4935-aa5d-fcbae8964470.tmp
Size 12KB
SHA256 f8497ac8271b45419a4030bdecf807b076a38b23cc1024401b8dab26dc36fd42
MD5 f5cf18902666cc489781b0e377952e82
SHA1 6a277394971d54f0abe554e71581f7fa00ee795f
SHA512 6fef2295f5f328ba7297f2582a9a88a91a5930ddc69cb248329dfa8e1974d444aed73d4e6066db9f4e7a547b613bba5f84c391978d2ed472483459d5e5c2761a
SSDEEP 192:NRxm/HJJ7felmv7VNDpWPRpPVhp9QHsb+WNnH8DfVe1sakwPUHVyIsnAUgE:NRxmBISZxKX9/WwcheJvaE
TLSH
T16552E72DAD10797F9CDBC22AFA667B53E3F4102160952E88E6FD893C11E76CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e703c83d-1b45-4912-bbad-55030da6620f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e703c83d-1b45-4912-bbad-55030da6620f.tmp
Size 14KB
SHA256 b494e61f07372ec9c7e51cecb31e35f7b1764c9454464712d269b67764c84218
MD5 779b83eba2269d00b677242dea1e1e0d
SHA1 4c0eeebf4312622db708a61e247a5a2a742d6b5e
SHA512 a0dafae9dea8b578fc1e281968512282b6ec5965118828fb163155216d9e94f3cdfc5a61b7a4f5636d6bb5bcc89c2c71d8f6810856f0ed434ef44469c50837c0
SSDEEP 384:LljHG7KxkXqKf/pUZNCgVLH2Hfgsl++7pLuLceShMXODHC+ErU3Htb5w9:L1HG7KxkXqKf/pUZNCgVLH2Hfgsc+7pY
TLSH
T1E562F867AC4C9E3B0FD4D649CC177A4FEDB4025621AE886482FB982503E4BCE110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b34bd6e7-46e4-47aa-93a9-b490f012d9bb.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b34bd6e7-46e4-47aa-93a9-b490f012d9bb.tmp
Size 131KB
SHA256 228db588b436f8732a2ec8758ce60f8f2c8956af481a2424ffcb2c149a3d65a6
MD5 2b8311868f16687a82a1d37c51fb0d7b
SHA1 03023e91f8c5be8252ae84ab88ceeba722344aea
SHA512 d09394e9d8ac138b7c53d6a46d3db32cd6141941b1628e6c491a86e138ebf851a71dc06145ec381166d007e54c0c0168eb631637fd7d33ad284fa7b406a67dc2
SSDEEP 3072:/+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:/+hFD+7t56OD9ZfSApprr
TLSH
T14AD31232AA95D8BBC9FC6541F147A304DD7668ED45DE2A0984465F8EE09FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f332aa64-4334-4714-8543-240e5c0031d7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f332aa64-4334-4714-8543-240e5c0031d7.tmp
Size 131KB
SHA256 44deb083688ecb5998f130b320f5ad5e251e853d17aae69b4c8eddfb1017955a
MD5 a596fe9ffa9e8340ee4c92a78ff438a9
SHA1 788e8e436db2854231c8fdd467dde25379bd0cc5
SHA512 d3883fd27152bb72c99d04e23ef1785f33c3c251a1f38977192b21345d295e1c432cf00b1dc5c5eabe3b1c457b605d4147a91339c383080cecff669b2b7b2e08
SSDEEP 3072:q+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:q+hFD+7t56OD9ZfSApprr
TLSH
T183D31232AA95D8BBC9FC6542F147A304DD7668ED45DE3A0984464F8EA09FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D3D12Core.dll

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\D3D12\D3D12Core.dll
Size 4.5MB
SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
MD5 8bed03240b764906c937c0d6ccd560ac
SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
TLSH
T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DSTORAGE.dll

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\DSTORAGE.dll
Size 202KB
SHA256 cae65787f61514bec6f012f44546e68b19e39d8854a9ab52af813370d44b272a
MD5 08c190f8d8a2c4e20024b987c979de9d
SHA1 a882f13df94f7e2dc3c0f2c4fbaa11bd988e1937
SHA512 99002ae98cbd9cc9f377dd7b94c8d7883a0ff9ab02432585ffe2cf79600883d4d743790836fac425cb7f98126c255ac315130b861c464983c46be7a6f3064601
SSDEEP 3072:Tzp2M7bV6ITJngWPqo5KVK8xHdoSe1OvnC/8FSz1RO2bR5cuL3TBJHi+eA+:TzsM7bLJn7PqouhHd9rVSZrtLTBJHiP
TLSH
T1B8148E55B6E400BAEDB7817CC9934606E6B2781107609BDF03A0837DAF2FBE8953D761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GameAssembly.dll

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\GameAssembly.dll
Size 49.4MB
SHA256 ee12649792870e9ccea8610eb3295350e8875d8e43781b87ec43197a5cbaf518
MD5 b20fed58186296ab074c6ce30183e565
SHA1 256ef912f23bb004f0cc608f7566981b335bfa63
SHA512 078736a200605841240f519a32a41bf6e57d94c106b2f58bf36c490288223875afe852d45e809b76fd76d092f44e0bf7feceabcf3ce3bc1be78da87d42b581c7
SSDEEP 393216:fqEwpEV9Hsi3vqFhNQJ2mGn7IQLcZlDm+xhQK7jXXMw2tLdBDu:YDm6LAxXcwaZV
TLSH
T189B7294AB7718448C0AEE1789A2304DBDBA13C845F7027DB25900B9D5FB77D8A87BB71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lewd Avatar Simulator 3D.exe

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D.exe
Size 652KB
SHA256 8dd4ce1a3793d16651bfdad1219f5ac4b24942bd125456580ea87f9e93f23c38
MD5 c47498f3fc21a1dfc352fef5f8b5232a
SHA1 516f20869df5ffea425e1b70bf55ef4ee5a3e92d
SHA512 02385193851854431c7ec9602bc6b7dcfe68bff0400a2fdde01d121955a6c7c3014287a48bb7eecabb407a78dfbd52d803cf7d74e78b54c85072ecea063d3bbc
SSDEEP 12288:TtVwZpFh67p+T3EQ0A6cVMq7gPFh+ZaFlTQx:T/z7p+TUNA6caq7gPFh+ZaFlTQx
TLSH
T1CBE4EBD1DD5A6280F81A8B34A0312C272D626FB7E8FD716D98B5381016F74F72667CCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lib_burst_generated.dll

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\Plugins\x86_64\lib_burst_generated.dll
Size 1.2MB
SHA256 ee05e21355b6bf2863aa536ec655977ff4c16c3ddfbf75e881687e6361db2ad2
MD5 10eafc38b034e4bb0a2aa2daedb9ff79
SHA1 da8165e87021f5884f625f3880bcab7f8158a6bd
SHA512 657ae2389aa3cf47abfb3da6313c82ff7ec1c6e9cb60ee189e59cb540cd98e6749bbf6f8a50d7bed2ee17d75ced4f68d241b3c23fe31e7c043099feb8fd857e0
SSDEEP 24576:DfXB41svHEmgXrrV7z+98RV33lLlOhppyxP7+mH1YTPI:bR4ggXrrV7z+98H3VlOhpAc
TLSH
T1FA458D7D11DAA8E9C42ED470021AFF57B6223C0A07441DF351E144B53EEAAD36FBDA29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unity default resources

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\Resources\unity default resources
Size 5.6MB
SHA256 96c07875f9764ceaa248eb5715503de54e55fe87166b909330a4ae209a644f70
MD5 d72ee9921dc296f94440f93edc968bd1
SHA1 86d8db8d1f4e78e15f92eae63c28882570f86e64
SHA512 29e109c317e30b3f2b94a07ab2c17f2ba0d5916ab4a10cefb8cbfc7baf2c21b7d2d893750d7ca0ac164b4c6df90be208b0cc331afd3650e13a5e6477ce3fd37d
SSDEEP 12288:pFwg8IhFHWPOdSUKxSUSl5qUxQihdfOjdew4k:p5cO0vSlFffA4w
TLSH
T1D0565255A6A1A93DEC6E203D86630DA1E3D8A55D0BDF8B43391C311CFF65B09CA372B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unity_builtin_extra

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\Resources\unity_builtin_extra
Size 534KB
SHA256 6db9e17de71bb2e08d390c4fc30e07ac8c0abab23c3074b3232782c751144c3b
MD5 8b044f566a01372b2394eeb0a128dde3
SHA1 9faaeb57077d71d800718dd596fccd4a9398bcd2
SHA512 a920d57b351b3cc726634ec05fc4f9f484a58ce983c28653cd8b90ff176bb217979a723cf5ed1b375885f2bab40489d459ab225d697e7bb0465b43f9f9e8f415
SSDEEP 6144:zos9uYGj7zaCJaAUo2Bs1eHOaYbHJ7Inys1Yl:V9ilJC9HORp7h
TLSH
T146C4927C6357597FCC21193788B60B639731A9F81BEE4F232E6C2F6C28E5258AB11750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RuntimeInitializeOnLoads.json

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\RuntimeInitializeOnLoads.json
Size 10KB
SHA256 ed3bd5287d82e27a425084d73372709574e8ef6cab966030c5e523b796cbfdcd
MD5 c56583af54e8496ca2257eb78a0bd135
SHA1 9b92955b286346c89509205951ec7f16513038ea
SHA512 f06de77eaeb530341521369c87f6d8f96204a0ed8867eddaea417c80cca827f7877e8f592aaff2e068a2ba6e22702a5325116373782cd1f939c8c96b73a71cd4
SSDEEP 192:hPEsrNFNySDEewcmjxSgsw8mHFIzqFTZtmYTZNTZC1TZRtTZtm1TZtmKTZtmwaTV:dUTDmYT/To1TLtTDm1TDmKTDmGL2
TLSH
T1F12249BC23868F7F5F8B8397B96B1A1D34840A0F9ACA4840DCBD1F3FD6751551A8612D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ScriptingAssemblies.json

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\ScriptingAssemblies.json
Size 5KB
SHA256 02fd6fd2d4441e0e580e38e95b7c4fc35d4515c0d71de4d020ef84db7b5e2db6
MD5 c1128df7e6b0d641055bc18d46583afb
SHA1 65a2349a2f11592150ac30714b8184631293248a
SHA512 49c770b556a88cc9fd201efd929e245a8004fa5b080a65e47d8e56cdabb1847a46f8fea66e0ccd796c4a231a92675374075578f5e939de25521e58e55dc3531a
SSDEEP 48:YQXwAYrKMbIYJVHQCsouNugGoSfTG+VfcyIcyc22081KxHnuqe6KqiI:x4xTJVwnouNfII5dcKJe6sI
TLSH
T150C14BB2C58B26D32ECC1FD78C348CCC39D344A60A6494645EAEA79FA938CD27D0D6D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0346e9bb-3b07484d8e8ae29d.pab

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\StreamingAssets\ProtectedBundles\0346e9bb-3b07484d8e8ae29d.pab
Size 17.4MB
SHA256 3b07484d8e8ae29d792876796d8295793d1503a1fc974daf142a374425e95952
MD5 c3f2ec578265f34ca1ff59a4d35bbd79
SHA1 07d18bd8d44d78b1216c74314589b1779d992073
SHA512 c8fada9221e8ab2a4b1ad0b078faab204ad97184dc34f3e361ae972d1cdafd940e1f4a328af3f4ebb9d8815ad0eb260c7ae111a32d93b537d2634d7718c2a598
SSDEEP 393216:khTI2n25IZrDR1dvEcL6zBc5aaDKnUibql9wfGQVt0axcc:0jg61xEm6zBc5aaJMqMOKt0an
TLSH
T1CB07336D1D553A41C2508E5D88E2F500FA3BFE252E88219B8005CEBD5E9F3EB975873B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e7f1c67-77a973f80a824345.pab

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\StreamingAssets\ProtectedBundles\5e7f1c67-77a973f80a824345.pab
Size 18.8MB
SHA256 77a973f80a82434561227b7f42d6c336a9f7c9ce48ac3dc730ac987d508cd69b
MD5 369a28f1e062b93645467b067587d0a2
SHA1 ea25a12dda188d17e9d5a8bb877f629b3994f513
SHA512 ab035c223d5b5e2d2f645ae466c23a228cfbaf74a7985ca7102ee7c1e531016a4f60a71669e60af2c819889a2e61403383a2737fd1b793e78e8d7f58f1718acd
SSDEEP 393216:EEH6O8QOfANuk1M69CGW3EPd7cds4vRdvkaHMxJkeLk1h:EeEApM69lQg7cdpJOfLkT
TLSH
T1DB1733FDDAC791AEF8BDAFD51870893445D8027887AE51FF11C88F4807664A1C63B1E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df32c3ac-f6f2a5168f08ab07.pab

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\StreamingAssets\ProtectedBundles\df32c3ac-f6f2a5168f08ab07.pab
Size 17.0MB
SHA256 f6f2a5168f08ab079649b3f00ec747d1d53db7b88c816deb313255968076c6fe
MD5 8bce78a200e2eb030b2cf9aed176f242
SHA1 dc1e2009db1199cef8fa1ee25aa535c549f17147
SHA512 3edf1d000f71f1ea0dcbe16594f53e6b819d1a81c100a2928b00fe84623d690d686cc5d45b3bb7299301f668bed25d7f9cdcd7123c5dcf96cab00551c8dba800
SSDEEP 393216:1ovrLLPfaH5lv9Iu0dsFBU7hSnjQrOI8Mq6zDWiw:uS550CFBjnjQd8seiw
TLSH
T1DE07330C277AD8C4ED8BC3ACA69D99EFF54779BC5EEAED16C81D9B2088161CCC714610
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb953cc6-957fd9d07213b7ef.pab

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\StreamingAssets\ProtectedBundles\eb953cc6-957fd9d07213b7ef.pab
Size 34.1MB
SHA256 957fd9d07213b7ef14a6ebbbbc795b60d95a6cd8128238818e786fca031b79d1
MD5 037813f160d7a6650c387abbb4742b63
SHA1 e2acf8180f88075d541af60cb795f308874fa3ca
SHA512 89e42f663dc31a969a7c650795b7e603a70d3e28b8b6c356768a49eaedba1deff190edc532620b0b70de3267e5f7e7a0447381b61275a09de3a71314df89a1ff
SSDEEP 786432:sMmBR4qE+Wl9Rkf8g3qtOU/oAHvMoie6zZcITZtKODbTwOVF:C/rq9Rkf8gN6PMoczZcITvTwwF
TLSH
T19777330EE44D2DA4D52CA443EA6FD05DBDFB4ED019A82AC161BFCED23E98D191F118B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protected_manifest.json

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\StreamingAssets\ProtectedBundles\protected_manifest.json
Size 4KB
SHA256 a4a81943952f7105ad4f6ad7f25180bf75fe893c4f7b2adefd5391ae3fa14745
MD5 bd1c1880a27bee67644aa72000b1854a
SHA1 a37884d32fea53bdfc2311ee0ecd4e9f0c1de330
SHA512 26ff9754c36eb2342cd4e656e93c1d37a361e7bc55f0202b6cce10632ecaf1f191e9156cc03000351138c052c7da5ba10e353a208599cfdd5b666b1f7c8a2b58
SSDEEP 96:VOC1auxB3HgvO4/ODYpwIU+MJJMvVTbKEYR8tn7:j5sM+MbM7
TLSH
T15A918B58FD300C876A8AC1F8AD5962520C70430B0F55AE41FB9C8E5E5FCF61B7A7917A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnitySubsystemsManifest.json

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\UnitySubsystems\UnityOpenXR\UnitySubsystemsManifest.json
Size 250B
SHA256 b656ebe32f677a98ef1dae505fc45a5f48f2850d395cb8bb4b9826333d471db2
MD5 9484b1e28986d61aedc488476407bd5f
SHA1 b654074fc9a8d990bdbb679face03264d9015043
SHA512 6224f7bd27ad8305c93ce2df477210b50e0af856ead7e72e3d973e3b9e24e00ff9fe3ad16aa7bbc4268eceffc45a54802d24cd55f129f703b5a2c6cdd9c44e74
TLSH
T124D01260C3692F4315D57270299C47616031871B28A52E07FFCC244D8F5F92DDE6477D
MD5 SHA1 SHA512 TLSH

Submit Download

app.info

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\app.info
Size 53B
SHA256 c01cdeb2efd3c1973c9b898ee8d454822c86f22d5600d53a41b8a70830688280
MD5 be7055b3dfa8466dfe1a1d2b6389b202
SHA1 c4840e3f79cd1a10050475613d447ddc2ea8862a
SHA512 5fc7065d163b9b4285a2b7d31db3b00f484923704348f434558311c8d407f7c356bc9e1993209d224e7015ec22f41232ebc1f830a05073642c28900de0776048
TLSH
T174900258A521DA025684928109217DE7A1954C6BD06016340A5CA52024805D9E113066
MD5 SHA1 SHA512 TLSH

Submit Download

boot.config

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\boot.config
Size 174B
SHA256 18bce2f6af02c4d18665bd23b98fa2954c9405b3b8cce62e777d08b1c8e2988a
MD5 96c415ae78bea6adfdf0aba66eead2f5
SHA1 e96402af911351f474b86d668499406249e80381
SHA512 db697817b0b633467729d6000675a7216f84df55af8964c9c50c5832a73c9c5e42525f24d6268c7f134c529e931e35c2438093eb3e7473548d782c5e220f4b96
TLSH
T15CC02202A2F9254901D8841648B91EC39133C04C001226FDE25820D8373880D5202862
MD5 SHA1 SHA512 TLSH

Submit Download

globalgamemanagers

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\globalgamemanagers
Size 500KB
SHA256 3835a4a36a7a8fe121c3b9711452e09cb97f4abea5e8d3e537e3245d5aff7cc9
MD5 4e7e0ab303c583790ddd80c584770643
SHA1 19018a1a1772dab76f0f8e7a569909052e1039ea
SHA512 03d22c6fd70086d34362e5ef0f798fe9efde3b95228d6fa5b6207bd81b2bdd4256bef00cdc36d55ab2d075a9ff4e22f03f08f498f25339ccaf923b8d1acec287
SSDEEP 6144:/nz3x2SuVV9WFOnsuhiDfr/5olohA50LzUxly:fb2MzA50LzUxly
TLSH
T1F7B4938EDB90DF3BC5AC027285AF1B993632D08DEA87EB17151DA8A47D4739C1F49318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globalgamemanagers.assets

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\globalgamemanagers.assets
Size 1.8MB
SHA256 56432682ac474f8d834821dd7d5cd406bfac4cfbecc700d01cda43f7c9bf5410
MD5 ad23ce6d6a8b3cfe3d7d7ee976675ded
SHA1 edff591537fc1388978d1ed531bfdfad7702e295
SHA512 631df7fa1558973e57df534011dc4a46e2623217ef8fe554a14ad46413c2fd98614e5bedd43dfd914f22bc09b7c2d189013e7c21fe0491fa7985bc8d84bc1397
SSDEEP 24576:1UT7AdE39Juu2kuaufk9HDYGkI0VJQtH+O+7:1UTiQ9Ju1au6kI0Vyg37
TLSH
T1EE85A2B99B47893FDC48013788720B6A67306DFA5BED4E076A8D3E2C68F624D6F15314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globalgamemanagers.assets.resS

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\globalgamemanagers.assets.resS
Size 2.8MB
SHA256 9e6a822690a72c5222da118feb90eaf13af234869b3394e7c4a260d4fb8473fb
MD5 aafed6503d203db0cb02cfaa2a67ca09
SHA1 cbc27808e20336d1c81e713dcf07ef16f2a55fc5
SHA512 c770a4e86f73f9ea6dbd7a222e2243290c03648412fec2b1d3b4028100fcb946a3bfb7ba7f1ce1a3e8b65d450a562ba5ef4742a748ea8554018b22140fd7ebc9
SSDEEP 49152:LZAvSoIAjyK5hZAAJc56NFbqnxpbKpOuoAK:LZAvSoIAjR5hZAAJc56NFbqnxpbKpOuy
TLSH
T129D51EE28592D041ED0FC5F5FE2BC9ADF54BACD8D7CDC61A1208EA6650B3221C29EDD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

global-metadata.dat

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\il2cpp_data\Metadata\global-metadata.dat
Size 8.2MB
SHA256 c72c836d84605c579f707deacb66b08482e7b3d9d9d61cf760ce0e8bfe293609
MD5 75bb14a75322174d242a14df01129c6c
SHA1 9c70a84cecf468964d16fb703f3a78d90269ad48
SHA512 7b8383608c55690a292950c987de53ed5700ab54b5c9faecf6fa4bc11bc460d240dd3c9cdc7ec1033f0858c3b1a1450b7c6d0946683b0c9572d59924f578fca4
SSDEEP 98304:/r27laYjX4XhzLBHiOJ5cGDmDKG/bztKI0s:RYjXGDijzt10s
TLSH
T1E6863AB5BEA5C96EC4275275DC68C2C44A61DE490E03C3673758BB2EBAF71869F032D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll-resources.dat

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\il2cpp_data\Resources\mscorlib.dll-resources.dat
Size 329KB
SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
MD5 21d06dbc8af6432b2b49536ed30609af
SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
TLSH
T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

level0

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\level0
Size 43.2MB
SHA256 e324285e8adca0e5f42ca4e5055765b04bfcd8c165fe44d244ad7119c2371a1a
MD5 ea02955d49003148e7a3b69785e98b39
SHA1 5b883ff543b040ded9c8cfbf83d3d9bf491ff561
SHA512 cda66b8ff0585ad4169646a86af59ed048d53832df7607da2850643ff1ecbcc74cc384f25251803ab8889290e5d13314b84a66ba8a30d3219714a4b9115c513a
SSDEEP 196608:vRjCNbHMltFWkdZNbHMltFWoNbbZMltFW:5jCNHM5FNHM55N9M5
TLSH
T13FA7A9A0155742DCC86CEA3160A36EE24DF7BE51E19C1E3743A83D5E2DAE3442A3E74D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sharedassets0.assets

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\sharedassets0.assets
Size 9.6MB
SHA256 c7b83b7b5c3539325c2bc355b3feeb927dd8e510316ccaf36625507f2c17e1c4
MD5 021a27054e743b2aa7709132ec210286
SHA1 90800f044736c719af78cff928ea92adbdd7b05d
SHA512 62bb42c3cd98e3ae590fab69cf16d59f48431742408e97d8c19a3b98d6b2c2570a9d0695f3e5c8054b4bdb8ef76504ef21c27b852803ccfecfe6c583b4a4cf2e
SSDEEP 98304:mew+BWtCXC4+nGYYCrM6LhzY6KErS6IFcqHwEFYMvh7OSxfcq5csYsi9DqqG:sDxJxPrlIFcaw+hxhQsKM
TLSH
T1DCA6F142A387CA1DD49A2B765AD6FDEDE163AC8811C17C44860276679EEBD34F4383CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sharedassets0.assets.resS

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\Lewd Avatar Simulator 3D_Data\sharedassets0.assets.resS
Size 11.8MB
SHA256 fd8fc8957f44f3ff80592c6bf3b1f6d81f9f1dd09523fdfd5e426c01d93aa8e2
MD5 a8513e8086506489cbedcf4208408cb3
SHA1 ad523e03f6d9597f2753a80d747ea2e21b5e7f0c
SHA512 6dec495f93b410155530b0ea0b102e40672f63dd8e0ffbf02387eddda25f116f01a0b5df3f99aee3c8f17a01001d73952ebaaceebb1241f8165b99b68cc787ae
SSDEEP 98304:KDXU19Iu7xrNzYeVGxZH6H4rHF4A9BuML:n9T7zYe0xNl5B
TLSH
T18DC6CD630810889F4377B2454B63DED2F0B635AC9A603929F6B96484FABFFD5DD80538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityPlayer.dll

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\UnityPlayer.dll
Size 34.9MB
SHA256 156b1eecbaa08421a7d177972f594c9d161ef19663eccd85bbd909a600aabe24
MD5 50cdef90fdfd79a6486be2fd3f2e73fd
SHA1 1bd121a6fc1120f912e7d489d3c73a342c1dad39
SHA512 8dec4e3f08c28c2cebfff3a0946a7c4b2695078428ba271ee0e7ee28eb57882a7459fe000abe298dac606e39685509d6a09f18e1603d67efae5d0aa777a80ef8
SSDEEP 393216:bMc8Ty9WWuac7bqJb4mbz2QbB6HYGzxulF0UacUnWfRjNkUdR:bMTTyQWtcHFx0pX
TLSH
T13F87AE56A2B951C8D47BC078975FA91BF7B1344903309AEB52E04AA46F33FE12A7F350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

baselib.dll

Path C:\Users\Admin\Downloads\Lewd Avatar Simulator 3D v1.4 Build 10004\baselib.dll
Size 233KB
SHA256 df9a9af64cb5de377fd52c623fb4f150b3de514174a547d6c3f89f87771cdf0d
MD5 ddb0e71f2fd3bc49174dd1a7919c80fa
SHA1 0f47d731257517afc7711cacdd7cc74062a35abd
SHA512 66738eba0f9cf27db882d835aaa7ee479f11245851c4a086627ac0b9eaba99da446d901d71e84e82a81f7d9a4a6886f6caba75f99cf39f8e3ea28e54365d12ee
SSDEEP 3072:OA6C9vPJ6yHlMPuplt90vtE5NajsutMKlDNM6aFsxndw0skOYdNzh:OA6O3lMPi0vtQmxCkLB
TLSH
T17E347D4572A01DA6FDB741B4CD531A1AE67238034780CACF53A443A5EF6BBD06A3F762
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lewd_Avatar_Simulator_3D_v1.4_Build_10004_win.rar.crdownload

Path C:\Users\Admin\Downloads\Lewd_Avatar_Simulator_3D_v1.4_Build_10004_win.rar.crdownload
Size 1202.2MB
SHA256 9f6951ad0aec694fe7cb0a83ca56b839200a8b5011d7cbf976843f810a0ab781
MD5 0ef3b1d728215a82e53578be15fcc9c6
SHA1 27758356805ff798b4760bf870779ab586016ad5
SHA512 61e5376c71cc4911e99adad7e878cd8300348517514635450120835c580a435d30622f061d5ca302edc448d63618f7434d4961d6a4910f783c8b7c407eab148a
SSDEEP 25165824:7pTICsIf0iAP9Gx3D8nBRpmfx3UTMv/lwxTtnsZ348qNVi9WA:lTJuo1K0fx3UTM+xTaZ3pqNVi9WA
TLSH
T13ED933A22BF82C1D7C38B3761BE9C4A1C5C7D23A3C4BEE5CD851DE40A51E9A1D6B54C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4868-569-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-562-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-561-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-563-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-568-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-567-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-570-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-571-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-572-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download

memory/4868-573-0x0000017A1A3F0000-0x0000017A1A3F1000-memory.dmp

Download