47571902699682109a1c251b50c82f71e5ad82978a446f191fc6a4e6afded984

Analysis

user interaction
yes
max time kernel
348s
max time network
349s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 23:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Captura de tela 2026-09-12 225825.png
Size 188KB
Sample261024-29qvvsga25
SHA256 47571902699682109a1c251b50c82f71e5ad82978a446f191fc6a4e6afded984
MD5 a2eac898fa6d6ad3fa753e4583d2c41d
SHA1 3905020873ccf9c68b61554b3f295a74769da7ac
SHA512 501d46a16f7166773c915bbbf301006ac5276bf55120e793929f868eb643faa69b4093e65e36baf25720f574d14ff5e317507e768a7b38685798442d75b060c7
SSDEEP 3072:zyNNUOHo0TSX0FfPVkQQ7FxM7thiN13XrMnsSnLYaShoY0adPgT7ZsEnkM5iguLo:GU4mkFfGQQZxQ7iNN7qTFsEnkM5iR1Ty
TLSH
T19914020CC893C131CF6F64393D692D99B3F7142E51CC1E358A788B2DCEEA597624A3A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2936	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	LAVOICE.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4712	mspaint.exe
4712	mspaint.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
368	chrome.exe
368	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe
Token: SeShutdownPrivilege	1668	chrome.exe
Token: SeCreatePagefilePrivilege	1668	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe

Suspicious use of SendNotifyMessage 42 IoCs

pid	Process
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe
1668	chrome.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
4712	mspaint.exe
4712	mspaint.exe
4712	mspaint.exe
4712	mspaint.exe
848	LAVOICE.exe
848	LAVOICE.exe
848	LAVOICE.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1668 wrote to memory of 3684	1668	chrome.exe	99
PID 1668 wrote to memory of 1104	1668	chrome.exe	100
PID 1668 wrote to memory of 2936	1668	chrome.exe	101
PID 1668 wrote to memory of 1104	1668	chrome.exe	100
PID 1668 wrote to memory of 2576	1668	chrome.exe	102
PID 1668 wrote to memory of 2576	1668	chrome.exe	102
PID 1668 wrote to memory of 4368	1668	chrome.exe	103
PID 1668 wrote to memory of 4276	1668	chrome.exe	104
PID 1668 wrote to memory of 4368	1668	chrome.exe	103
PID 1668 wrote to memory of 4276	1668	chrome.exe	104
PID 1668 wrote to memory of 2412	1668	chrome.exe	106
PID 1668 wrote to memory of 2412	1668	chrome.exe	106
PID 1668 wrote to memory of 2232	1668	chrome.exe	107
PID 1668 wrote to memory of 2420	1668	chrome.exe	110
PID 1668 wrote to memory of 2420	1668	chrome.exe	110
PID 1668 wrote to memory of 3148	1668	chrome.exe	111
PID 1668 wrote to memory of 3148	1668	chrome.exe	111
PID 1668 wrote to memory of 1716	1668	chrome.exe	112
PID 1668 wrote to memory of 1716	1668	chrome.exe	112
PID 1668 wrote to memory of 3932	1668	chrome.exe	113
PID 1668 wrote to memory of 3932	1668	chrome.exe	113
PID 1668 wrote to memory of 3820	1668	chrome.exe	114
PID 1668 wrote to memory of 2684	1668	chrome.exe	115
PID 1668 wrote to memory of 1112	1668	chrome.exe	116
PID 1668 wrote to memory of 4436	1668	chrome.exe	117
PID 1668 wrote to memory of 4436	1668	chrome.exe	117
PID 1668 wrote to memory of 176	1668	chrome.exe	118
PID 1668 wrote to memory of 176	1668	chrome.exe	118
PID 1668 wrote to memory of 2632	1668	chrome.exe	119
PID 1668 wrote to memory of 2632	1668	chrome.exe	119
PID 1668 wrote to memory of 4140	1668	chrome.exe	120
PID 1668 wrote to memory of 368	1668	chrome.exe	125

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Captura de tela 2026-09-12 225825.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4712

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:1684

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff9612cc728,0x7ff9612cc734,0x7ff9612cc740
  2⤵
  PID:3684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,4013906608481465099,2298487595646168973,262144 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2156,i,15190516612014895282,13051924994456873482,524288 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,9543390414308420897,3696509216185869151,524288 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,3881891736564756461,4863230160250498942,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3048,i,13240415498758256204,13640301010605602987,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4500,i,7826731463243654904,10527292889920745113,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5360,i,15059600976798531061,8115196629490683983,524288 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5480,i,17725904724241056099,598709563530866549,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3288,i,13751552394480602343,7500183329534980323,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5612,i,5219837546137223009,13725578660174348966,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5788,i,182997875715417223,12993186441948757092,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,7885374514570310980,8295306353869193023,524288 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,12211596187597924668,17690371468683350322,524288 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,2029992222067848395,16771349677016034657,524288 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6040,i,8314463430872761784,11707434739004509645,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5988,i,13344815021167122286,3413124841420660557,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6076,i,2493938912641833488,14923606466149265191,2097152 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5648,i,3755235870793985388,8273755477600166050,524288 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4380,i,6826937709293059387,8137615728934649521,262144 --field-trial-handle=1940,i,8235809847536661047,10996738247446327480,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:368

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3520

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2276

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4148

C:\Users\Admin\Downloads\LAVOICE-H2-Windows\LAVOICE\LAVOICE.exe
"C:\Users\Admin\Downloads\LAVOICE-H2-Windows\LAVOICE\LAVOICE.exe"
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

109e9d0a-cf8b-49f7-b15c-5d83c80b2650.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\109e9d0a-cf8b-49f7-b15c-5d83c80b2650.tmp
Size 269KB
SHA256 b25f63aefc90a28c9c6ecc54605abbbe39c367419521178a582dc5fb3456e910
MD5 82b2f77cb1cdbe654b67395afdb74fa0
SHA1 8fb76b94b185c853435c88fe9893fe7377d16eb3
SHA512 3556e58b52284523a3bc647a504f905283013710bcd75aff7a3a1094cabe791c2645e0219bc7939cf341d4107df9323a4f3ef988c497a06bd8eb6e60427faf0b
SSDEEP 6144:4jHCsUfw5u7eC94LUX4rY7Q/CS+hFD+7t56OD9ZfSApprS:42s2w5Ee5HraSyFSXD9ZfS4g
TLSH
T1754423F2DF6A186B1EFC4506B12773084F7AEDE598CC154A804A6F4B309FB890667637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10dc8e6e-b967-4c3d-ad61-eb3d4241129a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\10dc8e6e-b967-4c3d-ad61-eb3d4241129a.tmp
Size 269KB
SHA256 50835473d0534a6730c8413a1ddd383e75b1b642dce2b846d91c852764403669
MD5 ecf8175a3ba2bef57ab06cb58d5ccb49
SHA1 4aa70c08ddee0be418d2b0dc541d661221fcbd70
SHA512 05eea6807198eb1d9fd4747e40c67edef2874b8fcc2ed2c2822cec7a81bd7e4e767fece638a01fa80f6ca726cf9425018dd6a31da3cc15174907ec79d6004049
SSDEEP 6144:YjHCsUfw5u7eC94LUX4rY7Q/CS+hFD+7t56OD9ZfSApprS:Y2s2w5Ee5HraSyFSXD9ZfS4g
TLSH
T1BB4423F2DF6A186B1EFC4506B12773084F7AEDE598CC154A804A6F4B309FB890667637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a92526b-02ed-4d1b-a308-c714f550c79b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2a92526b-02ed-4d1b-a308-c714f550c79b.tmp
Size 130KB
SHA256 a731a18e2bf4f07e93183be844ca0da67f4d28fab660fa662f69af4fc035c3cd
MD5 b4b757e14394f74e9b493e158664e28b
SHA1 232633bd0a51ae1afe30dd7270e9f697c85cf109
SHA512 470018bf06d6b7a817e5f391c86381cd1454eac4ab1820d756ceea400aff37f95595f968b090816e4078d2cc62fe273228983742c702e0cd1a367720e6c51a1a
SSDEEP 3072:xsb+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:2b+hFD+7t56OD9ZfSApprE
TLSH
T161D31232AA95D8BBC9FC6541B157A300DE766CED41DE2A09444A9F8EE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cc69b8d-573f-4efb-9020-630c97edbd5a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3cc69b8d-573f-4efb-9020-630c97edbd5a.tmp
Size 13KB
SHA256 c0bf193d3ef320b792254da7dfebbd7f04bdc81f6af1d7f71aaa68bb06d19f27
MD5 273139ca963ca221d9c6f2d841c284c0
SHA1 7adfa89a277658781a908859cdb7dce68dbc9714
SHA512 ab26f41dc134aef7e41521a9d741589e71317f3c56d3dd1bec0f829e100f2ad735994da856258669a341bf15f8e1c3e8588741744bd89501c50d52f80a8089dd
SSDEEP 192:yRDcBzCw8PAv7UpAPRpycN5lC9/Hsb+WNX5lhIFM+1+4H2AlwEVUNVyIsnAUgraJ:yRDmzC5cAQX6hwBWTx2Jze
TLSH
T16652B66AAD10297B9CEBC21AF9527B17D3F5303564952E84E6FC8D3C29E7ACC211B407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5df843b3-b2e1-4dfc-8027-91672c5d066a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5df843b3-b2e1-4dfc-8027-91672c5d066a.tmp
Size 414B
SHA256 a558cc3d4b97a686d0e3e8581b0f92a70827ca329a04451750f8e29a06eec8c2
MD5 ae69218c226de1e5ea74636d14045170
SHA1 aebf74621021386ae8d66225b27af903913e02e1
SHA512 efec269c1f4cca0cd3a5308b5a4c021f74b94c17bb6e40dc352e5e2e04f6c08935ae0e04d5156d3e6f84365d995413a218fed81f214de0d03d7349b68ff4857a
TLSH
T106E02BA5CC51AC6B29FD472850D44746E6D413573751866B3B3C99088FF96360185C6C
MD5 SHA1 SHA512 TLSH

Submit Download

9d7471da-04a5-420d-86e7-5a5aa8f6f2ba.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9d7471da-04a5-420d-86e7-5a5aa8f6f2ba.tmp
Size 13KB
SHA256 52eac9d26610d4ea07a49ca90787d9010fab31a71540ce8c695bbc9556400994
MD5 5d7a13db0bf4c273b61f467116308195
SHA1 61ab96d41b648a31c94a3f20c00364a241584f46
SHA512 8043183e63b71b52bc15b6e0ba7e7ab159a24010b831ecab4b66a60763caeab1ebc693b7ab42a3b635276980003a857885a6ff8c082198f99dee0c3a2cb577f1
SSDEEP 192:yRDcBzyw8PAv7UpAPRpycN5lC9/Hsb+WNX5lhIFM+1+4H2AlwEVUNVyIsnAUgraJ:yRDmzy5cAQX6hwBWTx2Jze
TLSH
T1F052B66AAD10297B9CEBC21AF8527B17D3F5303564952E84E6FC8D3C29E7ACC211B407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 37KB
SHA256 3c0d5d9f9e8915acba88888fec151bd7ded7079a623f6a9734aece4521c01ec4
MD5 b4ea307d18cfb705f057321275c2cc21
SHA1 dfb3b26593308dd618e484e3ffec7ed3d39443b2
SHA512 f440861116831c6174a16fe9d08375102776ef31982e9e6c7c8fdc668cc0c613975c8fac7fc229ef25520305e7b23384cde7d18f75aff7510ebc2955dfb8cff5
SSDEEP 768:xUkZQao9bYgNbATHwt+iV3EqrYcy3VL69nl5ZUkeco:xhqd9MvQt9VUDcnzo
TLSH
T1CF0302EA00B95AECA19E18F47219274DD0B2D905F9152CFC946490A26D47DBEFCC3726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 43KB
SHA256 08b668ab17c2dde5424fbfacddfcca4e37e2471be0e1cfff477831d4122157b3
MD5 a524ec6f978e298c04ff7e6e618245df
SHA1 15e6b5ac570c11bd38953ed2c8d9c2306f062a2c
SHA512 416e1be619b0d64f694a2aa7bf945d89d0d812e7cd12e387efac6574d1c66596d3b075b786a2a399d3c03de326666bb7a196851d85c4b85aa609c85c920ddb42
SSDEEP 768:aD2YhIpzPQAP6aqZjY5tBJtKLNtyn1EnHHDpDm4cuK12p5ZNS/DeWTzR:aDTapzIAP6BuzJtIdptcuG0zNADb
TLSH
T1E5130219B14CB841D529773F326A76F1F61DD50AF9E6FE403A7103400BDADB260A68CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 63KB
SHA256 0e554e791f58d3fd21d9a8eb173d831f11cdd950545936df99e6e4d4faab0f5c
MD5 6d2f677e07a6d8c2664a2c460452f09b
SHA1 86a944d329267a3b18aeaea88ad57e1423af2aa6
SHA512 44d87a7bbfbbcaa3c5c7e23f6c65b2fd7d44040588f6d4ef954f3f8cad9ea255579ef3d8c9cdb9cda69e6413ba022eb988a2ca0c4f814a3031dcc508b3d2dc2e
SSDEEP 1536:g7toVDszyNhfnqt1Bhza3Zee2Ra31GQZL:g+lszwu1Bhzaoe2RaPZL
TLSH
T17D53023BFB43569B7381C5D92A3F0A6AC56D096B29D3ECE0C1B6EA12FD091C410E5F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 26KB
SHA256 070a127020fdbdd5f46b56ccc18c3d3b91551a8c27ab42860f1c48c9f6f93f9c
MD5 5de5522799d22f1f75b5fd183468b509
SHA1 5be47fe4366562c3de6c4624a849117126dd639f
SHA512 f651b6d35c23caf8de63329a8baf8941b0ba732cffbfbeaf8b51737fa321c7bbf46966953eafdc736cad59efd6d64815361cc3ae1f3917e034e59740787e5059
SSDEEP 768:C9jK0EkoOP70PlitxUPwN20VE5KSC0MDulTq8:C9jK0EkomxUPwAL5kupq8
TLSH
T169C2E08F52CC58DD3C52B856AC4E5E4C787493C09DA863842DBC7242ADE9887B529FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000044

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044
Size 24KB
SHA256 f9074ac7ced776e010599f95c47c4f0306f31db29414d5dd9d8b80a844ce009d
MD5 bd9541be6af68e4dcdf4d9363ac06f26
SHA1 8b648d53599ec344fa9790f8ad2ed045194d5e1d
SHA512 7cbab524ae46f03f742908ba800e3e1bcfa992c10e0da189cd4fc81c22760ff2bc37acddafe54b87cec1142ce4196744c1104bcb7a0592ee6b2f5bbd2051a58e
SSDEEP 384:jWiPFVfdUiuti5OjtUfdTvsHUhVnp3tHjK3ieS6+NZoWZrM/q6Cb5hkNC1bMT:jWePlEZijskrDK336NZoerM6kNCVMT
TLSH
T126B2F10342AEC9B5EF4D02CB64947A97F00BAFD831EB1541545DAC9B1EB1232FE181E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 04460ecbe52212c29efadd4f68f23434630af09754456d945787a1216ac8c369
MD5 27c7330d2ce1f2a9ce3efdbdb8250425
SHA1 526056fea923650334bb5aabf7b5a9781f17d4c5
SHA512 0a07fca6960ba776282a41780b893d23a1adc6c64241541afc5f67943f0837b54cdea222484b959b39b5f353aadfe00353b3e06fabb84db021d860908aa514eb
TLSH
T137217403E2D09C0DFF14057A0CB668447429317BFC51ABAE67A4ACF8D5B32E129531B8
MD5 SHA1 SHA512 TLSH

Submit Download

73393381-a63f-4655-984a-828fe357ac61.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\73393381-a63f-4655-984a-828fe357ac61.tmp
Size 12KB
SHA256 f5c61b62c1e3894e51242f0cc7312b62058bec1b5ae56bce178d2141c94a2c59
MD5 38a8e3d46502bcc9adc81fdf7f973826
SHA1 5c1ea1aac86f5d5a4ebc50acf2632427471949bf
SHA512 6b51dad3f33dfc8b53ba87be57529782da14718b59b0c3377d13acc8840d74ec44016e9a0590c81f9423a02502e41e59a136aa93edb8e01902d248c07e85d58b
SSDEEP 384:D9KRIluTJ0Jj3JjsjUj6VIeNJNujOJjcaI7G85vh1YCkaMyfyNIgjpjB06jKjhvd:USQbadec/p5ES
TLSH
T14542CFF7C7E4812DC91256F46B257F1FCE2A092D422C3D1689D8AF8B93E14B1E29164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d342b0c1-002e-4110-bf4e-801d59727401.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d342b0c1-002e-4110-bf4e-801d59727401.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 96B
SHA256 2a84d9cc2129e32749805b2d48a41fb03fcf747a3c8cd944591307f91dfed4b8
MD5 80b24d63493f8a432ae098ad93b0d54d
SHA1 504d5357520b2066234582ed8ccae1737729d8c7
SHA512 1841392230fa82167771482966d5451cbcc698760b129d38d9444b9fd69b62add764775a86a24c7372c40fa3bda1f50bf3f3e50445b8b27e1db7bd7aff7f7b5e
TLSH
T101B022F0AB00EA23EAC00330ABC30CC0B3B22E0003C3CB3A80A000BACE233820F02200
MD5 SHA1 SHA512 TLSH

Submit Download

e05138a0-7d31-4492-bf0d-73314e9f20c8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e05138a0-7d31-4492-bf0d-73314e9f20c8.tmp
Size 13KB
SHA256 496dc62bec21515995d67060457dd073d05265c3ea79bea9a9c04b92f9112229
MD5 735ce6e895e39dc5a64ad25da5ec715d
SHA1 13ebd38857919a00953dbe012ae92775ba0361d2
SHA512 49379d7f0c1c7e1679ff55f9a6ded7146e81ddc0fecced3c14c737f66cc641fcf8241f264319d5043faf4e021fe759a0bf14d42b91903765d081e4bb7d4e7b70
SSDEEP 192:yRDcBzyw8PAv7UpAPRp2cN5lC9/Hsb+WNX5lhIFM+1+4H22wEVUBVyIsnAUgraJ:yRDmzy5cAUXmhwBWTx2nve
TLSH
T19E52A66AAD10297B9CEBC21AF9527B17D3F5302564952E84E6FC8D3C25E7ACC211B407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6ff546d-386c-4dc2-a4db-ea4a9c8b0553.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e6ff546d-386c-4dc2-a4db-ea4a9c8b0553.tmp
Size 12KB
SHA256 0d74a66d4151284970ca4f4a76da7af046e1ba9a1d0a0d1de5339addd17793c6
MD5 827fc141322e9793ec6f0b5b9b70a05d
SHA1 0834e9bbe0b684dbdf87a272a72ce8d5a9bce740
SHA512 b79fe6cf15c4b8d4700feb60a4bdd1b9009e578624f5e2224ab146844262731548cdae87606703133f92f811cfc06b5b35b86d2dd479ec34ec82dd60ed70ff8c
SSDEEP 192:yRYcBzyw8PAv7UpAPRp2cN39/Hsb+WNnhIF44H2xwEVU1VyIsnAUgtaJ:yRYmzy5cAUXHhwhWz2Sr8
TLSH
T108429429AD10793B9CDBC21AF9627B17D7F5202564952E84E6FC8D3C29E7ACC211B407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3ad4036-cf34-46c7-a250-5f102d6de248.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f3ad4036-cf34-46c7-a250-5f102d6de248.tmp
Size 13KB
SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
MD5 8620b09f169758aa6d92f2e7b8a4c29c
SHA1 c265bb3d46a3af238c08a66240583a655be69a0e
SHA512 017bb2738ebc633e2b1824b1fe90215df48c3e3ec2d222610a597c250ca9b406bd8560dd6e15c6ddcea319cc301407ec464c4569fc29dfb4f74923aa99fdceb8
SSDEEP 384:s2jGN7KxkXqKf/pUZNCgVLH2Hfgsl1/XODGN+ErU3pxHG4xHk4V4:s2GN7KxkXqKf/pUZNCgVLH2HfgszvO61
TLSH
T1C4520A27A88C9A3F0FD8C54DD8177F4FADF101566268492452FB9C1903A5BDB114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbb8771b-ef9c-4f45-9b30-5b1d48b8f7cb.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fbb8771b-ef9c-4f45-9b30-5b1d48b8f7cb.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d9bf9a35-bde3-456a-86d1-d86b4f97b8b4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d9bf9a35-bde3-456a-86d1-d86b4f97b8b4.tmp
Size 270KB
SHA256 a662b3dcdbe3c69cbb2bffd07091c51e2aeb8c8ed42f4fda35d94fe613808d60
MD5 26349b97f760f6f057bb80c001fc4370
SHA1 b046b7ef7d12416145ee091907eb6b45f9e9acf9
SHA512 5213a057c523e5af7a58dc0d6d8dbff419c42b7b66a8622d54fcc6d736a1d0f68c181d8af71ca372a824bd0451d42cdc9cca3348b9c8916c804275a768d808b1
SSDEEP 6144:493HCsUfw5u7eC94LUX4rY7Q/CS+hFD+7t56OD9ZfSApprS:4Us2w5Ee5HraSyFSXD9ZfS4g
TLSH
T14E4423F29F6B186B1EFC4A06711733084FBAEDE6D98C154DC04A7E4B309FA494667623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0cc05b568bae975ea4e42984b0a45fd7259b8b9d.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\0cc05b568bae975ea4e42984b0a45fd7259b8b9d.d3d12.cache
Size 206KB
SHA256 cdaad024574b78422e3921534e79fbc744d6ad4607b7c241e9973e0459ed5f53
MD5 a53f8fb313facfe330e76711dd625778
SHA1 552c9ff6632cd997ed9f9de42188d3b0272bfb78
SHA512 2b27edc2a458f7ce02dacab4ed211b88ff0856154c742f7b758ba7d57743ff9ea2b23cddf20eedd1422079b4d621e9dbdf8a6b62cdbb70c5b7ac5a8826a611ce
SSDEEP 3072:bce/8iomDYtzrTjdAq1y3LKb6d6+vm6zRySXvd58u4pSwzmMLe9tCmRGn8:bSms1qq1ybKms+vTzRySPWSOmR7
TLSH
T1FE248A51BBC2DE56C80043378DD6C3E43678FD9A9F47A30736A4B32EADB63C69912158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b080219e2e5e8e3e00bf4084293ef84bc9f538a.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\8b080219e2e5e8e3e00bf4084293ef84bc9f538a.d3d12.cache
Size 202KB
SHA256 9be631bfccd4f70eafbd433ddd7d60d40522808c43ada9ea81eb46ffac6373c6
MD5 f3130c6b4b269fae11837292ddbbc616
SHA1 e9ec8e921e57c4a42f7681bc10e0bf79e4d0414c
SHA512 f28302f106ff1a0945e9203bece44ba4bd69d2c8963e85aab22cb2f61b10980e394c06e9f5f9b26cdfb81356238570f7ee79ea85163f8fe75469ae8272876351
SSDEEP 3072:tY3qcGn+XYho/ZOqHQHMIx6l/IDIjqdzhXTkUlLKJ8sn/3sdb:GFOhAwH5x6hetdpkqKL3st
TLSH
T1E4148B027BC2DE2BC81407765CD6C3E83235FC969F47935772AAB76D6CBA3C41A90644
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

088a6ef0-55e1-4997-a05d-635402c252ee.tmp

Path C:\Users\Admin\Downloads\088a6ef0-55e1-4997-a05d-635402c252ee.tmp
Size 16KB
SHA256 2adc47428ea1fdefd690db1e37693fbbf6d942f8b238746966edfda59e17d5ae
MD5 b2f039431738967a5f53cd8f374ff697
SHA1 f8d625a7dd51352914398e896a2ee67925455515
SHA512 1b8e9ddf6b30f543e51c9d5c25fc4d78f38006d92ef1648117542adfd0dac14e2c9df217e0e8004d85468712e9b0fb1ea2818d6ebdd267fd260898685521e297
SSDEEP 384:QKutOUntHLxU2V8TzUQGuckuUnNPu6Y5esdOEAKu9xYIIiao:sXdxUW8Tphc5PhcsdOEAKIFp
TLSH
T13572C0D3792461716E82BE07AC34AFF4F0E33834886854C51695FC1BD6C16D5EF21656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/848-414-0x00000154D9890000-0x00000154D9891000-memory.dmp

Download

memory/848-416-0x00000154D9890000-0x00000154D9891000-memory.dmp

Download

memory/848-415-0x00000154D9890000-0x00000154D9891000-memory.dmp

Download