47571902699682109a1c251b50c82f71e5ad82978a446f191fc6a4e6afded984

Analysis

user interaction
yes
max time kernel
457s
max time network
458s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 22:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Captura de tela 2026-09-12 225825.png
Size 188KB
Sample261024-2pmbyafh77
SHA256 47571902699682109a1c251b50c82f71e5ad82978a446f191fc6a4e6afded984
MD5 a2eac898fa6d6ad3fa753e4583d2c41d
SHA1 3905020873ccf9c68b61554b3f295a74769da7ac
SHA512 501d46a16f7166773c915bbbf301006ac5276bf55120e793929f868eb643faa69b4093e65e36baf25720f574d14ff5e317507e768a7b38685798442d75b060c7
SSDEEP 3072:zyNNUOHo0TSX0FfPVkQQ7FxM7thiN13XrMnsSnLYaShoY0adPgT7ZsEnkM5iguLo:GU4mkFfGQQZxQ7iNN7qTFsEnkM5iR1Ty
TLSH
T19914020CC893C131CF6F64393D692D99B3F7142E51CC1E358A788B2DCEEA597624A3A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1560	chrome.exe

Checks SCSI registry key(s) 3 TTPs 8 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	LAVOICE.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{32CB121D-594F-46AA-9A6D-EB62FC2F15D5}	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3016	mspaint.exe
3016	mspaint.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
3212	chrome.exe
3212	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe
Token: SeShutdownPrivilege	4216	chrome.exe
Token: SeCreatePagefilePrivilege	4216	chrome.exe

Suspicious use of FindShellTrayWindow 61 IoCs

pid	Process
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
2000	LAVOICE.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe
4216	chrome.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
3016	mspaint.exe
3016	mspaint.exe
3016	mspaint.exe
3016	mspaint.exe
2000	LAVOICE.exe
2000	LAVOICE.exe
2000	LAVOICE.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4216 wrote to memory of 5276	4216	chrome.exe	94
PID 4216 wrote to memory of 4128	4216	chrome.exe	95
PID 4216 wrote to memory of 4128	4216	chrome.exe	95
PID 4216 wrote to memory of 1560	4216	chrome.exe	96
PID 4216 wrote to memory of 1240	4216	chrome.exe	98
PID 4216 wrote to memory of 1240	4216	chrome.exe	98
PID 4216 wrote to memory of 464	4216	chrome.exe	99
PID 4216 wrote to memory of 2000	4216	chrome.exe	100
PID 4216 wrote to memory of 464	4216	chrome.exe	99
PID 4216 wrote to memory of 2000	4216	chrome.exe	100
PID 4216 wrote to memory of 5776	4216	chrome.exe	101
PID 4216 wrote to memory of 5776	4216	chrome.exe	101
PID 4216 wrote to memory of 4192	4216	chrome.exe	102
PID 4216 wrote to memory of 4192	4216	chrome.exe	102
PID 4216 wrote to memory of 4808	4216	chrome.exe	103
PID 4216 wrote to memory of 5968	4216	chrome.exe	104
PID 4216 wrote to memory of 5968	4216	chrome.exe	104
PID 4216 wrote to memory of 3860	4216	chrome.exe	105
PID 4216 wrote to memory of 3860	4216	chrome.exe	105
PID 4216 wrote to memory of 2476	4216	chrome.exe	109
PID 4216 wrote to memory of 2476	4216	chrome.exe	109
PID 4216 wrote to memory of 2424	4216	chrome.exe	111
PID 4216 wrote to memory of 2424	4216	chrome.exe	111
PID 4216 wrote to memory of 2580	4216	chrome.exe	110
PID 4216 wrote to memory of 2580	4216	chrome.exe	110
PID 4216 wrote to memory of 4904	4216	chrome.exe	113
PID 4216 wrote to memory of 1888	4216	chrome.exe	112
PID 4216 wrote to memory of 4904	4216	chrome.exe	113
PID 4216 wrote to memory of 1888	4216	chrome.exe	112
PID 4216 wrote to memory of 2804	4216	chrome.exe	114
PID 4216 wrote to memory of 2804	4216	chrome.exe	114
PID 4216 wrote to memory of 5468	4216	chrome.exe	115
PID 4216 wrote to memory of 5468	4216	chrome.exe	115
PID 4216 wrote to memory of 2456	4216	chrome.exe	116
PID 4216 wrote to memory of 2456	4216	chrome.exe	116
PID 4216 wrote to memory of 1328	4216	chrome.exe	117
PID 4216 wrote to memory of 1328	4216	chrome.exe	117
PID 4216 wrote to memory of 3452	4216	chrome.exe	118
PID 4216 wrote to memory of 3452	4216	chrome.exe	118
PID 4216 wrote to memory of 240	4216	chrome.exe	119
PID 4216 wrote to memory of 240	4216	chrome.exe	119
PID 4216 wrote to memory of 5636	4216	chrome.exe	120
PID 4216 wrote to memory of 5636	4216	chrome.exe	120
PID 4216 wrote to memory of 4364	4216	chrome.exe	122
PID 4216 wrote to memory of 3664	4216	chrome.exe	121
PID 4216 wrote to memory of 4364	4216	chrome.exe	122
PID 4216 wrote to memory of 3540	4216	chrome.exe	123
PID 4216 wrote to memory of 3540	4216	chrome.exe	123
PID 4216 wrote to memory of 1500	4216	chrome.exe	124
PID 4216 wrote to memory of 1500	4216	chrome.exe	124
PID 4216 wrote to memory of 5812	4216	chrome.exe	125
PID 4216 wrote to memory of 5648	4216	chrome.exe	126
PID 4216 wrote to memory of 5460	4216	chrome.exe	127
PID 4216 wrote to memory of 3660	4216	chrome.exe	128
PID 4216 wrote to memory of 3660	4216	chrome.exe	128
PID 4216 wrote to memory of 2220	4216	chrome.exe	130
PID 4216 wrote to memory of 2220	4216	chrome.exe	130
PID 4216 wrote to memory of 4924	4216	chrome.exe	131
PID 4216 wrote to memory of 4924	4216	chrome.exe	131
PID 4216 wrote to memory of 1568	4216	chrome.exe	132
PID 4216 wrote to memory of 1568	4216	chrome.exe	132
PID 4216 wrote to memory of 1508	4216	chrome.exe	133
PID 4216 wrote to memory of 3212	4216	chrome.exe	134
PID 4216 wrote to memory of 3480	4216	chrome.exe	139

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Captura de tela 2026-09-12 225825.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3016

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
- Checks SCSI registry key(s)
PID:4644

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0xa4,0x134,0x7ffd61bcc728,0x7ffd61bcc734,0x7ffd61bcc740
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,12101545359018429699,7203624359577626528,262144 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=1848 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1544,i,17816261577434990659,407189711696896762,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,412670011486993630,15526434874758466327,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:13
  2⤵
  PID:1240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3304,i,4438441655298172227,13838878142955971858,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3284,i,17197126703138791805,7402564307399205015,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4636,i,15290496554425358708,15268931927583451523,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4776,i,13649382531338120627,5396879299359441865,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
  2⤵
  PID:4192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5260,i,16181712016842420121,11798930770606167839,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5372,i,3020718819017699556,133851391522104265,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5384,i,8352185345424154762,6850719902294572746,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5364,i,15328678649290506262,2516667007248447624,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5828,i,6469788916169786645,15855349903689484744,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,5729609146116713554,16102888171473640962,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:2424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6240,i,5311738963113785108,8386941444532376779,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5648,i,5673812913073924759,7787245467059622390,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5252,i,16168412681502538198,9315070969634647615,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:2804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5484,i,12666015731991966732,3789896404674567759,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5864,i,15815193009578692973,4276889728617680166,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:14
  2⤵
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5284,i,1629153858237259367,13735476210597858964,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5468,i,6941082837963171512,16113820330583861814,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:9
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5860,i,115093082009177671,5158903335501475303,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4684,i,7570130945654455364,6836955470709252005,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4668,i,11653413102055992781,15259597033114425384,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6364,i,11121584340851561709,14570922611632469336,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:12
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6008,i,2469378906708073149,15936676811308652279,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5800,i,12343591838225292986,2707996940319391969,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3640,i,6515358753888192003,10802965715684635440,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:14
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3676,i,17166081133301152857,17686220784043172303,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3624,i,5123127125817524024,7338466704125353037,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:14
  2⤵
  PID:5460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=5596,i,7715666358153532119,899059551575496463,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:3660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=4688,i,4610927911195258951,8782074015689103759,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=3320,i,7082855986788529921,14292645801380793890,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6892,i,7173717594383067425,9486851991671825913,2097152 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6824,i,7891005137425249065,10901388721416882729,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:14
  2⤵
  PID:1508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6472,i,1083955763046678923,6384518018832075220,262144 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3124,i,16628538150870094989,2650951490118417474,524288 --field-trial-handle=1860,i,15403421838904087479,2812126425559309293,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:14
  2⤵
  PID:3480

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4836

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4468

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:3136

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5812

C:\Users\Admin\Downloads\LAVOICE-H2-Windows\LAVOICE\LAVOICE.exe
"C:\Users\Admin\Downloads\LAVOICE-H2-Windows\LAVOICE\LAVOICE.exe"
1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2000
- C:\Users\Admin\Downloads\LAVOICE-H2-Windows\LAVOICE\voice\sherpa\sidecar\creativoz.exe
  C:\Users\Admin\Downloads\LAVOICE-H2-Windows\LAVOICE\voice\sherpa\sidecar\creativoz.exe "--tokens=C:/Users/Admin/Downloads/LAVOICE-H2-Windows/LAVOICE/voice/sherpa/models/sherpa-onnx-nemo-parakeet-tdt-0.6b-v3-int8/tokens.txt" "--encoder=C:/Users/Admin/Downloads/LAVOICE-H2-Windows/LAVOICE/voice/sherpa/models/sherpa-onnx-nemo-parakeet-tdt-0.6b-v3-int8/encoder.int8.onnx" "--decoder=C:/Users/Admin/Downloads/LAVOICE-H2-Windows/LAVOICE/voice/sherpa/models/sherpa-onnx-nemo-parakeet-tdt-0.6b-v3-int8/decoder.int8.onnx" "--joiner=C:/Users/Admin/Downloads/LAVOICE-H2-Windows/LAVOICE/voice/sherpa/models/sherpa-onnx-nemo-parakeet-tdt-0.6b-v3-int8/joiner.int8.onnx" "--model-type=nemo_transducer" "--threads=3" "--hotwords=C:/Users/Admin/AppData/Roaming/Godot/app_userdata/LAVOICE/voice/hotwords.txt" "--hotwords-score=1.5" "--bpe-vocab=C:/Users/Admin/AppData/Roaming/Godot/app_userdata/LAVOICE/voice/sherpa-onnx-nemo-parakeet-tdt-0.6b-v3-int8.bpe.vocab"
  2⤵
  PID:1068

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:5344

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:2864

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
1⤵
PID:4296

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004E0
1⤵
PID:708

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
PID:1724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1152977d-b1d0-4359-b0ee-d3a809046fa6.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\1152977d-b1d0-4359-b0ee-d3a809046fa6.tmp
Size 144KB
SHA256 82de44668c73c61a23c7b2750b8ae83cc39371ac7755cd6fd03723d5ff880eac
MD5 b5b6edd07aaa1df4fc361d66b276aeec
SHA1 4d0b6ba669d69f7d3befb9039e5b4fceaf313e51
SHA512 76a94e9e2b642e002df07c0e045363a523288a6a0b92a9b2263a2b3068ee6d3a58f964f382600acf80b4b013ca2cb3af26239dc6fcaad86aed2b7229fa2710ba
SSDEEP 3072:Dek7HCkDPU7b9mOs5u7eCyYbpuLUXNCzvfQ7Q/MzD:Dek7HCsUfw5u7eC94LUX4rY7Q/CD
TLSH
T1D3E312F09F2F285A2FF8891F3116330A0FB9D7A3ED0C5489C0DA3957219E7D6865B256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31269105-4319-48e9-bbbd-aab6cacd8bf1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\31269105-4319-48e9-bbbd-aab6cacd8bf1.tmp
Size 161KB
SHA256 a7c463041cec6e3d3241dfd5c39d72aeaccc8ca4219bce3d24d3ce18d5a75a83
MD5 c4af8943cf62f095a4b002051c4ce162
SHA1 81f50866077950b1e61fc33cc74e3555bdd6f42e
SHA512 3477370b4526cee923dcdcca6b0e45eb3bf7f31da7ae1b9f214eb740f2d8f458007fe6551e1ab6f63b1cac3c0d09af804f3fb8527ba07709013ab0fb396a40fa
SSDEEP 3072:DeVQTqHCkDPU7b9mOs5u7eCyYbpuLUXNCzvfQ7Q/MzD:DeMqHCsUfw5u7eC94LUX4rY7Q/CD
TLSH
T149F312F19B2B290A2EF88A1A7126360E0F7DD793DD0C1498C0CE3957319E7A6855B257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

385cb388-2e92-48cc-9611-c57096cdbec7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\385cb388-2e92-48cc-9611-c57096cdbec7.tmp
Size 143KB
SHA256 e6d13b5713df6ad8e805367744db354863aebf2e2c4159b233561a1eb1585efc
MD5 b1517d9f6d9d0383a459e13d7221af10
SHA1 994c86a2acd133d9ece3c9db9a5a596e4b3a17ce
SHA512 3539cf0ccbd9395bd9118e509f9743038dad2c43e6e6846c880f934c099fb4f7591d8f82cc4f8f980306ef5b769728045a3d7e0b897398031b2d0e1627173ffb
SSDEEP 3072:DeUyHCkDPU7b9mOs5u7eCyYbpuLUXNCzvfQ7Q/MzD:DeUyHCsUfw5u7eC94LUX4rY7Q/CD
TLSH
T148E312F09F3F285A3FB88A1B7626230E0F79D5A3AD0C1485C0DA391721DD7E6825B657
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a977b34-aea0-4479-80e2-90fa18906157.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5a977b34-aea0-4479-80e2-90fa18906157.tmp
Size 144KB
SHA256 4c4c328bdd8a52c1f58a77f5b3d9f79aaa73559af3d8a9b75779f3b1b71d15b0
MD5 bf8befc817c953d4edfc8efa8b8aed1f
SHA1 1ab0dae81563e5dae7ea2a6ada6354921d3dacc1
SHA512 0b947fdc2ff62ee45e3ba673c16858478546927aaa7f43035d1c75c97314be4daad5c344256cb30cc21bf5febe68f681e5e5c6ddba866db3a2d576f55732c5b7
SSDEEP 3072:bek7HCkDPU7b9mOs5u7eCyYbpuLUXNCzvfQ7Q/MzD:bek7HCsUfw5u7eC94LUX4rY7Q/CD
TLSH
T1CBE312F09F2F285A2FF4891F3116330A0FB9D7A3ED0C5889C0DA3957219E7D6865B256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e2209c3-44cc-423f-ac6d-3c46a8066d39.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1e2209c3-44cc-423f-ac6d-3c46a8066d39.tmp
Size 13KB
SHA256 46419933e503923cc4929f9ef9920f90cf709f92efaa3a65aba3a0aaa72187d0
MD5 32439198b8704779720d28f56f9446ee
SHA1 a85054491396c6da311c54d125534e435bbe0e59
SHA512 b31b640393841a87f8fceeb282f16d55b5937628a4b0d6965639b27279f3a3c4a5d19dafee65cae77c677e7e238f205fc4f587b1834d83d30a8900ebdfbf7668
SSDEEP 192:GR6cBh5n7+v7s9PRp9Tu9Qls9THsb+WNH4GOp+6+5FeB/eszaaVyIsnAUgE:GR6mh576CXq9wYFGeRaaE
TLSH
T1CB52C72AAD20797B9CEBC229F9257723D2F5203265D42F84E7FC886C15D79CD221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2bb71711-b63a-4c7f-bbe4-54e1e4b8cfbb.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2bb71711-b63a-4c7f-bbe4-54e1e4b8cfbb.tmp
Size 13KB
SHA256 d90978fd2d3f8fdeca3cdecc8e4a30c5b1528ad6cfa250c387e77bc5a0e4a9a1
MD5 ce34c9b46a5ae0ddbc5976a23ecd6eae
SHA1 a1aacfe81f2c58a0d63223e7ae94306b210d8ac7
SHA512 1cce1521d80d85138b56c49fd1b4e2f9a5ec27f9d5ce2489f4ff35908d57a0bbfd8890c3d9af9760311c38ec9746ef0e255f28063458d086c5b4158c7435db82
SSDEEP 192:GR6cBh5Z7Vv7s9PRp9Tu9Qls9THsb+WNH4GOp7JM5Fe2/eszaaVyIsnAUgE:GR6mh5VlCXq9wYHoeeaaE
TLSH
T18F52C62AAD20797B8CE6C229F9257723E2F5303265D02E84E7FC892C15D7ACD321B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d454023-7063-40d0-9857-6039c5238349.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2d454023-7063-40d0-9857-6039c5238349.tmp
Size 12KB
SHA256 db81a5a4baef1e30a8972a8d4bd84365fb3b0044664e0fad55a75b5951e062f5
MD5 b4e58d2696af9e2e78ef162b9c3a4441
SHA1 289f8bcacf4fe910225141e672a9809454f26f05
SHA512 38ac8e642b5afcac1695bfdf7336515ba7e66d81fd6f8374cb982b98ebddd584683a607060be3610c6ab35badffd14ddd349af6faa2d26daabd7cf76e4c5a6db
SSDEEP 192:GR6cBh5n7+v7sAPRp2u9Qls9THsb+WNH4GO75Fe//eszasVyIsnAUgE:GR6mh576hXH9wYXeTaIE
TLSH
T10842C72AAD20797F9CDBD229FA257713E2F6203265D52E84E7FC886C11D79CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5193ba61-f6f5-4283-98ce-72d150f02c4b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5193ba61-f6f5-4283-98ce-72d150f02c4b.tmp
Size 13KB
SHA256 84af24cba1da846d23e363525a8b0df37494eaec8ca02ae33f2d80c0e635fb1b
MD5 c4c2f9dd04fd9f4bf64f9a53272c510a
SHA1 71cb3e8cd8187c363e6c1f0e87d08a22937c65ca
SHA512 c2d4ccdad0c2b9cd926273e0716c67a69f83cee9882c4b17904ed73d5da66c6353fe5fdb6ff4cac1f2d3ae7f5d01167a13356cd00eee168b774a5992ee1eff89
SSDEEP 384:dXj/y7KxkXqKf/pUZNCgVLH2HfgslsOXOD/W+ErU3mGHG47vUhK:dz/y7KxkXqKf/pUZNCgVLH2HfgsiUO73
TLSH
T1B8520927688C9A3F0FD8D64CCC167F8FACB5016666B8496452FB5C0803E9BCB114A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f24fd71-ee9f-49ee-b416-b2d870db665a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5f24fd71-ee9f-49ee-b416-b2d870db665a.tmp
Size 12KB
SHA256 018aeaa89cfecb36c2a392450e09aa8387025c340c3930f3d489f67ddb8a5193
MD5 eca230c443d302aaccec33a9f0618662
SHA1 a19a53e7509394ac84590880dd7cc62438021db0
SHA512 98f3ebea52b5f1abb646c929379f62e582739919f319413a1c8633cbcbc5b7c4d57f4eac246e6f5b00f795b8831aa1343646d91f7f189e3417975cf50f2d4ac6
SSDEEP 192:GR6cBz5n7+v7ZAPRp2uYa9THsb+WNnGO7bL2U/esza0VyIsnAUge:GR6mz576QXj9wP72Yawe
TLSH
T1C642B52AAD20753B9CDAD229FA257713D2F6203275D52E84E7FC886C11D79CC322B457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 92KB
SHA256 6b7c19a445c0de59f8ecd4f96243716ca40eb693988416ec4a1c38e0dd8ee4c5
MD5 ea4e6185c71d1a9f40edb69e12931416
SHA1 2b589d252641728410193ba08e9ea01f00ab98b8
SHA512 3a724edefdbfb9b56a8839dc547978577a05074c6e28111ef1e834f09a781f0eb7f030d272113fe01ba6e18eb4d64d4777fe563c3c93488c02ad57718f222054
SSDEEP 1536:t29GvN/lk9pkGrLDaPTCwWKM11Ds6eU/p9ItIJHkc79hmRYi7zjmOgCupaaO17X/:Bl/mkGXCTCwaDJeURayHZ79ERYezUCu6
TLSH
T10F931296136B1193D906403F3B7F0246F8022ADFF92B99E2802E1D571915F6B2D36F31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 353KB
SHA256 961e3419924e7ceefe40e3e90460cdcd79ee78fcaf0f4cf95c9a90a0223d5179
MD5 e57913fefdfbc2c02f51d655aa04cdd3
SHA1 539e15e67f38df19b31d28283d48a7e1d7a9ef96
SHA512 bd0508ae58a96fb46d41c7eb022c4e2345a42c20e57fa9d826cbdd02a3e41b21c3d3de3d436ba045c996ff30f6d5afc2e8ba3e8f03d9b18442d42ffeb2a34ab8
SSDEEP 6144:86PFqaflvhroH9MidnfeclaeROipOyQfL7TZts0XKtPir4c+C:H5fA9nBejIOip6zHkDP84HC
TLSH
T1BA7423BA21FDB18578E749979DADEC43014CF8A754FBBB1C3C33E82A9E411526B70825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Size 24KB
SHA256 f9074ac7ced776e010599f95c47c4f0306f31db29414d5dd9d8b80a844ce009d
MD5 bd9541be6af68e4dcdf4d9363ac06f26
SHA1 8b648d53599ec344fa9790f8ad2ed045194d5e1d
SHA512 7cbab524ae46f03f742908ba800e3e1bcfa992c10e0da189cd4fc81c22760ff2bc37acddafe54b87cec1142ce4196744c1104bcb7a0592ee6b2f5bbd2051a58e
SSDEEP 384:jWiPFVfdUiuti5OjtUfdTvsHUhVnp3tHjK3ieS6+NZoWZrM/q6Cb5hkNC1bMT:jWePlEZijskrDK336NZoerM6kNCVMT
TLSH
T126B2F10342AEC9B5EF4D02CB64947A97F00BAFD831EB1541545DAC9B1EB1232FE181E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 59KB
SHA256 02cdef74482d1670c3517f3dad7422e5845abdb6196fbf179bc945918ef78880
MD5 f5cdad604750696c02e3ee16daa2d990
SHA1 4c787484b8093254e0c1153ee85edb36849ea88e
SHA512 2918ded02026531c35bbd4fc3672b6763c0e4994473293d8b81b3b11ab058cda4c8fec99b6b3fd9d54bb5684fb91e55bc4f7c0128483badbc4ded8639b4aa8c5
SSDEEP 1536:bzGwJzTt/Xs2im/d6zk+0Dfr9bU5C5YAmnT5/4ttWkPXvrtIqZiOdu2wd0/:bzGCTt/Xs2im/d6q7hnynT+kkPRLZi4V
TLSH
T1FA530137BA8C190F994212D19375C157EDA5B73BE834AC23B421AC866EFBDF7252D120
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 56KB
SHA256 8638cea23f4902ce93a902a999e044148480f38adce93c9a9d54270d0872ace0
MD5 b1fabde1b5dae564e522e7c91932c9c1
SHA1 519e4c19c4ed6abe2b42488cd6b956614bfaeda9
SHA512 c7e8d09be0b21f755224788fa9e0a165bba7fc038b61f8fb190fe14f3a809114462484eb4e5658d995ff45776355c2aaad7773aa2ebabe10ac6497d92ebf8afc
SSDEEP 1536:xFelLzMa/CgH5035GmVA2/Iwe7u9ZfgKS1Gx9LdYXAVD6NN:xFCLzMa/pH50VVA2Qwe7EZ4Vk6j
TLSH
T1404302BC97BA35EF194CE1358C9C0C2CDD486F6113AC1791FABC247D54F2AB1B81690A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
Size 65KB
SHA256 840fcbc8f4bcd56df588deff27f295a554c4582fd5536ff13742106f0daef7e2
MD5 00920ba75258d8b5450cb8fb73d6a5a4
SHA1 2c79486daece9d52f021b4d0f7780cab261e9766
SHA512 6d699c24ebf2821c7c7944158b431a9a4b49e3f1d7144ea89053dd9f971c1711ca9c1605cf1a0f16552bf72474f9dadf8ee86c506c5ece7b16079e6f29a12820
SSDEEP 1536:Zj90+FI5m6y7PNHTYljBOVm/KInB1ZYE7hz0zfl1:Zjm+FI5zy7PdYPOoLz0T7
TLSH
T1C06301258AE31E33ECB83955A4E3B0504D16723700FA2769E0DD69E53F6CF9F98D6098
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f
Size 55KB
SHA256 23d5c17a5f00d148823226ff55c21b20953bebfa7a4009e91641c2891925fab2
MD5 425306d8c1ca12454291dbb67786fb88
SHA1 842b73e8bf69187fb5853bfbd6a2c9668c74d62d
SHA512 881e4456a7feaeeb7b7664cb3fb5a9e7e7daffa1495958420ec53373b550130298c28964386e1c20603dca7a3cbfc93172d6b912c4c03b62c6a88920bd05df1e
SSDEEP 1536:/eTRWPYlhyBzxIptIk2WwSUih9Wdvro+k:/k1/GzudjwSTh9WdvU1
TLSH
T1B4430124094D9906AF641273243E0DD85DF6D7B890C58ABDE00E9F84C363AAC7BB56DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000055
Size 74KB
SHA256 70e4d628843c8aa128f28b04653deba8bc351b4b868d4d6e9ada67a3e2cfb400
MD5 5c1cb34c1dd3766326afedfbef9f4aab
SHA1 da51bf4e974c86eddbca6e3b7e07967b21a08367
SHA512 a42ca1fe34d594fa550c9f806022d3c3674a7f03ccf0359b1bf623883b807fad668fdb2a05e89e4335a98a88bb94a8f9b47423e22f2bc9d882899ed6ff26de5c
SSDEEP 1536:sl9xog1rbd61Os/oqNREWWFkSXI0SlxUbW8uIl/7SpLP/v9:s5Fp6l/RvWFkSu/d7Il8Pd
TLSH
T1DB730260BEEE2E1A9C337F0F5D94C9852562FE9B60CF16EC4FE44D98D15C1E682402A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056
Size 17KB
SHA256 334fffb50b8d73898b8f7316a1995e85a4c88ef68b926309345623652237bcd1
MD5 4a0854f6e0405689c195c19451966a72
SHA1 63d9274c97b4e7499c31e914c31642fcbebce1c5
SHA512 79e8f279fb4cac00b06b87f47abf5dd0bf32b6b3d1592ca43ea5334783f11701d95276156348fc345465cf46a36fd02f7e9cb863d4b5f349896208ddaaf17af8
SSDEEP 384:jEU9czoqCwflMd3VX1qp7PBuKvGtvLwQE92o9h4LNDEnQYV4Rg:jlqKwGdjqp7PIqoDwpqNDw7J
TLSH
T1CE82C16F3893F412306E55118CC21E9AE34D947C5C71DAA6CAD98398FC7B43293DB0AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 b7f9b1487d1a531d8960c664692f5807ef3e69dc5bf1f02d1c7e9cd7aa647345
MD5 1712fc2271dc5263c9a93993631c8fe5
SHA1 1555f2c67bffe3e30a694499d195e85b1e17cbcf
SHA512 28ff424d82fdc884380da1bbae5bb82b771d817148ebf88322590819061aa0747a67c93b1ec2378a76ad5280ffa61522f0506f37e30777f59a4e438306e49c1c
TLSH
T13241AB45E5C5452ECF41473279BACC3A630B459FAF4F3F9633604CB839832E90610A6D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

28bfe272-43cd-4d64-aae4-90372a6a774d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\28bfe272-43cd-4d64-aae4-90372a6a774d.tmp
Size 15KB
SHA256 0200639dab7a0df985421e476d2f9734add35829c9c0176cf03d0b554d694048
MD5 c5d2414ff55165da1587385c5de83005
SHA1 3e7b6998cb701e3460a6af361f38cd29f49f1055
SHA512 f82e80265e9e0d82a19453108a8900a12f5f9a104dfd48dcaa040569c234a4b3d82436092ce29c1130407ba343d7f44e6801828c1b1fa3a14b3e030793375cc3
SSDEEP 384:D0umEtqVGJJk5JMNjNjcjPjMCJjEJTe983EdPBejGa8jjjxIZpEdhQrIdIztImSo:3YvOWFuarV2/QttKb
TLSH
T12562CCF7C3E4862DCA1256F49B156F2FCE2A0519036C3C2689D8AF4BD3E1472E255B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56423f35-a350-4a36-974f-183eb478f901.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\56423f35-a350-4a36-974f-183eb478f901.tmp
Size 17KB
SHA256 44d2e09d283fcd90fb80cd5f55ba2895d4aace49d10ea79f0974aaf8219f3025
MD5 772159633c826058525ac893663d51be
SHA1 658df76d65cc45029f1b149c30162233138477a2
SHA512 a3138b62bf2d97785448fb8f22080dc3ff20ad5f707bc0f4574b0276884a4a081e63f6cbd204677d0739501ee9d64dc74a0dbc347649097e78c51eaf3a518e9c
SSDEEP 384:DCHAdU55xtJ73Jl8jqjTjRjCmJjAJrexwPxSQBejzCIZpyShQrIdIHnIQI5+mIfA:MZJu9+uozC2sXHa2rm
TLSH
T1E3829EF7C7E8862DC91256F49B257F2FCE2A0918022C3C1689D8AF9BD3E1471D355A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68c3d548-9cd3-455e-94f8-0635482806f8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\68c3d548-9cd3-455e-94f8-0635482806f8.tmp
Size 12KB
SHA256 b4f0368d8185929de43bb10ab3699880e8ce2635f33de3680505475499b3a366
MD5 76b38ae19b0818a4c9b0141cae5a0b9e
SHA1 2599f3fa231af46a1832d9aa94a49e3179571931
SHA512 7313e41d1df93cfa3e913f7b8bf87f1b7810d5ee098176ef5984f16ce459de77f9b045b5708ca52780bb25e3c4ec38fc07575168e277e3989e881371640c8a60
SSDEEP 384:DCHAdU55xtJ73Jl8jqjTjRj6IZpyShQrIdIHnIQI5+mIf1i7Ma8NCgjyjXjvkjD1:MZjuozC2sH1a2d
TLSH
T1D142C0F7C7E8852DC91256F49B257F2FCE2A0918432C3C1689D8AF5B93E1871D35164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb63ff45-8de5-4b3e-a5cf-79f59c9f66dc.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\eb63ff45-8de5-4b3e-a5cf-79f59c9f66dc.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 96B
SHA256 d28c5f1edf121099d59f67c969f792066aed9a168f28af190b933fc910608a06
MD5 afa63ce66bf449c4d77192503e5b8002
SHA1 7bad07e86b188459a5abbfe21e36a45d53c25f25
SHA512 77c119e000864ee37bcaa415c09818952e8bf1db3b392227501ecf55c7d6d158070fd9173d8b0d59d366b6c8e113e631eb6a84981c8b6de50d38a1ef9f3dd7d7
TLSH
T1D0B0220080803E02C00FC3B0E2C232C03F300EA803C3020303A00038CC223A2F203203
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 d5a929e4c88001ba73bab118d39adabb85f9d35bf1b10b845ca3ab48cdd5ec94
MD5 1f80a6b1e50081abdb5929397fa78acd
SHA1 4ec01177b43350efcf3e668d5e2e175a3e1a8d22
SHA512 975aa0a7830f09085647ce618dbd243e83ef1b980270411714334aee3d516055c4637b343a37ecf86cb1d2996f965777d81da7bf2604f885dc746da4b821487f
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 b48ba831967e413491709071375c178ab4bb13860fd386b66cf5bd09a20a09ef
MD5 a510b539635a5cc52c87ef47ae3d1a15
SHA1 d815aa8f7f54d25e617be04590ca2d34dae1cf9c
SHA512 a1a3abfe5e986ab34363ca16982ccbc6195970263e115247280e4bd9ba60c7cac7d94d08f90edab3f2f640d6ce252676554fcd1b4f7d09158f36654020303120
TLSH
T14EA00220CAD0151ADD9147BAE1E60D412796489459914303579154F5899F5D44245220
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

a387064b-d640-4eb9-80f3-18db7cc9b30f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a387064b-d640-4eb9-80f3-18db7cc9b30f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

ae114cbd-85bb-4fd9-9717-afdd3a948997.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ae114cbd-85bb-4fd9-9717-afdd3a948997.tmp
Size 414B
SHA256 a4c094f7781321fde8c4a649976cc1099767ed37e5b393df567bfdf64a7cf5ab
MD5 bd668e69db45f3d6bec3e4014abee38e
SHA1 f63b3d6bbcc9d52153f2b3270a11142899d5b0c1
SHA512 e799c1bcfaf224747aec7537a9fa962cced199e0d8f4b0a279ed304df1294f3ecb0c0b933e8f0e7e916f7f1f92839803c3368f06774d8cb6a849cd67da907ead
TLSH
T146E022A9CA60EC2B19FC4F2861A44282FA1517172B904A5B3B3D914C8FB5A3B419AC2C
MD5 SHA1 SHA512 TLSH

Submit Download

d5fdf932-8e87-4168-a836-12055d6130e0.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d5fdf932-8e87-4168-a836-12055d6130e0.tmp
Size 13KB
SHA256 c7fa188423927392a4a536164338903e2c19f3e310e2b590a841c389cf1397fc
MD5 e0b2c58bfd010d7e2ffd7698ab6d2a5e
SHA1 82f82903ff9820062c35514d461a61204a102749
SHA512 2013cf7674128e80ad60fa420619f51ba94313ce43fc4ef8f8b6395ff8255834d2c10b59b2434f00c2d845b64a120cffa6c1506cdcb4679941b955757a9d485d
SSDEEP 192:GR6cBh5n7Vv7s9PRp9Tu9Qls9THsb+WNH4GOp7JM5Fe2/eszaaVyIsnAUgE:GR6mh57lCXq9wYHoeeaaE
TLSH
T10E52C62AAD20797B8CE6C229F9257723E2F5303265D42E84E7FC892C11D7ACD221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dca63b24-b763-42ee-aa94-10ceeb5bfcb6.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\dca63b24-b763-42ee-aa94-10ceeb5bfcb6.tmp
Size 12KB
SHA256 28f1f874b1fb024e1664aa22f3ed582df0f9cbb3dd0c365e16156eb1cc7f9337
MD5 ce67ce2edc3666f49f3689da8fc8bb21
SHA1 549614d76b00842b26ec91959a73cd50b8f54c15
SHA512 e2d160a2f7259700f7d7600932fad47677751e5f609fba345e6c6bf558ce9cea6823431788eec59f371a19f393205760d3fd14fd85d27e5651a5dd1556a62d7a
SSDEEP 192:GR6cBz5n7+v7sAPRp2uYa9THsb+WNnGO75Feq/esza0VyIsnAUge:GR6mz576hXj9wPXeKawe
TLSH
T1B042B52AAD20753F9CDAD229FA257723D6F6203275D52E84E7FC886C11D79CC222B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3eeeaa9-d72e-41bf-8c08-31320b8bb2df.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d3eeeaa9-d72e-41bf-8c08-31320b8bb2df.tmp
Size 4KB
SHA256 afe46849cf4912d33d8924708f119899c9deca80043cf4d2cc1262b172573ea4
MD5 bd20103a2b243fed48a0ed6c3918ade9
SHA1 b99975395185d0724cc05b83d783f08b0b059ddd
SHA512 1fff9f57ad280f7fb8ec0c449e9fe6fffe53e29f652520e8c3477f90eb35b3abd431c9030a902721d63622a9529b7b0a7de4377584d1abe3259684ed0dd17642
SSDEEP 96:pC0d+U7D/u1i5WFtfvuvTj7sCRDotok57HDSB6jGyvutFDLfmbYLsv4a:pC0z7q134vtDUD3yf7FDLfmbY6
TLSH
T14DA11A70E87C99BB8576C485F5422A43CEB062BFA902BF80D8DD1B1C11EB1EC1316A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52a7a218-313e-41c6-91ff-a1ff37e15a71.tmp

Path C:\Users\Admin\AppData\Local\Temp\52a7a218-313e-41c6-91ff-a1ff37e15a71.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4216_1723364134\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

0cc05b568bae975ea4e42984b0a45fd7259b8b9d.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\0cc05b568bae975ea4e42984b0a45fd7259b8b9d.d3d12.cache
Size 206KB
SHA256 ae20a7697ea616b26c42fd063761af07ea72c3c6ada2ad67fdd128672781792c
MD5 86f335e15ab6dbde3713754306b800b3
SHA1 92924bce97b7925e84a8686612e8ea01190ab02e
SHA512 e4df04fd381c66fef4a58610a7283c785270e2836f208fb58501901ff7f484f3dd2db69bbcda6a8a46de7bfebd05db4b08d129bc3dcdfa93cde1e2b5a3e5fbd0
SSDEEP 3072:bce38iomg8tzrTjdAq1y3LKb6d6+vm6zRySXvd58u4pSwzmMLe9tCmRGn8:b6mr1qq1ybKms+vTzRySPWSOmR7
TLSH
T12E248A51BBC2DE56C80043378DD6C3E43678FD9A9F47A30736A4B32EADB63C69912158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

137891017d8cd29cef192f3f7a249d32945f3b12.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\137891017d8cd29cef192f3f7a249d32945f3b12.d3d12.cache
Size 105KB
SHA256 4961a719881df69e6d56598e9010106c3411de1f2fdf30e1b488ce418da3d1ea
MD5 1ed052571f010fc4bd155d8baea362f1
SHA1 968677d262efef7ec6bcf040b2d93f35df3445c7
SHA512 fd327f6d0d777b2ddf73bac48748238cae6f58023946ef266172ff919fa9cbae966892630b3a8fa1ea8823f44aa699e440a19ede7730fb82e0fb3f593061fab0
SSDEEP 1536:N4F1TemV5ytR7AlexJJrN3msXZqPiV/tsxolVWZJJ/7W7taSx:N4ramVmR7Ale3JosXWiVGxolVWZXWh
TLSH
T11EB3C042BBC2DE57D914023A4CE6C7D83374FD569F83A31734AAB32E6CBA3C69921444
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19337fb591a68dbd9852f7db022c3680209b1169.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\19337fb591a68dbd9852f7db022c3680209b1169.d3d12.cache
Size 214KB
SHA256 85b2478a98f33581b71bd3eba9628efde8a42cb2d446e1ef6d998f18849b7899
MD5 0e0c8608a4fd06fb22cd22055fe7966b
SHA1 5de63fd54941841e27e4e29d179ef2a8428fdc21
SHA512 ad95f48a98a5ae61c3ab2083c3dd690449b1a72cce75e4facec95aa427ec5374773c7466544921bda556103bc752d8c9af5be2c04cc8239b993d2cfe82b060e6
SSDEEP 3072:62cWnLZ5i2naGtkMiKC9KmoGg0J2DX+1Xqa5a5DxCKoIm6R/bqmgmtW:vnLivmmorZX+Zqj9Vm6Fqmg8W
TLSH
T197249B51BBC2CD43D514437A8CD6D3E43634FD92AF07A36735AAB36E6CBA3C18922064
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55bfe64224b2e0b0e1675052102f540f2c0d8fde.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\55bfe64224b2e0b0e1675052102f540f2c0d8fde.d3d12.cache
Size 106KB
SHA256 403124e72f19114ff55fea9b9ff70dbd31bf956527587cafe786236f339210d1
MD5 434af34c373eb8c4f91490d1a5356cdc
SHA1 02683c937ba0e175c0d30e150cd965c5df099f80
SHA512 b9c186a32ee10ba4f1610557c48d38e68203474f55993e2d6752775436394f18b1aed61b5de3639a3bb57f5a0621b73bd8e07cea01aebc9acdf775a9e50c1c2e
SSDEEP 1536:Psn3tex4LkXQpEEaaubqr+X1/wPQbilGduSMakGyUGnM7rXZJkvm:M3Ix1XQebXbqr+XyCEsuSqWPZP
TLSH
T12AB3C002BBC2DE53C814023B4CE6C3D83274FD96AF4793237665B36E6CBA3C56A52458
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58a20702bd974858685750a97c8c88ef20931acb.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\58a20702bd974858685750a97c8c88ef20931acb.d3d12.cache
Size 214KB
SHA256 0fa212885b3efa9801bf3603cffddc7fcd51b9784e6e7ff390f94ef632d7a574
MD5 e54e4111509130522abe732c83ea0717
SHA1 04b9531b7d920763ee6e6723a308ecd1e546c782
SHA512 f6bed72b4958fade8dd5045dbcf8865a22cb4a25219d46fa31f672497b4a44d67b6e884002e59d472787d691aa73a2fa3a028bc484f78e96c575de77106726b0
SSDEEP 3072:e2tWnLZ5i2naGtkMiKCizmlEK3NTyhafxSnK1aNkMyLKUASguGUl8c3/ArHY4r:4nLiv0mlEaVNfM7NktOUAHuGUlhvArxr
TLSH
T18F248B02BBD2DD47D81807368CD2C7D83234FD92AF07A3673195B3AE6DBA3C59926058
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b080219e2e5e8e3e00bf4084293ef84bc9f538a.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\LAVOICE\shader_cache\SceneForwardClusteredShaderRD\113a20f7d89cf02f0953bccc0dc86e2e04bd93a8004a5e34c1ca5362e01314e0\8b080219e2e5e8e3e00bf4084293ef84bc9f538a.d3d12.cache
Size 202KB
SHA256 e2346768533ee91fb6507facc583ee26e0609ba48a0faad4d3d50ce387beb63c
MD5 ff7ae2005e0046cfaff609c9580bc8e0
SHA1 bc041b3a1fb66523fe79e5ef5e8528ec195eaea3
SHA512 4d8206fbb100dd8c89c792050f1ea41a219f799f0bb40f017eb3152b3fd1a7368a9d336c66f9110a11aeee886e54b6b96c87dd5d78b7a79d35245b12594c4fa4
SSDEEP 3072:5a3qcGn+eZho/ZDqHQHMIx6l/IDIjqdzAXTkUlLKJ8sn/3sdb:YFYhRwH5x6hetdYkqKL3st
TLSH
T1C7148B027BC2DE2BC81407765CD6C3E83235FC96AF47935772AAB76D6CBA3C41A90644
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LAVOICE-H2-Windows.zip.crdownload

Path C:\Users\Admin\Downloads\LAVOICE-H2-Windows.zip.crdownload
Size 1.7MB
SHA256 87edd891b4bfb69729c6d806630ad394ea76ea4c622d33763c118eecd8ae83b0
MD5 78ae21550e3296d4c23ccb5eb26bece1
SHA1 2a452e79f54a580752645d1878a53d0a796b95ac
SHA512 8faff10327ca2fecf6fc96aff35b4df06a52865176bc2aa024cb874ee0149554d13adb2be5801e24fa537bf3ca4bca856f57dd1a79e3cac6c12fac253d3da67c
SSDEEP 24576:fqXbDKBlqUKItdTEVPhwQEvf/oin4ATwHHgH+4MOqMYUZHkDPOgConxeG1kY+9qW:SSBlqUKaq2QCd4AkgHfZED2hGscW
TLSH
T1B08533BD4AF0648210884B01C72A2CA9B5D703ECF3A575345699F773C9E58BFE64E26C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1068-1140-0x0000000000190000-0x0000000000198000-memory.dmp

Download

memory/2000-977-0x000002704CD30000-0x000002704CD31000-memory.dmp

Download

memory/2000-975-0x000002704CD30000-0x000002704CD31000-memory.dmp

Download