Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

22/11/2023, 11:11

231122-narq8acf2z 8

Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/11/2023, 11:11

General

  • Target

    FabFilter Total Bundle.exe

  • Size

    42.7MB

  • MD5

    3acf9965d7a4974cc4be307b52e6b8b1

  • SHA1

    da68941d40b75eda0d78c2fa416693dca49e341f

  • SHA256

    48f947f1028e665251875c1ddcbba74e521ec2694a816e365b390689233ca405

  • SHA512

    01a46a4d069a1ecc2ec2c4620e520e1c6f08d918ea8340caeb04234ae1598796ac97fa2c2bf18a797a6e511840b3e8e3d13850344fd324f3bc8008e89a79f34b

  • SSDEEP

    786432:8uw/TQBk3loOAO2CY4wKkc0ONkBVYGHdxWZ/yPCzbTyyf9PqunO8:Fw/TQBk3GJQkr/dxWZ/yab19Pqunn

Score
8/10

Malware Config

Signatures

  • Sets file to hidden 1 TTPs 2 IoCs

    Modifies file attributes to stop it showing in Explorer etc.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 31 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs
  • Views/modifies file attributes 1 TTPs 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FabFilter Total Bundle.exe
    "C:\Users\Admin\AppData\Local\Temp\FabFilter Total Bundle.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4680
    • C:\Users\Admin\AppData\Local\Temp\is-2E8TR.tmp\FabFilter Total Bundle.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-2E8TR.tmp\FabFilter Total Bundle.tmp" /SL5="$501E8,43822614,966656,C:\Users\Admin\AppData\Local\Temp\FabFilter Total Bundle.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops desktop.ini file(s)
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3024
      • C:\Windows\system32\attrib.exe
        "C:\Windows\system32\attrib.exe" +r /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\*"
        3⤵
        • Drops desktop.ini file(s)
        • Drops file in Program Files directory
        • Views/modifies file attributes
        PID:2408
      • C:\Windows\system32\attrib.exe
        "C:\Windows\system32\attrib.exe" +s +h /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\*.ico"
        3⤵
        • Sets file to hidden
        • Drops file in Program Files directory
        • Views/modifies file attributes
        PID:3088
      • C:\Windows\system32\attrib.exe
        "C:\Windows\system32\attrib.exe" +s +h /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\*.ini"
        3⤵
        • Sets file to hidden
        • Drops desktop.ini file(s)
        • Drops file in Program Files directory
        • Views/modifies file attributes
        PID:4852
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:4444
    • C:\Windows\system32\NOTEPAD.EXE
      "C:\Windows\system32\NOTEPAD.EXE" C:\Program Files\FabFilter\Readme.txt
      1⤵
        PID:4524

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Micro.aaxplugin\Contents\x64\FabFilter Micro.aaxplugin

        Filesize

        1.7MB

        MD5

        cdb8f0c3626f0eeb9acaea933e7f2d87

        SHA1

        88b260691533a951ef713c15f103b8a97eb0a03e

        SHA256

        5ac78a7adf85d07016693dae1e0a955a9bfd605166bc61ec1c46ab9a0dab01ae

        SHA512

        a008139d2631a546ec6fad22f97eb560a7b28fc8a2aa28f314f0b8d3af41929072bd66a0c9027926d0e6c0d5cd0a24f0c21da648bb4efb97f075fe401495e1ee

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Micro.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Micro.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter One.aaxplugin\Contents\x64\FabFilter One.aaxplugin

        Filesize

        1.9MB

        MD5

        a3f9c1be83f1388f73d968204b6a8016

        SHA1

        b9dc7e5e57b725e0c61d9d205271cfbb864f43e8

        SHA256

        9a5006bacc0b3e22fed42433d087078090965c9423b0c1b332000b7ed136edcb

        SHA512

        2a99f5795dfaf9635ffb1234c56642278989be6d831b88b9c7eecef21362b26b547a3cdba745ffb4305c95a4a3fd6b11f5a65bc35583056e9197ba01f529a16c

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter One.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter One.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-C 2.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        42KB

        MD5

        2d4f2039ea6211deccba16da7c0b9b74

        SHA1

        72295e2b34bb75bea221fe6e3bdb090f61673362

        SHA256

        b4c3070bf61286465bf1d2a1ef351a3fab7d788673fa62782ce0b18f0b5c5c53

        SHA512

        0297caf4fbc610ccee1997d2c1aec47b1ae2320f2b495bdf68fd4f4c1fa89cdf7d583f9f53f0225f5166c07a1c1ded2c6323b451b1ea43302e3abf7ff2b15473

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-C 2.aaxplugin\Contents\x64\FabFilter Pro-C 2.aaxplugin

        Filesize

        2.6MB

        MD5

        1a9af95aed820ca935ce98da91627dcd

        SHA1

        d2d616ea31f6227fa0024edff5f4a0bb797b3ec1

        SHA256

        d278f9a7be1d02d25f679fb37a42adf5c4633e3018697caa89724389a88e78f0

        SHA512

        a3469bbd45720af2f704ab0c5981040409c0532a680d6da2aabe233f0e80afc3bc5b79fae94a83213516522cb32a2177539794c4cf9ae7ac9239bb5dcf031052

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-C 2.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-C 2.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-C 2.aaxplugin\is-AFB51.tmp

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-DS.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        21KB

        MD5

        892c10dead998b47edd85a55e017f4a4

        SHA1

        30c8db82100c9372583ed3aa68e92d6e53ece45b

        SHA256

        eb7782d5707502b85829946b21f569c5808c0448a38ba8f4ae6c1cbc0d54efae

        SHA512

        682fcf26b62b1f4408c71a1dd01b9b813cee2e77f5ef259e61e068f36150c15cc5b16d0cbf7a5211c057c170b22d27495449062fdd09859a00e3c8073aec5ea6

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-DS.aaxplugin\Contents\x64\FabFilter Pro-DS.aaxplugin

        Filesize

        2.4MB

        MD5

        7db88e106d0a773695f65d1d3b3f33ba

        SHA1

        dc5b508c87ac1991a4d25e2afa94007232dc21f7

        SHA256

        55750b7ea75392cfd80d3e44419611677f9500fd38408e0c0fffb756f1f1c01b

        SHA512

        f10cf9827c3198b6b374fca9918ab13d0f752b2aec7afe4cf01e4a3a63ae5fb245fa685ec3261ea07bd1b9cd3e0b97b5a3a240340c02f743098eea33176fcaef

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-DS.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-DS.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-G.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        25KB

        MD5

        24f2cdb33920a09fe999cef3fbc9e3cd

        SHA1

        bea29be06bbdbba618509ee9751384bc4ca5fa5b

        SHA256

        053d0440c567283570694b0402f51f0043598fb118a0ba107c423977969593c3

        SHA512

        ab7ec23b4bde64475ffc8e971577146fe2a51f9ea1dcd4453921404b07bfa11fc43f5205b1dd3d5278ec21a1c52343cb3a660c1619b19b10f7859bbd77dc5aca

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-G.aaxplugin\Contents\x64\FabFilter Pro-G.aaxplugin

        Filesize

        2.7MB

        MD5

        f8c7782eed1d77afc6f6c82dcc28bea4

        SHA1

        967c1d205da0f3da0f29b86c07ba2944be0851f9

        SHA256

        5b792fa1af882153050a1f5506cd3a1421be5ae330e14df49f09186dd46c6a27

        SHA512

        05209974749c7fa45852d613f79640d27e298b4504e7e10c9b85e4c454dd7276de00ca5cfafa57224191a39bfd26b7165c05f54fefc6ed15be5bf89fb7f8b51c

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-G.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-G.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-L 2.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        35KB

        MD5

        4ca20954d2109879af6f5d1793961d16

        SHA1

        31ff3ff6e92c9273f07e5bfde146a5b5fc312b10

        SHA256

        354639adbe3c945454ae11d0c93f57f9c3682a7c49ae765a3b6b278480c78d20

        SHA512

        3edcfaae8ca15102b78881563c1f07de63d6adc2be39acbf9ca30667d9f55db549427b3ede7e0528417c22753d7d0b601f4775af5ada8182a3d651edc2785834

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-L 2.aaxplugin\Contents\x64\FabFilter Pro-L 2.aaxplugin

        Filesize

        2.7MB

        MD5

        8c98c37a9f8400bb8426323c2b0a1e19

        SHA1

        c53e6f97dc4aa11d5802c045abf5f3abf683a89f

        SHA256

        1abe9d09049fd032a6638c51dc7a57ff478af0c7061f10cbdc252f1d0f6cdccc

        SHA512

        aff01431a30902f4e586b8d29cefd1954a872e24a29dee46c89a2a9b308d26072ad4c52a272252176e0d00409aa41fe20572f26f1a6c40d12bd72ac7c9eb3e2b

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-L 2.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-L 2.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-MB.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        109KB

        MD5

        47a3154d6f8c7aa400e37b41d6256662

        SHA1

        2469355b8d8d7c045b9b491bd89dd5cbf686e5e8

        SHA256

        3288a21cc3581c690bc7f65bab766165d72a12fd36f1a920aa30e731921a6d45

        SHA512

        fe9ad843164e174c45269a21cfe0657f3d838f3ed49f6993d545b65293797267c77df4b47f0678db79b194a234ce354a0eb6fd4838f89c32eb9a971ac3e4ddb0

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-MB.aaxplugin\Contents\x64\FabFilter Pro-MB.aaxplugin

        Filesize

        2.5MB

        MD5

        1b673fab59f8bb02a3050a160460a0e9

        SHA1

        c2074111fc1cf0e4e89c899f124172fcec07f55e

        SHA256

        d80165153a8798515a22f0439b8cb0ba8db0c84afaca1d6976ae7934ee2941e5

        SHA512

        166b4906840760010f36b65a84e261de2877c3b615c3031f9215177d01bab7709ee0b5a8f1a17fdf80a27344b2bfd57d4f089d0277315369105ada89a73f4159

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-MB.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-MB.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-Q 3.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        314KB

        MD5

        17b185badd1ef373d5b86b288a3dda32

        SHA1

        804bf54ff706d2b4420b5fdb66e43100f67a8c71

        SHA256

        16b57a9beeba4c4d2c0f91f6038690653d6c60c90fb68187e63f4badb5ade929

        SHA512

        30b22d6feeac9e99b69366a25cc4c2099941f6d7e591c98192cd49ffcedc234898ad858c1d5ad4a05a3cf3add4682ce3ff442efd840f43d2cc587f1fd55844f9

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-Q 3.aaxplugin\Contents\x64\FabFilter Pro-Q 3.aaxplugin

        Filesize

        2.9MB

        MD5

        5855fe2bbb028230ee56e5e18f4ce578

        SHA1

        522d0648504f2dcab1ad239bc8d48b7796b816d8

        SHA256

        33fd23a6c892353f57db4c22804adb2bf91155b0b94495125fc76b33742d210e

        SHA512

        72db718edd3b62c25a24ca1831b06119dc4ba31f27e2c76066f1689280101a0300471ca6a3792b39dacb13b9f4660a3fcf0211a93680de1b0794f4323239cc3b

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-Q 3.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-Q 3.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-R.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        80KB

        MD5

        996e37e8b139d8fb673bed03545b92f7

        SHA1

        eb18858a335e487168614ecd4085d3dd77799439

        SHA256

        fd2c2b3fe569d488dd979e7d3f127a211ca650ee99e0d2fbec3f2a1799480622

        SHA512

        e95f3dbc6540aba8a35dfb8d8bb980277b14857c077bdfc3a3485074b34f7510a7f8c2be5d5ce54b7ac8ac16e68cbc5a2c6aed82d1bef6ecc903ec8a30c0db6a

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-R.aaxplugin\Contents\x64\FabFilter Pro-R.aaxplugin

        Filesize

        2.4MB

        MD5

        659a6d401274c0a8689de6b8299fd487

        SHA1

        4afebd5b964e1a5bd824beb418212e2e486d09ca

        SHA256

        e749a073c1888edef08dae477e36780aee1b91e58b4d8317416051a03e008fb3

        SHA512

        f3aad67940794c36c52f9298241483e228352a13e053743f2d1ed5cbaa3534ad4c9373963404da2a0e36e1b8e66423f52048ea1b357eb8e3c4bae3cf191ab6d9

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-R.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Pro-R.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Saturn 2.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        259KB

        MD5

        fe49f1f35c125386994db64956eb2450

        SHA1

        1b69b9f6505e82bab02c372fac956ae3e591e738

        SHA256

        dd9a77afc0dd3bd59cb9b121f923e3edfb8a42d614b559b2cc000f254516cb8f

        SHA512

        37e5a9d31160e2392d79bbd8a9a8ee6fba62a85d79e539072f5b0a11264034a3496e2fb3775eed26a501342d4807cc26ba57e65556101b407f59aad6894228df

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Saturn 2.aaxplugin\Contents\x64\FabFilter Saturn 2.aaxplugin

        Filesize

        3.3MB

        MD5

        aee855f8563e9a890762ad81f78e164d

        SHA1

        6e79594543c5b8dba9dada75a6bb00a34fec0bba

        SHA256

        6d24a37f8e6909765e852dfd0b3d70cf84068ed3ac95b084c955b19feecedae9

        SHA512

        45dc63541ad0dc01a94a11c3b20c7fb3e2712852d246f5250dd5d45ce14c14778e3e56d72f2f8dcf83efe0ee7706e0652d62516900760042fc4c4c35df873c2b

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Saturn 2.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Saturn 2.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Simplon.aaxplugin\Contents\x64\FabFilter Simplon.aaxplugin

        Filesize

        1.8MB

        MD5

        b97f2727729a3200d27523eb2dae3576

        SHA1

        1c12c8bd0942e58fe4bd24471886e8980306523e

        SHA256

        c74b2e85576a8c78a1d22b43d1d644ef9426ea29ae46664139c28f8a4fc07338

        SHA512

        dbecb1d3dd54d116165d76ace8ec9fdf94358214cf4fd1e2adea842accd0de98893c40649e2431e66770af945a382094073b6f9aafdd168a50f88ccff244a02b

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Simplon.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Simplon.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Timeless 3.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        321KB

        MD5

        f74886d4bcf749d2c494e1fa35605a7c

        SHA1

        a47967e8b457bbf2879d837fd89f6952d1c4f070

        SHA256

        71a046a96dadee7289218342550ce0ad6649619f10c94487eb791f927bd17bf4

        SHA512

        2a087b0328295caf051999fd7a746ac869e88308a90467e593d6f79bfd213b6b4c02baa29a276bd772afe80afa4e5cbc82f383e68cfa5789036d0f81eb8d80b0

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Timeless 3.aaxplugin\Contents\x64\FabFilter Timeless 3.aaxplugin

        Filesize

        3.8MB

        MD5

        3704b90a131e34db8bad979e0b3da060

        SHA1

        5d0967ae35e7951c33667647eb9b85f3289110e9

        SHA256

        924d209810846af336a873d118f8fd694ad5234c419e1c41225f6b91460a080c

        SHA512

        5d5e620ef99695ab5788503374eb45d8df8064610286f157bd03a62e45e88c46e50f2e289b9f07ee27568ed6c4f67ef06f42f485dd953ab1b739f845d4701d23

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Timeless 3.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Timeless 3.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Twin 3.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        745KB

        MD5

        963cf82ae96717ba7e1440e3c1dc7016

        SHA1

        6cf475d59b3efeaa3aa84d755aaa18aa2e3588dd

        SHA256

        65f06a6552e00508a89cf683f1b1fc85d6efc585328e4d52a54ccdd77525a782

        SHA512

        7554a9d525640371b08e56cd7d1a21f2c7f56670d78aea6375000c9a16a4e4ce3e2149d0d1e920b2fe72d22d2be45e424ecda588aaeccaa8b84cd262dd332e2e

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Twin 3.aaxplugin\Contents\x64\FabFilter Twin 3.aaxplugin

        Filesize

        4.5MB

        MD5

        e6b0cbfe81e2021beab0dce4933d2e8b

        SHA1

        6547538eb42d37738a75de41c5e4fc7772ba3b09

        SHA256

        50a3b955689eb0c419eae1a3d2b2b3bc11fa59968995cc2c6c027efba3d7ffb8

        SHA512

        e4cd9451ad79195b3728424d0c09276af72d024d760ed2095241716f81c65b8fbb95335448806dd56e0c92e44f40cc19b0721c6a67d2f0f954263d6046e427dc

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Twin 3.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Twin 3.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Volcano 3.aaxplugin\Contents\Resources\DigiPageTable.xml

        Filesize

        252KB

        MD5

        2346bb6161c503db8648273f67f5dc28

        SHA1

        db340d1714555bbc98daef65b37c209877db9626

        SHA256

        5497c8bd00e3cb2593346d40aab630f3b695df907ee8bd7bb960346baa443c2b

        SHA512

        297c23b8e35adf0c834179cf7311319be2e92141ddca6349cd4416ffc22777fcc5dc6be416bb33e648a1ea7be4f6b1e319ca6a0d076b5bde0a0f622484656be3

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Volcano 3.aaxplugin\Contents\x64\FabFilter Volcano 3.aaxplugin

        Filesize

        3.5MB

        MD5

        b0ab8f805b4a06ce1558a0f4d1c4162f

        SHA1

        40adfe7456fdac22e1e079667c6420c58a626264

        SHA256

        f1759c06ce311aa988005cf2a06f6e3f7f29395ad18f8621f1434d99c07ea0e3

        SHA512

        4fb3382315a5a4516e9eee2cd35e5489f481dc5a91137e45b5fcef7936a1f37a2c8d794ce11dc380d0b94e537ff76204533c37a0c0c2a14bdd249ec6958bba5e

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Volcano 3.aaxplugin\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\FabFilter Volcano 3.aaxplugin\desktop.ini

        Filesize

        88B

        MD5

        3ff92a5f9b73275fdaeabbddfaec7128

        SHA1

        7438c970e79d8ae2f91a46c00b28de5cff1e71b1

        SHA256

        fe0515e63ac295ac6d381209a6614ecda9300c5294f52b8497ccc124758fc3c5

        SHA512

        f3005277365acb6d13612730984695f5d6f7c56caf7698b458247df9744696b063b3099ccc494efb4e7f48526a9b63d62de855bca3003c43acb7127d5dbea8dd

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\PlugIn.ico

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FabFilter\desktop.ini

        Filesize

        48B

        MD5

        0e903c9111f1570df8c8cddb04230cdf

        SHA1

        f1164945ea8a01edba0c4a17b26193286920921e

        SHA256

        a1eb16b390198bf48c7a891c6efb5358a56713834ded6a6ee485450d4c261276

        SHA512

        0d0914a57c440d5695941b35b2ba40e42a9579e029e525cb7acfdfbb5f2d9cca2259b3e22c7980e3ea3193706a43ae0d1b8a2a5bb85516517868bef20620f5c2

      • C:\Program Files\Common Files\VST3\FabFilter\is-0256F.tmp

        Filesize

        185KB

        MD5

        ce045296c5935802b485744be67e57eb

        SHA1

        02f0fd723a7e238405e2f2433152a78b2cbe1826

        SHA256

        f05017c5a379fbb49c5cd8969ef390599ceadc17f22a9e64f7a22fb87fecad8f

        SHA512

        332f895677e3c124e3f607a733a156e602d8dfb95b094babea9587cac097ae946361ed528a2d49076a8651941fe6fc1ea464de3c963bfc75408210615210dbc1

      • C:\Program Files\Common Files\VST3\FabFilter\is-7FLHJ.tmp

        Filesize

        48B

        MD5

        0e903c9111f1570df8c8cddb04230cdf

        SHA1

        f1164945ea8a01edba0c4a17b26193286920921e

        SHA256

        a1eb16b390198bf48c7a891c6efb5358a56713834ded6a6ee485450d4c261276

        SHA512

        0d0914a57c440d5695941b35b2ba40e42a9579e029e525cb7acfdfbb5f2d9cca2259b3e22c7980e3ea3193706a43ae0d1b8a2a5bb85516517868bef20620f5c2

      • C:\Program Files\FabFilter\Readme.txt

        Filesize

        5KB

        MD5

        2d75ed204ef7f21753a6015ab43bcd65

        SHA1

        c9d2cc6f4d0a2ba8885cf2f98260cb7f55075efe

        SHA256

        9be711776c7832f4b5477ea8d1fd60341c298754535878dc3c1f386da2669091

        SHA512

        5a81a561d29a2e47904617b1709a8a13535c2c1f660a8965989f7c02786f2ed02dec40b477f3daf2dc28274eb9048bfb5bacafdc016f929755e6f10def1cd3db

      • C:\Users\Admin\AppData\Local\Temp\is-2E8TR.tmp\FabFilter Total Bundle.tmp

        Filesize

        3.1MB

        MD5

        e6c773ab7860a6139a061ad99d6f61a5

        SHA1

        2c3a55abe5d8d2711b3d29d021f91ed62ff1863c

        SHA256

        444847d8b25b06c6a183d25ab1bde71e6f29fe9a4594b88703c7c5af4027c03d

        SHA512

        9011f6a582adc3fa5e2ba272c836e95cbc850e09e637788f37726b5e3cc145acd79347173ebef3b2da1ffa6be29b0e0120bf0d95cc72064b51f00efe7176eea2

      • C:\Users\Admin\AppData\Local\Temp\is-2E8TR.tmp\FabFilter Total Bundle.tmp

        Filesize

        3.1MB

        MD5

        e6c773ab7860a6139a061ad99d6f61a5

        SHA1

        2c3a55abe5d8d2711b3d29d021f91ed62ff1863c

        SHA256

        444847d8b25b06c6a183d25ab1bde71e6f29fe9a4594b88703c7c5af4027c03d

        SHA512

        9011f6a582adc3fa5e2ba272c836e95cbc850e09e637788f37726b5e3cc145acd79347173ebef3b2da1ffa6be29b0e0120bf0d95cc72064b51f00efe7176eea2

      • C:\Users\Admin\AppData\Local\Temp\is-77A24.tmp\_isetup\_iscrypt.dll

        Filesize

        2KB

        MD5

        a69559718ab506675e907fe49deb71e9

        SHA1

        bc8f404ffdb1960b50c12ff9413c893b56f2e36f

        SHA256

        2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc

        SHA512

        e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

      • memory/3024-11-0x0000000000400000-0x0000000000735000-memory.dmp

        Filesize

        3.2MB

      • memory/3024-14-0x0000000000D50000-0x0000000000D51000-memory.dmp

        Filesize

        4KB

      • memory/3024-24-0x0000000000400000-0x0000000000735000-memory.dmp

        Filesize

        3.2MB

      • memory/3024-26-0x0000000000400000-0x0000000000735000-memory.dmp

        Filesize

        3.2MB

      • memory/3024-45-0x0000000000400000-0x0000000000735000-memory.dmp

        Filesize

        3.2MB

      • memory/3024-328-0x0000000000400000-0x0000000000735000-memory.dmp

        Filesize

        3.2MB

      • memory/3024-331-0x0000000000400000-0x0000000000735000-memory.dmp

        Filesize

        3.2MB

      • memory/3024-5-0x0000000000D50000-0x0000000000D51000-memory.dmp

        Filesize

        4KB

      • memory/4680-10-0x0000000000400000-0x00000000004F9000-memory.dmp

        Filesize

        996KB

      • memory/4680-0-0x0000000000400000-0x00000000004F9000-memory.dmp

        Filesize

        996KB

      • memory/4680-332-0x0000000000400000-0x00000000004F9000-memory.dmp

        Filesize

        996KB