5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b

Analysis

max time kernel
38s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
20/07/2024, 23:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

lmms-1.2.2-win64.exe
Size

35.1MB
MD5

8a5e80d496c3052a2057098dcbb1293f
SHA1

f26b1be68206eaa0b36f1ee057bda45b45070a30
SHA256

5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b
SHA512

e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351
SSDEEP

786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
1180	Process not Found
448	lmms.exe

Loads dropped DLL 27 IoCs

pid	Process
2768	lmms-1.2.2-win64.exe
2768	lmms-1.2.2-win64.exe
2768	lmms-1.2.2-win64.exe
2768	lmms-1.2.2-win64.exe
2768	lmms-1.2.2-win64.exe
2768	lmms-1.2.2-win64.exe
2768	lmms-1.2.2-win64.exe
2768	lmms-1.2.2-win64.exe
1180	Process not Found
1180	Process not Found
1180	Process not Found
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe
448	lmms.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_perc\shaaka.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\default\loop_points_on.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\ladspa\fad_delay_1192.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\ladspa\foldover_1213.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\Nescaline\Engine_overheats.xpf	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Cormi_Sound\0072-Zufolo_1.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\olivers-100\0023-EP - Brighter.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_hats\electro_hh.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\olivers-100\0093-Chimey Chord.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\latin\Clave_we.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc\hot_snare.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_electro\open_reso.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\TripleOscillator\SquarePing.xpf	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Companion\0119-Ghost Choir.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\SynthPiano\0037-FM Synth1.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\olivers-100\0015-Dist Jazz Guitar 2.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\ladspa\flanger_1191.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\ladspa\gverb_1216.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\ladspa\tap_dynamics_m.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_electro\ringing_sn.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_fx\obligatory_ufo_liftoff.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_perc\slinky_tamb.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\vestige.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_hats\sleepy_ride.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\tr808\Ride.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\shapes\technosynth4.wav	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\reverbsc.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\locale\qtquick1_fi.qm	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\Organic\Pwnage.xpf	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Cormi_Sound\0151-Memory.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Fantasy\0001-Emptyness1.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\Nescaline\Chomp.xpf	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Companion\0006-Tinkle Bell.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\classic\loop_points_on.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\classic\white_noise_wave_active.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\assets\Logo.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Pads\0065-Soft Pad.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_hats\dusty_simple_oh.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_perc\deep_cowbell.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\default\shadow_p.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\TripleOscillator\BellArp.xpf	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Companion\0024-Solo.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\the_mysterious_bank\0016-sine_pad.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\stk\rawwaves\snardrum.raw	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\TripleOscillator\ResonantPad.xpf	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Cormi_Noise\0036-Trillo.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\peakcontrollereffect.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\instruments\steel_guitar_heavy_distorted01.ogg	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\classic\splash.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\default\folder_opened.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\default\saw_wave_active.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Dual\0035-Rhodes Strings3.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\olivers-100\0037-320 Grit Lead.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\olivers-100\0106-Unpleasantly Drunk.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\drumsynth\misc_perc\mellow_shake.ds	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\default\combobox_arrow.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\ladspa\am_pitchshift_1433.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\plugins\ladspa\multivoice_chorus_1201.dll	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Collection\0050-Soft Organ.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\Pads\0037-Synth Pad 5.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\ZynAddSubFX\olivers-100\0067-Growing Pad.xiz	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\samples\waveforms\w2_w-wave.flac	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\themes\default\note_eight.png	lmms-1.2.2-win64.exe
File created	C:\Program Files\LMMS\data\presets\SID\MadMind.xpf	lmms-1.2.2-win64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

NSIS installer 1 IoCs

installer

resource	yara_rule
behavioral1/files/0x0003000000021f36-3158.dat	nsis_installer_2

Modifies registry class 30 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\DefaultIcon\ = "C:\\Program Files\\LMMS\\lmms.exe,1"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.mmp	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\edit	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\ = "open"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\DefaultIcon	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\DefaultIcon\ = "C:\\Program Files\\LMMS\\lmms.exe,1"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\open\command	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\edit\command\ = "\"C:\\Program Files\\LMMS\\lmms.exe\" \"%1\""	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\open\command\ = "\"C:\\Program Files\\LMMS\\lmms.exe\" \"%1\""	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\edit\ = "Edit LMMS Project"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\edit\command	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\edit	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\edit\ = "Edit LMMS Project (compressed)"	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\ = "LMMS Project"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\ = "LMMS Project (compressed)"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\open\command	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\ = "open"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\DefaultIcon	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\open\command\ = "\"C:\\Program Files\\LMMS\\lmms.exe\" \"%1\""	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.mmpz	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\open	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\edit\command\ = "\"C:\\Program Files\\LMMS\\lmms.exe\" \"%1\""	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.mmp\ = "LMMS Project"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project\shell\open	lmms-1.2.2-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.mmpz\ = "LMMS Project (compressed)"	lmms-1.2.2-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LMMS Project (compressed)\shell\edit\command	lmms-1.2.2-win64.exe

C:\Users\Admin\AppData\Local\Temp\lmms-1.2.2-win64.exe
"C:\Users\Admin\AppData\Local\Temp\lmms-1.2.2-win64.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Modifies registry class
PID:2768

C:\Program Files\LMMS\lmms.exe
"C:\Program Files\LMMS\lmms.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\LMMS\Qt5Core.dll

Filesize
5.1MB

MD5
b1f30ccbb0d01071d9af4ec6eb85a3b3

SHA1
691146c9430c96d789fd2955a2c65b820a9202f9

SHA256
64d345fe6b73c2f249164c6494074c0393d7ee45388c562d57aef9708a1f3c26

SHA512
61388eb4253b3b04ccea2b57062936c0b17fb83122639435c40f03458beec7ab652486e1f0e402c405b867505d6f8928a83ab848e1d2ce3e1708e9d88881fb3a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nseF0F5.tmp\ioSpecial.ini

Filesize
688B

MD5
57cb766cf31029734aa60cba1de17938

SHA1
ab31454c2d2489d792107728d74866972c2490fc

SHA256
25a149ec8afeb8903f9d89e75beeb582a6b0f53c50353fb1fafaab78d02f2316

SHA512
4a3b52cef537ab379a78e617ae63abfa529458d6562c1b7b18f922d84572b78db8bb246ed794a4be9d6cfa1fa25efa1142675424b81baaf3230528f7c7e2cb37

Download Submit
C:\Users\Admin\AppData\Local\Temp\nseF0F5.tmp\ioSpecial.ini

Filesize
550B

MD5
57a51452d1f7778a8a1207e0a25c70f7

SHA1
b37d1b29c8d2e8eb85062ed31b86b660eecc18da

SHA256
75ccd5083706947b6f8ea2c5eb97d06ea611ded27e5d69fd2dda164284030544

SHA512
427ba5a38a71f18ba146616d6ac1d3a8776dd5e2b0bedc81882cb4ffded185a0e96ebf5094d1e9ec17f0a6268e158f99482ceabd29d4ab6fb47f2f53717c88aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nseF0F5.tmp\ioSpecial.ini

Filesize
727B

MD5
342a729de44e97b36df26376988ac8c8

SHA1
3777dafe80b0bef98817f4269db894fb4bb01aa1

SHA256
77623cd1c5bb3dfb0d2a0ab17646755b3a604e88f12304cdd11ef5f8f5ba00e7

SHA512
3df0dd8e343e47d73743d92a30b730c4c6d25f642e97c3d2ccd5d49ef8126e42506d170dc8069b87c9b55b818fafd5d744433ab4432c6710e826b5ad380fd00d

Download Submit
\Program Files\LMMS\Qt5Gui.dll

Filesize
4.5MB

MD5
23439958cd89baa6970c1aac9060af2b

SHA1
522bad44bd28149e62ff7ec45b38bb8cfca8c0e5

SHA256
b8e72ec747f1f056f07536446934ee0606525f0eccdcae78966e6097e4d577e5

SHA512
3d909214e74f7ed718688b0e2b7f86319bfbe20a902c4f127f2f3a7e25b2bd781a62afd30eaa07bbbcd87d9ff03f05b053a6e63c007bbc89790cfcd97dac5638

Download Submit
\Program Files\LMMS\Qt5Widgets.dll

Filesize
5.7MB

MD5
9364bbf7fc86cd2f0a9d258803ee4105

SHA1
0d0cadd5181df2a1f9540d0017daf7cfffe41157

SHA256
7e5754119941a4d996b00fe5731c005044f21e51bcf8315dbdccad9a21077c21

SHA512
2687d25b60f6ba3e352ebcde651449f6fbced20ebc33359873ccf3626b5b87af865a2d471d2288d4e5212d06a497f76a82362f2d2dfe6de7c9f8f1068453dcff

Download Submit
\Program Files\LMMS\Qt5Xml.dll

Filesize
361KB

MD5
790afb9ad63350fe327cbe409c08f01a

SHA1
652b7d29dcbd633282de7c2a6d39a0e718a4bb1c

SHA256
3864e3649485fb23d12f01e968a19f7ce0eff987c02e74e602c0b5527f92912d

SHA512
084f44583fc16c00126ed4ae340fa041b9ebaccb4e041dce73da66c6ccfc4be726cde486f199c056e3e3342db87314407af392f33d9efdd29adb15974b2c785a

Download Submit
\Program Files\LMMS\SDL.dll

Filesize
1.8MB

MD5
6acfa9b50ed9448d025d811b5f78d948

SHA1
f2999079a34803a7b99f10f8d9cc180da3e1259a

SHA256
2e3065bbdeea3b954b409d96a24b925ab7984f2f15a67cd34b5e774d675e4462

SHA512
8567ca9aae3e7acdf2b811ddbcd67f6834f7129cf3bdc78a49b38a46f9407e7ad8ebc48a97e3c1eda9c4fcbf997f6344c6adba8777fbbd157850e3e3e4f1a62d

Download Submit
\Program Files\LMMS\Uninstall.exe

Filesize
525KB

MD5
65d89fc8960a5d095097c849a93a5efe

SHA1
c3a35b02acc9922f4a26b52fb46221c2e1e4aa3a

SHA256
0325caae308d73fc6f7b3e3a3de21fcdc4ffd18e76230ae8ee8928a56999b6ca

SHA512
57f0a192b7ade1e33ce0ff33948aa99a6fb4d9b5b25caea0d82d67b2e6d2c620d8c96cc69f7b9699f5f95ecd893138529556685953ff0a70777d874688697bd0

Download Submit
\Program Files\LMMS\libFLAC-8.dll

Filesize
850KB

MD5
43c541620fb71d46644ab29d4daf2355

SHA1
f24b28154f838cebfb461f671d58237f88a5c47c

SHA256
b710b87ca63ad96c4a4d3201807624c266c757037fa61622b113030324b8e10a

SHA512
b6d0f798608b0a887c572ec8054f28fb98aabdee32c3bfaa93c7d4fabae42cdbe317ff8e8cc1b5f22601e0612f199137dd69f781fe1afd2e810f120dbde4c63e

Download Submit
\Program Files\LMMS\libmp3lame-0.dll

Filesize
572KB

MD5
e43f8709e1d23871916a2cee964ebd6d

SHA1
baced9fb4b3db609b02347569898f0b7c9ddecfe

SHA256
acaf6e5199b5cc0b532431128246e33f7875451bd1f330c7f1cb542941c5ffee

SHA512
426fb75e3231b1387ac984ace449abb6ab698b251450d0d5bdb8843e2e1d1df8b4739c5a5cd239a05fba7b482f24e4d2e2cd779b3b36a8c84b51a20c60e81e66

Download Submit
\Program Files\LMMS\libogg-0.dll

Filesize
164KB

MD5
b48307dc13b66115c10c54a52ec55adb

SHA1
ba30911dc00b32cada0c954f74f0b3f202442092

SHA256
8f9575386333681b02295c2c73d9568eb8b3f6c87db9e97e7c48a8b6e73d2b88

SHA512
ca9b3fb3cc9f86f7f7bfa7d704ed2462246b59b6d1cd6348e7c9c986cd84a6a220e09c6728dab892a98865107a07b468c784cc986a4f13d2a89e5da9b5126a66

Download Submit
\Program Files\LMMS\libpng16-16.dll

Filesize
1.1MB

MD5
0c3f21c775b7ccfbd73e3acfc82f1d18

SHA1
583274d9ae0c24ab3c99c3a095e66e409b15b684

SHA256
8b1930b423ac675e8bb06e2cbddcdba0ee082d952a128d8cd5cdd70065808cca

SHA512
80862968c9695d002732f6cbb3631c42882a788f9931c9578f38f0c5e533551486bdcfd26e7a6c758bdfe34b5a522e1e66fff88272336b459bd7e0d46abe085d

Download Submit
\Program Files\LMMS\libportaudio-2.dll

Filesize
1.1MB

MD5
5a08f2b6168dd7169154962f162464b7

SHA1
573405639ab2526ef893186341ff40ec3c37e7e4

SHA256
c43e65b2317b1b69f312556ba5a4e644bffda0bbbb78807ce518071e4b49ddfd

SHA512
d5a82fa834fd2357cd4f9e33b65cf9b31e635b1e7828c33d83fe9beac2c0f3df325741573ee651fce5817fdd59e96c59b49763f1b2798659fadf37e0b114323c

Download Submit
\Program Files\LMMS\libsamplerate-0.dll

Filesize
1.6MB

MD5
738758695cdcc8947f9d9a987c207fd5

SHA1
47aed67233766282c2ef18276ec1d33437230879

SHA256
8cbf3cb1bfaa1679947a912fbe428fb9bacd927249234816d488d14eca4eb273

SHA512
49f4433983c8aaa2a3dec8144e9395be10a835eca984663a3c951543a9b11bc99cdbb96d47d39ef9156a10603e092daeb16c785130d01edff5a4a40d6e9c5619

Download Submit
\Program Files\LMMS\libsndfile-1.dll

Filesize
2.7MB

MD5
ca55ffc4777f2dd604da597e28cd8846

SHA1
8af76b22014c325f4308109f4e3da912378a4495

SHA256
d834cca7affd8e7e542d36ad92f649e4f420bdea729c54c233fe639a304458c9

SHA512
66bdd66261941189177430e440f3a699a94643e1aac51008c828a625e884d42ce7b1c1aaf5bb4ac8e87dd3eda1a3563828f8949827b02bcd241d8f0c157a9e29

Download Submit
\Program Files\LMMS\libvorbis-0.dll

Filesize
376KB

MD5
e9dd12292b0bf45acb573c5fc3e2afd4

SHA1
c0325b076685c5438a084e8c970fc98d50f3b264

SHA256
1a5df9308cc6247747fe242a2f12ed7afc6460406af32162d6fd9be228f1610d

SHA512
0da0c4ef63242f6b447f1d73ddd5093ba2f49edebf362df0e2add052d04193d38fd061020a3d62af5f66696b623afd44bac35629eb9b70bad5bc563ccf1e7b2f

Download Submit
\Program Files\LMMS\libvorbisenc-2.dll

Filesize
778KB

MD5
7f688502911d55204b2c1bb6ae3ee131

SHA1
9cb42153a19ebc0823da8d6520e703f59bb51a72

SHA256
d073c6b7861b77b59bb4286fe0474e824d544438a6a3d903b914a480a8a37012

SHA512
cc109df714a1f51d0b9098d06df19ecd3d514444052495a9ffc39f5ceb065d87d39769b50126c56a68d297b06711d3a6fad959e649653ebc13de9b7f001b82b2

Download Submit
\Program Files\LMMS\libvorbisfile-3.dll

Filesize
150KB

MD5
9cec6b1e262a94b035d381c19d0abdce

SHA1
b33acae432d55c473e39e027023d81c9b1a597cd

SHA256
5d061c46abf64dc33718688fe3e5bead3baff4ce028e1052ba9924fdbc24e3b0

SHA512
b5ba552874046433ff93948bc2f74a71630d69275760e58dc7af449ef17be1a9916b0a8f603ad8591c1f54eddad9f3d8f8a40f8a0e0fa77f223d621c4964eebc

Download Submit
\Program Files\LMMS\lmms.exe

Filesize
3.7MB

MD5
3a1c41955ab982d0943f549bf9db57fc

SHA1
ecdecee21480b102e5b41ae6ff3524e01d00e5eb

SHA256
99d8c322066c8ff25c1bfd6f3b9c5b7757d8a80cd62bdc1c7e06f6cfa01332af

SHA512
3fa1df7baec92e3e227a195b22ffe397639a514261b33fe4d403d78c39058aace35d8f7036885e6e7de1c889f072dfddf404e60597ef9dd8175fe29045a4dfa5

Download Submit
\Program Files\LMMS\zlib1.dll

Filesize
106KB

MD5
1e3385ac042d193131e511c1080b3797

SHA1
4eefcd0e545badcfd0fe6024138d348e6d73af15

SHA256
9ea3ffc530769fd3f42ad7d57decf00ca2634fdc2e7644b3e43d1c12a682ed70

SHA512
6b938dfde3c5ccd7414d2a13132aad5f03fd6acd1881973f51f4930c666cda3277fd1039f2fbe35f30a98856a16184c7ed64676b80fee02293f22ec8d406cb0c

Download Submit
\Users\Admin\AppData\Local\Temp\nseF0F5.tmp\InstallOptions.dll

Filesize
18KB

MD5
adec63bd08a185bffe6fda335d29df87

SHA1
23f37d31f3b1c07547ad4fa2747305a04ac09b54

SHA256
dbd0068d46077ee1ace4eaafc3312389c29af22d306c5757a1a29a93146604a9

SHA512
44bb32fa41b0c2b41d637f15dd2cab84ad6f9dae39febb263923eeee19d1c80d65ba3939ab87d34fbb28af6a6f867c21daab5810d289e309451c67ef6f65a88c

Download Submit
\Users\Admin\AppData\Local\Temp\nseF0F5.tmp\StartMenu.dll

Filesize
9KB

MD5
000ca2d1e21f4b461b2c8b888b098a4a

SHA1
42fafc505d2fe16657fa5ebbd5ccd89c3b386637

SHA256
e5ef538f9ada994299a0860c26f68ae0649495f68d388b910a05cba00d3ee365

SHA512
ba0b2960c95fff4428999adc02f82c88b59aef464f2057be0b8d93c523293e84a9b8edd73d9a8dcfac96d9340a7d09815c8ebd5cfb317bca81e07855d08e0fbc

Download Submit
\Users\Admin\AppData\Local\Temp\nseF0F5.tmp\System.dll

Filesize
23KB

MD5
125aebb055446fb52aa5956cf99e8a9a

SHA1
6b58fd08a8ff2763219cc6b0dcdb875f9970f850

SHA256
2e1b11ee20e5061ea86dc6b01e3efc659e887540afcab7317cdfd6a8eff87ec3

SHA512
5f85e48bd3ae2fd2be0595b93cbf74674e0281210688dcc73691178b295a702e8d43898afb6e5d8b7e82de98b4ee28194c9838ddf8279cde85f7fe48d34dc8b7

Download Submit
\Users\Admin\AppData\Local\Temp\nseF0F5.tmp\UserInfo.dll

Filesize
6KB

MD5
7f780de67db61a924bebc0cafaded3ad

SHA1
3ac359dce08ceff16e4214fe45d83fdc8e3f2e1a

SHA256
9931a2f8bb44b92ff26062b99cbb6e41ed1cfad65079dec5d6d9c006223bd121

SHA512
8378f04b6f5085e887ed46874414e5681f0ecb6889dbaa25eb78f75112d4be603aef8dec6a2a81857a19978f6ccf07d65d566ff3f0943da809de22599ffdd8f2

Download Submit
memory/448-3314-0x000000006B3C0000-0x000000006B3E9000-memory.dmp

Filesize
164KB

Download
memory/448-3304-0x0000000068540000-0x00000000685A2000-memory.dmp

Filesize
392KB

Download
memory/448-3298-0x0000000000400000-0x000000000082A000-memory.dmp

Filesize
4.2MB

Download
memory/448-3302-0x0000000068B40000-0x0000000068C5D000-memory.dmp

Filesize
1.1MB

Download
memory/448-3299-0x0000000066740000-0x0000000066C5B000-memory.dmp

Filesize
5.1MB

Download
memory/448-3301-0x0000000000AC0000-0x0000000000F52000-memory.dmp

Filesize
4.6MB

Download
memory/448-3303-0x0000000000F60000-0x0000000001520000-memory.dmp

Filesize
5.8MB

Download
memory/448-3271-0x0000000000AC0000-0x0000000000F52000-memory.dmp

Filesize
4.6MB

Download
memory/448-3300-0x0000000062E80000-0x0000000062EA4000-memory.dmp

Filesize
144KB

Download
memory/448-3305-0x0000000068100000-0x00000000682A7000-memory.dmp

Filesize
1.7MB

Download
memory/448-3308-0x00000000632C0000-0x00000000633B5000-memory.dmp

Filesize
980KB

Download
memory/448-3306-0x000000006EB80000-0x000000006EC38000-memory.dmp

Filesize
736KB

Download
memory/448-3313-0x000000006B680000-0x000000006B730000-memory.dmp

Filesize
704KB

Download
memory/448-3312-0x000000006D540000-0x000000006D59C000-memory.dmp

Filesize
368KB

Download
memory/448-3311-0x0000000064080000-0x0000000064146000-memory.dmp

Filesize
792KB

Download
memory/448-3310-0x0000000001520000-0x00000000017C5000-memory.dmp

Filesize
2.6MB

Download
memory/448-3309-0x000000006F600000-0x000000006F79C000-memory.dmp

Filesize
1.6MB

Download
memory/448-3307-0x0000000070680000-0x00000000706AE000-memory.dmp

Filesize
184KB

Download
memory/2768-90-0x000000006AF00000-0x000000006AF0D000-memory.dmp

Filesize
52KB

Download
memory/2768-89-0x0000000000400000-0x00000000004A1000-memory.dmp

Filesize
644KB

Download
memory/2768-3237-0x000000006D040000-0x000000006D04A000-memory.dmp

Filesize
40KB

Download
memory/2768-3236-0x000000006AF00000-0x000000006AF0D000-memory.dmp

Filesize
52KB

Download
memory/2768-3235-0x0000000000400000-0x00000000004A1000-memory.dmp

Filesize
644KB

Download
memory/2768-3238-0x000000006E3C0000-0x000000006E3CD000-memory.dmp

Filesize
52KB

Download
memory/2768-3259-0x0000000000400000-0x00000000004A1000-memory.dmp

Filesize
644KB

Download