hxxps://drive[.]google[.]com/file/d/1kde5FNsEYfLvV35nKP8V3jv0L_wIzFlm/view

Analysis

max time kernel
390s
max time network
364s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04-09-2024 23:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1kde5FNsEYfLvV35nKP8V3jv0L_wIzFlm/view

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
1584	flstudio_win64_21.2.3.4004.exe

Loads dropped DLL 31 IoCs

pid	Process
5812	FL Studio v21.2.3 [4004].exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe
1584	flstudio_win64_21.2.3.4004.exe

Drops desktop.ini file(s) 4 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Instruments\Keyboard\Close Grand\desktop.ini	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\X Nucleon\desktop.ini	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\X Nucleon\desktop.ini	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Instruments\Keyboard\Close Grand\desktop.ini	flstudio_win64_21.2.3.4004.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
9	drive.google.com
6	drive.google.com

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Effects\Hardcore\Default\Firey Eruption.hdprg	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Effects\ZGameEditor Visualizer\Wizard\The Revolution of EQ Colored.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Harmless\Percussion\Strange Bells 2 GOL.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Harmless\X Olbaid\FX\FX Lifeforms.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Misc\Used by demo projects\Benn Jordan (The Flashbulb) - Cassette Cafe\FPC_Snr_707_01.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\Jayce Lewis\JL Snare Room Baggy 04.flac	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums (ModeAudio)\Hi Hats\Collider Third CHat 02.wv	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Legacy\Instruments\Strings\STR_ClasGill_C2.wav	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Drumpad\HiHats\Techno Hat Cl 01.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\FL Slayer\DIST Metal.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Impulses\Guitar Cabinet\IMP Cabinet Model G.wv	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\Rock\sticknoise_oh 09.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums (ModeAudio)\Foley\MA Lid Pop 02.wv	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Effects\Fruity Delay Bank\Whistlin sixes.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\System\FL Mobile\Instruments\Fat Analog.ini	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Cymbals\Zild Ride.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\BassDrum\Factory\Bassdrum 31.kik	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\Keyboards\KBD Crystal EP FG.mrp	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Wasp\Default.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Misc\Used by demo projects\MDK ft Miss Lina - Leap of Faith\Vox - Blurred - 1.ogg	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\MiniSynth\Default\Keys Drops.flms	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Misc\Used by demo projects\Sacco - Goldener Schnitt\morph 006.ogg	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\PoiZone\Xenos Soundworks\ATM Sibirian Winter.fxp	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Effects\Hardcore\Default\Hot AC-30 FG.hdprg	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Effects\Pitch Shifter\Voice\Octaver 1.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Drumpad\Tom-Toms\Techno FlrTom 01.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\GMS\WiseLabs\Bass Reece Heavy.gmsynth	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Misc\Used by demo projects\DATA\Crash_simple.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\HQ Metal Kit\HH Pedal HQ Metal #5.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\SFX	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Harmless\Percussion\Block Head FG.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums (ModeAudio)\Claps\Power Clap 10.wv	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Legacy\Drums\HipHop\HIP_Kick_6.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Sytrus\X Nucleon\Bass\Cubed.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Scores\FPC drumloops\Rock Loops\fpc_rockgroove7_22.mid	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Instruments\Bass\Slap.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Instruments\Keyboard\Stage Grand\Stage Grand 80.wav	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Drumpad\Cymbals\Dance Crash 06.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Drumpad\Percussions\DnB Conga 02.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Drumpad\Percussions\Ethnic BassSkin 01.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Ogun\Pad\Alone in the woods.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\Saturation ToTc.tbio	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Scores\FPC drumloops\Rock Loops\fpc_rock_77.mid	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\HQ Metal Kit\Tom 4 HQ Metal #4.wav	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Sawer\Xenos Sawer Volume 1\LD Chiptune 1.sawer	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Sytrus\Organ\4 drawbars.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\HQ Funk Kit\HH Half HQ Funk #2.wav	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Harmless\Keyboards\HX-7 EP FG.fst	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Scores\FPC drumloops\Rock Loops\fpc_rockgroove_22.mid	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Channel presets\3x Osc\SciFi 6.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Hats\Chromo CH 1.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Legacy\Drums\HipHop\HIP_Snare_4.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Loops\DL Hop Box.wav	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Harmor\Samples\Harmor_Multibass02.ogg	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Sytrus\Bell\Cavebell pad.fst	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Scores\FPC drumloops\Hiphop Loops\fpc_hiphop_71.mid	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\Groove Bias\high tom 3 v5 rr1.wav	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums (ModeAudio)\Cymbals\Volt CleanCrash 02.wv	flstudio_win64_21.2.3.4004.exe
File opened for modification	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums (ModeAudio)\Percussion\Collider Fifth vi.wv	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Legacy\Drums\Kits\Drum Kit 03\OverHiTom_002bogg.wav	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\PoiZone\Default\BAS Liquid Form ToTc.fxp	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\PoiZone\Xenos Soundworks\LED Alive.fxp	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Impulses\Chambers\IMP oven_open.wv	flstudio_win64_21.2.3.4004.exe
File created	C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Impulses\Exteriors\IMP forest_ravine_b.wv	flstudio_win64_21.2.3.4004.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	flstudio_win64_21.2.3.4004.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FL Studio v21.2.3 [4004].exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1194130065-3471212556-1656947724-1000_Classes\Local Settings	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4940	msedge.exe
4940	msedge.exe
2284	msedge.exe
2284	msedge.exe
1348	identity_helper.exe
1348	identity_helper.exe
1020	msedge.exe
1020	msedge.exe
1020	msedge.exe
1020	msedge.exe
2020	msedge.exe
2020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5812	FL Studio v21.2.3 [4004].exe
1584	flstudio_win64_21.2.3.4004.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 8	2284	msedge.exe	83
PID 2284 wrote to memory of 8	2284	msedge.exe	83
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 1952	2284	msedge.exe	84
PID 2284 wrote to memory of 4940	2284	msedge.exe	85
PID 2284 wrote to memory of 4940	2284	msedge.exe	85
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86
PID 2284 wrote to memory of 1760	2284	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://drive.google.com/file/d/1kde5FNsEYfLvV35nKP8V3jv0L_wIzFlm/view
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffce49a46f8,0x7ffce49a4708,0x7ffce49a4718
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6420 /prefetch:8
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6420 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6504 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2040,4970366858366310428,12500358772781056673,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1196

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3932

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2688

C:\Users\Admin\Downloads\FL Studio Producer Edition v21.2.3 Build 4004 KioNathan 2\FL Studio Producer Edition v21.2.3 Build 4004\FL Studio v21.2.3 [4004].exe
"C:\Users\Admin\Downloads\FL Studio Producer Edition v21.2.3 Build 4004 KioNathan 2\FL Studio Producer Edition v21.2.3 Build 4004\FL Studio v21.2.3 [4004].exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5812
- C:\Users\Admin\AppData\Local\Temp\nsb7424.tmp\flstudio_win64_21.2.3.4004.exe
  C:\Users\Admin\AppData\Local\Temp\nsb7424.tmp\flstudio_win64_21.2.3.4004.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops desktop.ini file(s)
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:1584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Impulses\Exteriors.nfo

Filesize
29B

MD5
c9e2cc184f1dd73cd5a66abcd8c6e0cd

SHA1
ccb180bc3ef502a872f88d591a90571fd8c61fae

SHA256
c5705dd82713be76cc5e4c1930589106d67cab8b6e905768a21233c77387db31

SHA512
addbac550b8d084e8fb95cf82d7ccb13acdf434b2aaa63b8e7b8bc09a9cc0e5ecd8d8121762a0de6eb69d8ac4f07d7ae9b5b0969f72d36f5b042d76df181887e

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kicks\Monster Kick 005.nfo

Filesize
36B

MD5
1406de33f68d12ff32f186da3a596309

SHA1
0d4c28f3f5a9290c553a33312bd0686ddda28eb2

SHA256
f55f810b44800b37393cc2a97d85595f2a0ea3cd9c4d4416dc00c9dc8badc3d6

SHA512
143282705c3c19a24b217653b8af2cdb5378a4adb0b5093fca2643a38be74f4fbc06e9551d75f854091855ddc401fb65ae4560aa865a638346a831e7b9100d0d

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\Groove Bias\snare 4 v7 rr1.wav

Filesize
9KB

MD5
d786090570f1b09f694aef4b78b5fb44

SHA1
bb063717c78da303499bb0239ab6de0cd99ea079

SHA256
f8c31012d32c60da332a6204133b832e610a38ba9506e42606fafc6d9b77053f

SHA512
25cabe81af1c5ccfb45de1c37f2064a4784842a1c03513a6ac59d5e5d49de684961a683d2dafa269087fe5b88b7f0551448f5a9cbd8a490a81cd30822ba7aed3

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Legacy\Drums\RealDrumkits\RD_Hat_6.wav

Filesize
5KB

MD5
dc5fc06e1df47fadd5f1ec4a4a5b2aea

SHA1
ed79736a5c4fad63616084c85d1bd64956d9c0f5

SHA256
2f68d1362865ec229d560d6b4748ef7659696aea5294d5f1bb447bbb61023c39

SHA512
2d4b6d03c4b845d641729b24f1dc3332aed8e04165022410200aeb4b45dbdcbac9d132700a99476cca88e6b4b2d23684f56bbd242e97ad81ccdefafd4e2a0ff0

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Harmor\Template\Loop timestretching (4 bars).fst

Filesize
83KB

MD5
00e6af3c1a4570e0fd51ca8908de2da6

SHA1
a30e6ea8cf3cc1c4658ba38ad7a07ed70c6e640d

SHA256
8f104cd00299b2e5c8a54c1daf248fc2f9f4aa5d367fb2b3ff113ecb3791e8b1

SHA512
0f86964a3bf53f1738337a4ad68f548362d233e51d80e17dd1bd5dbc8ae4956fa03b88abf023fe2ec1a234f473b0fc46113dd93b4a7f9a9a0eca9b1d97bffbb0

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\Bass\BAS Elec Bass P Hook NUC.mrp

Filesize
104KB

MD5
ac1ece14da26080f1fe28ca1a1b59dc5

SHA1
c611c939d442c624e6da4948bbae55df67df6b4c

SHA256
272983f1df9259f660843a7b9e2aaccbe91036bb4722f92264963bc9892f96ae

SHA512
da9022502cb3efd23165c825e5d3179c8d9ebe4f182318176013e8d709120a81ba1b9bbcd3c0d149caf03762e733df183aed8f53ce495f2722fd7b6653787f2c

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\SFX\SFX Big Vinyl Skip FG.mrp

Filesize
6KB

MD5
459283d24a79a92c4e23afd2745bc0e2

SHA1
0d40675993acd9c05e45040cb2e7236c4dae10db

SHA256
97039fdaf42c7cdad4a65b4db8ab8aea26d3103a2e7cf377616e3fbc9b3cae10

SHA512
f8aed4a4b7dc980299cc658e6cee655806ae8d4302e34f829662bffd93776f08cd685e561a90df43edef607dc1789b78b75ebb109b454a073b847faf7238aa83

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\SFX\SFX PitchShifter (MW) FG.mrp

Filesize
6KB

MD5
37a983ed2ba3a5071b4497d5657539bb

SHA1
c1d0cdc51828e619fc7def5499ab6b8ca75bf4a8

SHA256
e1d50889127f1193d1808d97c0defb075a7cf7c024ca6a609e9052ce8c34d6f6

SHA512
8b185ae9df9ab7958fe22a8b9409819141343fb759b32cf063d6dc3c7894fc82d4ed7b6659ec57ff28ef05f7e5efc60c9a61f297dc6bb991ca97be9c770826e5

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\Synthetic\SYN Analog Meets Digital FG.mrp

Filesize
223KB

MD5
066bc1c134519725619433cba01cca15

SHA1
2b122c263f5dbc82b28b956a1c31bba645e6926a

SHA256
173e0b8f440469fc10ad552c7f4a729a7537a69a57158e35586bb3acf6dc3ef2

SHA512
f820e550d80211273ca826f9c84bdcff9128a0125d2f4e8a23a24c44425829f775b174ca4d941b86f3f52a909977aa5f7fb72a33af2702e4216412f271352454

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Ambient Textures\Unstable FM ToTc.tbio

Filesize
9KB

MD5
1cfce94363ad3394109909f386976b65

SHA1
e833d4674ffe076c98ba742653bf2fa539b233d7

SHA256
eb3254e03953a56bfcc36732e3ed8f876e9d35a736b0f912e80ad4822c96114d

SHA512
704ce156819a4d03aa956d278ab59f8dc483b2ee25a90afb3f4263371988acbc54df43c59def91f8d485efd273aa9783e481d66289cb14a3207e25016e8e098e

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Basses\Bass T.tbio

Filesize
9KB

MD5
237733b6406f67e61cd2b6cc254f8538

SHA1
44add9d7bcf5b632f0f96478756d09c911297c66

SHA256
fa24febc8cf865db0e2942ecb1d78bfd6fc6868db6c6540ac6f237c35b314c7b

SHA512
3eb161eb8454e13482a2b9e2595920530ac9ce2145949ab9e627d1817a3b51552bce72aa7c0a1bd8c30752a5bc9e7395e7532661091d4964486526c0bed0e76a

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Basses\Plastiq.tbio

Filesize
9KB

MD5
d7bf173e381c4179489a4f82be1603a7

SHA1
e8720614f55e64956fc9d66a82cacd5467c2dd67

SHA256
ddae1e955bd791957b6554f9093931fe97e75b74a38493e2a41b9fbb6098ef4d

SHA512
1768ac8219aab20b780bcad9b60679cf49f300d9e04d847a6d87c1b5428d376d7c22f714d53e5f901e78c796de2d18c9b8b22df020d9d76be0df78e89bd7418d

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Basses\Quickie ToTc.tbio

Filesize
9KB

MD5
0b6fd71ac72a5cb71405a7dfca9e0bde

SHA1
00da22102dc358f48718125cd0606bfe831808c1

SHA256
1ee6b848d03c96b80f9b99b593f97ee3d1a0de197dd85115c599a7002845cca5

SHA512
a1df4eca645ef114cecf5b81bc1cc347c724acf826f765e521007f60b2e983bc61b7ee20c0c183f5ac40db4dbac9e72e478e71487291b30254d2bf375e7cb3a4

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Best\ATM Industrial ToTc.tbio

Filesize
9KB

MD5
d360d9c00d06d150c5ccae6d9e4b2719

SHA1
2bba114b0d5b3ae323822b9eb3825e2df2b75900

SHA256
b59c7055fccc51dcca38ed3c9ea212ea14c2d01657c6a685bccce1f625e3bf76

SHA512
7432f8c13432438e88e5f8b69ad7610a2e02c137736356ba6148a1ba4dd056b88a14e632f6e4c7b3d24776df352b97e516194381665a943dc70f4be462b2af37

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Best\ATM Universe ToTc.tbio

Filesize
9KB

MD5
cb965b31da19da9b3e54f0b256519b2d

SHA1
d2fdcbee5f0b99bfb17e61ccbd0d5cc062589399

SHA256
bb7e95f539ea597b2e601b9fcb293f3e8073df1a28f773519f4404ec80cbd13f

SHA512
d0ea14c4f5843c7e45ef649162070cc91e2bfc6c41fb6bf0643527e6079d45b782ad3929ceb1f1af79e671f92015905cd0badb2562fdc7bd4c3e3b582c1eecb0

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Best\BAS Archetype ToTc.tbio

Filesize
9KB

MD5
51d97e8fce23931cbdcb089ed388651a

SHA1
e44bf8c06e57f463370851ccf336cbf5f7893f93

SHA256
8117f4a69bd04d2fda662097e40a66c1b032e4c91d3b6a4fe4d447f1e49eb68a

SHA512
8cd0acc558b129e8b7437d3da485ceb4a50b0e7160285d5fcc9f14408badc8cbe60aec82695c34224ebcbf2fa319def378d72ef188adc0ec5e88570340d9f80c

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Best\BAS Monster Moog ToTc.tbio

Filesize
9KB

MD5
57c1e1f5ef6a3f22ba5ad14dc9e38109

SHA1
1212e340252ac9a16d3fff105152ac68caffbaa0

SHA256
abf53f9103d33b6c179c662bce4f4191301b1478610e4b9ed56665787538b3ce

SHA512
51109f5be5a2032266e0be99f8a254505c84124d1d0bf7db37d02688f7b9a78f23e1f5f92681132a535fe4bdddabb183a28266577c0e98fbe97c9e398d7345b1

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Best\LED Stinger ToTc.tbio

Filesize
9KB

MD5
b743b6b01c940e4eba696cf8f703457a

SHA1
9f229d892c0f4d979f5a952b6a60dc8e47f5d9cb

SHA256
6b806ab4d9578acc523c2a83f36493ffff9a9151ae72756bc30a26c1e80c89f1

SHA512
2494e2a78d617c7ab849b2bb58035ec7e79d9143da170f611cd5abec57ecd80f5ee375363decf3dd835ce80b411d80c4ae3a2379a4cf77a6ed7436e6f60aae21

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Best\PAD Beauty ToTc.tbio

Filesize
9KB

MD5
542a3775762674a09da381ca1d07ac2e

SHA1
d4094478af370b0c096209891ad22a527fce75b0

SHA256
e385aff29f2ca9918fe1ad485a0ed6546d09916d3651b435aeafa802431a0e4c

SHA512
533e8cd835aa0e35cf15d769e12ea73498259040a6cde68d05f72525ca958eb2f3945a4c84a632dbfb415e138adc18c1f3e374eaa7a74bb1dfd22b8e3b1fb3a2

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Keyboards\Moron's Organ ToTc.tbio

Filesize
9KB

MD5
de8538cec799eb62bcc53aa9593594f0

SHA1
c971108c8f881bf584d77bceeacd2a750cfc3234

SHA256
89bd46abab3fa8e84ee538d1da6135618d0a4e3c22a2d844abf46be50c9cdd6a

SHA512
52f7cb45125804c93a568caaf20b73412f9f031c42a24ab81b8ea7f25bba1e0b0ede72426cc6b81bb0a2db5ff207e716ebab58c7ed63e484b256cacae7af32b0

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Keyboards\PolyEurothane ToTc.tbio

Filesize
9KB

MD5
402d95a31532ceb6ea830f0ec1ef1d5c

SHA1
61e0b6b093058f5b437e5e9d3fb5795d6cdd268a

SHA256
71e80c8edb1d479f5d0d4a858c8047a4565a19ff34f25992bb5b2a11d51d7b32

SHA512
0a582c4f346778675eaa80142349a2a463b15144d755a599324ec5d8b694866cd6d5efbf2fa532405b2870c6ee9e1b1e7cd92a43cd2829bfc84a01741cd7f19f

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Keyboards\Sequence Me ToTc.tbio

Filesize
9KB

MD5
0a74b5276e6449b618e08670fde7538f

SHA1
a21d5abdf64d3a28dfe8c78458f1ac60c17a61ef

SHA256
ca7bf040123ffeaa488c6b317c49dd29088eaab0e47d6905aabe7611f9a1cb04

SHA512
4d16368091665d3f8b6c08bda81f4e7f41f88a00f2403d049784207a133e4d25b2425dc7f42954d4cbc0fe7d7d1d55dce3baa3740364b29822984d4a1fc85dcf

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Keyboards\Shtick ToTc.tbio

Filesize
9KB

MD5
496ec220a359d64f951cb59acb6a3fd4

SHA1
6807224a8026c320000a2265e5e4944b799e1e93

SHA256
9a435974abdfc5066bfe3657c2424bbde7daf4b9c38647123aa2a726ea44978a

SHA512
85f786ef0650a2035a80bef55cf140f79a70c7dcfc5dc45f1692d10aac65cd63a2b29e4ce374c22ac69676835982b865c806edc6b8a174e3146e0625b1ec889a

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Keyboards\TarnceArp ToTc.tbio

Filesize
9KB

MD5
5f87df34149e3c1ccd4efc1e910fc3d2

SHA1
46907a84450b1f127bb582ba7e8999e1017802fb

SHA256
af28586e923dfc2f1fad3b91ba663af2ba60330729ff27e7129c1723835d481f

SHA512
ff91a10c29b1766de845bb70c2bdb96a4c27c476dd892a5b9dde5f23ed21364db7d0167f51263cd9a7f2ac4ba6e3e2a66abbc784baff5319b6ae719fedfc32e1

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Keyboards\Thin Synth ToTc.tbio

Filesize
9KB

MD5
2144b452b15fcf9d7766c74c7be8c49f

SHA1
f936fffcef2ba8992966248acf2d1b4e1a5cd255

SHA256
497698b88e4b39f58aceefd70235e7120b207922fd5c45285f652294226cdb17

SHA512
a716a5ef19c586e2ec35252f1a726aaa163db2f0e5d70af65b4c92e976ee61fd75641ec9b61390f73a59d831a1c0c56e77f5a31a47085e67c364b2cc04784688

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\Cyborg.tbio

Filesize
9KB

MD5
e6b539881fa6fdc57967d3ddae2651f1

SHA1
a35d5d982a477fa23defa0440f46e42b81e46988

SHA256
ebf1815fafb9c437ef4c590db6485c83775c3a4d3d55326941a05addc9bf1b1b

SHA512
ec9781bf93de3e3b3c3373dd60f927e3c41d84de008583850e38fb476fe355fda38e85a5a9a00ad8053d2b49e52fd98f3cc02f2aebcf6715d833ae9f5a37aaa7

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\EthnicString.tbio

Filesize
9KB

MD5
08917ab2ffca812289f1e6c1de66afa8

SHA1
f06bc0b7554837a61fd96c761cc8a1b339142a1e

SHA256
d3f1d6dc7dbd44c17186dde19d11ce314dfbe20a48db979f6ea01f9092313ebb

SHA512
0dc228cd590c1d56a7ab11d9020cff577e0c8711d5a0bc6ae3b1b053f21f27edeaf7d8338191e67eb1e53b48a544abbc2b1cf061a3f372c3c62fc7434a89f2e6

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\GargleSynth ToTc.tbio

Filesize
9KB

MD5
b22534b0191cdf96ceb056b0c396c21f

SHA1
a796c113cd6ffce918fffd0ab5922e17954d412a

SHA256
e4ab314a0a9d42e48352def0462c5267b472f7a2654efc19fb8bdcd4772332c5

SHA512
b3b45f8c39461452761a95c832671fe918c03199053e63e2a4e479fc2e351751d04b75d0d68006fa4fbc4370ca794af1fe3081e59e34aed993fb898c4493a3ad

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\Persona ToTc.tbio

Filesize
9KB

MD5
ee9f69afbb70dabdcad56ab655e58e04

SHA1
88e2f0ff43edcc569e63c222da2dbe732f96eddf

SHA256
257604ba427fe36ed2f798982e2a683cb41e009889a2ae85de5f7f1e06a7c349

SHA512
b92061293f22c90124828bf623dcd8071671e8a030fb010360c940c21dfeac7facac7bc4aa8bf3438b5fb7496c916d3020f655b32d620cbe611ee273787764b6

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\Scrape ToTc.tbio

Filesize
9KB

MD5
6be96c6567566674bc631e6d9ea414ef

SHA1
57b7f6e4ce08535d55eba55c2913f2e205574fac

SHA256
a53d30bcc070dba55cf2ea0cfe757c361a7ea5766c241ac5037c11b331b353d1

SHA512
b3a75c001d51b7f9863693704849e19922e4e89e62be83b90219cae3f5fb0b42f81cc772bd0953608c1c4a21ba813b947b4eb1d2c8de883a6ade2c061909b595

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\Sharper ToTc.tbio

Filesize
9KB

MD5
2514bf86c1a26d5fd7b7120298d56b62

SHA1
1096b0651966007564f1e88cc8ae98530b353424

SHA256
439471c2240621a1ba790c4bfec9413c478e91f958014726fc6b17ab17f09d10

SHA512
b4e15b81d279fdc8d9872164c2222dc1de2fce7c08f65f0ca4207c9e76c41eb6ead0b641cd1b634bdc278eacad50e14b8b03c75099c36f29ecc7bfdba5a7dbdd

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\T-III Super Saw ToTc.tbio

Filesize
9KB

MD5
0af4bc5a24decc101229b1d3f4801fa4

SHA1
6349d7da4f325b038802e46ba547366399ede676

SHA256
caff8ed669cd95d68a5bcb3017984e0c80990e6bd294c3943f7c4f73c9cbade9

SHA512
403ba2df777e72d1f9e8b3d1eca10128c6face5302ea5eac22d4fd14ccab7dc358677ca3ebfdd307c59156a76fc702458a41cb078b515c5a8ce8165a66c69005

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\Yup, Another 1 ToTc.tbio

Filesize
9KB

MD5
073759f670a09f8337d81bfcb4fd5c24

SHA1
3406a34cda06431988e35a136a30e5eca1b585ac

SHA256
7f543b303f785056987b876a83eb6a8e8515cf2fafa3e1aea097318aff5cec55

SHA512
fdc15cf96d6abd3c307a79917ce79d5c7bca80cd6964e067986cf9ba7585578b7c753916611a294c70c579b73ac36d7127e10882636565a7d461cff6a96622b1

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Leads\ZaP ToTc.tbio

Filesize
9KB

MD5
b70f3b792e4d4daa7410255fd9d163f1

SHA1
066c7da60a91ab1f4a166acadb878878ed5b538e

SHA256
64d4a46e14005c7effdbb01faf6af492b3265167aca814fc1b402e34c5bc9c99

SHA512
3ba8b8c2dc519d9fa52a06933d3d360be07bf9f2439898c7621bf2d7b608714a0f98e4e2bacfcd6a9cb878e6f0f7dbb8aa5795cd985870fdc9ef1401658ac8c6

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Pads\Brazen ToTc.tbio

Filesize
9KB

MD5
09b0d899ffc2c355de05232957a42deb

SHA1
8b7775b5b59e27c4688743d3b619188737c0e937

SHA256
e8a69fa77d170287c0d4e233681d0a1a364fcac20898a83419385847058943bf

SHA512
c4eb5e16a3ee5336a53142504fcaf4d8b067f08f3084a3e79a1458bbd27cc42abea7a3d9bd44e1c9648d01e43f0e98a962a267b67f8309c3555d028336786ef8

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Pads\KeyPad ToTc.tbio

Filesize
9KB

MD5
5d4042ea4e372fdad646670e90b375e5

SHA1
8eb5830204ea9f9ba2ac858130ade6c19c7f9aa5

SHA256
9afd10f2505651628dc936f71681d67c6adbd6f7ae132e3e5c18f02d72c1b44f

SHA512
f4eb5a7935ba49c21bc5c48c6de79ab1b471d51735e87f08aeb0a0b97bdd327d10762657384c76f867bf750eca6e5304a4101ee5250a35ae56a5f09ea6a637d5

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Pads\Lore ToTc.tbio

Filesize
9KB

MD5
dca55a916bff3fed8389ec093175b099

SHA1
f7eb69cdfb3a38bb19e097bad47a18c3512f053f

SHA256
b26efaa5de96bb6a141fa650fdee284b70a195acbc27441324227b1025876f95

SHA512
dc2ceb98e8176309c1ed5bd8113104ec5f92a1667ff0df16ad38c462d688347f3d8a6e22e5dcc68c6425f235c52c37da939ef022b19ae52cad516f60ec898635

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Pads\Noxious ToTc.tbio

Filesize
9KB

MD5
b9deb16a9c27db85914d296f147a0b24

SHA1
4f50fa7a904c0a711f07b7a4249e1a521ecfd9d0

SHA256
63d2a3e91781967f6e1c74317373eaa779005c1d829f86f0b777d29f7a2f7625

SHA512
d2cd8ea2bf329e216888e6a7f03e79ac6554f17054d07ed9f70a962dcf42300c857a00ae938e809484bf27f20e122c53a44065e495abdbce25aca0e8daff001e

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Pads\Pure Plain ToTc.tbio

Filesize
9KB

MD5
5054e57c3842bdf3f4eb4feaf89303d6

SHA1
03b41eddc6b51c6fbe0f14fc7acc0ed02b907a63

SHA256
875fd97a996f12f8f54022e559e8885db637d9a8268d341a3a477e3e2aedf2bc

SHA512
0db4556268ae23617b6c5511d77169631e3eb3a48e99ecc2d1c9838a96fbef78d90b861a9f4006d7d2cac9fa1d8cd8c57accc2fc93dac6db41ed9580a7638074

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Pads\Reson ToTc.tbio

Filesize
9KB

MD5
c6e16db7b4c632c53a1375a16445f8c4

SHA1
d6685d53ded898c2c52150d59a46460bc3b0d69b

SHA256
b987c7103ff0ee4fb6efecf11fbc009656b5cdc8ae55183cfc9a825fa2d2fdfe

SHA512
770b87e3d8f2f7d46f9523420fdf6c4fdbbc6f404fc4d74c9bdb70c5335dfa974e1897a3c56c4975811b11c5e59a7cc7b17a89af1930883be7cf21f305ea7b33

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Pads\Sands of Time ToTc.tbio

Filesize
9KB

MD5
20939a81887b137d62c7cf61bd15fadc

SHA1
cba9933fb2c33c7f8b618cb348114514f979909e

SHA256
746e496cb264be9931f218b8ef59418e9705ba27454911928d76ef471b4647c8

SHA512
f07963490a32446dd41a2d9ab52919ddee815724d914a5aaa495f34df026855375bf10bc6bb22018b13a0ee2b0ae55da991af6c2905066f172f6a88b154ae8a4

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Percussion\Off-Scale Harmonics ToTc.tbio

Filesize
9KB

MD5
046530cf6aeeda5224d04bc41a84f0d8

SHA1
faa16f6650477bfdf367e95ecf8384c81232321e

SHA256
f0b74d2187bc6397a90ae0508faf3da9d868fcbdddb71b9e42d62c2941788670

SHA512
95ebe3217313ae6f597a33b08665dbf30dd8eaf007ba1349c22dcffdcca910c0d2a6e5dff2a8c6e761613c57a9285889c7ff3f78288d35b0da14d05deffa9d1f

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Rhythmical\Calm Backing ToTc.tbio

Filesize
9KB

MD5
0575af14c60b74e3e6b6a2b5c2ad0387

SHA1
53db279276d0a088f5a43e19e67e48657f98c415

SHA256
065e934954d5c04f4d111bf703f77ebbe21afa5b3ac8260b6ac48e9eb8a2cb29

SHA512
0ca95ccd5bc1f1d1980ee942d73389c75233ca91efa56301d0d534131b0340af535b97aaa0a711cdd41252f0f792edf76a4954ef1306701bb93ff66f9ee5ca1a

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Rhythmical\Stereo ToTc.tbio

Filesize
9KB

MD5
d92229b1fbb43a59eaf0bfc01d3a16d7

SHA1
e8eefc0d04447f82a748c3d17d6d91d67c11d7bc

SHA256
8d3b928a725e3a15d99754dd65f545aee0ca9d2f68e42b5ed8e99f8925010809

SHA512
1e30f0a00a94b277ee4269cddd449851e1630b7763749d3be3c45ab6f38240eaf6afd8ef428c187859bd6834a50d4b5ae4291378a23e9502296bfdf19896412a

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Rhythmical\Traveler ToTc.tbio

Filesize
9KB

MD5
36066e3bb779bd5280ad92000629debe

SHA1
dab3ca5a4e0007f236ba2c586f36a4aac4892954

SHA256
6cae6681bc63afdaa558792859c915da958e482c1367a0d93f3173e8f4a8286d

SHA512
8286c9a1e05ea05588a7be0d62f9198da418c29be45223e80050136b4d6ca58cac92f7378345a5b9883f65d1e5f380bd866cd68a1ee35a622294442a59a2ad05

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\SFX\Industrial Hazard ToTc.tbio

Filesize
9KB

MD5
1bcfaf7cca1f0fcc565d7efd623c5143

SHA1
6b6895cbced336356140cd10be81d764a6678eed

SHA256
2d720acc5c366eedcbba91696ff43c0709a86099e1127f9cd066c1ff9a6a3ef4

SHA512
9d92f9780d61b9db481d3fa7daaa78153c1acc24b69a38e484276b546e046c939744aa974562fadf864e6b7c69b00b708083ea9b673ba47590f125d802c26260

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Sequences\Criminal Intent ToTc.tbio

Filesize
9KB

MD5
83801266f0116060f30fbd71b6597372

SHA1
3caff8b7ed5ca91c2e7d9cf996d886df6e51c5d7

SHA256
beb892b77654e5e8f1382e49a77d91b7b91ffb5cbf0bf36274f13a58dcc5321e

SHA512
de9b00e01d59c3e1b3bf231d6200547f59c0c40a3144d382ce3e4f2c30d69c3b0221857b2a62f520b59ca3458a01ad2be508c90ff765435550600d9afd1d7fcd

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Sequences\Nutron ToTc.tbio

Filesize
9KB

MD5
153d39f60c94e722c669a1960eeb0f50

SHA1
4304bc37978be8d8310c0842e45524b0504d9d2b

SHA256
039340f7cb216df1838b87f5946c741edd7731a5ea68212756e9e8960fa42da6

SHA512
68d9448b4d2533b0b3a3066311fb229acc7cd7fea5ba41bab23871ac6132cde54ee971e1c9985e3921194c13570da30a23fe940529c3a1d9ef72adbc0e271297

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Sequences\Volume Pedal II ToTc.tbio

Filesize
9KB

MD5
065bf672cbd9a1737d9b8d87b27634a4

SHA1
ccd3947b277d418c9e23e6509d71af501eb068e4

SHA256
8a8f7559326d70bbdb24016ec99eb231a4d5203603a20c9eb2237ddbb1dba1c9

SHA512
111e69088bf6cdd4562eb37de5ee2460aba9e5e6e2e0eceeaebb404caaf4a1d63ec0d7c849063c70d4e68e85e117c50bcf36c78c6a7e679a8c1e516bb6058978

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Synthetic\Sequencer Food ToTc.tbio

Filesize
9KB

MD5
caa327b186cd4fb72ab6b0da9cd512a0

SHA1
c9f2f45d9b0f8b6cd07388e0594883b8e56f5877

SHA256
a42ca3ebd10cc42c6120d6580bebe2d38c2b0a993319b894ef177f2caffb66e6

SHA512
865ef7bec44bcf53c0ede21d793762658b756758fdbdc6f27a7e9be0344a6c7834da434f75c8178db7a7636919cacd9d8c83ef7d9fee0d786603b2c073969cfe

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\Synthetic\Stab-Synth ToTc.tbio

Filesize
9KB

MD5
d46608fa19aa011ee625ad1ecfc31b1f

SHA1
847dc716b1a310a9a5bab17c2230f760e64c2f60

SHA256
a1c9dd5422f3b9c3a056965a92ed6600334e2111e376d2737236199bdc07bd88

SHA512
1118ba248c58c633708c7c635aab400da5d3cf0a82cb3e95b2d80453e7603af7b3a24a7dc378422b6f52a94d310659bab9647a7319037e66cf9b454f7d63fbac

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\X Daniel Stawczyks\DRM Snare 2.tbio

Filesize
9KB

MD5
4dea177dfe5c6c4ef8655bb00a2fb6d1

SHA1
0c435abc82a0bd59bbdf9fc06c3de07a7af1a49d

SHA256
2a133faad66e6cff8a468730dba55a69fa22bcbb081de2194bebaa3fc90ef6cb

SHA512
9c12ef83907799b645f3e8f9de694c30e1667e932806a687039ad91f821e0a9be8827d2a5bb2f4a2a579b84a978d4e589dc0982a5caae1dac30a55b13d9cbc2e

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\X Daniel Stawczyks\KBD Like A Wurly.tbio

Filesize
9KB

MD5
c6b14f60b7daa9817aabc196af4494c2

SHA1
38c829e1c972b3dcfa765632f0bd0f3a0bf2be38

SHA256
dadca7c5768e000ac02c461d77e70e35e339d1e7ede836c6d8dc137333cc58b2

SHA512
ab51a6fe17953d94af2c93854099eb46b972128d7544b0a89e9d7b64e21fd0311a295549d7c4640ff433e41e15ad771ec166d32862ad1b4adfd4970e4d0599e4

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Toxic Biohazard\X Nucleon\PAD Neptune NUC.tbio

Filesize
9KB

MD5
bee8fc0d05a9c1e2d671dffb26fe5b3c

SHA1
fc11288fd6a5bedd8794c51e09337e8f5481d2b3

SHA256
25efb1a52bf2ea479e5a1f95d1d94e21baad5fc64887047d914f1a38ed2b3899

SHA512
d06814c90e246b2ec986ed2ce685bb61cc9724ed9b78621b710161886b12fee5b260f4bc7f2f64012009696da0d5c9e21216d576d9646f362a02ff82861e3db0

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\System\Articulator\Maps\Env filter - default.fnv

Filesize
104B

MD5
9084258accebf0a1bacfdb0d73ad1bb8

SHA1
ec3dc7f1306934653b228b6f0481af3234a2d621

SHA256
e1bfe87814e9aca427d33d8cd9355dd3703298077e73db610d380d37f6b0d98f

SHA512
15902ef402ef94862e44405dc1a44aeb341be957f66550f9dda1bdfafca84b9466f838953a1f187321500da034eca7ca12883475c9251b93848385bc2e2d9150

Download Submit
C:\Program Files\Image-Line\FL Studio 21\Data\System\Articulator\Maps\Env filter - flat.fnv

Filesize
80B

MD5
3c2d51f477e56b8fc854bdcb66177ab5

SHA1
7a034863b76c7f3ac11eb54b45cac2572776a6aa

SHA256
690959bfcbe079ce51bb37e24127de0bd3590f732bac464c86cfe6ce5d67ca38

SHA512
036cd560b47785cd8bcb630e0214dd58e9b9eeba7d75718194f6b883a38d50c3574fd53a45587681b78850c1ad838de90e36097231304fa9b89b77a0444192f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
ade079f56f0491c0b3e86859228d52e8

SHA1
3ddf8962fb77ef8b77d6df7503d6b065071b9581

SHA256
31d00e6ef018b4a16ecb4c9e267ed7e8414f0e503c99ab1842e01943937f26fb

SHA512
8e1237a0cbd6f648127466ae2fe7dda8d1ced0163f8f664b726d21be0c4fbce3cb74e8b369dd0ecdce66a17b6be748b3e8964dca690f85ab3d67cc7626bb03dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
e656aa4a56d60657c92eb2d3701358a4

SHA1
bae189d577189db6ead342091f02f9df9ba1ff3e

SHA256
f23e946a6145c6731869ae81bc869f93c1b77cf55f6bb777a6229f6f492dca44

SHA512
ef5018da606af29e7c9bd1b80e09e3267145c33cfc8718c9e473b8d8a0fe366809b1990e2134c6251ea195573680025900c5dd8ae05ddcc5575c84ab412776db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
5171b4fd36f37aee4276f0cf102ae633

SHA1
7b4b3a66fe68807983702e6cae5429eeec9ccfce

SHA256
1c312a9946485dc2531cbec18c38ca55b975284dcfd47912fbc0288f03cc2259

SHA512
92cb2edfa3d82532bf1b3b53d6a0a7877cf3d70b62540982e773ddb68109983f7beeb103a913652084fd554cdbc4d0438cf7581041333141c3aab45aa91303ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
84f77a0e3ffe9d37dde36751e7425410

SHA1
f253378d24d69b69889b7fcb452a23f12d721334

SHA256
6930d4cc22a61c695687bf6488aa9b4da0d98a82819c45e06f988d247733ae02

SHA512
6fbe4fca1705e6fa1047afd31d40cc8027e674232a2556c1f0f3d49a5e3368f20b0d76448541a65c918e0f5a41273d08a7982e2f03a9fd617e142c1ba87b52d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
e34075eec266119726c89282054c3d62

SHA1
c8a73827bf532b5b83554911065cefe2da9e9116

SHA256
6b48dc61667d633ca76304524c0afc859419c9f874a35a40b4bd542fad44fdde

SHA512
44224296948dab08d010942350f57083624a991fa10724b616626e67fef2de4620fcc27b3d6de7248300ad1a75fcb0d7fe0ba0262c66af89a50da557b64c7a7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
784e7cfb2dc35bf04751a36b858bde77

SHA1
e7abaf84c2ec26cb1c416c0f4cb0be8e2d6cde55

SHA256
2611c55160102e13730b075549780456c802693294ac10e19438112c2992621c

SHA512
86585c7d289bed023b60fcb94ea537c32601d17771f068cc5594d1809e3e590ef7408362a386733674ef8779380e5ed0d49d5e4158f3587ba3ca20fdfd4e1625

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a27c50cf6d0ad5daadecc7fa9fdb4cab

SHA1
c5226b8f4c20ce833e1f6347dc5ed37e1214cb75

SHA256
66b03449ff5f98d50384c4e71a637fa1cfb1bcc17a6b7da7e2270c34310402d1

SHA512
f20f2680f8a419213ffd488679598fe1914fc3b91ed3faaa1bc1278699f16aec36a67f4485c62dafb60c8acf5ffab515195e07c1faf6ec806683ccbd6b9180a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1924c7a05869e89cd294e0f5eae5ef02

SHA1
81f0f35983e532af891ca03b04261b1ba8d5afc8

SHA256
02d5f1cc3cc3d8391c12b3db566dda26c989e0976a7505e7937cc5eadbe394b8

SHA512
8c42ea78d7e2893ed6e897c39c5f61661381d6e3d574fe53381cc17f212a145c0858c070482bd127961d97104e1447905cb56cd7aa1b284a6fef70c5a801ad57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a3a1e98673463761cbea7ddc0c8faed4

SHA1
7249bd0b4ca5c9c532fef9a456d51d702674297b

SHA256
b4832c29ef5bb79ca9cf5bc0cab095d1a9f1009547a4fecf02d0de4350d0d780

SHA512
90220a701e9f7bfbc73f8100ea3a2bb4846cccedce031d7d548adc773e94490ec1f03be9f5ba8d5c987a7a71982c5170f366c9ab0faefb55cfeab72bd45f9c0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5ac88649053afa29927d02feb44adb7c

SHA1
fb027354e4d0ad0a324cc8fa8b016d6d264c60c1

SHA256
7ac080ea9557e7fc336b4fae2d2212d80ed29f4d6a51c4b6d2bfd60b180b1bd6

SHA512
873dddbec4bab271e021f88527cbd5b2302d1bff02c5a4a3921d71b882133a8a164c42b28c9b353e632e96ab640f24e83dcabb87396eb92d9327b69d78d8b3cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsb7424.tmp\System.dll

Filesize
12KB

MD5
8cf2ac271d7679b1d68eefc1ae0c5618

SHA1
7cc1caaa747ee16dc894a600a4256f64fa65a9b8

SHA256
6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba

SHA512
ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\ILSetup.dll

Filesize
1.0MB

MD5
cd50c47c010aa1e6abd8bd8ce98fb8c5

SHA1
547e445c42b39041204c012f95e146ba7bb3442b

SHA256
1ea1404b5e14ee8572575d941ef27437a534b46aa1d23e112cf40f4144cbb7ca

SHA512
f4c54f3403633167572e36867a0e99164de2cafe873505922b055b65b63809729a89ab3df092a634d18fe2fb8d3d1060a908349ef61b88ff0750815347a4fa53

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\InstallOptions.dll

Filesize
15KB

MD5
998189882c9f1be220c9faf0fd2bde15

SHA1
787d50c46c9a2a48565f684fabc7503aca8b0493

SHA256
f34385901206a3952fe2724edb3b0b123fd897119c774ab68c8745de6662d990

SHA512
e0c52ad851b476e7bcbadea8f993e5c6f9f70a9b46e2aebe8ee353a372b0bd5af95241240f880f49b9d91d240a4a2b7e7d2b7c8a18ca1654e607fa8d2772dfd6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\System.dll

Filesize
11KB

MD5
24523fe14bb9ba400a3950016b187915

SHA1
6ec152b4e4ac04038d4608a8a206070185116036

SHA256
c4aaf80e3990185eeb5ea56bf841dbf5f3d02269d715f3bfdfe8b54aa797a7b9

SHA512
ae73351d27109187f7c4e312bc30a165202f29d74c65dd0feaee75dab72b97d27c6482b1e95771063afec7e9f2ca03a27a11cd25e39228072b69c33fffef7257

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\UAC.dll

Filesize
14KB

MD5
adb29e6b186daa765dc750128649b63d

SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9

SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\UserMgr.dll

Filesize
23KB

MD5
9210597fba3dfab3c69b1eb490205419

SHA1
6e3ca39043756ed1cceaf2d4853e7cb6be1c64cb

SHA256
7696c255014a543f720e189ab3fe48f62fcf43435465062649c96138eedb222f

SHA512
4877daefdd34725791fba7c8cc2d85c4e91080ca7787a71ee9ffde71704ac40799b891f03d1f1805a31af6ddc35e335f74c9d620e87d517670a378c001cffb06

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\ioA.ini

Filesize
1KB

MD5
c533bd0d2cc18a1663f3c5b06cc03205

SHA1
8995a61ca7d716c4c01c189e14382332026a0f15

SHA256
ea4f73cbb01287725966b6aedea648b1b97e04368587a6b166d04a87471f87d3

SHA512
5e9f6b6323a5dc1c8c4f23a4006c0025c7f7da0154f22c5f615d746b13d492e67fdc9b6d85a8b8dc805021bc1fbd7dbb82c3fa09e4aee8ef9ea3c451c9937377

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\ioA.ini

Filesize
1KB

MD5
cbb12645491b3f9193433e48e13ca8c7

SHA1
5de4f673a649d8983699070972ad255980b0b111

SHA256
7cf2034545fcb5bc224636cb55a63e7ec6232ca5c0cdf3d80541ee386c03a9ee

SHA512
6e8e3636b37021766c4e8b035f51a36a4501d06e0a5f54cb760488a1f5cd7e94caa8250e980930b09605c1c550f1bc645414ce3539ecfdc3dc4dfaec829ce7c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\ioAllUsersPage.ini

Filesize
1010B

MD5
634fd2633a884035690fd3635c7ae34f

SHA1
91af7c2af8a41563d33f944868d22673c6116e2d

SHA256
c0313e195465e521ef5cbd94e19a1abe70cf0d564ec38b017f1e09a276e30c15

SHA512
810389998f4eb641228e5b4e2ec43849102d2d9e1890c17aff5067cbcd0e46bac7850f732815746cbdf62d4f698cc47002cad2aa2f3b442cec3a5652558b058a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\ioAllUsersPage.ini

Filesize
1KB

MD5
f4f4c8eb5f1053d98be36ab8b493e632

SHA1
6650dfb177c57acd329bc353010f98263e3fabba

SHA256
495e4ee7b9e2a0d2128a687d64ea3785f1a3edae09d8426d9c5345700134ba52

SHA512
3e8f011138e5874a6168b0305fba1eaa28ba66f7a095e3272b6bec1cf87d560ba9e02674ff80851f38d9257a928dcf85901bbdd4442095ffda2463a5e4f6fc0e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx9028.tmp\ioSpecial.ini

Filesize
1KB

MD5
7eedd1af0116c2db051e1f273dc3d36d

SHA1
7802d84e4dc6fdcdb503d4f7016d601115ed017f

SHA256
9d0332ff26a13e07bf650ff486f904d24047c2d45d79f9393ace9f24c9c58472

SHA512
238f4d5ba6c73b85f89745280587862548b4398eef7d10a9a7b4b454ac38d92ac3335412e88e7542dc5c25ab8bae8e593e086099b10f9e3ce11b3917649a4447

Download Submit
memory/1584-303-0x0000000005600000-0x000000000570B000-memory.dmp

Filesize
1.0MB

Download
memory/1584-247-0x00000000053B0000-0x00000000054BB000-memory.dmp

Filesize
1.0MB

Download
memory/1584-669-0x0000000005940000-0x0000000005A4B000-memory.dmp

Filesize
1.0MB

Download
memory/1584-662-0x0000000005840000-0x000000000594B000-memory.dmp

Filesize
1.0MB

Download