ebd65f2518c79e9e8133a19c5cc22912aca392b19fd70d7177ed84c43ec4fc3b

Analysis

max time kernel
137s
max time network
163s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
13/09/2024, 17:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Hive 2/u-he Hive v2.1.0.11037 CE.exe
Size

313.6MB
MD5

0eac513bf551ffb8fb50f77e2270e2b5
SHA1

e008b74b19a0e6ba305b3a38285d6bc1ec98715a
SHA256

4be3c14c9ad9188f4aaed50ec958d1c64683050877c9eeb64ded5233a98af625
SHA512

2d257a27f8607e8092cdfd9cfc7d8ec9bdaeb6f6c09c13593e118c7075edbcf0428e24a0fac52bd631dfede0a519e391aa296a64ebcb67c1fb2fd0fb145399d3
SSDEEP

6291456:+k9hc6/POluLDGk5swkYVhC1tB8S+vl7tLBKqYikP08WCfXo:jBWAswk/bBz+d7tzfkPHzvo

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
232	u-he Hive v2.1.0.11037 CE.tmp
1812	SetACL.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\desktop.ini	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\u-he\desktop.ini	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\ProgramData\u-he\desktop.ini	u-he Hive v2.1.0.11037 CE.tmp

Drops file in Program Files directory 18 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\Hive.aaxplugin\Contents\x64\Hive.data.lnk	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\Hive.aaxplugin\Contents\x64\is-SMG2D.tmp	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\is-M86LS.tmp	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\desktop.ini	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\u-he\is-GBO1G.tmp	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\u-he\is-FTN6J.tmp	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\u-he\Hive.dll	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\u-he\desktop.ini	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\u-he\is-A4LH6.tmp	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\Hive.aaxplugin	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\is-INRFK.tmp	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\PlugIn.ico	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\u-he\PlugIn.ico	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\Hive.aaxplugin\is-14FHB.tmp	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\Hive.aaxplugin\is-F11BF.tmp	u-he Hive v2.1.0.11037 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\u-he\Hive.data.lnk	u-he Hive v2.1.0.11037 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\u-he	u-he Hive v2.1.0.11037 CE.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	u-he Hive v2.1.0.11037 CE.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	u-he Hive v2.1.0.11037 CE.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SetACL.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 12 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhe-soundset	u-he Hive v2.1.0.11037 CE.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.h2p	u-he Hive v2.1.0.11037 CE.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhm	u-he Hive v2.1.0.11037 CE.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhe-fav\DefaultIcon	u-he Hive v2.1.0.11037 CE.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhe-fav\DefaultIcon\ = "C:\\ProgramData\\u-he\\Icons\\fav.ico"	u-he Hive v2.1.0.11037 CE.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhe-soundset\DefaultIcon	u-he Hive v2.1.0.11037 CE.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhe-soundset\DefaultIcon\ = "C:\\ProgramData\\u-he\\Icons\\soundset.ico"	u-he Hive v2.1.0.11037 CE.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.h2p\DefaultIcon	u-he Hive v2.1.0.11037 CE.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.h2p\DefaultIcon\ = "C:\\ProgramData\\u-he\\Icons\\h2p.ico"	u-he Hive v2.1.0.11037 CE.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhm\DefaultIcon	u-he Hive v2.1.0.11037 CE.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhm\DefaultIcon\ = "C:\\ProgramData\\u-he\\Icons\\uhm.ico"	u-he Hive v2.1.0.11037 CE.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.uhe-fav	u-he Hive v2.1.0.11037 CE.tmp

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
232	u-he Hive v2.1.0.11037 CE.tmp
232	u-he Hive v2.1.0.11037 CE.tmp
1356	msedge.exe
1356	msedge.exe
2316	msedge.exe
2316	msedge.exe
3024	msedge.exe
3024	msedge.exe
3960	identity_helper.exe
3960	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeBackupPrivilege	1812	SetACL.exe
Token: SeRestorePrivilege	1812	SetACL.exe
Token: SeTakeOwnershipPrivilege	1812	SetACL.exe
Token: SeSecurityPrivilege	1812	SetACL.exe
Token: SeSecurityPrivilege	1812	SetACL.exe
Token: SeSecurityPrivilege	1812	SetACL.exe
Token: SeSecurityPrivilege	1812	SetACL.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
232	u-he Hive v2.1.0.11037 CE.tmp
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4944 wrote to memory of 232	4944	u-he Hive v2.1.0.11037 CE.exe	79
PID 4944 wrote to memory of 232	4944	u-he Hive v2.1.0.11037 CE.exe	79
PID 4944 wrote to memory of 232	4944	u-he Hive v2.1.0.11037 CE.exe	79
PID 232 wrote to memory of 1812	232	u-he Hive v2.1.0.11037 CE.tmp	80
PID 232 wrote to memory of 1812	232	u-he Hive v2.1.0.11037 CE.tmp	80
PID 232 wrote to memory of 1812	232	u-he Hive v2.1.0.11037 CE.tmp	80
PID 232 wrote to memory of 2316	232	u-he Hive v2.1.0.11037 CE.tmp	82
PID 232 wrote to memory of 2316	232	u-he Hive v2.1.0.11037 CE.tmp	82
PID 2316 wrote to memory of 3192	2316	msedge.exe	83
PID 2316 wrote to memory of 3192	2316	msedge.exe	83
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 2172	2316	msedge.exe	84
PID 2316 wrote to memory of 1356	2316	msedge.exe	85
PID 2316 wrote to memory of 1356	2316	msedge.exe	85
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86
PID 2316 wrote to memory of 3872	2316	msedge.exe	86

C:\Users\Admin\AppData\Local\Temp\Hive 2\u-he Hive v2.1.0.11037 CE.exe
"C:\Users\Admin\AppData\Local\Temp\Hive 2\u-he Hive v2.1.0.11037 CE.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4944
- C:\Users\Admin\AppData\Local\Temp\is-8NHF6.tmp\u-he Hive v2.1.0.11037 CE.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-8NHF6.tmp\u-he Hive v2.1.0.11037 CE.tmp" /SL5="$C021C,327218116,937984,C:\Users\Admin\AppData\Local\Temp\Hive 2\u-he Hive v2.1.0.11037 CE.exe"
  2⤵
  - Executes dropped EXE
  - Drops desktop.ini file(s)
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:232
- - C:\Users\Admin\AppData\Local\Temp\is-PS9O3.tmp\SetACL.exe
    "C:\Users\Admin\AppData\Local\Temp\is-PS9O3.tmp\SetACL.exe" -on "C:\ProgramData\u-he\Hive.data" -ot file -actn setprot -op "dacl:p_nc;sacl:p_nc" -actn clear -clr "dacl,sacl" -actn ace -ace "n:S-1-1-0;p:full" -actn setowner -ownr "n:S-1-1-0" -ignoreerr
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    PID:1812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://codec.kiev.ua/releases.html
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:2316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb96be3cb8,0x7ffb96be3cc8,0x7ffb96be3cd8
      4⤵
      PID:3192
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1912 /prefetch:2
      4⤵
      PID:2172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 /prefetch:3
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
      4⤵
      PID:3872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
      4⤵
      PID:3280
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
      4⤵
      PID:2904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
      4⤵
      PID:2768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:1
      4⤵
      PID:808
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:3024
  - - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1904,18363424108533327425,1353119165382952767,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5960 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:3960

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5004

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4884

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Common Files\Avid\Audio\Plug-Ins\u-he\Hive.aaxplugin\Contents\x64\Hive.aaxplugin

Filesize
10.2MB

MD5
95f7047e41510fcf0b2688993dcfd4ce

SHA1
d1bf174ecb7d8b72cdf96f7faa0836daf3f2c2a8

SHA256
e8b5679f2366173725c9705b62b788df47ad0564c1fcccc602b3eb04262a7e82

SHA512
b020b457f59034d188e1f6f3fc7cc79b35c34e296051839e7403e8e0d17636ac94566fa04597a28c4fad1149b303e621eb208c60b562cf4947a2bd77258939de

Download Submit
C:\Program Files\Steinberg\VSTPlugins\u-he\is-A4LH6.tmp

Filesize
158KB

MD5
224cf84059c0fa8bede2dac82c21d32c

SHA1
0da944b94d91a516c87d95a103aac07385af71ce

SHA256
aac2bfbb3d347f221bd3f18dd431ad445faff0324c6a980f2f7f9d53089d73ed

SHA512
321bfe82575779badcc5d5fb5c7cd206578ce772419c6a89d2d9c5b996245d3c536ff47e6f87d708e819f10fcd4427d6af37e6ec6b93b55b22fd03b16ccd4c0b

Download Submit
C:\Program Files\Steinberg\VSTPlugins\u-he\is-GBO1G.tmp

Filesize
48B

MD5
3fd9a457e4fb03c9dfc15b7c2ee46385

SHA1
7aecb0ff07a387eeda70b80efd260d9d71b52e0d

SHA256
0121b3869435f9c6ffcc154d6977b05b22695d83beb5ddd433d34226ecd5c7c5

SHA512
323228e47052ad7fd017ab19f0515456e31f0f022b079dbda45e735b8e1d601cc69476b84b6656d5645beba7aa919157c401346daada10b990824088fe3a9913

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\Vera.ttf

Filesize
64KB

MD5
785d2fd45984c6548763ae6702d83e20

SHA1
1d7f6fa0c34e3d50be52c16a0816bebac309fe41

SHA256
c4c45690b345435b2cba52ecabe275f05e49b389b39fe68ad03afbb551288d3d

SHA512
1114946bf0cc8f996630d49f9d0fee15797412aecfeda3f4033b9326377b8228da142a0e52e6bfcb8622e7e495e03be81a61f08a12256bcc89088d7734a5d317

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\inter\Inter-Bold.ttf

Filesize
254KB

MD5
97decd2b78e0890e270894d96efe328f

SHA1
70239218a723b0b34643b62faad0387c205ecac2

SHA256
56419e845e9eb0d8d3cd5c860dcbc23eb24fed38674878a89e6e82f2529c711b

SHA512
f32ac87b46260f76c9ae6aeff733ae5bfbc44fe997333e5f73e2cf958bdf1ce1461b284aed817f17fed09550e9419351cf5561ef9263264239301926a37eef22

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\inter\Inter-Medium.ttf

Filesize
253KB

MD5
4030a28e0ed72a45af2bad89a492bf87

SHA1
5853c71ae27d0f5d63c514ccad04efe5ccc32a49

SHA256
8a3aa252bfb90aa5360c87f7fd2a1134bf94efdb6b8fd8b13ed374a179881d57

SHA512
2bbfbf29193d10d3dc5531bdb213cd46f54cf1735749f58c66b48f5f0e7205d2c45a3da8d171c7f0bdf5edd37602b22e2a2dd820eec1f3658c2aadd81b69f3ca

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\inter\Inter-SemiBold.ttf

Filesize
253KB

MD5
65b742889ea83f120bec3efd7909a83a

SHA1
e4a5204e8bb54439b43fa4e4a792b29f70bf2268

SHA256
58f509887268cb314fb5825b32ce553b1556aecf34798c3c517320091bea9759

SHA512
80eb71e83c1402753e35b0266ba159aee763cd8784325cbe14b219a478126d1adf8ce268e0faa6584d03e5ae370132a86c4c7d537a7c29a0d8b42986fafeca9b

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\inter\SIL Open Font License.txt

Filesize
4KB

MD5
a4b75690fcc794e22e06948f671851bc

SHA1
ca5475c1f4d2cb15956daba19f13fb34a83601e4

SHA256
639204ba430d602459706d904c99a2b6388ad4b0d2e8e8debb4d03b40bc64645

SHA512
073e141d4e45a3adfd2cb569db6a4fd217b1721dd6aeab8159e36940b984df5ebdc345deb0eb6be65367f943e516a12dff41eb1238a322d248ca3478c50ef9b6

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\OFL.txt

Filesize
4KB

MD5
3539a9940d124de8d13854b0d33d0c97

SHA1
2f3d8677bb9852e9c41e392aacd78fcf090d9925

SHA256
956019dbe7ec5378f1cee8c524cf02f539356e254d97d3c40e077daa591f97e0

SHA512
0e9033ef4ce576bc9c5ffed61ebe5b5c9920e5f488ce50eeaa0d1204cd1db5fddc4655e5b61f1aadcc6d636439912641289ff82828e6553867349a378026f892

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-Black.ttf

Filesize
115KB

MD5
438b0b18b6f174bb242d2435dbf31663

SHA1
7c1967196995951e3150a2943e8ed87bde9de923

SHA256
9a74a5d7aa63bb8c1d1cbfa0cfdfd3b347b943ca8f9ea4ca0d7a817b41f25444

SHA512
0eaec95be335b5273e004a9526a8dacd6d01d20c96e64d1510b44a99c95368d0eedac68b84be2da17390781e9aaf7e16bbf9ced18c115e028d8d0e2f113789e5

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-BlackItalic.ttf

Filesize
115KB

MD5
d3906920250eaa77496f036b00542718

SHA1
3738cfde3c468586f4b2d02d0076a7df54e19ede

SHA256
00fc10459cb1e2404e7944e35e9477d7016d14c863a3283fda825c1739f6146a

SHA512
a62927cb5d0375ff9d6fe2aa18df5ed18cd0b29d96029ee0c7695ad640b148b05f3e1281f9d8deddb6c9f6e4bdaafd37fa581423f64548e2f8adcdc35de18ff6

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-Bold.ttf

Filesize
115KB

MD5
760cda86de964d7e344fe4c2cce1c357

SHA1
550fab8dfdcadddcecc417c646fb24be14bde7d8

SHA256
486cf9993c993e04b4fa7bd20de6c1af0cff6367994e22081dc3ddca0eb9977e

SHA512
e30874c59a9445bd3a06d83e4a5d9b486c90dab7d8cd411a49b0e961c8c6a6b71a9131e49fc9c90f0c0c021da9cd13dbae1299d5b6d31478e44039bb572b8437

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-BoldItalic.ttf

Filesize
115KB

MD5
81c7e9a0944506286e5b0ed7045fadce

SHA1
ecd6da68962e24df7fbc4c7d4af5ba0b976c9302

SHA256
65be47f1a4ec4f71a38f719fcb64082b8aee7c506bf5cec202a8783f12c4baf2

SHA512
8855fd81c3f0eff9c6df44763a187bb0fb5f8c2df97618c5f5d9f0249fd20092b92cc3c2851bfdf39df25dd989e6aa22c8d801f2fc63b728b5b3e2c841e80c5c

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-ExtraLight.ttf

Filesize
116KB

MD5
871ddabf1a1d296c36453b01953a61ca

SHA1
2d3fcd30884f6f029378eed575aad31f170db51e

SHA256
c770886a9d8152cbe2e05daf0bb3c3c83db376f8684d697aee880652c286b8f9

SHA512
962e5bbac733e1c13f22a4a268f706327f7f8ef53fa41178dcb2cba1ebe6b7f0a475402f8bb5c2f5a58e0316ce03a44b57d3665d75061deb2219568017634a7c

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-ExtraLightItalic.ttf

Filesize
117KB

MD5
aebeb427005c2bde4b4a8dae6dffabcd

SHA1
19c15ad46872083e117b1d10aaa9e24440616a78

SHA256
0d72c6455c614422bc5d2c3d5240f3f03c314d8e3b891d19410ab92c83406eb2

SHA512
a11e1f60d3ac3e81a6b8435af363ffe5ada8bef8cc62e17bfb13228e2a5addafe8982134cbf5255ff5c5d56c4ea6e450b78bc13a8a32c85772660ea5e090c7f1

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-Italic.ttf

Filesize
116KB

MD5
d30bd2aafebe675e613facffd6276132

SHA1
dd243297d7729786c2dad10488c254522d5fa945

SHA256
6d4f15698b172605e9e4a6e66688d06eb0864f26eb1677e96d5432b72e0a55b6

SHA512
52d0ba0175662f4520a83c7b1d69071adb423de6b276b859833012041b8dddd260d819a7f61d5ee6fe7d1bda488e674cd114dc8c67fe9720e48d1adb30f434d1

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-Light.ttf

Filesize
116KB

MD5
44a8e639bae28e48637f3b52bf827e11

SHA1
34b6d40dbfbc8f0bad0f26809fea42fd32847309

SHA256
2b237ca840cd781a32587a0025bc5796a42963c5318e7fe3d5ea83711457fcb3

SHA512
827bc3109c74a7933d620f70dda69dc1e259e6e31111cfddf2226ab8c9d2e48df5031c6645eab427c56003d0748ab159485726cdbf6c54ebaa078d074db6887d

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-LightItalic.ttf

Filesize
116KB

MD5
ef6f657d2894b65d6c8e47b8c174b8b9

SHA1
3fc9679d56516ea738bf863519bd98b877733870

SHA256
1305c3e5b83528b12f68efc06287960e0c31f4ad5d3ca8060dfd927ec321dbc0

SHA512
b0e4db2439716f04b03cdac7a3f470177ddab03fe3ac8921a66a3f9614aa49da9aaf2ff8e85ed563b2b21d1e3623ff26a673d10aa02f7d04c9dc8cc25bf64266

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-Regular.ttf

Filesize
116KB

MD5
982386e2d4b16d8a061d83647e35c39c

SHA1
8b3b1452c62e3d185315ee3c1598e24728157f46

SHA256
869f06e42d1a755a32f253a73f81235925cf27b686ba7702ce1f03fcc7738631

SHA512
a2efc0d6d143b928ebb614c0ee1c085393e4c1135d39a314122707e4172928fadcab91dac4274e75f9a4842994522ed6e709f64dcd098cb1bc60efb733c3f82b

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-Semibold.ttf

Filesize
116KB

MD5
ce8a7a5d8c76d57e5a384baa25fe6342

SHA1
bc38a1ae0698ae36c4d3f23132036814db3f343f

SHA256
4385dc332185ab9396fc2e2f36409f207cac0fbeeeb43aae4a4fc3ad46799ef5

SHA512
cc04eec7afcd67dc63d0d3d03de2716d138e9fdd6b21534450127372b6306f974ae322491cfb4117f74b9c539b08f33997ad99deb7894f307df04a37955525a1

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Fonts\source-sans-pro\SourceSansPro-SemiboldItalic.ttf

Filesize
116KB

MD5
9b9ffa34401b4cac48240901fc509f88

SHA1
659b37792c3747272fbe3bbfe179946ea945dee1

SHA256
84a898045b9721384be1963037aec98bc54f0cebf2140c36b445bdd1746af7d8

SHA512
8f59cc6624f1269779f7b24cdfa5e08e51822d47de13fc983932f19d85cc511e2ec6c6633cf1c7fa6009bbfe8e8babfa0ec2204dd244df924a336476b19db5ef

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab1\BotTab1-00.png

Filesize
2KB

MD5
c43ce185033a7e3dbe7c8fb4b730253f

SHA1
3f987988df1c0ca312c172f6684f8daf37d8491f

SHA256
737ce054daa74e1ce70844891fb44c50c3c81872e72782acc2c116384efdb0da

SHA512
4f7dcd0654a315d2ea3a170ea51ec63925db6e4a3cc2dc45bf91eee8d79f5b05dcd8cfb7be11c27e0c8e3881bc5be9468eaf76b22ba612cd3405ee9edaf46941

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab1\BotTab1-01.png

Filesize
6KB

MD5
ebab22c89b4bf8f1f572dd173363f657

SHA1
91cf4c1d56777ba2794e299b25231fd4255b4d61

SHA256
8044c2b795795475b6181f7c347da8748d77db750ec21380332a210fe9de31d8

SHA512
923849d44cb2d654be788d12a939719829c88f67302c24f5d76b3470bbd9617aaa305eb27a0520ed9f01b189f42f94e825dc759ee8f2250b8091b5618585872c

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab2\BotTab2-00.png

Filesize
3KB

MD5
ac3128609d2a5d2f5af18ac750911d94

SHA1
90c5b5fe3d2843805d8b8eace2908dc2a2c3212a

SHA256
b746d2702661299bd52fe0641f608201b65dee9bb0b6d2a11e98644150fd24b4

SHA512
3a118a8f5ba659a9dea92c7fdce4733afba6b34bed5433b44bd9d1cd58413c660868df57b89e24c6b5c30daa4df8112cc5b665a7a6eb38a6fa99840d59f3825c

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab2\BotTab2-01.png

Filesize
7KB

MD5
78c020c8ff602201e0e7d8b71150782a

SHA1
5d516e9d3162ace2d5fda9782e64995995522787

SHA256
b0537d3faabd96fdf2828748fafc70baed4d6cb4c03f7e25e1086931dae8614b

SHA512
bea2280825705d6dd30d308df3b9a41fbf1284582318b3acf143248790291bda5e14932721f5e7c6f07258c5e3bc5952ea5175f865e5eb2e11aa2a5f9fe8c048

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab3\BotTab3-00.png

Filesize
3KB

MD5
ecf9b3f33a28b58415fa5b1d8f8def6b

SHA1
4d85b41ae37410aa4f7b80d1d80d70bb0c3c33a4

SHA256
f965abed93fabd43175064029f9f6eb906d7bb4b7d0c2e1638d4aa9c100c5230

SHA512
ddac35fd5b69e8383c4a463035a5e3ec0d3a8d45fb317db0a6d611a0a800e9d5afc8411ef963929cb1bcbabcb5afc5863a527a7b7504e498a50c9173e24b4218

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab3\BotTab3-01.png

Filesize
7KB

MD5
bfcaf36c2446007f6d6409f4f04f926f

SHA1
006dc1cfc7691af6c6b9c0e9513fbab23682b4e3

SHA256
8b9ece859ba6e1fbb1ce3c347c0476c8df702943e1beeac7ae8ff935fe825079

SHA512
5c0c23c23675c062d2691d5027be65d3f15ae8b462efb4b7b49cdae01e4ad782ddb6372a5f2ad89ec1a7571e8da679e8573f67e3bc3ca13beb2e71bc7e3f403e

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab4\BotTab4-00.png

Filesize
2KB

MD5
7c6ce12112dccbc5b889148301c1403d

SHA1
c1c2e9167ae273657927285b030bcf077470ff04

SHA256
64f51895939ce27b69b5b11185b3b3d3de9b9c5669d560675428a80ce161e6d4

SHA512
6dbec7fd826066ad6ac8ec80287fc185da36000e3d077e232dd2baf63e486d2369b2e1f8ae89157bead367c2162843f212b7b76c0c1f462d1ef1827d9455aad9

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab4\BotTab4-01.png

Filesize
4KB

MD5
e71fcd36981d0da6b619f2a23b606c17

SHA1
861ed136a2cca0992aa73ef137d1877c1887daa5

SHA256
1f81dfb1737de76cd054fdb216928a07b5c2040bbb4feb3ed3beb41f31c768ec

SHA512
adcf407795ae9c3642208d779e698bc4f2358e98bda696115816b720f7137c80a5ac2e5e3ca0afb98fc50b4d7a788774a6c0e60a8ba60557b410fca860f2b372

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab5\BotTab5-00.png

Filesize
2KB

MD5
3843aef04234eab26627718fc3d19030

SHA1
008cc8b75e15129d247e90348d1db70146f7f84c

SHA256
e78806d3a9363077d0a976093f16a6adb3e6c97757f4d97c079af7165339aa96

SHA512
8e8695602c5ddc51c526184aaef1e39de6df1522b7d2ca2cc2e40630d3dc484e919390473da44040b49fd178f3c8c6eabded52a57d6872d342d12ebcda99f16f

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab5\BotTab5-01.png

Filesize
4KB

MD5
95e0363f71863fe5a9cef60afbf254e3

SHA1
08ddce50f39c2979e28fc87d5f6389025c6d3c71

SHA256
e74497c8f3efe0e3546aa8d352a970a3dfef940cfeae79fa570e811e33eb37ef

SHA512
d2f5ecd653313322ce5db5b5b46e6e4c25ab40fc33a2c71d2b85787c4bd28c68987b7aad0bcc78182f2c85217f33b257661100fa017aaab2b7ad2d64ea5dbf36

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab6\BotTab6-00.png

Filesize
2KB

MD5
d70c8c9684258f7503fd2e14c90b867b

SHA1
d57f804ea6f2dd5dc00a1c98733c8bdab47eaa8c

SHA256
76a2274b355d5fa80f151384d4331a177393ea24f80ada800c6d1d9803bf1588

SHA512
dfc4959d7feb69a264dc14326bdea80fde05468c339bb9241ba4723ff389318603f248b7d416a5eb88d7add15113e7896e0fe3953a8c3faa15b5543765cedc75

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab6\BotTab6-01.png

Filesize
4KB

MD5
63f09047f279844b1d6f86e4004615d1

SHA1
76b0146ceaea80ae3af939876fe414b744c1aa34

SHA256
beeb0522b64e55e0572782f48f910a7b1e507960e8a8685cab8e330049741aa9

SHA512
1903bc0feb317b2edfcebf7a61c27b6e93b7cb6ae216587af422e960f80df0e0601014a93220f5051e1930828382dda2780047be38ceec03ce99f2a08f014f3a

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab7\BotTab7-00.png

Filesize
2KB

MD5
8aeb91dd5487d79d10051c460860b773

SHA1
b2bec48b7ddd639aca0f59b65fb975ac5b79a003

SHA256
6b4008136d68aa1aacd3cf779dbf2b9312f21090ad7397b6cc792d4bd1e2f82e

SHA512
e452390942208a01d56e036abce5e57c2343d8517f899dc00f75eac8dd15b2d5c7573178c6d2cabc8fd1dfd4bec96333c6fbd0f4b123be4274ced49eea6f0480

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\BotTab7\BotTab7-01.png

Filesize
4KB

MD5
ca9422c51067869ca9dcf205b192898c

SHA1
eb009c8ff9b634b59fd2578fd7ab875dfb491399

SHA256
9b608f3432beeca8c307c8285c4d19489341daf869b9eb5931009cd171567280

SHA512
b6d495a741ec34e69b971e2764379d9ded3992c06ebecde6a9e8f96556381f509c27e3ddabee1b7512232f9818ebef8ca7d0a2b8663a01c0e1f2dc470ae6c2b3

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_000.png

Filesize
527B

MD5
cec6045c4e37da7580de91df292f8f86

SHA1
944199c9e0c72349496aff2581ab5c8acd2e8417

SHA256
3dea4bebc8b8e9f85e83ba36cc14872b05a4e00388d329c3980a91558c5a00ef

SHA512
8e487906dddc4500c5e814f6dd579be0bb12ed71e7fb0010cf0ce1e3adbd9c6f3cd7e52762fd7dba79a112d89a41e0dec43ba1e2610d7aec955f606332b676bc

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_001.png

Filesize
552B

MD5
f4074da5d8efdd980c0ea9d77512ae1d

SHA1
ebb1b59ab6f4060113e0f7da2816a4d328202c10

SHA256
aa1227fb6e1c150a9a9d58efc64707acd8395a4be2011852d226b53fad0aed4d

SHA512
067ead602fd04f72b3d98d7460bc1d24dfe9771edbfbe126b78cdd5084c67e5c1d452958ac58aa13d63b95b9bb0aeca34590f3fbd3e3195faccd10ef038beb66

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_002.png

Filesize
598B

MD5
de328b541562cd5ae77d7898b609d30f

SHA1
5b07eca78aea1f38ee65a38cd84e172c432b5397

SHA256
c824b87717350120963c0f33a30ead59c52316a00f539e6172626b8b22a1a0f1

SHA512
55dd3caed99e4e937161669703660e745abe53c33ff5c56b1be7d7614c8e42980e1999eef455e761149ed9a652992862899ff0172cd5f703e377d1470c1f5d3d

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_003.png

Filesize
617B

MD5
f41baf736ee66bf611818774ff9cedb6

SHA1
4b649a6fc275b83efe4cf951f5fe6d18dbfbf5ff

SHA256
17dbfc57dc89f0df389ea7373fa1ab48c34f3537e0b4662caaa3e4f9b8486d41

SHA512
a61fa51d2f3f9f3d6857d63b59289517168798785238370f88473c08fe7702d84c3e1c1c5da1cd9bd4ad12ec08941f2575db3093ccc25c5d1f95c2d8334f2d2f

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_004.png

Filesize
611B

MD5
0c6ae963f9b339ec38f1bd9ac05f6d9f

SHA1
ca94cf7d3d4b8380a36a80150027906cae82f33d

SHA256
f67313c09d2029973ad2dc7d665c98cccf89b637fdd3a62d1faa3560b7cfa006

SHA512
3aec17a2555b55fcb092409c995a562c49b4a8e575fcfdf458fe55006936194f0aeb1739d587185994fd03f15867abfc148c79cd7d7c273a1d15cecd6d2d69ff

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_005.png

Filesize
600B

MD5
81a0342c1980ff2e2d37925208d2f74e

SHA1
284266181fb0ab172848c8895c9594cea9c4552e

SHA256
da2e9943eda12474567076f8ce81e4fcd051a518e6421cd24553dae4b543f229

SHA512
37c4de0cf544d28ad13699c08a4a46b72578446b701822906e8f4a6ba40cda3975c9a735b4f896f837d0a3c322b891ffe474a4aa2cf3a4d26c2d3ec4bfcf8683

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_006.png

Filesize
619B

MD5
ff840f3c8c01a9014439478e1f21f3c2

SHA1
74011254522db58a1355fb89cca7f6e73ff5d6af

SHA256
f2248c59314aa5d324e63373cf5c84e29a255fc41306f39b78c45e42e63608ef

SHA512
219f5b4cf5603b21febadbb45b2e511f095d15f3e7fdcae68239d95f61072380e96348a7ee4829b0811353c4fd28315795057ef640c83b7524435cff3d3add31

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_007.png

Filesize
617B

MD5
9b41a9ee425bde34731769f4b4450ecd

SHA1
2a3c43dbdce292f95ed2198fd15b1cf21f08e6f2

SHA256
a3b4276ac73e5ed9c3ea163ce75c5777d7e1eb0cf2bfecaf52e8595cd495d8e7

SHA512
00aa8808227adf3cbcb484b7ebb4a3b583855f900c537fc9d2ba4fd72c143ee1a652e0a6899e740cdbd3e7a8ba5e703ababbdacf034308500daa8e493da68aa5

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_008.png

Filesize
722B

MD5
5f30eda0586c8edfa9d318a6b7fae5c2

SHA1
f86ec30f5b0a8feb67de2c176787f50d7ef0faa2

SHA256
bbb8f7a8a3fd9fd5752ef8650ccc4d236101b3112a2bd4e06f1a5f1cba4dc3ad

SHA512
695098d14d1df7e6839b87e8695dee3fd34e5e882bc04c4e17288b7bff97e6d2b4744e54c3950c91d4bd65f45d27422d1c34582919b5d1e1e419fdff74e6b533

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_009.png

Filesize
803B

MD5
427eefaa56fad0d0438c2d6556b7a159

SHA1
ec1f61b59f0e2031081ee6045dcdcd696d0ec2b1

SHA256
0bba82146fa476e90d0f2d6f048370856619b55a346f1e0e9bf02056a10e3a39

SHA512
97ce0648a4fe7c38a7eb7698245a25a7adcbfbd48cda8ca0ac814df7907a629cf07d6b766a2275724248207db3ddf0d3f0c56f70f66390180acb85291bc1e6e1

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_010.png

Filesize
888B

MD5
e68b3aa22c9abb11fc698934c7bb6f7e

SHA1
96c017d1426e7c8d4c409b4b29847b6d1e8ab312

SHA256
96b98bc475717f8579818cbf412d6b3acf2bdb4e407b314ff2661c2a44570a94

SHA512
094fdde40e6ca238403965bd6df8aa2d6e341ec82c96fa2df80b8a004883a02e61d38b18e5b0bef898737aae8ccef899d14958f4bd60ffb28758e9bddd6b3187

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_011.png

Filesize
986B

MD5
c56bca3b120f314eb5fece0b61f3f132

SHA1
bd5b04553b23c44dc8ef38598f229b8c383bd15d

SHA256
af1b67261e300728d2a1f09e85b396cf2db7c5f65602935d15ea112183fcd7f7

SHA512
042b6e51f4bc36326f8e575ae23e5fab0e09fb4baccfdee6a2b51f3ed9f63ac3db0c95eb3a515e234d27f2813a712533edd509436baa0a4dbf94fdfd9a62e203

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_012.png

Filesize
1KB

MD5
0208bacb00e25beed3e8a8396d68774f

SHA1
31582046838bae21d4958662d04d308e2a1c0190

SHA256
b79df828cdb87d676f0649c7ba8849383504d7a082ca0a0a2068d7394cc57c56

SHA512
3212254bbb82fbe870ae8f59ddeb2084c468a7cb85fc3ba0b4d6d2c7f8d1ba22e5c3af58434e491f707eeede84862fc571c7c27e815dc5d406d00e2afca158b2

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_013.png

Filesize
1KB

MD5
f2b07584c9bbfd102d48c14833cd141d

SHA1
b48ca3b6390bb6dfc466c12bd5e660a728ad4e9d

SHA256
f17b285b925726eb3127f7d0b463b439af0e5317cb38262137920041ee06abfc

SHA512
cec99d02332ce9236ae6caf39669d828cfe6d2f8349b3bb33459b61d30075b6929791814a640761fad34e6b27a97b8ca0375466200edf6f3af6df496e553f391

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_014.png

Filesize
1KB

MD5
d1ce074ad40f63945c9dacd9aff64eb7

SHA1
b8f89810c5d649602325632c06a0c31602fd5d56

SHA256
bc5bdc3823992fbc89b0673ec9d8dacd0f0644d661f8fb2ee2cc603f1f528c22

SHA512
755040849f94293a5d5ad3509ad64e7c3b1e645beb64c25a4470c82285c89a7a467b1ec722b1e1a671d05a92e6fa9887fb7319486ed9faca1591954030c9886c

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_015.png

Filesize
1KB

MD5
0ba5f971e9c6e62697ec1b1319ec4942

SHA1
e9e8db384ab54884da491708f92932fdc0459c1c

SHA256
d56240662c49e6b289df9a14c5b21f2e1a9e6d17598e3b24e1d95fb2999cefd7

SHA512
bf801a79aa7fc8da17f114156be73187d1b7927453ffb0db0439f37f4bf648c4a9003f97bdfbd5a1a0537b78b6fb0d281eb7bf321d5743ff40217775464365f1

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_016.png

Filesize
1KB

MD5
a0dafa00c4527f8e0b46ef62e7fa7387

SHA1
eed04099697ed579a3b8d9dbb8e791fce00da622

SHA256
436d692c3b6b7decd2f098ad4f01a727b961ccd56b38f905e1429c68fb828f79

SHA512
052cdabf312642af35ceb8338b56835828aabbbc5bc45066dc4efa76a3f23604e12417fec600eeafac23b231ea8ac8e340e5c05aa6c19fa35b59cdcf9feaf76c

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_017.png

Filesize
1KB

MD5
a7d57fdaa967dd1a0601f12d91e06e38

SHA1
808a460b0f7367905170334a2e003194c82d4252

SHA256
e1459415185d5aabdf54b9449837740f015d8f603ba7a13122be310ce7123aac

SHA512
91a22259b6c49db6622caa89b89ac7b662f3f57bd32d8e22e18c6c169e7b1caa371a695257199dafab2c52ded3f5c0371b8775573f349becb9b1bd73df2044b2

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_018.png

Filesize
1KB

MD5
f15d39e7b346e21b8636b998fa8d8f2d

SHA1
9a4999dc91d6473eaa0792534eb91210f8fee86f

SHA256
48be47d75f300e2f4d28487b002fbe5c81c7ed3c58f9f513134f75e6ed57c866

SHA512
038f80a4d122b205ae4e633780f30bf2b4967e762b38a52f0dc77e4fb996bce283467d57e0be6b68be4062db02837dce2ff9880dfa4b5f5d8f653e1031f1aaa4

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_019.png

Filesize
1KB

MD5
ca7061e24551308a0fc6394834e261dd

SHA1
c3d69f84da5b0abb72c0766bc821a7294dc91d1d

SHA256
d08a7cca58af8016575e9fe16586da0a6717110446fcfdd11d67239f02d0e72a

SHA512
b95362693f6f56bd022e5c79cc4a8d91ec00b6cf5ac3142f579731ee435b80d329755fbdb6530852d9f4ce8ab7b57ce9b986b76df1d49016b8092404bfc3f46a

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_020.png

Filesize
1KB

MD5
699bb538f72adc0e0f3ba0e9f275834e

SHA1
c471afaab9537ef42dbe4c570197901090d1f2c1

SHA256
ebfdddab9b4b187ee148449e8d297b8208b3801bebf262012c846201bddf9aac

SHA512
bf6a4d00acec3e40307268130381113d6a291009f947d66520f86bf0da645e9709e558a968442c4991c8658123cce47bb632b8f679ef15af61d492f6e3178217

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_021.png

Filesize
1KB

MD5
e5d1ba61a746d362925fa15742ae2566

SHA1
5471c2b38d4cd8e62cf4c8103947323ec754129a

SHA256
87a078685d3db6a24197df7857d912d8ec0bd00f550102ab3b810826b4d414a4

SHA512
66d967b26b846aea8c3de9039b490753136a0fcd251229f82fce5993fb0c2d22042467378a5d386cfb7363510aea82ce88538f7a3af4266fd61e99d4f55f15a3

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_022.png

Filesize
1KB

MD5
5a7663f75d0c2767a11054752b7dcd33

SHA1
9fca8533b9b7c4a655bdf304220ce26ce032a407

SHA256
4eda7fbe52c9e65f658b896b9cac69f7128c14cb4915c3abc9b01c44ff76bc3b

SHA512
fa46b8f4d1f9d826f138676a949d5156437eeac279b6afa44610f7092715da9fecffd95ccfa84a3c845467ccb74d2f0de7d102eb6bfad83d8ee7ef69febe3fe3

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_023.png

Filesize
1KB

MD5
489bab939b563b7ccf767ab47edd6645

SHA1
cdab86557e0fe6f72cbe47057db4c634efe93274

SHA256
64602192935b976b5f61cc769ff3da57e39f37fcf838ec4afc735c5e2b58f792

SHA512
b3a97dc5b941c6cb632b58141595d08e9f928642d1b1ebc286def9c02a5a12c411554f49ee6ff6515e82a9748062e5a16977b3b3964b36392a860c071a1f974b

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_024.png

Filesize
1KB

MD5
89008bb5336c42096e4cf02d149c483d

SHA1
fa10d3eb81defb1cec5250c186a7909bd5ba899c

SHA256
f1833a80bdeff46deca8fb9b237992b065d6a0193ff96d1c25b784ee2f6d0f45

SHA512
403c860358ca69e52e95d07c6ca4d0dd28c2ada5922d979d84bf20072fff0cf42f96a23617091286378d78c4fad1e585d93fec54da0f78ce3d282cdd065cda5c

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_025.png

Filesize
1KB

MD5
81d451376e7e7b9047fb0fc2b15fb723

SHA1
b8bdaeedcc6fc6e772154eaf58969a57bed9a2a8

SHA256
db31ad4f361c86852d01c9c110a586c15742b57a6f155131786406fc3a9605d6

SHA512
af0c0b0142093d23f6464aad2eb7165187138c011dfb7362f4f691888d6d067b9d2aa4e11f69034c35d4a4e8fe72a5387a18cfab12a3aa9c3dd63d3865b4cf93

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_026.png

Filesize
1KB

MD5
bec81e568d7e73e22b58ee8ff2970f37

SHA1
e233c24f4df522ab5bc7cc95ae4e59f10a3b3cc8

SHA256
7d4af552da9b70c35d93c8f55f6e6f326051b6b8ab4fca1bc641a94070e781bd

SHA512
b12111e6bd0e2d5b97c83e1d051e423f46c018072d9f053c70b3c5f8786b3f40e72dce41c1bd049513352776bb1c2805a3ccbd27ca6c559b60aab61baa9def6f

Download Submit
C:\ProgramData\u-he\Hive.data\Data\Images\Animations\CombSlider-Small\CombSlider-Small_027.png

Filesize
1KB

MD5
686d1767293325b74c52f2b00d356b92

SHA1
e560e564bd21c14caecae603d47318d4db8ffde4

SHA256
864b16ed26b6798c46edd2ce380874eb7f504a16c46ac66c8346c11cd9434b30

SHA512
60005991a4d6092bc8e7d229f7f3ea3b745697674d33ecdeebccd37a4a547e98bcf3c052d59fb68dbe06e4d25c20667cd8d16c0d6da7351de91c1fed19757e1f

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Plughugger - Azure Progressive House\is-H61IV.tmp

Filesize
9KB

MD5
2a1f8912c8b3b38c13b767c1697404b4

SHA1
e31198660d019f5271afb882b40a7c652779dfe0

SHA256
e659fa3db9b16968b24f4763f3572edf29eed1ddef4e07931d39d7a182b690f8

SHA512
6018274875484d3cf859f7faac1538044ce5e84a257d50bf15cfb9855768976c366eeab208a270874d75ba37d64700badea206e7fccfb4d1479d810f53d352b3

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Plughugger - Azure Progressive House\is-JK6NN.tmp

Filesize
9KB

MD5
8e3eb7605870f38cbbf0eeb810e5abd1

SHA1
9ebf907afd12a57eb679df8a95705373ab0369e1

SHA256
7dbda2af359a80a251b794c336d12a7677a98bcc92dc50c2990a66d73f922980

SHA512
bd83cd8a11824032074e316e8a35f97246eeacb20c178f338896a0baf630e79a5f7d35ce41955b4dd3f8d964aa5fb5a737421f4a5dd3125a38e7e27eb1e6426a

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.1\is-514O1.tmp

Filesize
11KB

MD5
9374d2d734afc2854d936e38c161873f

SHA1
e0763130c67ba3a0ebf01744a76fe6e8f63709ee

SHA256
d881818992c914334f5f441bf53996b5848b8ac6d84bf5fc7abd4e2242abe51a

SHA512
ca02733c86c30f7b755c9b0cde89255e7c177572d012fedae4148007ea6bb7a628ead8e1bddfe220ed2e1c027859a7f8947b2c94420e4c95d98cc30575982d52

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.1\is-BCC9U.tmp

Filesize
11KB

MD5
b52635a1ab733113b101e8827088b0b7

SHA1
ee7b00921b1e58a9d4e9238b378bf22d9662baa7

SHA256
469c6951daf0d3ccdfdf23d2770dac760e5086442f9a4b26bd350e8a111c9e4d

SHA512
d95fb468f32984797fc38f98ea2a4554b08be91b642f93555a92f7ecffb1b745ef4c8a7f5f9cde7e1d3f20a9e22b42b9a2aea447f0734db6e0eb7a98f94efb1f

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.1\is-H7G95.tmp

Filesize
11KB

MD5
82fe28a485377d5049f94fc57bd36510

SHA1
6066a2e672235bedfc5fdbe97856feb40946b042

SHA256
c1f55f7894f5899038a5bf6096cce15a2382f36d882f377f20b0c38876eb57cd

SHA512
3d8b5e1fecc379ac2abe025ec4f320177c78e974f346c589a22102677aa8e2fee9751aa436138597ecd0ff381934e636d46e4a2b70a607c887074ed169d6426c

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.1\is-IR5K2.tmp

Filesize
11KB

MD5
0aaad98944925e3f3a1373436b501068

SHA1
c77577986364e57869e4915f6a59ebd1df05d4f8

SHA256
45128dedccad84b0a5400a70e732b687b2252cdf412c51483c68d64fe0e93b0f

SHA512
50a03178f499db1b77677c7f76417fbb17635d951d21876735feae0fa11050615ba8348882a4946f48ce8b97cb6cc9a90ff54981a4be10ee2ab528648024b259

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.1\is-O2LVL.tmp

Filesize
10KB

MD5
db4cf4c14459daa3067460c975a076b3

SHA1
ff14a071b1e76a3a5dfbf3c4d01501a7e57cef96

SHA256
ba040b58929b553799650669852aec9c2f34f7383744fb6e5158f318bbe28c93

SHA512
fccabe2e187bc434f149f95e1430ea0f1192c2c01fd9079b1dc8d6abe252d3c4f691fe7228d9206048d3de8481e73b71e24c7d3384830a6a894b64c4479754f1

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.1\is-VH2SQ.tmp

Filesize
11KB

MD5
96abb4343d2a6f119691f7604600a968

SHA1
c54979268d456a6b010ee659e061c7e022ad5d45

SHA256
b3598e7f77eb8409af4b96d40fdab5b71220251c9415dbb8a4afddbcaa75d874

SHA512
d32a3086bcaf2a36b4aba6b453807c6bc107b229e198f1a0a05cff941660433fdcb683d8ca176ea0c44653d952f286091b0ac8ef33c9b108c2a46d6fc7a86cb8

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.2\is-723O9.tmp

Filesize
11KB

MD5
f3ed8eada5975c9ee12cc335299a3c7b

SHA1
92524502f41ab49b139e4d6ca3bdd5cea31821d8

SHA256
dce5d3a7f3f3c568e548d086b975bfe909c0782c3cbcaa9e8d774d1f77cee9ef

SHA512
700af8668058782faf9731580b050466b8fdaebdb2b3ff764de5a7c0d379dce5b7bbd8a765729952ba544ca865aa1533b5d3d5a52a767aef86e7d4660d585f2a

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.2\is-979U9.tmp

Filesize
11KB

MD5
36649dd5c3b945f245957e65cf33e3ab

SHA1
79beb5608fd133087012f5f623b04f1d5cfdb696

SHA256
88fd8f40d32764ab14d9427570223162d76fea28b0b2a9ca119e5147434768ec

SHA512
a522f125708f92ce72eb7b9325c9fd97973009b6cc81345aa81850762115125d66141cc0473acd1691dac24cb08194b50592a85b02e033a6916c772b386b08ef

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.2\is-B1Q4H.tmp

Filesize
11KB

MD5
c939488b61e1c0ea88ad38d5718495df

SHA1
3ba3d664a4e13f048496d6e27ffb9428f820cc3a

SHA256
595c7ce6e3377863c10b8cf977eaaa05dffe4cc04b98027caa0214eeac7d078e

SHA512
055115419efd5bff016c0af39e1350d9822b88f4c946a48aa86307428644371633f937aef15364f33cef904a053803c8d39e8fd966fcbe5e3f3cadf7bcaa3590

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.2\is-B9JMT.tmp

Filesize
11KB

MD5
08c6ea40853190acc7ebad89a92936f5

SHA1
7bc593906bb5b5d3c991fa1373e6e917b2f17b8e

SHA256
05a6b93d540ced1fd0396c68a214571df0332ba0dd3e29f3c00b46a38203e66e

SHA512
0d513c5916f3e987bfc4233b1c5109fb4d48c025de90787c487f39447c90c65cde8f2085a58c58d6fae05ee1ada028a0489c379526c48a35537278447db81067

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.2\is-S768T.tmp

Filesize
11KB

MD5
d72a02b06698731ae68cacefd23b397e

SHA1
e35432489010d80b9622fc0b63d6fa57b349b6fb

SHA256
2069dbf6e6b79e2fd4dd0b0901f9c6e29d62647468f3afa854a87d95ce72b29e

SHA512
35d59ddf35981815d00e5f882a9538950805100b1f92db59903173534fadd97ad7717aa2e71ea9e314ecf4d321da4453cdb7daf826086cd1c503ab73550a8cbb

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\Polarity - Melodic Techno Vol.2\is-V3QR8.tmp

Filesize
11KB

MD5
e0f1c726874887a3ee56952e7b279dc2

SHA1
8786d58dcb79193df7498d0d3d0e27eaf210b471

SHA256
33c5ff79fb839355ca3594d0e0012e3261b378f9a7a4370fd47f015293d05612

SHA512
573f82e959008f488feedc115b9ef5cc108a8d90513e9392aeb92b008eb513cfd483e0f23f9b3e2fef8dd79bdd09ceb2faca04ad3648b1b29c5f0c1256e615f1

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\SNDWV - Trance\is-66VB3.tmp

Filesize
11KB

MD5
01429523a547c622cb046fe428dfe3ea

SHA1
29df8e3e588395e6a6552abdf7d46408db7dd376

SHA256
a530f26f2e6098b7fc9886084c786f2b631e759c78e9281a119323efdf53815d

SHA512
f628556fe44417d574edada49239ef800ff58950e67858af94ab7a34cb8c10b0826c9a76e02eb103b6f7141b80fa80642145cffe936d328aee728e8bb07de6b9

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\SNDWV - Trance\is-A2KTR.tmp

Filesize
11KB

MD5
fd37a79be06086df37d1347d0de655ec

SHA1
a9af05c1192d5da0d02e1f39cbf94a472b8915a5

SHA256
df4373d4108a09d2cadaba5de9c1faf314cd29c5d4a29d499eff0a9cc8798c15

SHA512
443fc1e463cd88ea2ab6c6be43b23f2c846b470dc617604da111aacd4e579a4b1e335b7760d36ac7ec9efe5b24cf8ba4497792986479335833414b6708bb9513

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\SNDWV - Trance\is-IQNJF.tmp

Filesize
11KB

MD5
2c89af97289747b0f369f70c32fadbaa

SHA1
e385418714cde18406318898a07d7f7e8cb10494

SHA256
e1d4da2246405671bc14392a464773e6514365390017260add6d0af7f623ed13

SHA512
1980c5bcf081e2b0afb9bd81e88dc2f7c5c86311a52cd70f8603eb3e8ccf81d70d83d03a7c2f842eae464084096111b55b10eb02e5a38e741f24bd92702c3fd0

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\SNDWV - Trance\is-T5147.tmp

Filesize
11KB

MD5
ac8f117ba3fcbddd115b5e86a02e8b87

SHA1
326df93001735b2e2e0d477cfa5f5ec0b157861c

SHA256
5616071997761470c8ba4ae69786071680f5662a532462e242101b4a4596a299

SHA512
094ca9126a38abe426339da5c08bc15f7fc8c35ff33be81625dc2e75c4312b86e349651ce3c8848b8136db04b45cc4662ad796767fdeb8dbac2388a083571e4f

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\SNDWV - Trance\sndwv - oldschool bassz.h2p

Filesize
10KB

MD5
62ef692f19860c45203f701f1e23b673

SHA1
ff75033f793371c18e955b8c8ae4ababa73f52d4

SHA256
ae868bee4ac8ded04b9a05bf7afddc6553be19169067084e2146cd99a6d03c8c

SHA512
15449f7a841a9fc8c68709d362710555b62791342cc7bba7d4cad5e594012853e8983b4d4c59875000dab7658495b15dc5edae1f86f475635e9a571c4b3337ac

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\TREASURE TROVE\Ameyah Audio\is-9E6HO.tmp

Filesize
7KB

MD5
29a5790365c2a6ee5d92e4abc3b90805

SHA1
7a0740c11ef4a0a53a14fd792c3542a2b6887383

SHA256
1d639c572cb01726f035d19865af495242d4e5feb379dcecb172e604010c846f

SHA512
07eb0fab0b3499e090a30f71e8cda95a0f9caf0039e59ebb1fb47d95f6ea5d2961f9531f4f4a2aa5d14e55cf1538292467aaea1e11cdd6d9d332de4083719027

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\TREASURE TROVE\Mysticvibes\is-8NUKJ.tmp

Filesize
7KB

MD5
f3ce7891de2cbbac5ec86f0d1c1a3069

SHA1
de23a7c8fad2967a78b19e37639d062d537d9373

SHA256
8834c4e6405ec8eb7da25ddb1f260133c01c306dc3ee14f05c835bce4e4c35c3

SHA512
5ba2faf725d563cab353089e066734d51304691d505e77ad52158e313af7d8dddf878e9d9e41fe337df8d78c4d25babdbacf7ac7cbdbe23a8eb1b3e41f48f630

Download Submit
C:\ProgramData\u-he\Hive.data\Presets\Hive\TREASURE TROVE\Mysticvibes\is-QLJ9R.tmp

Filesize
7KB

MD5
d449a9d1084075b825250d77351c3141

SHA1
8cdadebb6d4b4a7e76ed749850f6de66ec6ff594

SHA256
a257e33cb55f2647b02075b330f9191278e1ee07c54e84e5f8bb36c044552898

SHA512
820f71bb77eab1dbd3c9b0665b89d6a7ac698af7ce58d7f4af14cfa9f142fde0fe4903d75fedbfc0891df5b1d0f644bb71befb9703fc55a23b29226e90aeb68b

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\IdlingSealF1\is-GKPU4.tmp

Filesize
1KB

MD5
bc13ce73d1f2074a06eb726e3ef18344

SHA1
35825286333e6b1e64c00c6fe52fc65dc5c7850a

SHA256
7e32a786eee61e18a958864474261a0667bfdcbc1b0a02777a27d542d2d9b9a2

SHA512
ca2a31632e869017aafeb278b0be6b3fdcc93aa7e3729b952a462aeef8dcb3b1f8c9ff701d9db10e3508e46b9719c563bb354ab06d93b802f62ac470d56f406e

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\MMM11 No\is-8SVPL.tmp

Filesize
224B

MD5
b3b04af5361f98d9b20a36192d9e4a13

SHA1
5c6322578b7be8944f0c301396dca08b18c4132c

SHA256
7078b8a2b248859109e43be713b1dbeeea0aac748fffa0d9068923a11b83e307

SHA512
8df0df96f39bc428c8a465be87341b1b8c10df96c10d3a0ea3fb7fee1aee2b1ea226d02936430e4a5a94cffbc556defb9f771c1c293208493f0d535993b9ac3d

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\SSQ-Seg-HC\is-90G7F.tmp

Filesize
347B

MD5
72dd93d93cf6c8c0e593f609f084e8ff

SHA1
0f7104bfcfec813a310d22d2fef9e9b801e19397

SHA256
e1ef891ce5418621e68d9967a37fea907dc58db848aae12fbf59cad635e004a5

SHA512
47ab1e69b596334c1249ce248c78f182edec42d27c66df0edb376ae34ca8e784b07491104aeb0972ab27e3c433c40968587e3f661f44c5c39f3f45322c526c22

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\Title-Filter1\is-79HLG.tmp

Filesize
538B

MD5
7d1a42d9fc4ee71dadeb9b5a62d95520

SHA1
08c64296766b91fef7570ddfa5c486d711f72971

SHA256
d13822768ee2b20ee3f726bf8145888e3b3dc8132143e8edcf8f6a5b5793d0ee

SHA512
ed435716d6ec1b309af636773d9a7f2aea2ebc53841b95940368a2afe162768b173ee24268a8e1ca0ad44db61cd46c640808c0f1eafda7905995be1fbe079319

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\Title-Filter2\is-6CQLC.tmp

Filesize
861B

MD5
6dbd95293a6ff83b083fb7be4d344956

SHA1
f78b77f0c1c1d231f25fde45a8ef4203e6a65e1d

SHA256
740b509aa86b6e054a7e919fd62c3df0a60244885c1fcb9a99804bf1b0590a9c

SHA512
00d4a7346e7e5b058e1578934a3e7ee5957d1ea4854f4e749c0ca655fb924fee092fa27b95a6f64bc6ca0602c40c022486cf1c193e7dbba9a3a949deb25d6d52

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\Title-Osc1\is-DS4DS.tmp

Filesize
1013B

MD5
8ce8e110e8f0b8f883bacb1239f5ccfb

SHA1
d2c502bcb202e5c006df077530a62bd83dac0fd5

SHA256
853ab56c1c2295cf0ca1d1fc15fa6431f77be9a479f24333fa72d3216ef1924f

SHA512
38ade936731e9f053f822a05a88e36c6db4bde4f698a94a1165a7f57b1a0efdd9a413dded3c228697a469a75d283fde8a351acc0601897eba9e84d5ebb37015a

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\Title-Osc2\is-D9U4S.tmp

Filesize
1KB

MD5
7fc62e0226844eeed41d8a2653f7dcad

SHA1
abeb085641a497fef19c54cb37a0d5f87f125584

SHA256
ed9507254e121878646e32accb71155418dc3a7083327812b01b20ae0f0e1ec5

SHA512
1e83a4e2f3f569870f85c7e13ba52ef0b2573e19c3de1c0180c56c2134f2aaff032d1be8d0ab317be675933ce5f1c8e813fa099d246ad1dc73df513bfa6b8c72

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\Title-Sub1\is-GA1S5.tmp

Filesize
1KB

MD5
b5e4231c9abc8a94adecf45f8fe1e00a

SHA1
c46b5f1eaf185f9b8299b74dcb767d5eda22bf8e

SHA256
474595223943e8d83d5ae60a7e7072fda2641ec22b4ca811186c09bcb6db76fb

SHA512
578f0191feaa28d6d54b8cd22307a09187d58086f6de5114865fff3de16e180f43e6797732d292f10d3b1f3a5246c111d89b8e670138ff5815a13952cc90f38d

Download Submit
C:\ProgramData\u-he\Hive.data\Support\Themes\Izmo\Images\Animations\Title-Sub2\is-4UEPE.tmp

Filesize
1KB

MD5
ebee330d02afcd3ef8a6aa131fc964e2

SHA1
367de62152277a96c7103333db1be69aff8449b4

SHA256
6bcadeb01b2fd6c9d58c5541a2c845a9a20b82c5c61f878fe4ec74a141c96754

SHA512
f0d699ae60f2dbc3336cbb2f94860b8add16561ae85a71241b6842ac08760d2408d6ee4f8cd5dc9cceba3c66411bc4d2a2b6cd19632d488203a8818ef9c51930

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6fdbe80e9fe20761b59e8f32398f4b14

SHA1
049b1f0c6fc4e93a4ba6b3c992f1d6cecf3ada1f

SHA256
b7f0d9ece2307bdc4f05a2d814c947451b007067ff8af977f77f06c3d5706942

SHA512
cf25c7fd0d6eccc46e7b58949c16d17ebeefb7edd6c76aa62f7ab5da52d1c6fc88bde620be40396d336789bd0d62b2162209a947d7ab69389e8c03682e880234

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9828ffacf3deee7f4c1300366ec22fab

SHA1
9aff54b57502b0fc2be1b0b4b3380256fb785602

SHA256
a3d21f0fb6563a5c9d0f7a6e9c125ec3faaa86ff43f37cb85a8778abc87950f7

SHA512
2e73ea4d2fcd7c8d52487816110f5f4a808ed636ae87dd119702d1cd1ae315cbb25c8094a9dddf18f07472b4deaed3e7e26c9b499334b26bdb70d4fa7f84168d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
89e9edd9d0082e286a881c64b7c1c308

SHA1
9511cb7cd008999fb2d5171b2de8ec585a5050b9

SHA256
0f2081a43b5fd394bbfa307c20d6b58f00de81d0006cb9ba3f36a0be5bdda754

SHA512
dd30337ce430878815f770ecc56341ef770ef2ee1dc7bee619b9a544b329ba3b64cc42eec112bb30d64a2975165f0fecec569ee8fcda5e436a336e9c521ba9b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b289d4e78a5e8c1c10ad2fcc414ebc88

SHA1
055312edede202899325a5ae92efcd97e36eddba

SHA256
f7667758cb3117be0586f5fd987447d3ebfd567d756f7318e9bdee17e5e6426d

SHA512
4150df073c424d16cf15a24e1e14de2ed2da8ef5155fa12004142b52014ac75db46bc350232b5770cebb3629d19d288981679340f65ba3f01143ec0095e5e019

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4c1befda32edabc8a6a9bda7ba6f78eb

SHA1
9b8172355506134e061a0e574928029e5cbe1328

SHA256
92d1049975f3e58c0fd38d8f3de58e135dd68c8620dcfe945770f8226f4aaaa6

SHA512
3e0a8b5ef79d4db03642c06d3d9154a2d9ee9634464dbb01d01fcbf2b4e014666f08044e934000cc41f5aff2bff0901eae6912aa19dce192303becc4069c8b47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0b2b9141c8eebf07453f7ecf7803916f

SHA1
7ba0533d2cf5e4d3556a7cdfcd68b98e2b33e059

SHA256
0b068df7efc6b2630355089875e34dbc981464396112753137a82681c948afdf

SHA512
c472b6ba964d49587b262def41a8a620fb4d0c6536d4c17a072891e466134d27e56be831a51d51a580f88c2f125591d6b8f0449608db85b54d31223a832e940a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ef5a74fd3fdc360f34d9994169b93028

SHA1
665645751855eea173e30ce0b6c3c936ef882812

SHA256
6d8439dfcd6b8720d071a0b28794963990491efbc0844f7552b319a8afd913de

SHA512
13d0c1fdd9b57c60a5915cbde0c2d8eedc86ec8cff720a3f99ee2ef8d7520434441400cab3355befe28ae6675a16859dffc500e42ae7dbd6bb3adb7ed40f47ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
54c9635d417e08f9a6807e46ba02923c

SHA1
78a45dd9915aad98e6b7dda3a4c93fc1234a6025

SHA256
1fcb374c4744ac9637310e82742411698af39fb49c5b52beeaa1fb0c76941f5c

SHA512
e0a4de523e2a518afdf9d4d8cef8c8b5cc90ca280686726396826ba7b71a18739131b241ba5bb800ef1a6758f90365b3126a04cada5b850483dbee39d79c82f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
32b69a6148e81678efc5ce5370cd71b9

SHA1
c0d0563ce70f435ec9a390f89fc3418bb69a875d

SHA256
36b911a623cf4e9a47727791f114358b530ee6ce2f9adf6f901043dc607e4b3d

SHA512
e23230ddbf81f5fb2e52cb7b96c34e8376b18595569d4ff7b42a9ef4e025fa6f38b579975c8e3eec1d70addf94fb3ac59e8e8caae1b0a3fbe62bb789c11953fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8NHF6.tmp\u-he Hive v2.1.0.11037 CE.tmp

Filesize
3.0MB

MD5
3a1f2850f3d505cd5b6f20f95030aa12

SHA1
1207b9e4c9d06d126868e75a28975cb9b4b68fa3

SHA256
823405d58ebc93931be2c368f6911a43cabb52db390d2e90f7316b11a84d2f31

SHA512
597ac83281d0fd9b9171f53186c3d4b96db1263d4fb71fb07910cd38f2533bbb4c9fa0b270bf918fe02494607743096b9dfa42492b25ccc20c0020ac17f62455

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-PS9O3.tmp\SetACL.exe

Filesize
443KB

MD5
451ae03d3c92777f09840ca56f08ab62

SHA1
328d049da1814cfe7d1c7783691304577854482f

SHA256
d5e779d151772504662e8226eb4107330ffa7a51209eee42b6d5883d99100ba9

SHA512
76772983a5c9c8c703b5e51f8ca9a0d5594121e42afa12adcd2b05753a1f96f97b274cda9b13251e0dca0d31ae6a719b2c509ac581bb34c930ccb00141eb9d42

Download Submit
memory/232-10-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-5233-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-26394-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-26180-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-6-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-25529-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-9-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-26157-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-12029-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/232-19569-0x0000000000400000-0x0000000000714000-memory.dmp

Filesize
3.1MB

Download
memory/4944-0-0x0000000000400000-0x00000000004F2000-memory.dmp

Filesize
968KB

Download
memory/4944-8-0x0000000000400000-0x00000000004F2000-memory.dmp

Filesize
968KB

Download
memory/4944-2-0x0000000000401000-0x00000000004B7000-memory.dmp

Filesize
728KB

Download
memory/4944-26395-0x0000000000400000-0x00000000004F2000-memory.dmp

Filesize
968KB

Download