Analysis
- user interaction
yes - max time kernel
428s - max time network
429s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/06/2026, 11:02
Static task
static1
Behavioral task
behavioral1
Sample
view.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
view.html
Resource
win11ltsc2024-20260617-en
General
- Target view.html
- Size 117KB
- Sample260624-m5dbmsbw2v
- SHA256 639464d4a53c5f2b741c5258e7e7dd1393b0ce44ac4e1de8616511fce727246f
- MD5 47d99a7f21ed9d5e4b0ca0388b46cdb2
- SHA1 9c88102a817241f9310f933173e8e28b5a507e03
- SHA512 31730970e8065becd31eaeeb09f301b63d2760d889ab4c0a0e1c9d227a67654ddc0122f374ff8f5e4af575d544985ec770325cad8f8ad488d93ff972c3b26cb9
- SSDEEP 1536:6EVVOzO+S+mdI1qVUjCMInecxPJRTUxxPJRTUcT9w:F+FBw
- TLSH T13AC3736202119CFDEEF74463208A1D563E5C1177B3A25077F3D99DAA1B978EB022837E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 3 IoCs
pid Process 2916 reaper773_x64-install.exe 5756 keygen.exe 3904 reaper.exe - Identifies Wine through registry keys 2 TTPs 2 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\MACHINE\Software\Wine reaper.exe Key opened \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000\Software\Wine reaper.exe - Loads dropped DLL 64 IoCs
pid Process 2916 reaper773_x64-install.exe 2916 reaper773_x64-install.exe 2916 reaper773_x64-install.exe 2916 reaper773_x64-install.exe 2916 reaper773_x64-install.exe 5756 keygen.exe 5756 keygen.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 27 drive.google.com 28 drive.google.com 35 drive.google.com 51 drive.google.com 52 drive.google.com 61 drive.google.com 102 drive.google.com - Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: KeyfilemakerAndPatch.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_cpu_online.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_ex_tempo_match_half_on.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_item_take_explode.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected] reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_7.0_theme_adjuster_images\mcp_fx.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\Plugins\FX\reaverbate.dll.rpl reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_item_selected_move_end.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_item_properties.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_timebase_beats_position_length_rate.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_tool_hammer.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_window_tab_performance.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_7.0_theme_adjuster_images\hide_150.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_pitch_preserve_lock.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_ripple_all_off.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_v3_snap_on.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_misc_radioactive.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_show_insert.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_tool_razor_blade.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_misc_explode.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_hide_tcp.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_item_effects_fx_show.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_misc_system_reaper.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_split_scissors.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_zoom_in_selected_item.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_marquee_cursor_selection.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_midi_hide_unused_unnamed_note_rows.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_7.0_theme_adjuster_images\tcp_vol_knob_stack_150.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\Plugins\FX\realimit.dll reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_envelope_lock.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_ex_tempo_match_on.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_misc_pointer_cursor.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\Plugins\FFmpeg.dll reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_misc_system_reaper.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_highlight_off.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_misc_tape.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_item_selected_take_delete_invert.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_7.0_theme_adjuster_images\tcp_fx_200.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_7.0_theme_adjuster_images\tcp_send_150.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_clipboard_copy.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_color_take_lane.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\lyrics.lua reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_v3_load.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_misc_mouse_right_click.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\button_right_dark.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_marker_list.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_midi_cc_below.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_show_parameter.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_window_tab_folder.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_knob_parameter_learn_lock.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_midi_pitch_increase_semitone.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_7.0_theme_adjuster_images\spinner_left.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Effects\IX\MIDI_CCRider reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\track_icons\ride_rim.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_group_add_item.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_misc_heart.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_sixteenth_semiquaver_grid.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_zoom_all.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_half_minim_grid.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected] reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Effects\analysis\gfxspectrograph reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_7.0_theme_adjuster_images\monitorScale_150.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\track_icons\congas.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\toolbar_item_selected_move_end.png reaper773_x64-install.exe File created C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_color_dynamic_volume_ff.png reaper773_x64-install.exe - Drops file in Windows directory 5 IoCs
description ioc Process File opened for modification C:\Windows\Panther\UnattendGC\setupact.log UserOOBEBroker.exe File opened for modification C:\Windows\Panther\UnattendGC\setuperr.log UserOOBEBroker.exe File opened for modification C:\Windows\Panther\UnattendGC\diagerr.xml UserOOBEBroker.exe File opened for modification C:\Windows\Panther\UnattendGC\diagwrn.xml UserOOBEBroker.exe File opened for modification C:\Windows\SystemTemp msedge.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 7 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language REAPER_KeyGen.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language keygen.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language KeyfilemakerAndPatch.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DllHost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DllHost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language FileCoAuth.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language reaper773_x64-install.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 556 msedge.exe - NSIS installer 4 IoCs
resource yara_rule behavioral2/files/0x0014000000017279-281.dat nsis_installer_1 behavioral2/files/0x0014000000017279-281.dat nsis_installer_2 behavioral2/files/0x000400000001874f-2778.dat nsis_installer_1 behavioral2/files/0x000400000001874f-2778.dat nsis_installer_2 - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor reaper.exe Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor reaper.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Modifies Control Panel 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000\Control Panel\Colors keygen.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000\Control Panel\Colors reaper.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedge.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134267725647613395" msedge.exe - Modifies registry class 64 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\17\Shell\SniffedFolderType = "Generic" reaper.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\10\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656} reaper.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\18 reaper.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\19\ComDlg\{94D6DDCC-4A68-4175-A374-BD584A510B78}\FFlags = "1" reaper.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\10\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257" reaper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Reaper.Project\shell\open64template reaper773_x64-install.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.ReaperTheme\ = "Reaper.Theme" reaper773_x64-install.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags keygen.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\MRUListEx = ffffffff KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\10\Shell KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\19\Shell reaper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Reaper.TrackTemplate\shell\open64\ = "Open track template in REAPER (x64)" reaper773_x64-install.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\10\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4" KeyfilemakerAndPatch.exe Set value (str) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg keygen.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257" keygen.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14 KeyfilemakerAndPatch.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\2 = 19002f453a5c000000000000000000000000000000000000000000 KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\17\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings reaper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}\Instance\ reaper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.reapindex\ = "Reaper.Peaks" reaper773_x64-install.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Reaper.Peaks\DefaultIcon reaper773_x64-install.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656} KeyfilemakerAndPatch.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1" KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\12\Shell KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" KeyfilemakerAndPatch.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\0\1 = 8c00310000000000d85c7b58110050524f4752417e310000740009000400efbe8158443bd85c7c582e0000004c0400000000010000000000000000004a00000000004b81de00500072006f006700720061006d002000460069006c0065007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370038003100000018000000 KeyfilemakerAndPatch.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.reapeaks reaper773_x64-install.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2 = 14001f481cffcda87848be43b5fdf8091c1c60d00000 keygen.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4 = 14001f50e04fd020ea3a6910a2d808002b30309d0000 KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\0\0 KeyfilemakerAndPatch.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\0\0\MRUListEx = ffffffff KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\18\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\LogicalViewMode = "3" reaper.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\19 reaper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ msedge.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Reaper.TrackTemplate\ = "REAPER Track Template" reaper773_x64-install.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1" keygen.exe Set value (str) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" keygen.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\18\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupView = "0" reaper.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202020202020202020202020202020202 reaper.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 03000000060000000500000004000000020000000100000000000000ffffffff reaper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.reapindex reaper773_x64-install.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.ReaperThemeZip reaper773_x64-install.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Reaper.LangPack\shell\open64\command reaper773_x64-install.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff keygen.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "6" KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "48" KeyfilemakerAndPatch.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac04000000c8000000354b179bff40d211a27e00c04fc308710300000080000000354b179bff40d211a27e00c04fc308710200000080000000 KeyfilemakerAndPatch.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Reaper.ProjectBak\shell\open64\ = "Open backup project in REAPER (x64)" reaper773_x64-install.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8 keygen.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" KeyfilemakerAndPatch.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\0\MRUListEx = 0100000000000000ffffffff KeyfilemakerAndPatch.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" KeyfilemakerAndPatch.exe Key created \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\17\Shell reaper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ keygen.exe Set value (data) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202 KeyfilemakerAndPatch.exe Set value (int) \REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\10\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257" KeyfilemakerAndPatch.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1368 msedge.exe 1368 msedge.exe - Suspicious behavior: GetForegroundWindowSpam 3 IoCs
pid Process 5756 keygen.exe 5324 KeyfilemakerAndPatch.exe 3904 reaper.exe - Suspicious behavior: LoadsDriver 1 IoCs
pid 4 - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
pid Process 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe - Suspicious use of AdjustPrivilegeToken 10 IoCs
description pid Process Token: SeRestorePrivilege 5680 7zG.exe Token: 35 5680 7zG.exe Token: SeSecurityPrivilege 5680 7zG.exe Token: SeSecurityPrivilege 5680 7zG.exe Token: SeRestorePrivilege 1440 7zG.exe Token: 35 1440 7zG.exe Token: SeSecurityPrivilege 1440 7zG.exe Token: SeSecurityPrivilege 1440 7zG.exe Token: 33 4948 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4948 AUDIODG.EXE - Suspicious use of FindShellTrayWindow 47 IoCs
pid Process 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 5680 7zG.exe 1440 7zG.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe 6060 msedge.exe - Suspicious use of SetWindowsHookEx 10 IoCs
pid Process 5756 keygen.exe 5756 keygen.exe 5324 KeyfilemakerAndPatch.exe 5324 KeyfilemakerAndPatch.exe 5324 KeyfilemakerAndPatch.exe 5324 KeyfilemakerAndPatch.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe 3904 reaper.exe - Suspicious use of WriteProcessMemory 56 IoCs
description pid Process procid_target PID 6060 wrote to memory of 620 6060 msedge.exe 88 PID 6060 wrote to memory of 556 6060 msedge.exe 89 PID 6060 wrote to memory of 5172 6060 msedge.exe 90 PID 6060 wrote to memory of 5172 6060 msedge.exe 90 PID 6060 wrote to memory of 5172 6060 msedge.exe 90 PID 6060 wrote to memory of 5576 6060 msedge.exe 91 PID 6060 wrote to memory of 5576 6060 msedge.exe 91 PID 6060 wrote to memory of 2904 6060 msedge.exe 92 PID 6060 wrote to memory of 2904 6060 msedge.exe 92 PID 6060 wrote to memory of 2904 6060 msedge.exe 92 PID 6060 wrote to memory of 1916 6060 msedge.exe 93 PID 6060 wrote to memory of 1916 6060 msedge.exe 93 PID 6060 wrote to memory of 1916 6060 msedge.exe 93 PID 6060 wrote to memory of 3420 6060 msedge.exe 95 PID 6060 wrote to memory of 3420 6060 msedge.exe 95 PID 6060 wrote to memory of 3420 6060 msedge.exe 95 PID 6060 wrote to memory of 3032 6060 msedge.exe 96 PID 6060 wrote to memory of 3032 6060 msedge.exe 96 PID 6060 wrote to memory of 3032 6060 msedge.exe 96 PID 6060 wrote to memory of 3580 6060 msedge.exe 98 PID 6060 wrote to memory of 3580 6060 msedge.exe 98 PID 6060 wrote to memory of 3580 6060 msedge.exe 98 PID 6060 wrote to memory of 2232 6060 msedge.exe 99 PID 6060 wrote to memory of 4116 6060 msedge.exe 100 PID 6060 wrote to memory of 2232 6060 msedge.exe 99 PID 6060 wrote to memory of 4116 6060 msedge.exe 100 PID 6060 wrote to memory of 4528 6060 msedge.exe 102 PID 6060 wrote to memory of 1796 6060 msedge.exe 105 PID 6060 wrote to memory of 1796 6060 msedge.exe 105 PID 6060 wrote to memory of 1796 6060 msedge.exe 105 PID 6060 wrote to memory of 2592 6060 msedge.exe 106 PID 6060 wrote to memory of 2592 6060 msedge.exe 106 PID 6060 wrote to memory of 2592 6060 msedge.exe 106 PID 6060 wrote to memory of 4884 6060 msedge.exe 107 PID 6060 wrote to memory of 1964 6060 msedge.exe 108 PID 6060 wrote to memory of 4884 6060 msedge.exe 107 PID 6060 wrote to memory of 4884 6060 msedge.exe 107 PID 6060 wrote to memory of 1964 6060 msedge.exe 108 PID 6060 wrote to memory of 1528 6060 msedge.exe 109 PID 6060 wrote to memory of 3516 6060 msedge.exe 112 PID 6060 wrote to memory of 824 6060 msedge.exe 113 PID 6060 wrote to memory of 3588 6060 msedge.exe 114 PID 6060 wrote to memory of 1340 6060 msedge.exe 117 PID 6060 wrote to memory of 1340 6060 msedge.exe 117 PID 6060 wrote to memory of 1368 6060 msedge.exe 121 PID 1768 wrote to memory of 5756 1768 REAPER_KeyGen.exe 123 PID 6060 wrote to memory of 3628 6060 msedge.exe 126 PID 6060 wrote to memory of 3628 6060 msedge.exe 126 PID 6060 wrote to memory of 3388 6060 msedge.exe 127 PID 6060 wrote to memory of 3388 6060 msedge.exe 127 PID 6060 wrote to memory of 5512 6060 msedge.exe 128 PID 6060 wrote to memory of 5512 6060 msedge.exe 128 PID 6060 wrote to memory of 4424 6060 msedge.exe 132 PID 6060 wrote to memory of 4424 6060 msedge.exe 132 PID 6060 wrote to memory of 1892 6060 msedge.exe 133 PID 6060 wrote to memory of 1892 6060 msedge.exe 133 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\view.html1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6060 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffa3491c188,0x7ffa3491c194,0x7ffa3491c1a02⤵PID:620
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1696,i,9651597297103608279,13890805226975816635,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:112⤵
- System Time Discovery
PID:556
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,17643878616769065149,8425736460689799219,262144 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:22⤵PID:5172
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,8813294963574972604,11736411777325868219,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:132⤵PID:5576
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3656,i,12464460762938876592,1416292072992127580,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:12⤵PID:2904
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,14415661613758880670,9400980099094172219,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:12⤵PID:1916
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,14507999602627933101,14430138211643552190,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:92⤵PID:3420
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,4657235449576854372,5698409239930779984,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:12⤵PID:3032
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5424,i,8162851534422741159,8246847102106663026,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:12⤵PID:3580
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,11197803869471616143,17207687081386012156,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:142⤵PID:2232
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,14514526034966661866,2285840717065984806,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:142⤵PID:4116
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,4249121388196316253,7071919320527453072,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:142⤵PID:2776
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,4249121388196316253,7071919320527453072,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:142⤵PID:4528
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6732,i,10046295721016190908,1348851058913785446,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:12⤵PID:1796
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6876,i,10463399424113264885,2962973646886691245,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:12⤵PID:2592
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=7132,i,16312492988484477921,16888833843636394842,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:12⤵PID:4884
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,9278269207981305892,12009806380157223078,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:142⤵PID:1964
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7052,i,9196707067572543561,1541623225660527097,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:142⤵PID:1528
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,10289873045068635761,14477648176720515646,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:142⤵PID:3516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,1941056320599663473,4441420984929115844,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:142⤵PID:824
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,4062877416994067841,17683630794192663291,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:142⤵PID:3588
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,1861647935131368691,7325534404336659013,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:142⤵PID:1340
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,7505977995046816802,15772812501670509173,262144 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:1368
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,18251853360569927298,9373292104282203888,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:142⤵PID:3628
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7328,i,14343378860328733797,13696482728016319213,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:142⤵PID:3388
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,13151482195696993115,13155317297211008629,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:142⤵PID:5512
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,10469554440014514585,18140878833950617789,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:142⤵PID:4424
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,4216388825968310284,4573631707289740820,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:142⤵PID:1892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:4404
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start1⤵PID:4176
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1172
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Cockos_REAPER\" -spe -an -ai#7zMap7175:88:7zEvent317421⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5680
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Cockos_REAPER\" -spe -an -ai#7zMap19399:88:7zEvent219471⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1440
-
C:\Users\Admin\Downloads\Cockos_REAPER\reaper773_x64-install.exe"C:\Users\Admin\Downloads\Cockos_REAPER\reaper773_x64-install.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2916
-
C:\Users\Admin\Downloads\Cockos_REAPER\Patch.and.Keygen-R2R\REAPER_KeyGen.exe"C:\Users\Admin\Downloads\Cockos_REAPER\Patch.and.Keygen-R2R\REAPER_KeyGen.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1768 -
C:\Users\Admin\AppData\Local\Temp\keygen.exeC:\Users\Admin\AppData\Local\Temp\keygen.exe2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5756
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004C8 0x00000000000004C01⤵
- Suspicious use of AdjustPrivilegeToken
PID:4948
-
C:\Users\Admin\Downloads\Cockos_REAPER\Keyfilemaker.and.Patch-BTCR\BTCR\KeyfilemakerAndPatch.exe"C:\Users\Admin\Downloads\Cockos_REAPER\Keyfilemaker.and.Patch-BTCR\BTCR\KeyfilemakerAndPatch.exe"1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5324
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}1⤵
- System Location Discovery: System Language Discovery
PID:4892
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}1⤵
- System Location Discovery: System Language Discovery
PID:1304
-
C:\Windows\System32\oobe\UserOOBEBroker.exeC:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding1⤵
- Drops file in Windows directory
PID:4412
-
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exeC:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding1⤵
- System Location Discovery: System Language Discovery
PID:2416
-
C:\Program Files\REAPER (x64)\reaper.exe"C:\Program Files\REAPER (x64)\reaper.exe"1⤵
- Executes dropped EXE
- Identifies Wine through registry keys
- Loads dropped DLL
- Checks processor information in registry
- Modifies Control Panel
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3904
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\REAPER (x64)\InstallData\ColorThemes\Default_6.0.ReaperThemeZip
- Size 22.0MB
- SHA256 eb0c31c3aa933b5556cc0728dabcf9d343fece8e8a9448dd42b394c5533bb68d
- MD5 703a756ea407567d88fadb5a1c2b09c8
- SHA1 dfc590849ddc32fedae3510d9d53c85807abbf7c
- SHA512 fa4837a876249fe265aaaf25c7d073b7ba607cdfbbd7abb86ac4413abcf840e33ffe48d16aae3733d0d5124c0dff5fe89d1c0b5f1afe3fa824026999b7ca883f
- SSDEEP 24576:2jQj/jjjjbjjjjkjjOjjKjjjRjqj0/hEdaI0ycbjjjzjjjzjjjzjjjfjjjjjjjDW:L0ycu5ZXEoxcJm3
- TLSH T1253747619B9EC085CA91053DFB31A6F45917AE0AE783D83358A4BD6F3138DC3357A24B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\ColorThemes\Default_7.0.ReaperThemeZip
- Size 24.0MB
- SHA256 b22b90a4a60e054a58b047447c3ec57a292f348e31d8f89599bd46491a56431a
- MD5 e87c247f67e80b39ffeba1c00b0d65e8
- SHA1 5eb4d81d1002e60c4bd80859db3e66c27b9b244e
- SHA512 b4d17be549b0b452ff515f5059c26659780cab541e8a70a1ee145a5c50f24e8acf188531126fbdeb8a3e832b3c0a94b8238748c9a8cb67b941f0fc9ff7caeefa
- SSDEEP 49152:mwdd50UzlHfdHQfL05o6/p/eUOv4rAcfIG00E4Hn:mwdd50Uzl/dHQfL05oLv4rAcfIG00nHn
- TLSH T10F4737366F84C149CA476CB9E46982FCCA2A9D19E403CA9325F5FE7F39759C7612B003
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\GM.reabank
- Size 4KB
- SHA256 da43bce7a5cc96a01d5757a951cbaba2696408d6239bdf083aab079e07ef236f
- MD5 6f06246f7851d562c3af5b83db135c86
- SHA1 8aa60f82a9b2c7eaf431fdc0c79e8f7c08a733ea
- SHA512 c9d01dc7170165715978ee8e9afd8e2825ed7edef0d318219dc90231fa554871edd6757111cc9eef24fa92b309bba744c1d02ac6d8873a8dec961a5f9a734c4d
- SSDEEP 96:n/0pFxL6t2JL4dkKzlygYbh2J/w7OpGR+6ejGlMR8U+0XXHm01nZ4bzfaS6ZHzNn:/0p7WMSkKzlJIh2J/w7Gx6ejOk8twLZj
- TLSH T10AA1C57EF709B35CEEA4D39F414BB211E036E0959F3598A3153CB94B3210488DDA2A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Dumble Overdrive Special - Tweed Deluxe.wav
- Size 4KB
- SHA256 5a06fbba771a89783c957822e4dd92852ce12a1d47c604fdf220769f41b94480
- MD5 33b31fd3bf3a7fa66274b52374247898
- SHA1 cbecbfe0271578087e192157ea5c6924bc44fc6d
- SHA512 656f131e473ed3303538124e7823a03cbd00b33cc44ceb7783e2b7a53cd43c98cc4660b015265b191e8a7e652df85046415ee8f505c08fdfec50a92e1d7c9136
- SSDEEP 6:s0rtxTx4/LasekRvKBjOGgD4qZ04U1xnVqzXIuOk0uFa+9sMP4:ssxOOJerFD4qZI1xnQTguK
- TLSH T1CB91C098726201DCD8351B7F5F341DB057099964D6819C210D16881A2CD1CE0567486E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Bassman - Fender Bassman.wav
- Size 4KB
- SHA256 68d325d659b8adf3dbb6a421277d35e5f61dbb1373003a149eb2a3cbdd49be8c
- MD5 bafd91a6f40032cd8ba1b760fc474c54
- SHA1 b710a95cc80fc7a8cfd6a101d7b7e2dec3345438
- SHA512 d8f5f358cb07f95e2b6f435e78716fe456209c9077e8a2b7d8b018a2ff116d7fe5863f32f18baee66ff9dbedb56d41256fb18bf54f0f6ba21dc7f27af45843b4
- SSDEEP 6:Ztouy0p2MTEecBTL7fcs0idGzZybgyL4kERTb4vCtiQxavYSMkLBZpQOPq6Ed:zouy0LE1vcBlzMsy8Npjapl1XbUd
- TLSH T12B9123B456B82973D303473B075CEAF8DED527D122996F81AD09904C3973C820451801
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Bassman - Tweed Champ.wav
- Size 4KB
- SHA256 396bc77761daac4fc368a1d0c23ab9307941b6f3ea03b2502617c868f15c2b86
- MD5 1ae37d5cb7fae2fe6a44d705903d1d68
- SHA1 dd5509f7e623352aa5249c9ea5fef2ced9602de4
- SHA512 018d3e0a7c12bbf35a95db636327afb89ae891f47f74276f0ac03ab9b08b2f349185c97a78a015ee13dc0357f3ffa28063a4e81f970db76cd30076f63ffa9a36
- SSDEEP 12:g25HJyj+KEBVOSKSuOtQjqzzsE1v6IwrTvaeq+30CdwHW2h05geiEirInmE6LZrh:z4+JBVOxSuhuse2yeq6ExS5PnmRLX
- TLSH T16FA186E7DEB85027D6C0E931D5445D1BF8122235AE86390E8036117C39D3F76B386249
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Deluxe - Marshall Stock 70.wav
- Size 4KB
- SHA256 59b067e001e9425b4c165b9a71ca5e0ea1aa839633dbe4252660c3fe87da1596
- MD5 87638bf2893031b221af0922e973e21d
- SHA1 da6640fe9cad53093a656f0d8656812813626ace
- SHA512 f4d97c781b3f0e818b1d11e0a3744548d6603039fdecfe885b650c571bcb8bc6a86002f2b89785a9b40395a751b5c7801bb2c5280680e20c4bbbfafa074c8baf
- SSDEEP 24:7n03rCHcYcdrStDrKb92ejtr3teZEbmfn7u:703ocYAw3Kb9JWGbh
- TLSH T199A144082F7030B0D78BDC7658E98D309891F73A298DEB00C862E0B03CE44381682529
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Deluxe - Tweed Champ.wav
- Size 4KB
- SHA256 5e4a40b4d41bee5448885be5378ab93a3027fb4c13778aa6179ffdf28ded2f84
- MD5 8001985fc6d93b20ba5d4ad3eb837720
- SHA1 65a143ebf17b9c1c6c4ee7237b2ebccc4f48cde5
- SHA512 67b1edad89d5936217f263ed1e409bc712ab6ae7388a6c5cdaecb17740c121d595d77e0d281f9d258a47afc004a32e0632bb80f110677eea4e80508012eb76cf
- SSDEEP 12:Wu68nTiU+42ybLUX45uTULzGoaiW8k6/aMDZSfB42b3+4Z1IqOdFjJjLb:DTmNUeoaiW6/NZSpu4Z1Q
- TLSH T17EA1202A4566759EFA4A0E3F84182C259985791B7592D950634A01EB33198608072292
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Marshall JCM800 - Marshall Stock 70.wav
- Size 4KB
- SHA256 48dcc27ee229502ec34ef863b8a867bb180156efccff2e2819260475a6f990c0
- MD5 f1cbfea4f4678704d895dc78cb24213a
- SHA1 78515d6cd7d6911c40d4b7565a30121596c43a79
- SHA512 e2196c00a1c49ad2a85b459f1139d9c7545f39ba6592e3d66e894200e33be6f2d4beafd62e2f0aa9ee1bd684f94d120623cd637394a52b405a2c8a5b3c090a29
- SSDEEP 24:sfsx8+mvAQzAXBd1Z7k5GzkZ819paoI5wbRy2:xjqAQ831bc8uuNf
- TLSH T16CA141A416B3A5E8E229AB3A64780D50DC3938D22ADBD641254F1666A2E0875EF09881
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Marshall JTM45 - Blackface Deluxe.wav
- Size 4KB
- SHA256 98faf64b07b18df56c2d3f0c9044fa1f93926656697401dec5eeffbd8bd142d7
- MD5 5a37e73820fd7f3372fbba5edafe96ce
- SHA1 ca3362c2870cac126af0f384eb49e168e28c8986
- SHA512 e8ce11bcc9ef8084dcc197685b411596e47f2d1dde88989ddb1e24383b5f96a8b981c594855231ef29ec3841c1545e072a4cf7a866ca6a1c25e4ed2617b80c73
- SSDEEP 6:MRtgUu+IRu48p8IL+h0mEgLe3Vl4vpb/9SWv7XwX00mctEa4osM8vmg5gCg:MbgROx2IL20mEgL66xbkWv7ANtdOvbHg
- TLSH T16A912D86C530906EF103DE7E0A394FA04628F43A53A6C9102021EA25363266A0B18D25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Marshall JTM45 - Matchless Chieftain.wav
- Size 4KB
- SHA256 f48c5bb9d4515a0de774181e043856e444d29adbb46ffb454480b2824e43bf42
- MD5 14071c09dc0fcddc7c946ca2bffeb959
- SHA1 a130721134a1a173a7a35ca9e01a386aa0089049
- SHA512 c98d75605173f67935f425dc37a8316c6e8f911daa1e7660d433e60b68c9d235a29ba205a8a9c4336bb86fbcf62398685aca5399f9f1acc638e9c08c757e919d
- SSDEEP 24:LU8hwj97QAxEmusQVpaXCUG/SI6Es6g8K:LU0wVXEmCVyGB6fv
- TLSH T103A1B36A82B232B9CA295A7F8D0C4C2028A43CDBA1D74B0C5034182B38A0F889680336
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Mesa Boogie Clean - Blackface Twin.wav
- Size 4KB
- SHA256 54296c71c65d48cc5faa5de35f2d96fc0fb118b8443a5fb2e9a72d063b3dc178
- MD5 2f8f67507f48ddcfe4fdd587289e5336
- SHA1 accad4f1b2afa14f81a509222a6e54f49af9354f
- SHA512 ee87934dd7bea0f20ffbf696fa7c7f9c49ccc07a5d576950552fac1701f0ea6aa79ee2a7bf2830e225f7cd67eec74a18713b378a67b4899fa972a7237ab18315
- SSDEEP 6:JtIX4d2C0o+qXhOQWzBXtQLRmJkSP5wfchZ6Ye+y8/CT37JRxTHSIrFKOX/C:DIoRDLhFue/+yuCT37ZBZvC
- TLSH T12791F882A6801D3AF2F92A3F098C17E86E331F36EA6BD40088038B0714106379240680
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Mesa Boogie Clean - Matchless Chieftain.wav
- Size 4KB
- SHA256 5dec239f08e4809a1492713973c04a10e5cc0e54b48b824616131deafab02935
- MD5 b61b501ae2d92985eaa6cde83264b3c7
- SHA1 b2b449c2b3eb23cbe281591c146f49840632dcbe
- SHA512 03f159278052bf008616587a6d1c5ebffddaf331089b398f23d7cf9de21183f1a30c363c383b255277435f3c25a95bd0a113a5b2a7b8ad306a45a4ce618591c7
- SSDEEP 12:av5wve8gpe3R1WTaLF1V9dEwVjRh3h4QHYCHGbpC9q8bRbuCA9RtT/Gk7h4Dh:ikJLWT8N4wzh3hZ4b09lbghRtTj2F
- TLSH T132A1D86C60B3CE4AE8014C7B61FC6D6FD6E042A230CBBBB5B152DD1F766100279D5929
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Vox AC30 Non Top Boost - Vox AC30.wav
- Size 4KB
- SHA256 076519b0129fa16a806793b127928e72dba7c382ad876c43a8a1221450f5e0e6
- MD5 15232e709d034a9d7e1abbefa11dea9f
- SHA1 7a2f1ed27ccce9c7d18449e3d662b65740b34c80
- SHA512 3fcc6f6c70b0188b34e2837a3504e89398ad153e331fb18788083ad75fab5b3ccabeeeea01cdcc8e056821cf0252d49b22f7ae9c6345ff6d974e1ae3ad481c4b
- SSDEEP 12:/MwH3UR2bq6/bQbYySEvhPpwJTwjJZjwSrias/:0wXU4bqsaYyXvbwSz5Ps/
- TLSH T1949154005D3C70E3C9002F729B54ED38532C7AB8C74BC8ED59CC38CA1FE0E81A519540
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_keymaps\00 - Default Mapping.txt
- Size 1KB
- SHA256 c0c705ad1bd1dacf4e175bbbf81c1ebf81b981d0bebf5357d1876abef8190dc5
- MD5 c409830f40665b23b23b3eb7df86f85b
- SHA1 7c5df34ddc9d0af01301146ac56c564e183bb200
- SHA512 d3ac622e3277a4cd7fe41571cddac143c4fb9d6877f1cb39790732c4a8fb321e4463d3f0c75bbdf7d4d1bb80449723d8c87d6d3d08d511056755a1b5bd344520
- TLSH T111417B50120D02E702CF27E61FB9D5B62AE8DE86F55030CA33BE64E6FD4A000C6986CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Chromatic.txt
- Size 141B
- SHA256 c34979d66ce96127ee98248d90dddc51ddbb93135747a30ae70f6a21c7b65559
- MD5 74d1af1854860a7741e3741ae204ec30
- SHA1 cbaae4d9a2bad8d07c62a4f36efb117e67c3407b
- SHA512 9250a36db49e4ea247657e551c2ffd6c9820fa12c34671c08900f98a429d27ea1a9ad83ae662ba41fa5d30afec05f65c839f97cef6349d88ec0bfa0f87a2e7c0
- TLSH T1A4C02B4247C0CFDF030D241CF35A3580C330A839E8D10FB0895D0021391798011D5D80
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Dorian.txt
- Size 125B
- SHA256 d4f12d3e28e91a4498d50ec6035765d904516a2cf6f545cf1131d307af1227dd
- MD5 399c656e6864dac590f53d8f32492e82
- SHA1 b0c585db9515f0b0d7b1a67cae9a3e11c3d7db20
- SHA512 0c66101042da787e676c288e4ed59196c1115d3f37c7ae749f880054dfe3bd8e38429c503dd76764d67cf645488df821365ac93ace22e757140147c8693e0d21
- TLSH T1FDB09B5247C09EDF07151019735B3984D3309C3AA8D54F61995D0011345754155D4981
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Harmonic Minor.txt
- Size 125B
- SHA256 3d105fc263a2e5e0e0dfc4e69032b291061d6db6abc1052c4116d192ac6a4a19
- MD5 f35f776aa037c5a58b695d4484479b1e
- SHA1 0e65dd8670c1d4252ff759c5f6f05e378dff8969
- SHA512 d657c15c8b77458ac61af88bd47d0b855b91dd36a17f21d6a0c21225ad8dbeda84f37d08a0d3113328ef6dc2b8a6d084f585b8ee801dc84353408e31e32a9022
- TLSH T135B0925247809FEF071A2019B3AF3A84D330A83AA8E64FA1989E0022385A98166E4981
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Locrian.txt
- Size 125B
- SHA256 1f86ea118db38741e65e76bf26f62287c09ce80d4bfea8530db8fe5792c0fab4
- MD5 a9c5086aee5ce699c3dec4665a9f014c
- SHA1 2791a2e76d2182ce26108f3155454365969bf433
- SHA512 02970090a61181098f140630fd98ff57150720819ce3cdc05af5c37d0456ca3993a02bb388effbf29ac8693cafda60ccbf89c5b30a9b6127b81fe1c584bc8438
- TLSH T1DDB092528780DFDE072A2419B3AE3284C330AC3AA8E64FB1589E0012294A98166E8D80
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_color_note_pitch.png
- Size 23KB
- SHA256 56cb9e0a78670b0081ace9a35d18c81b64d1feee12a067d9bde975f6c8457ca2
- MD5 468abb28636485af7bbff18fde3b21fa
- SHA1 f596b1e46a5acc1c0640d9a2cfc559caf2925a38
- SHA512 a200f2aee1b47f2f232bcac09990b397820e72ace10c6eb571e094533bc33642fe7de5dd8d7740245dd4b3205003102a609a0c77bd1fb98f256ab1836f2ab1fb
- SSDEEP 96:Dffffff/rHeyseysZ5qPvDOuwMQ9fTvpaGmJFmcg9OuzV6q:jF
- TLSH T152B290837224C99BDB550939CAA643F21B2C6D78CDD788BF38EA7E5A3533A951D4301C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_color_take_lane.png
- Size 23KB
- SHA256 0919bcc1f20063d0a9781a1d6a7dca2cd14b0ddeba5316478043c38942b404f9
- MD5 23c319a29bb452fd5c6cfcb3b5f2c101
- SHA1 5f47bcc38fe59c88d4c16a3339767495a407e4c8
- SHA512 73d86260f15a3db55f9297541f2527f4c3ea05ebf310d9225f805e184c095c28787b275441eeb5bfff67048de29a7b91108f265387d081b7c6988f07ab7c813e
- SSDEEP 48:PS3mHik4tyIY9CY4NSGl7UiPvyN39wINGANBs+C9FdALP2f31gIZYrM7QoEy6Ose:qv0IoG1idKFCLeP1seae
- TLSH T1A9B2FB13A520D14FD310853FC9D688F49B691C3DDE92E87325FEBE6A3E726C2588098C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_time_selection_item_delete_remove.png
- Size 23KB
- SHA256 1a4a708eb9d2f77b3b10d01248ce2f4cbbd0b7092c2a4d2f5ace360bb19519aa
- MD5 ad406ecef8afdd03af46267ffe7c466e
- SHA1 a8459398eafe41325b38c03521d9f6f0f394fb06
- SHA512 906a6e8c81203ca4994ce2f66e565c1d80a1e30a62a380d8ad9bc8076e45f15b43d9ae2c67922b88f46c8f809447d1385589c9977c7d8ecb974b60d8cc5726c2
- SSDEEP 96:edNvlIW/WSUWWWfWWWFqWWWW6WWWW8WWWWWWWWWoWWWWWWWEWWWWWwWWWWWQWWWK:edNvlhgY9
- TLSH T195B26A236360D01ED6F2073FC942E4F45B859CABDB618523ACFD7E46B53A683D4C2A48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_window_tab_mixer_mcp.png
- Size 23KB
- SHA256 dbf46c6c988400a1f25e4a575c07047c33773e97796e3cff714b5754298e260e
- MD5 d2789c9b6dd96f4e6e7a6d8402727029
- SHA1 ad96e565aa5038904d2b3c37d3426113ea8cd4ed
- SHA512 15408e5359089e7bb6b803238afaa6588c50e1b5b02529dafe926bb7ff44a08d2b76d3349f935d197d1a80f12c208a28a22ccea02c0519d3f5f269210e531426
- SSDEEP 48:pBgV0SdWW2VhPl0hER/l8eXadzR/WjSWGkXWnVFCVFC2CUR/ZWoPBypjgK8m:BYk13E57
- TLSH T1B0B2DF2296E2E00FD319553FDBC648F5AA291C3DED92E87314AFBD5A3F396C2186054C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_audio_waveform_digital_sample_rate.png
- Size 42KB
- SHA256 e81eaed990348bc135a0018bc11e5e95004bf6e78c820aa0ed565dfdfe948ac3
- MD5 f561dea0c7e66134a6032b5ca9a272b2
- SHA1 488d5f69b63883d3744863eda2c94e700fb366b3
- SHA512 f7a3a4fb50868375596fa38092c08d0cbfdc53d4a7a08cb99cbf2d319b6bcc4f5bb352c8f05a2b2869f72d73abc4b743f9273316823faa3ca00270588540b31d
- SSDEEP 48:79FnVndnVndnn9nnFnnnnn1nnnnn9nnnnnnnnnn9nnnnnnnnnnFnnnndnnnnlnn0:g
- TLSH T1E2132253F230D41AE3415676CE45C8F88AA53D39DC92946738E9BF6B3A319438444648
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Data\track_icons\room_large.png
- Size 16KB
- SHA256 6f6368a80ae186918208234298296e4551cc2a7d0468930c49ea3a45c19a9449
- MD5 bd8ba042fe7e03622c11dc9b3ff8218d
- SHA1 1f12594db2bd76219c3e1cdce6aaa771516ed199
- SHA512 24bd3fb737acab5e8becc2f95af83dbea0163da702a2d10b343236f4679a4bc4c4ea55d1c3512faf77b128e3091e8d99f963a9192f29d4c97581c73ce29a44fb
- SSDEEP 12:6v/7OGq333333333333333/puPL19ybVvlbjLa0lffffffffffvvvvevvvv0lqgg:CBD0L6gLmvJg4
- TLSH T16F726E5D6150E980C9A431F1FE4292F84A95EC22CF9870A7B3F3FE1B71F7AA42700061
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 65KB
- SHA256 91a64bc8730949624af0b6916d380c4a3be0901ad6dbe10797cb9bd16516541a
- MD5 a55fdeed83f64e4b3a4af73b52d2f3d6
- SHA1 ea3be498a1a87616f7b0e4dfefa6fe45706970e9
- SHA512 f1f036a4ed1b6aff65e7182d3c341a7f6e2af038094399cbc27a43949920866cdb24180a8a61728f93353f0983c37bad2881ee52dc0b6c73691927f3345e5c67
- SSDEEP 768:oHHHHHHHHHHHHJAts9NH7yfOEGsy0uyFtzA0jhHHHHHHHHHg:gHmf3O
- TLSH T14563B4BF5650C41ADF80F633C90086B7671E5A0CAC95F89225BE697EE5239FBB1C8443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 95KB
- SHA256 8ec8a207170d8b57697bc718e96df66ba570d5d105c1e74c0dae4aa8a991a9a6
- MD5 1dea3c1552cfa296632626316f81cfe1
- SHA1 451bc22d77c120f98a15bb1b7f0c979c6f661a36
- SHA512 6f1c3dc429c914d85c06b903f2987c9d685947a8da58e0e2310e448b792ac591bf9728b425ef30f3b02a13eb38b013f2fe645a08dd7a556b03073e8ac7f1d1b4
- SSDEEP 24:n4OdQEXVmowWeoxpn+dwR2xeweIi34sUou8JU4G/it:n4Od1XXVnQxewemZ8aa
- TLSH T18C93FA19B806C942CFA0A93EFD65C6F01CFCAC0BFA955EA735803F5E327068854DA4C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 42KB
- SHA256 9e895169189004dd4bc522fc06e0520c3be84e2d83fcee07be3820e81f9596be
- MD5 b41d9eab199b13e33786992d256fc5cf
- SHA1 865770a7f2ea23e2d413afb478e56bdc8397af4f
- SHA512 16363d5a4b13ee8c1a6d06ca3564aab057156a3771b062fce558bfb6d670b885a8a7d41c737d8035f54319ba27b50b2b4d6f0aa59f882caad54d0a5a2d3e08fb
- SSDEEP 48:JCNaZOmMdFv4CKJeGyUG+54wT+IuqGr3Ke3Ke3Ke3KO3Ke3Ke3Ke3KYqGcT+IgAn:xYaHujUrvwuz
- TLSH T1A513A5B727E2C601DB594276C932D9F00A24FE4FE956248725B97D2F343ACC342BD889
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\Uninstall.exe
- Size 327KB
- SHA256 7df81f488d2468e3c8bad4a07c5f6dcf0ef8a2e39bdf369c1cf88b60f97993ef
- MD5 a28dacbeac23591ed0b7b272ef2442a8
- SHA1 5cb28f5aa524366cdf1418c0796235fc6f6497c1
- SHA512 548f251af961cc8cd19657ade8556bdad04aa172f2ea86474ffd97737b8db73e9059a32298854cfeac99256864cdd3b0ef275384361f9e7ef6f6fdf977a83e4c
- SSDEEP 1536:CRPYqa5pic6jXFdL2KiMcagCRL/0HLqAANZQcRwvQtWWE:2PA6jXFN2McanRL/aqAfchbE
- TLSH T1A264427C81229C8CDCD0CEB5CC103C918F45FDAAD5161A2E9D91B1BF84BE9785B978CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\reaper.exe
- Size 17.5MB
- SHA256 dc799a1549691e30b403003560f816fea80b3f17cf4984e23b1d44f04c4590ed
- MD5 c77959756d9783325363986afa8c38fe
- SHA1 6d02e9bded3f2625b66f73336ea39b090fa9d232
- SHA512 fa67afd439adf0154fa7b0dea7c4ac0b801c16a768266d223e261ba24d8c2379649d4fe88490eb601fac3deb8bcec0672e91427f183c0f54e788760e9ff28daa
- SSDEEP 98304:r80o3+HAdrC8u+cvEH4mRFvM4sHKVkUicGfhfJVb8IrJN1jQ4ixLgiC3Gg+3+aGR:X/0e8svEH4mRRM4sIilhBjJnsLR1lu
- TLSH T128076C1BF1C840F8C0129A74C75F6357C6317C06163166BB3FD4BA6DAE72A616F2A362
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\REAPER (x64)\reaper.exe
- Size 17.5MB
- SHA256 db90baadcfd5fa8a19c59f3363f073d8ee0119ab0105475dd8b2c5791ce0a2d6
- MD5 7de63a2a901261c12bd25f6076e10c8c
- SHA1 d49c33fd668ffbba3da316afe7327da8430044d2
- SHA512 4bbf8dde7e5692139c24393e99cf79aca7b5b496a935de931cb139fd422cd0b41f1835f97586f10fe499a1228965fe03253df4edb17ecbb24a0702d54888d67b
- SSDEEP 98304:r80o3+HAdrC8u+cvEH4mRFvM4sHKykUicGfhfJVb8IrJN1jQ4ixLgiC3Gg+3+aGR:X/0e8svEH4mRRM4s9ilhBjJnsLR1lu
- TLSH T1C5076C1BF1C840F8C0129A74C75F6357C6317C06163166BB3FD4BA6DAE72A616F2A362
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
- MD5 6c5c69ea7db1f14597429c11acb086da
- SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
- SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
- TLSH T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
- MD5 b40813b6d7a845a0e75e73df45573d20
- SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
- SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
- TLSH T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
- Size 334B
- SHA256 f7eb78f711abfacbd978258261731a6fffb071363d2aaeab336d5103b5f4bedb
- MD5 83151ecca7c023c40aef6b0d9b5ff5b8
- SHA1 7054d05d359a03ba5a30a0769853f4d37a6335b9
- SHA512 b61411aed6d897806ab404bdde79d051725ed488ca2bed4c346101d2520b78abb26e2aa8455a602ef419eb3f88875883c93e3006c2e608e87c9cd33d5f5d4a38
- TLSH T107E026A4CAC8E37EA200648B816C7B0C8A90360FD6C8AA0F3748C9C47001E80A7C2AD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 4980b1791ce9565e4c9dbf2fbe254c0676562eeec62b29b4db5ba9de7d324c08
- MD5 3ec5514ccc3dacbcc3e0e6c60e9b6dc3
- SHA1 7e97a5f8fe17a3901d28f337ad8f45d0e3376900
- SHA512 214bdb69fdf19e808d751db5ab0de0674c4ce704b8dba869d3f1a562e9656df57e7de74322b0e0e9eab217bbbac450123309559f49a7702ec1d720a973c497d1
- TLSH T14D714F20DCE086E9EB58F8FD94D11144337CC59C4AB76E324890A0B76A197E0F52DCC9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59163d.TMP
- Size 3KB
- SHA256 eeedf0557baeef893f3d2cc832602dbdd318233f1af7bfea8c858a1a5a425a49
- MD5 6a1a635fd5877af7a513718a8dd6f034
- SHA1 f2f6c55a8fefe00e3d6446d3229ab3f9f61dc450
- SHA512 75bb4d019acb4b55445993086bc52dea61fd451f346a07d9b50106d4b27656e808382cc058c2e1670fd5fc13640d929d9d049347c60e2916382496e06013d9aa
- TLSH T107713020DCE086E9EB58F4FD94E11258337CC58C4AB76E364851A0B76A197E0F56DCCA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 7KB
- SHA256 f45463e24d8f92caa4b53f846ac79847bf8e0fcd31b82f97d991cab7579899f7
- MD5 5dd4f0af6db94c1ba1dbf2ba38829e38
- SHA1 c35f3cc33d95a67155f0b4e7c22fd98b14b88444
- SHA512 a7fd1b36476134d569da8d33557e5a5f955c5309f9216144492dd408b3544b2a94e0db8da3b4026a36415d35e46c8d84de3740f9799f5fead57ce41528c3dce5
- SSDEEP 192:DThfw0e4PWxVp0W/We806one8dtDvOj6oGeaDpZk:DThfw0bPWxVp0W/We806one8fDvOGoGs
- TLSH T11CE17DB7C6D8877E881156F19B25BE1BCD2D055A93283C168CF8AF4F63E1871D20229F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 5KB
- SHA256 796754adc7b578f40daf6324252716ae3bf95d3e76be12a96453294ad4b61b86
- MD5 4d2f78175c61c047d07d3a27ef2a277e
- SHA1 e5fc1956c37209383758d81ca83c6f255df07552
- SHA512 ca1c16a59c6966644f715e673245b5489c9559c8a888e47499a82914c7f64a5c1b0bce2f7d27ac18d4f072bcbd464b1808badaa5f0ab1f858223270ddcde2589
- SSDEEP 96:D/OFb8o64OhaS6fcW/WeuzIeVneWdDRNOsXqj6VwGj4/ok:DWFb8o64OhaS6fcW/Weu0eVneWdDRNOd
- TLSH T134C1AEF783D4877E881192F09B25AE2BCD2D151B432C3C668DF4AE1B63E1471D1426AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
- Size 40B
- SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
- MD5 20d4b8fa017a12a108c87f540836e250
- SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
- SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 14KB
- SHA256 e310f4ae3484b9221d18ecf28ff6eba00cdcb7ddf8e1c01e340c67e33552b825
- MD5 1e95b72185ffea04d089e13e4f90e1c5
- SHA1 d1cb781cf3aeb7a938e109a770f951a5d8916de0
- SHA512 79718474db0e986b4825ba8b48e0945aa23c9b5aba82dd9c0b8da1cfa3a6ff7e324f5bfc47ad631a4d1bb4123c2c650b471796bb121a1efe191af28bd4022fa9
- SSDEEP 192:sxRlRzyM/jK1Ml8wo+/flsslLSNkUhozoA8poLAlA5o/g6+WNIYZdxDGzIgDyJ:sxRlZO+/flsgLS7DoMp/5IaOK
- TLSH T14462E816A6285977CCDBD219F6917B53D6F81533A2940E48AAFCCA0C04E6EED221381F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 14KB
- SHA256 fc95f4bef65d0f96290d6e36fb9bcdeeef8ee3cb1b8e27a31da0d35c56bface8
- MD5 c9d5b1a4472eaed9de7aa329fb60a655
- SHA1 9ada41f34e4501e8074687f235f847049b8d34b8
- SHA512 bee0b302b2e794cb02c54bc4a015c0018e8eccb38149e8318b2ac480554e01ce213f54680fd73f6c668eb9c6f3ab2f576ed1bf0a8a40d34e0f20b31822798316
- SSDEEP 192:sxRuRzyM/jK1Ml8wF+/flsZlKNkUhozoA8poLAlA5o/g6+WNIYZjxDGzIgIJ:sxRu/b+/flsrK7DoMp/5IQOs
- TLSH T1DE62EA1666389977CCDBD219FA517F53D6F81533B2941E48AAFCCA0C04E6AED221381F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 29KB
- SHA256 ca6007a512e5d33da4736c8417aef4088797058540badd9b3b695c511f65bed9
- MD5 15b2d752d391cf01355c7f3e02ab3670
- SHA1 a4bd72d08197defc7c73cdd4ea4b4a89785d1bd3
- SHA512 481805f910334d003c32adbf90c18b46e22f3f17cc379a5ac99f2e8a81f68e03bff0cd691f332cdf9025c09ec4627b2f78936876b3df5b3221ec670887f58bf4
- SSDEEP 384:sxRl4qL+/flsgz66s8qMpRiYnazAW8pZS15posJWeT+hS7DiMp/5C/VOK:sxfL+/f/z4Mnc7WeT+hSyMp/5Ix
- TLSH T164D208069924C8779EC39D18B57D7E33DAEC50626285CEDE1AECCA0C019D5FDAB07827
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 15KB
- SHA256 b344d6289c26be263693b1ad3fe407a7bc80382fa586123c4aa918ac61011eee
- MD5 c8a6964a2e18e1fa4feb54d8845f93d8
- SHA1 95ab3f7916af00e5e09c100ed3ac6c7bf3f5d744
- SHA512 699cf3590cd4a45ef186045595109338400732b08bc28c0461d51c31c3be8e457ddd33c477179c0fd411cf7f5d6795a120c40f7f2bea959a2063a5dced974981
- SSDEEP 192:sxRlRzyM/jK1Ml8UQro+/flsslLSNkUhozoA8piLAlA5o/g6+WNIYZdxDGzIgDyJ:sxRlZqU+/flsgLS7DiMp/5IaOK
- TLSH T14062E916A5285977CCDBD219F6917B53D6F85533B2940E48AAFCCB0C04E6EED221381F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 14KB
- SHA256 76267c5b2ff08b79b80a7f8092892efa507f8432f758a992d3a856097647e4d9
- MD5 210bce31d3e772b58dae587b423769d6
- SHA1 4c049a6558eabe3ace9a19dac2363726b0f1aeb9
- SHA512 ba317262d417b0af14d702c591cb46b8f40187741f2aeece1eb1cc370ab62e09c841f4b488305a6be76c7c21decf0886772dc537db6c6360ade60fbd6f349e61
- SSDEEP 192:sxRlRzyM/jK1Ml8wo+/flsslKNkUhozoA8poLAlA5o/g6+WNIYZjxDGzIgDQJ:sxRl/O+/flsgK7DoMp/5IQOA
- TLSH T10162E916AA385977CCDBD219F6517F53D6F81533B2941E48AAFCCA0C04E6AED221381F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 29KB
- SHA256 2f14fb3b029fbca65cc1844ec68255165cfcfbd5f46923e9a164910364f3cffe
- MD5 2a59a9366882170d8d4b88d02b85c02f
- SHA1 d71d80ddac7ffd4856baaca463f772f570aa079c
- SHA512 724c3fcc16a7be284b1deff6cf941f00185681da203dafd38bfc3b410deda611063c0f6b57bef4c1d15eb1c57a05830ea8e04d4394d5c4e27b9836f983cc9c5f
- SSDEEP 384:sxRl4qU+/flsgz66s8qMpRiYnazAW8pZS15posJWeT+hS7DiMp/5IaOK:sxfU+/f/z4Mnc7WeT+hSyMp/5IK
- TLSH T10CD208059924C8779EC39E18B57D7E33DAEC50626285CEDE1AECCA0C019D5FDAB07827
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 27KB
- SHA256 56f9eecf37ac7074ed9116afef0056c1a23ce4e7085ef3ca00d544b6e8f88d78
- MD5 b09a597137df9e2836959e485f5dc2a2
- SHA1 95017643537cb6549de00fb32d5346e2cf143356
- SHA512 0c6d5cf2624e64a6e1a5c28837a69483cca851b899297cbf931633d79fb91b8d0d59d489f22e6eae6834c49f177330c5521834426fd23c7e6ca1f0a8b0e52eb3
- SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQMro7ov8nZW:eOEt7IWgKgf16u1jaZ/QX88ZW
- TLSH T1ADC2FB2B640CC77E4F844E6DAC2A7E976DD801CB9A988D4447EE890C03C77EB521A5DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f9fd82d-b210-4109-b489-f797ed71bcad\index-dir\the-real-index
- Size 672B
- SHA256 9ffdee3320589d3ef8c664868adc29068c5216075e3629ebf284cfc2620f90c2
- MD5 e2546e4c7e13f6dd82c751abc3e3d64a
- SHA1 518cb4e304e615eb163231fd177516a4ef7fd30e
- SHA512 8107a79d7c746be94b799b5334b69237cb86b9d0ac288b0be855c26a91455565fb631253062273f221fc67bed9b82d40faa20d6e60052f1f9df48ea64aa54168
- TLSH T1A30197FB6CF02C92CF11257A6A35758D377381FD224CDDA6417CB03C88627656A883CA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f9fd82d-b210-4109-b489-f797ed71bcad\index-dir\the-real-index~RFe5d50f1.TMP
- Size 672B
- SHA256 1080e4182fc9d96dc686bdcbba461127ea7f542c85422703425209e60dbd3d6b
- MD5 51460d13344d44c739b634ccb05cfaa3
- SHA1 57144a089c08d865983e45f58040fd35a741357a
- SHA512 1d88e9f5d86208fba60f10bd1f7a6896bf892d0ed8b627048449ed06b0df80db31af88c5cbb9a427974f7cfdda5af1c6872e1c82e6e5d98d70b011a56a400360
- TLSH T17301DCFA25E17DC1CE0221B96E22920D36338898511DDE9750A5B07D8CA375236881CA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
- Size 371B
- SHA256 2caa4fdfa33a2f62ea47c3d1a0ce84024dbfedf7da81ae09603607649959c272
- MD5 3e3178e542e00a73c20eba1c25a3742b
- SHA1 59bfa9df3bcadf9962ccb12292ce6f63fad13e82
- SHA512 e808fb3863bd7c9e02eac899a79eadf1ad04333f78245bb83f1092162f3a0c5a9612423fa8a931b807fc2d69213e3e079f163bdaffe088398c06318b48ac6c12
- TLSH T1F0E020B77ED71C04AC7BA3D95471E4900002BD58C715FC8F602EE5D764B13552C96C66
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
- Size 3KB
- SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
- MD5 904e6e94a1d46374c8630cfd86cc729f
- SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
- SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
- TLSH T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 42KB
- SHA256 7e4bc1d8b91a7891b1aa3d5dee80387475fd0e768b13dc270c7f80f4f12820f6
- MD5 a3ea43f1b1489bc4034819b4983d9364
- SHA1 c9d1986b175d8bc01d231b75752eb49a361665a1
- SHA512 d773c22f1faccaa423978c97a7cadeb8b8895adf055c74df1b8ae6808624e6535cd9b6944c9980da570f9007791d9dc778ba9fa507ea757e34463ea87c6b88fc
- SSDEEP 768:UFjj+9P3twgve0LPfcOPfKfPyV5R4HTytYYqgHvPwYzn12bfZSvt:F9P3zBfbfKfcWTwJFByZSvt
- TLSH T168135BF298D78976DDAE8787B33D2E466DBCC263B1846654B7C8490CCD876BFC206805
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 38KB
- SHA256 33378eb26395ec7dda4b9cad9b81ec745fe7e20c7cdde19a334dcdffac425322
- MD5 2aa44c167e7228fa69b634df17ec6734
- SHA1 4c84b9a269e38dead5bce3569d39d52528056535
- SHA512 e1928da2b7e9664ce9ff30f96e3c2f99c5931a26fb003d8b5e0143789708cdf50f08608606911af1f3ed561b931d395984875cbe4fa84f9563bf1ee380be84b1
- SSDEEP 768:ejaeqD4MlshiLdMme3wtMPfcOPfKfPJV5R4HTytYYqgHvPwYBTJ:eqcjhIdMJ3wqfbfKfpWTwJF/
- TLSH T1AD03BF76ECA85CBB5CB2C585B60337976EB443A7C3C43B68D9C81A0D059BADE030781A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 35KB
- SHA256 a245bcb781411548aa1d91433e544c3ce1f448736e5c43f24d160a012476b22f
- MD5 e0ecfcf3cf02e887e3645fb8dfacd3ee
- SHA1 5844692462184458bac0a64fb75430c5187d8046
- SHA512 8081a142cb2d7d5b84c0e095ef7d9e1b53290ee71380027d608008f720ff731d5774eb787d998dc7673ad6e88c78f4fe9b2dfa3138cbb4fc24b4204ac7d7bc7c
- SSDEEP 768:fj+9H3ap0LPfcOPfKfP5V5R4HTytYYqgHvPwYzn12bfZSvt:S9H3a2fbfKfJWTwJFByZSvt
- TLSH T1EBF2BF32ECA85D671DE2C585B206339B7EE88763E3C42764D5DC5E0D09CBADE130B81A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 43KB
- SHA256 d53e86fec0d698cc5afcd09f21bf1a2f65bbaa08d3a0428a8d58071a9c3bbbad
- MD5 f98f777fd51cdbd83d5605dc233483b6
- SHA1 24de212279d1866061a2b9d770cff371528e0c89
- SHA512 92955824f3a5ee322bddeb6552b540ab650dbcdae4d1ef965a5dd015892c4b9e81c71e08a8eee2dac97bde7ef9a1a4eac193c17571d8c717309cb7049472503b
- SSDEEP 768:UFej+9S39wgeD0LPfcOPfKfPSV5R4HTytYYqgHvPwYzn12bfZSvt:q9S3K8fbfKf8WTwJFByZSvt
- TLSH T1CC135BF298DB8976DDAE8787B33D2E466DBCC263B1845654B7C8490CCD875BFC206809
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 35KB
- SHA256 98733eec241c56760956cccf37c4b7e0ef1fdd998f3c33c4b23f365c3486aeed
- MD5 fe85c7bcbd366875f1f90f73ddc2c6e8
- SHA1 4d7721b93b4a9ad80aabde68c6de6923465af30e
- SHA512 40a7999dac2551884aa2030f7deefee819c7ccdb0151800eff5b0add57f295f309173e22c1ee7a4b5b70aef9c77983e56abd0c6b6f1340a40930523391f0fcb8
- SSDEEP 768:5j+9g3Wm0LPfcOPfKfP5V5R4HTytYYqgHvPwYzn12bfZSvt:k9g3W5fbfKfJWTwJFByZSvt
- TLSH T1F5F2BF32ECA84D671DE2C585B206338B7EE88763E3C42764D5DC5E0D09CBADE130B81A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 38KB
- SHA256 c07a8522cb08a5d167ebbdf74cbd09725410090bbe9ed5aa122ee02aae10d5b3
- MD5 a71305e9568491b6e9058b5bd1706111
- SHA1 3812ff24a9b6233e7da666fa7724c7ed3236ccc8
- SHA512 5c978c69024b6fdd725673c9377caee7e94783a38a7a178a359443d326351f137d1c498b351e83c73780287401fd9a7c1d717ebd4bdd362b9ff2389cb7efc0ee
- SSDEEP 768:EjaeqD4MlshiLdMma3gRPfcOPf/V5R4HTytYYqgHvPg0yjWtxjTo:EqcjhIdMh3efbf7WTwJhyj2y
- TLSH T14E03CF76ECB848B74CB29685770277976EB44293C3C52B64D9DC5A0C059BACF130781B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 35KB
- SHA256 50e873313012e96eded8965b3585bedaadbf5d78cf4101369a0ac23213044040
- MD5 d38d7193ff1f3ce07e48fa3a561e2239
- SHA1 92a618f1a958257041612aed1d3e0a718be5660e
- SHA512 56ed0e0f2300b9359a08f5465725ea18e08c9119a02ca2394241ad5d50073ad010dce0ad987eada1f0e2bb8cf3411d1c97a42580ddbafca391ed9e6cbc6711a9
- SSDEEP 768:Fj+9H3pp0LPfcOPfKfP5V5R4HTytYYqgHvPwYzn12bfZSvt:w9H3p2fbfKfJWTwJFByZSvt
- TLSH T122F2AE32ECA85D671DE2C585B206339B7EE88763E3C42764D5DC5E0D09CBADE170B81A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\314eef03-73bb-47c4-a86b-7baf72fb9c62.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\R2RRPRKG2.dll
- Size 85KB
- SHA256 d109a8ba3f5f76f2860f8649895a52c556f5ba57faff2ce96a8216f09b47360a
- MD5 08f5d7200733f206b8033308c2e22071
- SHA1 73a110b12c958c7e9c1fdd7f658c322590ae9c38
- SHA512 9b80baa5e5d06ce3411a5cb3d71344aae99801dc534ec903543d0f514e1c86c5ff9a50190255067059445285694f020b59bfacebb569bd8d1b8a5e1c2f9ea95e
- SSDEEP 768:S7D7FdZfwJruuHvqESPSfXxmJ/59yevFJ5OUGzjcNVZfw7zfH1IR5Uhoibbb+S4N:S738u9ESqgJh99n5aZOibbb+S4A3JK
- TLSH T13E83384174A2F331C43A267C735A4B271F7EE9B41152E89B8BB90D0A5B32BC3CF15696
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bgm.xm
- Size 31KB
- SHA256 c6d3769490a754c5d878e1dc5fc059ce04570c595b573f254c0903db11decdee
- MD5 d7bf06611a3eb46e6caa92fa6e5f2103
- SHA1 08adad693cc7455cfbbba9a77790a97fe493d5a5
- SHA512 d915419126d4375c0711d2ca73e2220285558183ef5e4b30768df17c82d4303b754c725a815a003bb6bb3093f9a3ddc1ceccc37236f993e0bd88ca1935b623d4
- SSDEEP 384:3FpGAStd56+L+iwE5TnUlW5nRqZC6A/7sx7c:Vc9t7lXtnGe16AzD
- TLSH T1BFE254150B1A04F5DD332F79DEAE4709E6B3E140162B2DE63F5E6F4487B9E88D968803
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\keygen.exe
- Size 442KB
- SHA256 daf3e140087659ad4ae82493c95ca40f88aae3b26368a529d6384af5c9ce8a58
- MD5 034c470c20a1ceba7b7f0abafed23f0d
- SHA1 f332bee5e2e1bd819bd0b12c82bd087760a3f5e6
- SHA512 6a6cd7d1bd688e8cc6495c1331a93cd6250ee37c48f80fb831f2298901400de52fee31b876587e289f709d6274e89454dbe554d7cf1766dfc50d3e647a674e27
- SSDEEP 6144:icmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOEErJx85SoChmhr1DnZEthExqN5f:ic/kEPDonR6Y436vRv/85LJZOGy5f
- TLSH T19FA4B268DAA1C9FEFBF2933944856615D180533C4321A4EFE2DF8DAC987A6D160F40DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxC76F.tmp\System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxC76F.tmp\UAC.dll
- Size 14KB
- SHA256 32dd7269abf5a0e5db888e307d9df313e87cef4f1b597965a9d8e00934658822
- MD5 4814167aa1c7ec892e84907094646faa
- SHA1 a57a5ecbdfa9a8777a3c587f1acb02b783afc5ee
- SHA512 fb1f35e393997ecd2301f371892b59574ee6b666095c3a435336160481f6ef7ed5635c90ce5d2cf88e5ef4a5affb46cb841b7d17e7981bd6e998531193f5d067
- SSDEEP 384:3A7q72y8XYDSDJe7H+KXKKK2KRKuKZrjVo787foI7:3sygyraXjQ7Zl99
- TLSH T13B626D6652988BFFD321113AB6A333235BE591103770715F4AA36F947C34A93A63D326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxC76F.tmp\portable.dll
- Size 24KB
- SHA256 25e5a428e663c6b6c352e7eb313d9fd265e944e0f8f88c7406c3fc15d1ad82b6
- MD5 c9397d267d0d10169c4535f6d5e06a6c
- SHA1 2fc5d2e909d56042d32b3fe0a5ae39fc58d110ef
- SHA512 143943d8e02392ef41c2c43641db9d1737a108defb9cd62a3ed3dce800ccbc8f5997f1d0ea4846ae675e3f2b0efbbd9cebd5c5c0022822d10a89a356983440e6
- SSDEEP 48:q9aX7AL2vnYLtSFs4p3Wj4vLj4GWTQfQx2m28gF244m4y+bAghX:YaLArMpGjsjdTUt2t25m+
- TLSH T1FCB2752753F438B2D57A07733197A2ABA796533013D0410D7E7E111A2F3401BCD26F96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\reaAD16.tmp
- Size 11KB
- SHA256 afe27e2fc7cc038eb12f842fce9c7eeabce6ef531ffd1518b7829c6c60194cc7
- MD5 a9d9a4a0a1552b55c3ab7915220e8d9d
- SHA1 125c244f558488f1af76bb36d814fb24251daac1
- SHA512 aea55016b4aa6c19962d4f36b97264bdfa1bde30dc33f220fd13f5e21af39e82065ca4a40b507442684992fa17a6d54c7e3f5d88db4d4f6e52f70cdbf84363ac
- SSDEEP 192:q5spjpL5sh0T1THDCfpPot+McrJkEWsQkzWk7L/ups8GldIufm5cM:q5SLN1++/crJHWspzW8L/ups8GldIf
- TLSH T14632B41258E9A849D0D66B962EBC754C00F27693FCCB5C56F2EE0E8316DD1032B27D49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\amp_models\Marshall JCM800 - Matchless Chieftain.wav
- Size 4KB
- SHA256 273250faa8df43799e9ba549544b8c4005bea371e4d6df537f1f9d97076a8636
- MD5 0dc1cdc06ecfdfa025de8c1bcf8c3003
- SHA1 45a1a445aeebf56d9c45d4094532ab7954dd8fd2
- SHA512 2a1ccbdbad13b362cf0adf1365b260e330f8e211a6a93a00ffd1a83c7c9f337ca9f4ada6f392999606ec8940df3ee8fc8c5738765c4d1a98d784cc8229a8f0b2
- SSDEEP 12:WuoDZYKhN7W6xMWJqG8qKPfs6WzVJd/740BskczM+617Dy9kmzpr52kl+:qFYKD7LxMWJqGMWzu0L6ExDyVzpMs+
- TLSH T17CA149758455EE94F0C457710DDD1E1C10CD503C3257CD0EAC259CA479C8737E655778
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_audio_waveform_secondary_external_editor.png
- Size 23KB
- SHA256 baa31c701edb9e36dd0dac24f98c865a91362472e8008950681f4c327ce4fb63
- MD5 b3e98da29c762f7823bdea5d19b7ed70
- SHA1 b70236442dfd0cffb90e34467232b929aa387b11
- SHA512 4d3360b082cd032d8a75f06f08d396f647174998be878fe49f0b28827edb34f46fb62277ef64b7b7fbdacbe390b42862dd13628aa6a48c5d16272f284d04ed51
- SSDEEP 48:TL1MIcfwNZEtkX7d2FMbZN51AQM43mx11oE:T2Tf6ZEtkX8FYZNRE
- TLSH T10CB22921E520C02EDF264D3AE99680FC4E051D2CEF4AD53F28BBFE56F571690264CE5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_delete.png
- Size 17KB
- SHA256 4d8aa7089a19ce4e956c4c2a95e52abbefab0c660b319559cd925d755a0b8834
- MD5 d711fcca656f39f069fc7735527e0c1d
- SHA1 1bce998ebb67a1d29f2d1a231e04e5ce5b41d6c8
- SHA512 82657b4bffaa5ad9ff829ea94bd4267f7345471f9c21a304d07841ef66047c63c3e0bdcd97fb8ce25587e0675630d43b1af3249478fd8776622de1b971f2ba29
- SSDEEP 48:Y8LyyXeLyOX2PiV4PdofkSySp6F8SIErtBAoyMUsi6wAH6nk58LzkjeoDruA:YEeGgg8o3AhMPZl6nk58LgjlDr9
- TLSH T1A88200C11799DA6493E9F213FD08E5AA95823DBCAC10619B363333F8A8343CB9D32744
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_disk_properties_resource_path.png
- Size 23KB
- SHA256 22e5a5fb48a777b8724f06ffe2ec99ae2826aad8b19fd55d37d73cca571540a6
- MD5 82ce0b4c358f19a8a853b61270aa7c1a
- SHA1 b2a4a0114c291bf3888761f4425c525cb576c9ae
- SHA512 77b0e87e6efd2850371e5335648993d5db72d2f3d44d8f5f5f85ec33a51583a4276e2e2c9a4c81cd8749d746859aa7fb2493069ceff28a3d48b1f712c7095323
- SSDEEP 48:ifH3lChzr3VPlV0qVaWS/NVAjNLa9TlM3sxxmXNQVUlU0XpN/1/XUyV7xwky9bHU:slYYV2YlMLXKQXZXcjdeo6l1f
- TLSH T18DB2BA13A120D04FD714953FCAC688F48F195C3DDD92E97724BEBEA93E32AD2684494D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_envelope_fade_shape_none_default_delete_remove.png
- Size 23KB
- SHA256 196df12cc11fce768ff24c3440eb645b8b5cbf701952d70febda954e3993beff
- MD5 edb3eddd1e695b23fc393711b1600cf1
- SHA1 ed3ce0ec25db9fd6816defc7317147584191edf5
- SHA512 74feb98ca314a65852a19250b94a17cee0fef906b810bfd21da4ece4f057bdc5e713c695a17dea9e86319963aeedf4e373e16f5bff3992647976f7c62f86c4b2
- SSDEEP 96:vGJmMml8XQEWq7WW2qWWtWWW/WWWLWqWWWWWWWWWuqWWWWWWWIqWWWWW8WWWWWAD:e4MrXQN1mWG0qMspZV6kFLZPNhNV
- TLSH T1B8B2B9237370D10FD3E6073FCA84E0F51651ADBAEEA1843768FD7E557A3A582C4A1A18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_envelope_item_selected_replace.png
- Size 23KB
- SHA256 3b81fbf623fc307f53b6724bf8c5848ab30131e60d7c1f2a414c6c855fb0f753
- MD5 0966be00345203361a29f892699053f8
- SHA1 5f9f7f98dab3c3ec2196dfa91f280ddf95e6c425
- SHA512 8989192a038d382bf649ae314baa60721f198e25bbd6d5caf17111b33df19eb28123da10edabe3b30ee64088e15fea65ab92b7ad62121a0cfa993835ba46d35f
- SSDEEP 96:KFX+q54Q5yxfD/dhuMFXMyWWWWWWWWWWWWWWWIWWWWWWWWWWWWWWWIWWWWWWWWWG:SX+q54Q5ypDlxFca
- TLSH T176B23913A220C00FD7A5863FC9C698F48B195C7EDEA1E47364FDBE657E366C2988194C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_envelope_point_time_selection_cut_scissors.png
- Size 23KB
- SHA256 b4642df54058b1b0b12305db34fa3bc5660a479297ff1910fdb6e026ce7e0715
- MD5 73195f8e23fc503f459c01bf7ed2a221
- SHA1 14b16d9a1fdb237f5c0fbd505965657fd8fcca0e
- SHA512 d85cfe4fd2770ea68d1352d40993c7d2700f0a38da436d095d34fe1aa3f1a1e653e27e1fbdeeeffaba008da65ae9e8debaa0917b5544f6609cbefddaa0118d64
- SSDEEP 48:9QlmDsh6bcpXbT3QEy1maXQZOEuGoGs1Gf2mBmCBIfXI24XwmV+ix3o3er5bVDY8:yooowpL4RmX57yVq
- TLSH T17DB2FA22A630D15FE711193ECEC584FC8A592C3DDE92C87B28FFBE56BA316814584D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_grid_adjust_increase.png
- Size 23KB
- SHA256 f485be3ec6cc22b885290a5cef96f91d7dd6fe989266b20c33cd6c38543c7cba
- MD5 2d63ce4bd91b043859f7bb050b5d5a1d
- SHA1 138808265ecfb109af17b9a9ac574237351d0f51
- SHA512 9e1e47eac0d47499551635a74b51a310ffa332d3ebf56c57113aef4a324fdd9f3122e240628fbd543ca1cc2ab519682fba41f6f5b4d97ba0c10c78e2a3636fc9
- SSDEEP 48:6WWMWW4WWMWWMWWYWWMWWvYWWUmWWNWW1r15z8PQ:uBor15z8PQ
- TLSH T1D5B28D21B630C12AEB221935DE96C0FC1D462D2CDF4AC96F38B7FF5AF570A41524CA5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_half_minim_grid.png
- Size 23KB
- SHA256 a0aa464a73268d1ab433a6bdd720bbdccfaa810a5de006ade92eeab70a81a13a
- MD5 6f0d4c21b2c312dc91ace79b22806915
- SHA1 a1e93ec064428a61c45e0a45fda322e48116f226
- SHA512 a438b8af3d6539c5d1e6b891452e02cac70a6f29173b5fd53cc43c275f936ec8fdb391f8742cd36f64c06fafb23b310843e7fccbf7a510ee91b22f5eb30dcca4
- SSDEEP 48:kWWdWWzWWQWWHGWWOyGGWWOGWWOGyGWWOGWWOGWWOyyyyyy8/5fNVQ9sR6p8wFJw:GnCs0dFm
- TLSH T1B3B2F812B730D11BE3151A3ADF89C4F8546A3C3DED92886738FABF4B3A74B815484A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_hide_tcp.png
- Size 23KB
- SHA256 56af3f47bd5e081c897a974a40f5586a64cfe4ed91e6f93e60bad3ca0305857d
- MD5 85d9bb1d3914131365afd933cc813c34
- SHA1 142f6a914a2b1d6086fdd4b9a8aa850a1999c13e
- SHA512 b472b51a74f433b8040536bbc7170bb8e3f98292276d10912bbbbbd590fa7fe74443608cf22f0523b21f029e2a32fb0390685d3e0ad98fdac24d2d3cf5a552a5
- SSDEEP 96:TIWWWWWWrWWWWWWWWWWuq/WWWWWZfWWWWWXcWWWWILWWWzqW0jCWuWWQjMU:T9F25M6jh
- TLSH T1FAB217237250D11FD7F2463FC982D8F09B456CBACE61943368FD7E29793A683D892948
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_item_green_arrow_selected.png
- Size 23KB
- SHA256 bc5d130f6bea11286e7326cf702c4189264846af5232234544a2bac55e2dd0e2
- MD5 f3d303b2056b105be9c57503b4c189af
- SHA1 9c38e4fda010f2107ad3eb462c08609e0e89cd82
- SHA512 47c44788597475e2258418cc11b96463e828451082ca589e8312f2432ac83e6103b153c66b283c2fe7837597fd08cba7f83ae4be44fb0b42a6ad99193cd6a65f
- SSDEEP 48:KlQlqN3dLI1jHpS1ysysysysysysyqbY9W:JlqlFIRAz
- TLSH T13AB2A432E520C02EDB164D3AD98644FC5E161C2CEF4AD53F18BBFD65F972682164CE4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_item_red_arrow_selected.png
- Size 23KB
- SHA256 e6e23cc0a607e0191a91bf95296dc4d4a26bcee2a5dbcfa4514c7a8c92841195
- MD5 1bb7b5ae4fff298475476618af383ce9
- SHA1 4dc189978717fe95e1133eb06fb30c7fe42431b3
- SHA512 ddbaaa98a3269543f5ad9a391b2a42aaf678ef9086a30efd15f2138f98ab74f8ee4e7dfe5e3edc7e9653dff8dd84f8100b5c743edf412376e07889cbb3a4d527
- SSDEEP 96:OWWWWWWWWWWWWWWWWWWWWWWWWWWWiWWWWWWWWWWWWWWWWWWWWWWWWWWWiWWWWWWn:ZozIWr
- TLSH T192B2D4236351C01EC6F2463FC582E4F19B099DABCB71942398FD7D55BA3B287D9C2A48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_midi_hide_unused_unnamed_note_rows.png
- Size 23KB
- SHA256 5d60571e6b496d396d3e433ee8bfb39905de6b489a02eed9082ddedd12dc9993
- MD5 85368f0d7a4c3b0b1988df6ca037d446
- SHA1 fd9ca83360c69b714410ea23a6e95e8dbcedffdf
- SHA512 c01d826685aab3633999921f0a239850af5f7df13175148dcc9f57f05483d146fba04547857af2c3a56279fa3febedc5560dc0025df9556cd03809f9ed64c396
- SSDEEP 96:j7WWWWWrWWWWWWWWWW9q/WWWWWCfWWWWWXDWWWWPLWWWLqWLUCW5WWdfq7+NWWgO:jEW2783XcyZuhh
- TLSH T172B20C233381D129C8F3063AD852E4F15B85ADD3CB208557B8FC3E66B13E29BD5A3948
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_midi_zoom.png
- Size 23KB
- SHA256 93e23ba9d251d2ec94ac32121cb29f2305ebb2e2ba06409a764230d3c0015cd5
- MD5 7c6c9de2dc24c5363bd209c20be66630
- SHA1 8ffdc952bf0e74add16359fa8935cf9bd287e257
- SHA512 36c1f4b36a55dbfc4cedd8c13d391c61f102a8166a1dd969ee23e477a410b6af47cc8d863b0825ab8cacdadc31b7ba8e18327d2788157c23855324943d99329f
- SSDEEP 48:Y3LVdf4U9VGVn9XSX150Ya+SZbDCWDrDUlVuXaP5MXvFi3wiTIkVVVyeNLLPl:YbAUmM50CsXqGXvF/gAe5Ld
- TLSH T12BB2E312A620D04FD314953FCAC688F49B295C3CDD81E87761FEBEAA3E36AD2584095D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_misc_mouse_right_click.png
- Size 23KB
- SHA256 f62d4ca51af323c299a399fce72fef89f44245dbdb069cdcf3e28d726d3355ac
- MD5 d89fe0600a0fe9f0db70d7ab3a6b1557
- SHA1 47c22a3868dfb2a5f4cd534eb7b776b501229feb
- SHA512 38f87097bfb9b2a875af3bc9c4d8c877cc3d2ed6f4b718bfcc3545dba615bb2100d6dd295a97223c5fd7a8483ba061769b35a1f5b85013ec81dac4e25dd9d6e0
- SSDEEP 48:wgXkGBjNFVrXIrbSjvXJycJ///////PSveTlH:5XzFxXdXIAlH
- TLSH T1B3B2CD12A520D05FD711893FC9C688F89F152C3CDE86E87724FEBE66BD326D2098894D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_preroll_clock.png
- Size 23KB
- SHA256 276683a2eb19665bd0bb4ceb5d736de32332326e302060857680dee830b87101
- MD5 02d7f5c4bc59d4a9decc0cea71dc92cf
- SHA1 f1e10ffd02e3df191e89d79eda2afbfe16ddbe1d
- SHA512 87d252df3f41eafac1a98cc274d62dfd98731713f8520e7e3f516c2beff12ebdaf633dc938d7da014237060f25d1a66248c45814469f9790733b0589f9df27a5
- SSDEEP 96:4zzCFs2PFUjdgFhH7i0cGNKlosqNNWvj/G1FfmaFUiFRgytf1:4zz6s6URshVcG8ohNML/G/frDRgKf1
- TLSH T1F2B26D12B270C46FD3080A3BDAC580F85D261C7CED45D43725BEBF6ABA34AC12958D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_selection_inverse_delete_remove.png
- Size 23KB
- SHA256 005bc4e242ae0961e00658dd2b3acd679bcff42822681515cc829bd26abb5f8f
- MD5 196ade1fe6c8ed35c831f93fcab900bb
- SHA1 1822fb426931bfcb36e7faa6ef226a82a4f62ecc
- SHA512 80609c7affa83e58b3438d11d81d7b40d8ba52a57a775eaad996a1b20bc06fc9085d3c99eef0b157296a755dfeb35b20f7f5f47f298cf919bee0cb6f6b7bd717
- SSDEEP 96:wWWWWWaWWWWWWXWWWWWaWWWWWWXWWWWWaWWWWWWXWWWWkWWWWWWVWWWW5WWWWWW/:33UO
- TLSH T192B2C2236351D01EC7F2463FC582E8F19B459DBBCB619423A8FDBD25B93B587D882608
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_solo_none_unsolo.png
- Size 23KB
- SHA256 e5f3a02190e1b191677d95990a36d868cc066efdf120ccd0b28b7669d605ab5a
- MD5 6435b6be5d44413a3e07fcf8acccef32
- SHA1 4bcaa2587f75b2888b8cf712f8c7a1169556bfba
- SHA512 e09d805630b747f1858217eef02fd8d1e038688b7b91deee9eb7ffa8dc882eb6c010d5d4a482f93e70c9e40a633ac908a4b1c9f2bcd6156b85a4af992737138d
- SSDEEP 96:THWKWhLWWWqWWWcWWWWWWWWWjWWWWWWWTWWWWWWLWWWWvWWWWWW0WWWWWWWWRWWm:TCDt6fG7UsDLqE
- TLSH T158B226362740CA35C4E6423AD72FE7FC1E417D96CAA141837AF87E0A793A3129C56727
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_stretch_marker_delete_remove.png
- Size 23KB
- SHA256 800bf51289eac02ab255c1e1a4078b38d898d16b5c3f1b405357afd181a9fa0b
- MD5 2e9de029ffa03bead38efe49cd932b9f
- SHA1 abca35d054f3a849d25f02fa089021daf674052a
- SHA512 ee6596b955c0b3413ef14222b8e9e664aa4b5f2fc8f0b7bb254550065b7e66202f70a2e84dd832fd6cfdc0694c566e8a4284bd0503f1b420a3046450d0f438d7
- SSDEEP 96:Q6tWWaWWGWWW6WWWWRWWWWWWWWGWWWWWWCWWWWPWWWWWnWWWWWWWrWWWWWWWWWam:xbr6
- TLSH T1A5B28B673713C24CD8F22A37E841DAF056B16D82C6F2194BA6E87F45F6FE942E04B914
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_theme_previous.png
- Size 23KB
- SHA256 4582d65abd8521b3147bf6466aca47d59965ddb8dbae7a5e4d111690ea3d6b05
- MD5 44581ac95e8a65fcbbd503725b79efe2
- SHA1 8ee67c0a332bc5a4c18f637e7bdf9ee90993d4c5
- SHA512 480af3b5f31cdac0b32295eeff29867195d9af4ec15c33a269944c853525db553c7c0316b6ca4f20ff01ebf818b35cd94c0d8bf67c1e559c9b5708620f291669
- SSDEEP 48:SaRm+lI5xQCNk7aNnsQ02kY4NrMY1w4b3tAoeWm12Ap5Xxd0gRwfQT:SFxxQ57WsQ02Id9ZV4LMm
- TLSH T179B2A812A120D05FD311863FCAC688F88F552D3DDE86E87725FEBE6A7D32AC2494494D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_time_hours.png
- Size 23KB
- SHA256 df5bd19fa8e6fbb29b4719fe8e38e420070084c4b7e3d9a804a85b5261371075
- MD5 3602f07bc16b5f90e260f15151311495
- SHA1 23112e7246f23622f5d5dc26f03a84603ba2acd9
- SHA512 38bdcd36da42728b6f9344602194df9bd264e4ff7310e0199e3733718a7cfef52dd92417c9e9bb58ad95c926b1e1150293e1ba7eff64ed394a3fbe2591d700ed
- SSDEEP 96:LHdYBawORBfLiozKsuERA7jvQNGfZtoF1mXZZcKwG/IlRk+M:LHdMawOjfL7XR48AxGQJ8HPI
- TLSH T19CB2B512E1F4D52FD3184A3BEEC4C0F829251C7CDD46E47B20ABBF76BA75A901616A0D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_visible_tcp.png
- Size 23KB
- SHA256 e638292a235d9bcf7de8ddf9faa66ab7d531f970a28509de04f8d1c86c1dea65
- MD5 36c9ba7c8d4661dc86cfad09dfc94b9c
- SHA1 fbc9fe8433ba0cdfd35ecda6a2496a34b985c4d0
- SHA512 8882d1a4f984df6e3f70f74b482afc6bab990b4e320441fd99ecce830bb1d66a41abd3f2be8888710693a901d2065195799fca5b7ac7f4bd7c8ccf93ab8542ed
- SSDEEP 24:WzZvH/0EEEEEEyEAGuuuuuuOrUEEEEEEEEEERuuuuuuuuuuLUVEEEEEjCHuuuuub:MHZ8IiftPk7f2EVq4Q
- TLSH T1D0B23412F560D05FDB12493AD88684F89F051D3CCF86E43F28BBFE6AF931292594898D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_window_tab_next_background.png
- Size 23KB
- SHA256 80bfbf211bfa8f0531f211bc8916d49eb2b1fde43addbe62e56c0e1a6f7a5eb6
- MD5 1d0e3be3e95aa590064df661994de596
- SHA1 01467f167384569cbf338aa131a18c11febf9130
- SHA512 f3f86d1c4c270b0d523d3e34cb1f9d5707af72ccc3b2b7122913b2756c2f17b2f157a4c76151929ca55369ec139f64b2546de2e9bebb37b3261e585e58bb3a67
- SSDEEP 24:WECCCCCCgl8EEEEEEKluuuuuuCEEEEEEEEsxuuuuuuuuukdEEEEEEEEEyXH3uuua:QfQerrrrrrrrrrrrrrrrrrrrV
- TLSH T1D2B2503291D6E01FD709553FCAC248F9AA110C3CED86E43B14AFBD67BE7A0C2596894D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_zoom_out_audio_waveform.png
- Size 23KB
- SHA256 267fd82948ac4e393c11a9b57fd42c3460e99fe588976d5b66e3051bf1704d14
- MD5 32be9a14650b12ad435b48c9b21c0734
- SHA1 72e5557484de1c9334273544ecdcc053c63365ef
- SHA512 f6e451d8e839dd1bb7cc8644d9d5adb1ef68cae5682bb95ba72bb796aa74318ac5f4d4a291c5c7351645104190188685759d2e420961f30fc7ddae01d28044b2
- SSDEEP 96:QecaEWWWWWKXvFNj4QXMI6T1c1Ol42yf+QaMXN:tzYX9Nj4QXMI6O1Ol4zf+QVXN
- TLSH T154B2A512A630D08FD744053FCEC688F88A282C3DDD92D87725AE7F9A3E36AD25940D5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_zoom_selected.png
- Size 23KB
- SHA256 3616afdf0dc63b9a2059b7e23199fb46be48a4646e7b8792ad7a364e8f270b4e
- MD5 bb500b383c47c5f24cfa9aa8cb9c9efe
- SHA1 56c8054b1854b4b297aeea15fba14edd884ffc8a
- SHA512 500b9bcc802d7820cb44eea0a97cb9fe86e1d0fc7f11154a28ab11574f37bab95b1fb987ff61710c345913423edc6ebf0a2190304a41913951107f504ea9141a
- SSDEEP 48:FXA8XvFITb/dF3KeNLnm8W22vGXd/BDOfn:FXA8XvFIwe5mkNNK
- TLSH T1E1B2D613A620D05FD300953FCAC688F48B552C3CDDC2E47765EEBEAA3E36AD25850A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\200\toolbar_delete.png
- Size 42KB
- SHA256 ef6d1541d176e8b00a31ea9574c8b9761a6752acfb67029b193043b0616d730e
- MD5 d71a016b6a2f97928e3d880e24940909
- SHA1 df9318a9695689555d1402d8417028dd44310fc4
- SHA512 35c360c1cd132be513e5bc71f97a232be0be38d618e66928cd5b0f09eddc34c89c23ff38cc8e679d59c938af7d92f05402fa6eef837745c70fd5197a6bce6e4f
- SSDEEP 96:P/dFsWSWWWWWWWWWWWWWPWWCWWWWWWWWWWWWWPWW+LW7NFD8POWWvWWZWWWWPWWA:P/3ECnDy
- TLSH T1CD13B17693D4D00AC3E6813AD572D8F44B50ECAED961552364FCBE2F783AC93887E518
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\200\toolbar_env_auto_touch.png
- Size 42KB
- SHA256 925692f38b560465006faae433d60d678b3693e36170d4cd761377e5b91b61fa
- MD5 79b1454306cf1b0d0010a49ae21a0c0d
- SHA1 7d0984ec12df196669e9be36b67972dd5bdcd131
- SHA512 4afec8364b0e72b701ac8e0c171edf2d2cde2d4b7badd2a1387cfbe22274df6e188c0f79ebd1203dd78d2e5c551cafb9fced165662d08603ef38fcfecc165c45
- SSDEEP 192:uhh7XX+jjK8s8s8BL2L2LRxxAzzT5i339t44g:uhh4HHFKKRxxAzzT5Ee
- TLSH T164138AE93727C920D9310F3ACDAE95FD49143F42DC0252A3BA85FF6F75BDA909529022
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\200\toolbar_ex_properties_for_current_media_on.png
- Size 42KB
- SHA256 29e0e0232451367298ba62ce6e1cbe1bcd06bca619baf6020be08b03515b065b
- MD5 b00b0f1e30bb266f2348cde162c4de3d
- SHA1 aaa5c22c590497770993b41389489d50c48c6109
- SHA512 76b7ec4716d840cb0a437648436d03ee361b22eeb0f7ff7ed231cf60479c02da1b11bd9cf4a584df4fcb8b82a2f6bdde9580e9c4398432253bdc7acd0137cfc5
- SSDEEP 96:7ILlOkPSuQMV3S/anxuiyQukHOH2+uqxdRPG54q:8LSlyqLnvOZ
- TLSH T159130A7623E6C101DB48427AC931E8F40A24FD4FEC55299724BA7D2F363ADC712BC889
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_audio_waveform_secondary_external_editor.png
- Size 10KB
- SHA256 10795196ef656a5405253092ee2491b9adc68fff35aae352d8184dab69e94024
- MD5 6c39407b4936d320e6b90b4847547f4a
- SHA1 1938eb8d7644c72fa11de4c65858d4bcbebdf212
- SHA512 7c6c8881f86c6bc421f10f9246af38985d82083a910b355b1ba003e4c9060ad5ee1a25f293c469a3d566e13c326bebf06c96afd59b843cf5623d6443a5e3027f
- SSDEEP 24:AFYSEEEEEEEEEEEEEEEEEEEuuuuuuuuuuuuuuuuuuuu8EEEEEEEEEEEEEEEEHtuG:4S7/KU2YXlC+yonjiakhkTtlF1mqkt
- TLSH T12A322822E130D16EEB220A39E995C4FD4E502D3CDE4AD87F38AAFE57F5706505A4CD0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_color_midi_channel.png
- Size 10KB
- SHA256 27ff4f65bb000e6e5365ed94c49fcdbe226267199e67b2b884aed3afad3d69b5
- MD5 f3e878fbdb694adda4b6a0d579269e32
- SHA1 d9045865afce5d237eceaff8ade4c1185941d2d4
- SHA512 b75bbe8f1c9aebe2cdcd5250fc7efb49fd43fa714e252e28fff4ebf62a9b4690cd28898e69a7302760022c50afa7838af5abc44e6eeca32217d84235b1fcda90
- SSDEEP 48:4C44FNiZwSEBXHXFH13lnFg1wHQWHoaqH2w8YN:4X9N
- TLSH T1643221537224D04ADB00993ACDA9CDF5871A7DBEEC92A0BBB9FCBE5B35B5982444041C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_color_track.png
- Size 10KB
- SHA256 1bac35ef12bd1a699c48159604dfbe607f2120926dc31904ee21358ac3f9d5a1
- MD5 cbed68f87d28bbbdf90f4954c5f7d3cc
- SHA1 b4f26709492e522c1d7aa4b8e4d48a2642185802
- SHA512 6a41ffbc37069f64fb6d49c7e5a5fe4d0e87401dabdcbc1405e12e5e2529c952951483dc42cae01c616a1da2996933b0464753c9733c3c1457dd41563a1ff626
- SSDEEP 48:4+6ZpcmneLbvf8WZyGhwPAFQDlNr1nJXnm1nnGnn/:4Kbvfe31
- TLSH T1FA328853B214D04BDB00D93FC9DA88F58B1A6DBDDC91E0B7B5BCBE6A39B66C2484441C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_disk_properties_resource_path.png
- Size 10KB
- SHA256 580a9bd75269d3d4f64547d334d48940970acf104758296b3a171e8f5ba19aac
- MD5 673852e70c77677dd966224e86421aa1
- SHA1 ced6a3a8bfd6ccc584a477c4c2f39b51f6b06748
- SHA512 f2a3c8a8ebddee71566f37df1fb139f2049d25fd077f04ce7d15952f700734ea017d77711f47c19e36a46a47c2b6bf5cfbf43fd4d7004dda7b4b17917378efe0
- SSDEEP 48:4sw2Fu9NhIHSN+Q8BnX1j3rG99nt2HYtNjIg+o9nE:4lrhQnYHlvnE
- TLSH T10D32C513A220D08FE344953FCAC688F88B646D3DDDD2E47765EDBEAA7E325D2584090C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_envelope_fade_shape_none_default_delete_remove.png
- Size 10KB
- SHA256 d0042812225df5a5c8d068d0febcdda86c24598f0b0512567b35f1aad5bbf9d6
- MD5 37f264aaadcb779850ddb1fdbdb8159f
- SHA1 4941a9a508681ae50cf3ab6e91571281a1de480c
- SHA512 9e6edc580d5933dcd985909b20f841a159d51f706030c8a6eb5ff401a3428a75537364c966507bf380368b78805b64817b84ce75d407eb5e453713e9d3c4ddd2
- SSDEEP 96:4p+15lY8PDWPWX7qWWWWUJqWWTqWWPyqWWWW4WPWVPT:A+15lYs7TJ8Cy5
- TLSH T1F832AE237370D10AD3E6063ECE84D0F406546CABEEA2846378FD7F5AB63D583C451A18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_envelope_item_selected_replace.png
- Size 10KB
- SHA256 69c565d1953245c4549e35d0cf3ec0a52fd1b9e774b1ab73c707d1efcda959d0
- MD5 d6d0a8910fa16e357932582c9e74dc5b
- SHA1 cf3ab13515777cef793ef037c5778eb732f3dcf1
- SHA512 6d08c601fb93e1f81783065e03f00a951951ce81ebf38003c78e55eeabfd8749607fb3fb2a07670948e4e7036ce78c83f56823ae58f33d124c5924f58c2b0e02
- SSDEEP 96:4SvtvQaUWWWWWWWWWrWWWWWWWWWrWWWWWWWWWrWWWWWWWWW0:FvtvQi
- TLSH T15D320123A220D04FD395863FCA96D8F48B146C7EDD91A47364FDBE667A37AC3984160C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_grid_adjust_increase.png
- Size 10KB
- SHA256 1d5e8f29117b491ea77abd27b5e840783c85b1d1461034c84ec430cdf14320bc
- MD5 06274588ff778662b15e73973bc39dde
- SHA1 b716b9ec6ebc762a709897e2adb8e224f310191c
- SHA512 534359589fae64428395c47f4105dd14cf08fc3ea965cfc758f54327bfc10c1f769c1ae2c280bebebe3ded81b067944ef1582df46690824c8b693952cb17a50d
- SSDEEP 24:AFYLVVN11DVVN11oVVN11DVVN11oVVN11DVVN11kVVN11nEEEIVVN11/uuu4EEET:42VVBVVeVVBVVeVVBVVqVVdVV6
- TLSH T14C320A22B270D169EB121A31DE54C4FD4D943D29DE5BD86F38E2BF5BF270A11864CE0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_hide_mixer.png
- Size 10KB
- SHA256 51f6d3ef86c0388c8b1b7fbaf11ec966352ed63f8e30eb01ae65db3b81a423c8
- MD5 1c2fa5ceb6b80626ccb21f020e2fe289
- SHA1 c6f9d77353d82ce8d36e1885607e0598f159c9b5
- SHA512 50b133799367b834d87d8200d33025ca62d21798f6d08def3f0c03e41e23c3f9a2fcd07f3ccc8e1a2f2666e9ab0ff2ea25d0dc3cbf67a8b5391f12685bfeb5e8
- SSDEEP 48:4OWPFLWWWw1LWWWETVuWleLOA4mEzIWPYVVaVValFylF8FaFVyFVyVlCVlCVlCVw:4OWxWWWKWWW3Wl2W/
- TLSH T102328623B370E00AE7E21A36CE45D8F487957CABDAB2446378F9BF5B7239A43C451904
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_marker_renum.png
- Size 10KB
- SHA256 590fd65cd2ed306ae229224a25e543e3d0c6a166b3b70bd42c76abaa160f5b30
- MD5 70ea71e71b610d03a34c6cf9f6959d05
- SHA1 ae49d7c43d0f7b34d530a10e9b704c8d7193f041
- SHA512 2f61e7894e2acd40b43e2d450f5ea7c59e7c821308a4e6c5d1fa45b8204e0d1e03022ad4b40ca642a5118674abc07f513e3b142d9b7552499cfa9fb86d6a14b7
- SSDEEP 192:QAQAXAbAAxAA2AA2AtAAu83zwLAD55AxRGa:QAQAXAbAAxAA2AA2AtAAu8jwLAD55Axd
- TLSH T1C432B912B330D05AE3514A76CE59C4F487646D3CEE86D87F38F6FF5A7671B42A408A48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_marquee_cursor_selection_off.png
- Size 10KB
- SHA256 3f113572e79d943a447cc5a2c01a2793eb43122a0ff5f1e5c437a7771a111380
- MD5 8e7b189363a275b18d2fe3e6c8c6bb86
- SHA1 4defe21f6f89eab16244785bbd23661027c7e981
- SHA512 48d94b59fb7ebd21306f4ad1fa089fb66a1b6129743c2b9b873c29349c73da8804619ffe67c986c7f76e91e1036a1f7ac0247be7f0c43c45a3c2100506f33c6b
- SSDEEP 24:AFY7tbbbbbbLRCn8RCn8RCn8RCn8RUDbbbbbVzl:4upg8g8g8g82Fl
- TLSH T144323D22A6E2F01FE349553BCB8588F9A6546C3DEC92D57324AF7E5B3B399C28420548
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_midi_hide_unused_unnamed_note_rows.png
- Size 10KB
- SHA256 99288a17c0a47bfb44db1105dc762fa1cc4d17235db0ba9834e9ecb753caebe3
- MD5 f056c73c98bdfd4f8b3852369c36b876
- SHA1 553c95064fe6fcd4585215d4545c9df62a7812f2
- SHA512 70f958207efe8522c4509eb2d10679a40dd4baa75e8eeecfb84aa532b0fe5fcb092f373959d74cd5efc04575b81969268921dbf1488129fe8c98da68eab2579b
- SSDEEP 48:4+WP+LWWWwmLWWWETDWleYOX4K7z0JWwBA8QEbTz2TWAVhbFq785q78P7L:4+WKWWWFWWWUWlRJW8A8QEiTWG1
- TLSH T1003212673391E128C8F6463AD821E9F127C1BEC3CB20851379FC3E26B17A25BC593958
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_midi_pitch_transpose.png
- Size 10KB
- SHA256 375d6f9f1e86c774a75788cf1f3452e8c2fb03ca4c8142046c5caa1a314bc6a7
- MD5 debf1e954080c23213e9b86325d0aee1
- SHA1 d630a5ca1d6791094254bc9ee024f4e8271c6c40
- SHA512 a71754a1f78b7989945637dfff16607896f110b68e53877abd0b67a1d97e0e02635bd0032d711008a2db9ae0c1304dd00d9a9ae29b1dddbc3c8143283a878190
- SSDEEP 24:AFYccfGxZXtUyp+quo/EEuuuSEEy1aoeuun+ito9f4SurCz1U29C6YO1tUEEGeVc:4j3XFsit4IGi2L31jM2d
- TLSH T16B320A22B230D05AE7120A3ACE95C4F84E543D3CDE86D57B38F6FF5BBA71A914548E09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_misc_mouse_right_click.png
- Size 10KB
- SHA256 29e2d3d38ae65e43e91b30856e4df99168ed8700bc42dfac0d3b0f7d48fd3279
- MD5 b9d09eb751bc9de344b60a09023c6fd1
- SHA1 bf2c31130296f157af436aa434af0a01ff5b74f8
- SHA512 3ad4927eaf9e9c9c0184d4bf7f044cabe55efe25df7508eb6d39b5ce2aa5c0f7f6240279bd34830608b0985692f244daaa2c7cf7c61687eb3da3ad6d8d416386
- SSDEEP 24:AFYiRFr+ROBZViHg3EEGjHr5uuDlKEEb5uu7EEIbuu7EEIbuu7EEIbuue5z5z5zh:4ZY4V+Hr6hhhhhRfX
- TLSH T11A32D412E120D05FD705993FCAC688F88F142C3DDD96E47724FEBE6A7932AC2594894D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_quarter_crotchet_note.png
- Size 10KB
- SHA256 1cdfee358a859d9095d6e052be3e91b46556c261e95eece61d749f7cdfa3af4e
- MD5 3f37c4d4a201a6fe2d49d9bbcb682598
- SHA1 a992a35a1b0a4ef8fcb597fd0790f719a230ac26
- SHA512 4e5e54d6465bbbb2e343a1e4b556e5301cefc58dccc4bb82fafaa00b8da2b08a5603ae122baec1fc397cc965a234e077732cba740264a743722fe2ded6018780
- SSDEEP 24:AFYJUNUNUNUNUNUNUNUNUNUNUNTuWY65I1:4LiiiiiiiiiihRYB1
- TLSH T1C0320753B330C02BE301593BCE95C8F986543D3DDCA295B738EA7F5F3A719828450A58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_record_stop_save.png
- Size 10KB
- SHA256 c22865540602d68df333788e722e0600c6fe0d561a303aef6489451d5becfdbc
- MD5 ff5e5296a739cb496b184bf5392f00b4
- SHA1 890e46ca5958c468102d99e7bf5b4ed08e25bf17
- SHA512 8aea4a3529f32db6f6273fcd460d691a8ea097d2708c5541038175020213413b57804ce151a618702c2779255812ac5bcb0d27afc5322db8f5cdccebf3d9eab7
- SSDEEP 192:NDDDfDDDfDDDEDDDDDfDDDDDfDDDDDzDTzDTzDTCfXfXfyDzDzDXDzDzDXDzDzD6:L
- TLSH T18132C3357DA4E055DE110A32EC93A1FC0A0C9E14CE0AD92F787AFF7EBC74206865898D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_stretch_marker_delete_remove.png
- Size 10KB
- SHA256 385426e0a0551b8916e53fd8080e42147b80c5b37b7e47fa6ea825264ec68a43
- MD5 6bf7fcf707ffd8a4ecef27da56fb9a92
- SHA1 22ef42e1ac3625fa7a2d8757b12d3d5a93331723
- SHA512 8f5915496b78a6410a8d57086d5fcb7b73cf6d910edc1cbef1e073936bc5336a06ee9d1684252c0c601cf7b1dee78ad382d57a6ffaff47e0482fd8f9662a463e
- SSDEEP 96:4B22V00NSSJAARuujii9uuVAApSSBs89Z/cmZWWWWW3WWWSWWWkWWWHWWWWW3/t0:K
- TLSH T17D32E1263702C11CD4F22A76D941D5F026A66D82CAB2094F77E8BF1BBAFB842D44B914
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_theme_previous.png
- Size 10KB
- SHA256 339840956a38072cab4e395e9d8f71779729ff1bf7a654594241cfacfba21ddf
- MD5 b17ed242d16127e57582cbf802fc01f7
- SHA1 cd7db15275ea7a4a90c20acbe4348d3ad04f29da
- SHA512 621d92231dbd5972c31a866fff183ae0a41c79bace26a4396a681ded8566b25329378bf11a4669dae504562ecff88cf8aae36fbcaf4299637966b534f974ea56
- SSDEEP 24:AFYpEMH1N+VMxwnoVddNAkcH6Qyup7dEyDXDrGnmRhta//eUGtCr96EGtCCCTouN:4ylLgoVdd2H6ip7d/rO+wShi2r6T
- TLSH T12D32EE13A220D04FD311953FCAC688F48B552C3DDD82E47B25FEBE6A7E72AD24854A4D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_time_minutes.png
- Size 10KB
- SHA256 ecb21254845ac8bade4d57e15209097820a912e9691db059c541abb1bafdf423
- MD5 31f96f002055012ec04a9879abb4574d
- SHA1 aa0ffc1e59e578cf4892b56601a4d3d1eddd62f5
- SHA512 2862de7c77f7ebf5e07beb5aaa490f293c0a342ad6bdccfa4046ed138a7d80d075d20485259dcc38d7312e7411c44efb3a60d9ffcb694798c72da09e83bdd243
- SSDEEP 48:49X9taD77zAc813ST6y+ywanj6CHhxG/fQ9MWyXoXzGNrQlB:49Xm77v81CTqNWeCBTJX6FGB
- TLSH T1B9328343E2F4E01BD318863BEED4C4F824391C6DDD46E46720ABBFBA7A75F905512A09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_time_selection_item_selected_grow_expand.png
- Size 10KB
- SHA256 b8399d2fba66194281fa6e50f19346fb51f8e5b06676942c09589db6db624de2
- MD5 211be634ae1b37211153909a0f0bdfa0
- SHA1 45bddb36f498a6c455f2f6b6d83851cf3e4582c2
- SHA512 2fe588299f6930a0a55f4c536897d49a9c95a6043b66a8ca6092e1055c11e1116b79d3810dd1ab1fc8dbdc0cf389e9ec4eeb878f787f1b6d5f249b9909e0c92c
- SSDEEP 48:4jVKCXgG1uGHXnl/l/HFfHFfHFfHFfl/9X1bpbT9XHl/HFfHFfHFfHFr:4w1BQ5N
- TLSH T17832D613E230D01AE741593ACE96C8FD8F542C3DDD96E47738FAFE677A325828904949
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_v3_ripple_one.png
- Size 10KB
- SHA256 cbd8d4834004ab40091620fb17d68aa0b07a3d0236c48ce17c36d134bdd5e0dd
- MD5 4ba69c2269b2a8037dba94cb56e3d7b6
- SHA1 47a84aaa8559e8d00d3603d733e640659f030e9a
- SHA512 202ecadd75dcf513529afcc659bf9c5bb3c2997334250f47a4e1bf93f3f60bd3df03ca019a0be53055fb2f41f23a3fdfab69906e1edc0600bd418526c9261dab
- SSDEEP 12:6v/7PF8DfnnnnnnFDDzDDzDGFDDzDDzDGFDDzDDzDGFDDzDDzDGFDDzDDzDGTQTX:AFYZl1
- TLSH T1D8324CE17250C869D5910572DE50C0FC95727F64CD11429B39D57F2F75B1508C5A4502
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_v3_snap_on.png
- Size 10KB
- SHA256 473186d3b0c40a38dfbc9b35a99c9f6f57226061585f865c413c30a30cecd98b
- MD5 54cb2498cd592ccf05865b4e08e6b35e
- SHA1 b47e413cba065f5ee6f6235e6b46ee3e43836fcc
- SHA512 5b3aa51252c2e58a745f024d6255bc694f4ced0e4af46c862835bf1ccf4e9c25973bbd575713aff65dbe4e505064ff8c7b14f1d2d412f0b4a4ef3ee5497d2fbe
- SSDEEP 24:AFY55x5x5RDBAMPwISISIVLrLrLG9XR9XR9XIHHALrLrLR:4Qzz5AzPPJHHmHHG
- TLSH T1E9327B123560C250C0860438EDF5E1F4A599BC5BEE8E2687FEAA3F4FB2B5A058E4B145
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_visible_tcp.png
- Size 10KB
- SHA256 c69bc9773401907b507e062740d0f7d9670fd5a22716948d0ee0e56596fe6888
- MD5 730209d09d35bfff7efd9ce7411bc8b1
- SHA1 ed4c553250bd70dc8240dc68849aa347d4294278
- SHA512 036208461f64542608ea7c45d3e4bcf16862293ca016f94680eacb7124e69461080e2baa36dadc257ef9173b435a106b39766df148bc78af027ea32e7d739bb2
- SSDEEP 24:AFY5eEyIHx/2uSP3vEEEykngfDuuuX1EEEtjHgzuuuTr1tUEGTDu2DkDjHgSTDPu:4AGWqqkqqEKq71
- TLSH T17A327622B620D01AD7168936DD86C8F98F512D3CCF86E53F38FAFF6AF9325424548909
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_window_tab_docker_bottom.png
- Size 10KB
- SHA256 5846459669922085a59dbebbaf468f50eda23e4c54026d5f2d744d46ec573a4a
- MD5 58e1122e080ee47462506003076b9581
- SHA1 d837f1182c64d653afca0d349ecaccb853df0d0a
- SHA512 3c944c81f00a1d32fa811ec6cab44ece11b36e68bd9f4bd64a57512825f318507f118aa7def813be5ec087bc52038e0a6735cf9c9bf7b685789b59d6e0efecd2
- SSDEEP 12:6v/7PF8DfnnnnnnnnnnnnnnJWWWWWWWWWWWWWWWWWWWWWfJWWWWWWWWWWWWWWWWc:AFY7fxpW1lXxs
- TLSH T1B5325822A1D2E05FD348953FCBD688F5AA115C3CEC91E57325AEBE6B3F3A5C2482050C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\track_icons\folder.png
- Size 16KB
- SHA256 a31fe9e90585c4c84e38b9a6e43169836d1d70f246ebcbfaec56005006046317
- MD5 91abacca77b8eb8fb1113c0e84537a69
- SHA1 b3fea092040399289410021191cfa84d50faaf9b
- SHA512 cc53a4f02738ffb00a239c31bc69b20a76c91a9313b3014ecfde6f6f066efe76b283f78c3414076c9939962de4e13c7307808fa0c75152897359f1e59414d5d8
- SSDEEP 384:8mG8aIahadaZaoaxacaHaua4apanaRa9aka4anaLa6a6aWaJaVacyZo:8X8aIahadaZaoaxacaHaua4apanaRa9X
- TLSH T11172F4563A58C1C7CA6CC1B3FC4BA0F52CE95CB9D98191CBBAE23F56F0311618E9AC44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Data\track_icons\folder_down.png
- Size 16KB
- SHA256 5be16dbae8b82ad49946dbd480c21038cb7106279468cf857e69f169db963210
- MD5 0da4f67d76c37761d5024e6710bc6fd3
- SHA1 723cb8db02b3e5ffdf828f5dfa010a6169fd4445
- SHA512 e7995da017c1beafe0637242558c5390a81c0873699ad35921e500548f6ef1090da8e65c4c586d7d6abf20bbad4f0c5efe3d28604c34f436fa6152cd9fd14b5b
- SSDEEP 384:11aYabaZaLaoaCa8aRaDaQa6a8a5aTa1aCaEaWaDaFaqa8ahaQaza23:11aYabaZaLaoaCa8aRaDaQa6a8a5aTax
- TLSH T12B72048679BCC0CAD5B8C973FC13B5F92488ADABEAD98457BB543F69F0306404C1D629
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
- Size 10B
- SHA256 2ba0a5ccf4357483d7a3c72d633ee2c59bf02050672f73de83526de59272dd99
- MD5 3ebe15ceac4a674c4ae8f2ddcce3176b
- SHA1 c0ce9707cc3185e90e7dd0e766303cdea1abe519
- SHA512 414ed0b5cb8b702f58616946ba8961e81bb8bdf09d4d62d11613b668d628edea3b5a6be0b6a880359dc0fa6fc04fc7d2a54bb934dd20b5cd24c11554d8dadb09
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
- Size 33B
- SHA256 9d7a90f16e19268d74b7617012cd7343b641c561c45b8d936ff58862479deb79
- MD5 2d95d5befc11d4d76eecad7b3a34f75c
- SHA1 7ef2fe84c1f638f43251f23cfe8cb60edc138b5b
- SHA512 76c0a1031aa3b68f5bcc8311f622c755042c39d060fa3ec138141f959274ca3343fc1519cd5f809ecb77e9a4d4cf5f80af8516823722c01a6ad9e6dade70be79
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
- Size 47B
- SHA256 c4b8924de97a8e7f234d9dce0ecbeb566b7ff0469323df39b12e529f63019b21
- MD5 4ea086e87d5dd4f80faa1ddd90bb48e3
- SHA1 c314ab7add23410ef60578e9ed4f87c03dc23a31
- SHA512 b3d9c709507f1488311e8461ec1bf664c2d8c0b3120dacaf0750b1f90a970dce2c236f142d9240c823d8f5c152cbe2ee6b1d740866ad5ddb1b8dbaefdccf7f24
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
- Size 75B
- SHA256 5018baa0a5cfb0ecc665fa6667f070fe27ff3851099479f072ea391589e6fb69
- MD5 897e5d6423ffb466d3fdbceebf20d5b5
- SHA1 d0ff4975ccb954e480c0bd626043a050351aca6c
- SHA512 f510b47018c42ef88bd10415aaecc9f12da967e180af71f96b82b90ad2b5ff012d36bcc310daf8bd16bb839f1101e20669c57a3bf12f17d21c0796cdac1d80fe
- TLSH T124A022838880A30E2002BE30C002C0EBA383C0B02A0C38E02000ACCFA83C330820CE0C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
- Size 138B
- SHA256 6f73fc2b0426cd4fe180cd6150fd193d79276c3da5ff4ae4506ce6c219c4270b
- MD5 d791703c908c1efd3c35f899130b0b68
- SHA1 94f0688fb289f2245ed5e0e55c7db9dae0268c7f
- SHA512 0807f940e7cd6b019c694c61e3e3f5928bec153d2eb94cab0d0f2ab9946ccfe01c07ade0cb1cd93c4b7c78b56e2898a43c9bceefb6c0aa294581c5791b23aaf1
- TLSH T104C02BE34440820A2016BE98C821C4CFAB23C058143D2C802005CC8EA22F32C951CC0C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\apply_75.png
- Size 16KB
- SHA256 3c816574df47d312d45e90d3648930fcdf5b1e54f1b792c7b3bb1b09841c9f3d
- MD5 a303e204444bc87fedfb48b123f61640
- SHA1 1fd3a17aa918c79c6998a4936fb9d7a72b1be46c
- SHA512 1cf196832849bd15d267d1faaca6d493bc11548c41969df85014d564ca7338e69649821d0bbc6a47f0b8cdd6abe5dbaa3a02039639e1793225dd1e1395688e69
- SSDEEP 192:3ooooojPsNo0d+ZizGYzt7lVsA/MtooooJ:3ooooojPsy0EYzxJJVseaooooJ
- TLSH T1A5726ABF1620C51ADFD4FA33D90492B7631D1A4CAD91F88225BE697EE0639FB71C8442
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 34KB
- SHA256 4078c27dc4a84de8447d5385873773db37423ce29d579ad1dffccbde14f35a09
- MD5 f0494c275a8c223bca33710436f41d0c
- SHA1 abf4102d2e4600b2abd9635fed8df7ab4ed0d73e
- SHA512 c6edd73371d23ffefb0bfec6ba6a353537b791c7129832598083c71d80c4cf741ad0c7de1510564231fc27a8ae6320a798f725e6a64d96e9f636f4d5fe1932fc
- SSDEEP 96:HHHfmkKhL9oZLC3dTyJKJ7ZTdwkMMMMMMMMMMMMMMMhhMMMMMMMMMMMMMMMMMMNk:/HhBETCq7ZJwpkrOPbxuxLmDFfXLA
- TLSH T1E8F2E27FCA299818C3E1F9FFE11372075BAB555E5E68F56085BD4E78848BBD36882003
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 34KB
- SHA256 30345a18512129a56fca6bd58ee779d6c7ddc242c1a841c93ad89dc551f889e6
- MD5 279a310513cfe428e94418ffcca476b6
- SHA1 d4299ef1a8f4debeac35019f6b9814000ea751b2
- SHA512 32c04c347038b3c23d7defd8dc46b5320f703542b5387e4f20365c3d005ddd49d9dcdddd842159f7d27295f91f3de33ed6b9a28285282be3cf04c4da1f7aa212
- SSDEEP 192:aRX6wUMS/8qkLYuT6TbPj6nPXPZrooi0v0v7Z6cMnsV:+XvL1nPfZrK0v0TZ6cs0
- TLSH T19EF2187ACB2DE414C3E1F8FEE113B20A6A9B65195E6CF560C5B5897CC55EBA27CC2003
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\cell_hide_on.png
- Size 23KB
- SHA256 aff3527cb1c27d2e7fa275ffa9fc73a345b9c22cc0f79cb4a700c59ab3b19b2f
- MD5 9a985cdee36f425304500d1c4a40d686
- SHA1 3360e8cf8f95d2aa1e9d52f1f1ec2aa6f7d754ad
- SHA512 de0b18a1a04d2f8026307f69d64d07e916cc9da3e00e48a6f9569727558fdd59b4394b0892dfcc0b42bf7c59c3a93db63bef638851d9967326dc73cc8c6d74bb
- SSDEEP 48:gSG6DNSG6h3u/yNKu/4uiyh/uilv/v6qc6khL6qc6sFu/yNKu/4SG6DNSG6hk:guy3u/nu/4uiI/uil3BIdmFu/nu/4uyk
- TLSH T18CB2F36C3906D442DF61A575FE4A81F80CFCBD07FA908EA77A923F0AB1B870452C55E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 42KB
- SHA256 20f679c2dfe98d7ec3b3044c8869a04c469a39c82f930fd27aa31a2114339476
- MD5 a9543349b3b60683a422cbeba0d9df15
- SHA1 74771e017229b898b8d2611669a4f555b3049c1c
- SHA512 46dc9bf65c18c60a145ea3623fd609d1e0c301f24b0369d0681c5cfcf61d241e7821fd31807dc9cae47090ca52c78c5e44eb938f21940687d04ebcd919ea5a85
- SSDEEP 48:13lOn2ofmO//zXUG3iafzqG1ljG9NjGF1jGF1jG9NjG1l/zBiaUG9zXq/kcfj2pa:p4HB3rwrqpf2g0U
- TLSH T103136D7723E6C241CB49427AC932D8F44A25ED4FDD42285725BA7E2F343ACC752BC998
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 42KB
- SHA256 284a87e570f3cb8ef7070cd1f6f1377ffd250ba8de5ae31a818dae09fee5ef72
- MD5 74fa1ed9ed7c09c63a41e438282fa19c
- SHA1 02dd1ca50f4d8cee743345755aae9b4def38159c
- SHA512 0b751d769b15a303e082bc33eebd4701c96c8635e3a0a6c98c5fd89898e07fc3e4cf52f44141dc9efaa5c0b3c4c44c260d8140b6c613032d5ccf30623f21b2e0
- SSDEEP 768:cJlDcAg+XecYO4lm0vQv1Agp1XQZIlK0/lLMXQDNtwOs+HC8AKrB1SjRV62/u2Ky:N
- TLSH T13C13D0372220C2A1EF009337C500C2F367693DAEDE692487617E7E2EB67E5E7425285D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 487B
- SHA256 e9b98ce5dd56d37802c20fa57a55841cea3c1b4fe5ec8bc14b97c937a5170e7a
- MD5 c63c41002921556e2d6c0da0ee53c9fd
- SHA1 fd49500fc0ba78aff94c0697ed38cbfd781f1862
- SHA512 5de1ddf4dc3c032a6cc37a9622a7add527d500ec22773887e0e9f39b9659cc4274e9db4ba83d43e7f280e3390e9723161d368605b234e55fabff30ca6c779ba9
- TLSH T1B5F09EF9F2EA1C7CD20951731956080D98625905545E69FD46519240F7B17A8A4CC32A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 487B
- SHA256 ea81195f5194f38af9ce923a939769b8606f193fac5d463ffb34ea561fba085e
- MD5 721719ee47621481db9ea4572c2d0e55
- SHA1 afb0c7c487caea903927ec8c6eb2905c528affb0
- SHA512 11f152193f326d05bdeac496e9b7983ba6af7aa810d3fcf12fc730d3918312797abaa3860e05f0374a99e87c453600efb09a958324020f9625ab592c53323741
- TLSH T15EF027E0A6D0FDAAD90794FA5B096126A89659580810D39F1203865231BB00CA7E8FD1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 487B
- SHA256 13ffcbc1c7aef35dd1fbfa4573f0bd0c3ac8bcf9487ff0d152efb6bbe5ca0713
- MD5 a590b29bce951499c54818d43cb9a6f5
- SHA1 d1b398a2372823544bd5623bc026d31eb2c00e09
- SHA512 7f8e0093c74d5770c9b468f3338af7ff899ba9a39cc4ef073ff4861184417c8d4e708d63c83e643650177170746fe76b89994c4c6d2866a4aadf84fabbda97f2
- TLSH T137F05CF2F34BABA0DC1B002228837822C5879E228B8F0AA8024BC44C33D793440F8713
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 63KB
- SHA256 46c76d5d59660d09f66233811f4b056f6376d65df813226e6c90c96c0bb68b42
- MD5 8ee5a008f7bf3ac6f1e1b30f41b9310c
- SHA1 0d3f741252bc7c88ea272b10297cc8c3d1dca1e2
- SHA512 c01d2865e8fbc5623922634a3477bb4a93bf8af3e71de2aa0685b00b9d33d7e9a96200fed94a0253d0ac09f95e1c3640c1f8d8f32bb6d6010754ae1fac29dced
- SSDEEP 192:XEbEbExV4V4V1DsDsD3SS800A//aUXUXU6nnhjjCzzujjfHHB:CV4V4Vt//aSSDHHB
- TLSH T17153998B576CDA4AE3284A73F1846B86AB1F504C3D23FD559AFD04BE25A36EB3503047
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 60KB
- SHA256 003cbe0d8d58153c70bb1e050fabb03c99d7d01e9d67a96e23a657bf5fc185ca
- MD5 5481b14a6008e22b1854944bd62ed180
- SHA1 d0da7d7b0903779bc18067ae748ca26aa709282b
- SHA512 0f06043c43eb62fe8cd91549d400c5d64ecf8c46bb2956a5afc4b656ffa89477843b94765b17bc46d80dfd43d11d3f5816611fcb603b2a83ddf83bf144a0b692
- SSDEEP 192:QHELELEhVIVIVFD8D8D3iiMEEOff6U3U3U8TTnvvjy:QCVIVIVbff6yyDTTnvvG
- TLSH T135534787676CD946A3244A73F5445AF69B1B1C0CED23B953A9BD3CBA31B3ADB3503102
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 63KB
- SHA256 5fdac2828515126d684ec705c27706ae43e5fd1a8d3f249df979deb306c5b452
- MD5 9b41aa7cc5f6f760523200cadc6c1c02
- SHA1 34c59cca961b109e61dc0772365d1c868f5e79a4
- SHA512 867a104450e3c2587a66a01210467071fb0841a154fe29aa251153e35509c880d3661bf673e08980350dd707f8170939b4ae35e176d7dff892a80501407d8f36
- SSDEEP 192:dE7E7ExVYVYVVDMDMDXyyMkkgPPKUnUnU3SSqSSIWWb:4VYVYVdPPKCCSSSqSSIWWb
- TLSH T191534987676CD546E3204A33F5445AF6971B6C4CED23B993A8BE3CBA35B39DB3542002
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\layout_docked_A.png
- Size 72KB
- SHA256 e39ed5382395b3f051edf06aefa087c0a58f19e7e0b17fdf4ec7cd9aa8d371b5
- MD5 880989ee28e1d0052b6933064a389a97
- SHA1 4ea4b0127adfbda29979dabd71be9fff71ce013e
- SHA512 e7f036ff6628db8d82d06406c0363c3da0464ef2ea34d72727289c064a1f76664b3652505a9a4b918a342cb69360e21c5f9e1e64abd3013626d5d97d3cfc06f5
- SSDEEP 96:4XlJZ4YYhOjaAawlzBbia9RvtltKOjgDxpB4RNW44/:ICBtGzZZoWgneRK
- TLSH T18C737E672F1CDA50E785A0B3F9142396975B5A1C39A3BC3499BF2439C12BEEB7D53002
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 216KB
- SHA256 45d546336186fdc40894950cc0cabdeef3c94af87c2d962e6f1b4128e8ac5db1
- MD5 5410e71a0c272af62eb948d87203d5d3
- SHA1 cdd255f4e9f86ae9d8bad2ae0cf00b06bffa9e3f
- SHA512 62c38a6d0d20b56cfbf54afe384d8ca3926211488d2d8531b3ef99ac399398496f99a24f4abaf26202f8a98da5baa668d22c51fd40515d0c06d70793440c712f
- SSDEEP 48:Z5AIkEXoMPoDDjvoDDONxNVWGRX29pqFD848dJLJiqLZktSDXDXDXDi:HAIkEYMo0SWGRXPSLZNDXDXDXDi
- TLSH T1882437D7AF4DBA1A97C3FA77C82872B998B0283D7EC5DC39D906705D909C8E490AD443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 288KB
- SHA256 4b803503719afcb3292f3a0b6ce94622de5f9dd277da9261a6bfca70de5471ac
- MD5 e8c028eece1c4124c0b8e544d29d84ca
- SHA1 f8a8eaefb84c1609a29361ae498afdb5c48c2eef
- SHA512 94ec0bdacb00bced10bbbf251a5f41a313939384af3b35779c45c2fcfea2543dff12aaa6bffcdadde5c7688a7fb9d5f80789c83b2395d1af96b3eb00313ef878
- SSDEEP 96:DNuWwEdzjfB3vlF10Hd9XahqCdLPN2FNBdLWSFdLyaa0VcdL57zWvfdL/JfdL19E:pBfxq1NpPVaoudghHNxaD3dkKVVVV5
- TLSH T185546B672F1CDA40D785A0B3F9142396975BAA2D3DA3BC3494BF2439C12BEE77957002
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\layout_docked_B_on.png
- Size 54KB
- SHA256 8743452fcd73da5652d537a2a68ffce61cc2bfede1c3d5099b9c4a6584502071
- MD5 879be7a2ba7786f2bad281869b8b6645
- SHA1 08f6cba8d4fdcb40b42cb11ead7127c83870ee3b
- SHA512 00d9b40c0657e2d21b0f2de2cca36d796ad49727bed9aed13ab30f51a77bb9458a1310a0978076f30cfa533e582bc2ce38eb68966bce4a8480518e0c95fb86ac
- SSDEEP 48:WW36zRuQaub/2ygFyzjezUje0gWRhgIYYYyy44OiwwCCCAAp1ep1eoooyyooeee4:WQ6zwQ1bO38d1W1f
- TLSH T162435BC3AB4DBF1A97C3FA77C81C76BAA8B4283C3E85EC38D805319D905D9E49499443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
- Size 42KB
- SHA256 a936fb6139a549badd54155105ff2b37541f4501ecf650968dc3994734ae7dfe
- MD5 de717ae76d6d1a3eee38d8081a65d966
- SHA1 2d65f7fa4f71692f2d3327fb9e9703c03aeb735e
- SHA512 01cc9d6c634ff4dfb41022c20a7a87cb5034e0f8a6ee9ce9dc400f9aa35e0ea14ab67fa050370766d7cde60429c2eeaa12f668d54f9933f87dcbc6ad039d19ad
- SSDEEP 48:Pjc7+ZdCgZkXvbZIoZrGZWZjfUSxmZIZ0gZULZ3uF6ZT6ribbbbbbbOk:PglFtryp
- TLSH T1FD1327B727E2C601DB194276D932DAE40A34FD0FDC52258725B97E2F643ACD342BD889
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_leftArrow_off_200.png
- Size 38KB
- SHA256 1a5ab4dd286b43db72d28e258bcbfce00b89ae60052bf87aa7a7006820ed33a2
- MD5 9a984432d477dac00c4f679b7bcc85cc
- SHA1 d953f5022727c8a7135ce0496e6d79bc6008d07e
- SHA512 807b298cf9106ec30c8661706f4b860baf5ab1f174ed418dbb880265cd781f4ba29cd7a5fb0aedc930611e49c853cbc06c0bc6d3989d8efa39e491362e732633
- SSDEEP 192:0JX03ll0TuOwCfNCmd4egUo1sgcd3sXT3l:0JXslxOhfN/JoqgciXT3l
- TLSH T18903200EBB17DA22C21C0677C9B387F55228ED46DB86178B9288FD753CA326C55825FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_off_200.png
- Size 27KB
- SHA256 eabc2ea9bafa67d08d155bc9a4df635b9df5250465cf027222622e54c4c1f3e3
- MD5 c528f39031f2a58f860c14bfb8f5c3f3
- SHA1 c6f77357a3fe47c615d62c430f6e5fdbad9949b8
- SHA512 636fe12e69b83d956c9b9e046120a2b291b8d3f550d7bb3d23d9a7c6e3e207e9477bf1fcc9f51e79e61e1e9ebe770568d3247c5667d979ac18a54db05d6eb052
- SSDEEP 192:CX03YHrPRCPm/BXWw9OfRHGAjors06sMOC2bGxyfsK7Drh3sXT3B:CXBHrPUPLvfxGqf0FC2CykK7DrmXT3B
- TLSH T1DAC2484EB707D622C11C4676C9B38BF55228DD46DB86278BD298FE7938B322C15864FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_on_150.png
- Size 15KB
- SHA256 a279ef45f5c961dd3c4aaf1c01ff34ce28339eafb0aa76bb0052f244b4d7921c
- MD5 7186ff90d8d77532e27a64503f8bb0af
- SHA1 92f0e2ff9283156de9692f9e10297a3c3f6e58fe
- SHA512 ea5ae0850cae10b0379189e2ffa71ca7f24553283239d00ff8102574f99c657e77dd73bcbd9086a22f5a1411178818ca6eb2910e4bc6c44fa0be59d0edd41a7a
- SSDEEP 96:QjyUXU6R3R4e7Y8ykFfPPOnOKOTi4guRpvcH+31FOJzOsH7pGuaShQ5Mf/KCACVS:Qj7Efe7zrf+zr4gTH+3uJzxHVGuTqM+
- TLSH T1D462584D7393F6A6C25C0E7EC962CAFE9265DC34DA41178BB048FDB9387340D1A42A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_upArrow_on.png
- Size 9KB
- SHA256 440607d18a2c78c8f793f383b6294cfed0ce3831c637aa5d565ff725b060f352
- MD5 0576d79ced33843236bc5a4caa8ac8e3
- SHA1 b823e267abbfa4ddce33ab07ba6d957b0c88aa6e
- SHA512 106d1eae1c7c28051adde2905026ee9a98ede78fc9db22f6486293a48264856ab85c1c55f14a93bbd76f72f6a6809182e61f7a74518d07d0e23974c52dab5001
- SSDEEP 96:3NA+H3+8tmng3nD0qqHtZjoQZ3Zooqqg+yHyVGsU278OcUPHzH8Y8/7p18TsTg:NHu8MgJeZqBSVi2oOZug
- TLSH T15622150EB792F6A8D11C1939CC679AFE4211EE60D95203DBF448FEBA28B704C1E4536D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_upArrow_on_200.png
- Size 38KB
- SHA256 5e2596c7eb969210363243a38b249c0fd1181b95650de0e736fda4c27befacdc
- MD5 570f9d024ae3f9db43ba9c8a0d5c7cb7
- SHA1 5c0ced8ec7f22c704aab81c1b0e77c6cbf73e8ad
- SHA512 784873d1322fbf9da1454c1d1e505cc1e9975671a2c9f45ee846f34dfe5cb40a874b26fbc4b9038ba8042e2d80d1c1c6ad0ccaa990defda063d9c5baa04e7db1
- SSDEEP 384:u3QnMamQ5h3tx/Wka7E1A7x22ykQ7DrWXD3h:u3sySAd2yXD3h
- TLSH T10703C20D7793F6A2C11C4E7EC8A387FE5264DD60DA421787A188FDB93C7324C1A466AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\page_trans_200.png
- Size 16KB
- SHA256 6f905fb73154bbf1c0b2f0b88c792a5c331718e0a58f46fc097b1e9e38774042
- MD5 875385a0051e781b3d0cd723ba5235c5
- SHA1 a4e66917dc6562312fa253b018030c4584dab181
- SHA512 68c7f0233a99340344d89ba08f33ea0c2d7ee1c99fdbbdf2b07d75fe2d4e747fbfd92cafe4b2053859a75e7cb2ead23934e9cc88f926396bb0aab105a54f5fdf
- SSDEEP 384:Qf1XN3fXKX3mw3qDH3XwXw3vPw3wA3FvJNw35a3In/HNKI9Z:AdfQ3pq73l/Yl3DK5ag/t7
- TLSH T16E721C637622DB31D50F3EBFD8D8586A9383C36CCC50174FA208AA0C59D6A640CE6D7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\tcp_vol_knob_stack_200.png
- Size 157KB
- SHA256 356c91d69252d5a9238f2b1c565145a820b7225d1a1e2377ab4d3c813352bf0e
- MD5 c4dd824ee92f741ca186a5927616b50d
- SHA1 e6f59816dbfcf26192f6552c8a0a5953a62fea31
- SHA512 0f005ba9a934b1083c1cd44c8597a3d55127bf94b0e6233d457660ef19bfc42c5bdd121f944715b48d8876fb4f45ee92708f82d078caac8713744fc0c5064e0a
- SSDEEP 1536:QcFqqqqqqqqqqqqqryN+HY5ufmDPPp4f0:QVH2D/
- TLSH T13FF33AB1BA42D834C5EE66B4CF9AD1F616A87D06EE0A367733A17F3F753209119088C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\reaper-mouse.ini
- Size 544B
- SHA256 486c6d9144d2f9ac2bc5948a24b89394d28fc826cc63f9d2406926723f162249
- MD5 baccefe3cffebe31c6955eb57141a9fc
- SHA1 98f9127c8ffc09630a95749f46ae57abbfa4e871
- SHA512 df34152715a92a38528d59e5df532771811b299590afbd52e972232af38d526c9d26a1f8a7ad073981965e328f1fad499a870bbb7dcf2b04cecf016de452cd0e
- TLSH T1E3F0B2B68B0FA66E750C67AE4F2FDD0BD9A4462F885838F13977CD020EE04204964321
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\REAPER\reaper-vstplugins64.ini
- Size 488B
- SHA256 09fd1304de6ad8fca89584bd36902892182261a4db2455c11837b2ed8f3ec37b
- MD5 be3f983501e6ec410ee500ea9e71a551
- SHA1 0c0e3fa40dacf540da6a0dfb6dd2470e7a7cf5a7
- SHA512 48ecaf5b40fdfcf3b4fe62486203fd791e304d97cb4c1d1fab0c17116aa301c38872704c78bd143a4204c19ae8525fe14f882de76d1504db1bf6948f40030eb2
- TLSH T1D7F02E205E380A55552B7AF9A1F0788F3CD6A4A41C361190E23BBDD447CCC2C3D05607
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Downloads\Cockos_REAPER.zip
- Size 33.9MB
- SHA256 759d502fd4751d81cf303fe734e9a7e768fdd53ff28f5402a41dfb27b41e83f4
- MD5 dfdcb2040b5e637877c9939b04f6c90b
- SHA1 bd1e08485923b5fba6239bf76a50ad783c8963ac
- SHA512 aade73b703e2b21a80e08e9e2e440ccfa9860b424ffd3af388b1bf9e359a5edbfb85e14f86b3c603af2d0439b6832556baa3ec1a048bb8a99a816288d15943ab
- SSDEEP 786432:jxYvIdfaZvu6WfH6pX4Pr+mmxBgxQZxbDQFyVuq2niqCFlMGVC:jx7faZvuqpX4D+mmxGMxbDUyiKuX
- TLSH T1FD77339E1B07AFB5E9CB03AB74A52CD5F0E9ECE8603179DDCDB40C2E594AD600F61648
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\Cockos_REAPER\reaper773_x64-install.exe
- Size 16.2MB
- SHA256 1a96f1aaf2c8fec04f92753078582ff577ad666f267965303daa12511db8752b
- MD5 9ea450ea21119c903f98413ef22aa8a4
- SHA1 3120ced35b0dbf6256b942d99f96493ea81e537b
- SHA512 212c4e6733ae8c604b764d134172d3a40ee2646286f5f625039ba648b38f24d539c88f7a298622bafce47aac2b4d7950254e8285bef5e1b49fca3c7914676e67
- SSDEEP 393216:Nf92ILT8yUOdqxXLLGMDKNTHWUCnwnyIE2oELM9LA:NsILT8y6xXLiMDCD0IE2VM5A
- TLSH T1990733BD41129C98DCC4EDF6CC602D92DF12FDB6C5291A1EACD1B07E48799790B478CA
- MD5 SHA1 SHA512 SSDEEP TLSH