969c3dcf06343a9ca9e878f9badd5faaf0c770be27cfe02d7d97d5ad38744e8f

Analysis

user interaction
yes
max time kernel
630s
max time network
432s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 22:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SVSTUDIO_PRO_1.11.2.exe
Size 101.0MB
Sample260801-2edbaaydne
SHA256 969c3dcf06343a9ca9e878f9badd5faaf0c770be27cfe02d7d97d5ad38744e8f
MD5 0f5e85a6d25d1a14df3b7fded41573f7
SHA1 5124237994fe63a0fe33a7783d00b5f02afa399b
SHA512 2981250e2246378beff8086ba9bee282187c5b13e7e67fdbb8df7d13874c8f544f43f51587117ee8d1e7e1db827642f9925294fcf4601a28282c7d927a7e947d
SSDEEP 1572864:rSgusfqe6j+FAwcpI+ls+ngpLhoWuhm3+Qe2ReVZBepUY0ECc8lv04SXt/p:rSkSe6jOapLK+gZhoWuS+3VZBpx6
TLSH
T1A138331BA32C783FD5AD1E7550764230A8BB2BA16517CE1EA7F0920CDB259710F3B35A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion discovery installer spyware trojan

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3444	synthv-studio.exe
3444	synthv-studio.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 41 IoCs

description	ioc	Process
File created	C:\Program Files\Synthesizer V Studio Pro\fonts\is-V3TKR.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-GQCE9.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-49V22.tmp	SVSTUDIO_PRO_1.11.2.tmp
File opened for modification	C:\Program Files\Synthesizer V Studio Pro\synthv-studio.exe	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\unins000.dat	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-KV2N8.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-QKS9I.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-KJRRC.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-NHKI3.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-R01EV.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-GMAOJ.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-TU7IC.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Common Files\VST3\is-C4GT8.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-FGJ6E.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-KJJCM.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-HP2B7.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-49SCT.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SynthesizerVStudio.aaxplugin\Contents\x64\is-VDN9O.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-96OMU.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-IF27J.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-9J0GF.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-3HERK.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-34DDC.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-22UR9.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Common Files\ARA\is-PIMOU.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-9TT8D.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-6PU2Q.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-3NPB2.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-F9R7M.tmp	SVSTUDIO_PRO_1.11.2.tmp
File opened for modification	C:\Program Files\Synthesizer V Studio Pro\unins000.dat	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-PMQ4V.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-C8USC.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-0S89R.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-P7OGS.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-KJIC4.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-VUMD9.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-C7IPG.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\is-LDQSG.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-346KJ.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Synthesizer V Studio Pro\clf-data\is-VT69R.tmp	SVSTUDIO_PRO_1.11.2.tmp
File created	C:\Program Files\Common Files\VST3\is-AP40G.tmp	SVSTUDIO_PRO_1.11.2.tmp

Executes dropped EXE 3 IoCs

pid	Process
1408	SVSTUDIO_PRO_1.11.2.tmp
1612	_setup64.tmp
3444	synthv-studio.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SVSTUDIO_PRO_1.11.2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SVSTUDIO_PRO_1.11.2.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/3556-0-0x0000000000400000-0x00000000004D5000-memory.dmp	innosetup
behavioral1/memory/3556-7-0x0000000000400000-0x00000000004D5000-memory.dmp	innosetup
behavioral1/memory/3556-179-0x0000000000400000-0x00000000004D5000-memory.dmp	innosetup

Modifies registry class 36 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\ = "Synthesizer V Studio Project"	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\DefaultIcon\ = "C:\\Program Files\\Synthesizer V Studio Pro\\svpk-icon.ico"	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpkfile\shell\open\command	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell\open	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.svp	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.s5pfile	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpfile\shell\open\command	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell\open\command\ = "\"C:\\Program Files\\Synthesizer V Studio Pro\\synthv-studio.exe\" \"%1\""	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.svpk	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\DefaultIcon\ = "C:\\Program Files\\Synthesizer V Studio Pro\\svp-icon.ico"	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\DefaultIcon\ = "C:\\Program Files\\Synthesizer V Studio Pro\\svp-icon.ico"	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell\open\command	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell\open	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.s5pfile\DefaultIcon	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.s5pfile\shell\open\command	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell\open\command\ = "\"C:\\Program Files\\Synthesizer V Studio Pro\\synthv-studio.exe\" \"%1\""	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell\open	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpfile	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\ = "Synthesizer V Studio Installation Package"	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.s5p\ = "Dreamtonics.s5pfile"	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpkfile\DefaultIcon	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell\open\command	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.svp\ = "Dreamtonics.svpfile"	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.svpk\ = "Dreamtonics.svpkfile"	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\ = "Synthesizer V Editor Project"	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell\open\command	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpkfile	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.s5p	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile	SVSTUDIO_PRO_1.11.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpfile\DefaultIcon	SVSTUDIO_PRO_1.11.2.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell\open\command\ = "\"C:\\Program Files\\Synthesizer V Studio Pro\\synthv-studio.exe\" \"%1\""	SVSTUDIO_PRO_1.11.2.tmp

Modifies system certificate store 2 TTPs 2 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F	synthv-studio.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F\Blob = 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	synthv-studio.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1408	SVSTUDIO_PRO_1.11.2.tmp
1408	SVSTUDIO_PRO_1.11.2.tmp
3444	synthv-studio.exe
3444	synthv-studio.exe
3444	synthv-studio.exe
3444	synthv-studio.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3444	synthv-studio.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1408	SVSTUDIO_PRO_1.11.2.tmp

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3444	synthv-studio.exe
3444	synthv-studio.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3556 wrote to memory of 1408	3556	SVSTUDIO_PRO_1.11.2.exe	84
PID 1408 wrote to memory of 1612	1408	SVSTUDIO_PRO_1.11.2.tmp	90
PID 1408 wrote to memory of 3444	1408	SVSTUDIO_PRO_1.11.2.tmp	95

C:\Users\Admin\AppData\Local\Temp\SVSTUDIO_PRO_1.11.2.exe
"C:\Users\Admin\AppData\Local\Temp\SVSTUDIO_PRO_1.11.2.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3556
- C:\Users\Admin\AppData\Local\Temp\is-CKL8D.tmp\SVSTUDIO_PRO_1.11.2.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-CKL8D.tmp\SVSTUDIO_PRO_1.11.2.tmp" /SL5="$701E0,105060798,819712,C:\Users\Admin\AppData\Local\Temp\SVSTUDIO_PRO_1.11.2.exe"
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1408
- - C:\Users\Admin\AppData\Local\Temp\is-87K1O.tmp\_isetup\_setup64.tmp
    helper 105 0x48C
    3⤵
    - Executes dropped EXE
    PID:1612
- - C:\Program Files\Synthesizer V Studio Pro\synthv-studio.exe
    "C:\Program Files\Synthesizer V Studio Pro\synthv-studio.exe"
    3⤵
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - Executes dropped EXE
    - Modifies system certificate store
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    PID:3444

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x460 0x340
1⤵
PID:1324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

synthv-studio-araplugin-x64.vst3

Path C:\Program Files\Common Files\ARA\synthv-studio-araplugin-x64.vst3
Size 20.4MB
SHA256 33a7514059551da365e3ada0cf90232b3675816103f2d41f9c016ee0815793d9
MD5 bf5371a899e04fc835b55421a353ccee
SHA1 9dceab9015a69d4b6471eec3734e61143c84fc53
SHA512 689a22ca6b22a3dde0471092c8c300a5fa85f867958509a484a0c825c3c7ef26a0d8d81f30d1c5cabdeec3736d7b9a4d689cdd31ba6f903c7841e70c2f215be0
SSDEEP 393216:etVWqQMtEEiHaGMNLMQfE7bmJg95ipxQ5t+3K70NuIrn8x:eS+tEEitCYQfwbygsOs3KAgIj6
TLSH
T10D273317259AA2DDE34227781A4102AD35D4695CC0FC8D393BCB1D79FF49EAB01CBEA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0.dnni

Path C:\Program Files\Synthesizer V Studio Pro\f0.dnni
Size 1.7MB
SHA256 5a21cadf5012e838661d982e68f9a84038427ad0b44631bc088e2631871cd95e
MD5 485465e238c914c2488aac22f5702eb5
SHA1 ff0129581b6505dd450cd9fb0a5868b039ffda5f
SHA512 b0e7fdc6306539dc4ca5bbbfb88b4b09e51df389c3e0a03f7a7c5d5eedfab4c22ddf1703d78661f3bc1ee33d1dd01d08a7dffa11410b4012a22e600dc3ca55b6
SSDEEP 49152:IB4kTJEvKgc+cSVG9VmBY4vMhvEdq1so71Olp:IQ1RcSIVmHM9Eeso71C
TLSH
T16585330893A5175FF5D024F97432F6FCBF286DEF816B4B8762EC240759E42825A4389E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansCJKjp-Regular.otf

Path C:\Program Files\Synthesizer V Studio Pro\fonts\NotoSansCJKjp-Regular.otf
Size 15.7MB
SHA256 f18253affd968c8ea592d8df6d84b1d4c5d3a46d267e53a1f6749e6c4f76a23d
MD5 7ed4b9a7daaf1d1c71903a92059434fb
SHA1 03d1f98398da4ba4137aa177d419a2240ebe17fe
SHA512 993b2457eb9b9ffa3f023e9bfac77f97444df196047951dd22de0fa683b97eb5ff46fc01bb34697c9307794b0f9d8a24fbff531416bfd7d11597a8cfac891c61
SSDEEP 393216:WaxAaLuP4Khf/ypeQIesikPbvTuYbRvl8bJTimvAOopd/NtZCnpI4w1FT1IixLtv:WlaCP46f/ZQIykPbruYlvl8F//YhJCnM
TLSH
T145F6127E68FC6828CC57D1367646A53E66D90848854FE0FCE4D39FB23EE52240B6D6C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ornamentation.dnni

Path C:\Program Files\Synthesizer V Studio Pro\ornamentation.dnni
Size 1.1MB
SHA256 3d4a66d8e0b1872ff60f72d3814e5a6c137b1c78e02e238321d9d4ab50ab0b13
MD5 29e39a81c40ece169b476fe79f667664
SHA1 98b880efdbee283049d27e51d5ec8e39ad32b351
SHA512 24e5e358de7d6257dd7fe23d52355a189b08f87c1be42d4f0a66f7931a7b879e727fb0cfeb13b02b176d637ec2f62292c365046a8e7808867f135df62c7db487
SSDEEP 24576:zTS+kBf1Vwh9P5AYaaKI3yngUgRnwwlXzGaIz1KM5Rlx7:8BtVYPrKI3GgjOwlD1Iz1KM5RP7
TLSH
T1B63523017324A60BC60D1A711E93E2C663A0FD7B2F478341F1F26AAB69317861EDF65D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

synthv-studio.exe

Path C:\Program Files\Synthesizer V Studio Pro\synthv-studio.exe
Size 19.9MB
SHA256 efe4128ca9ebc8940fe336b2f6c22a9c6086bb24abb313736b8950e75d134d2f
MD5 0882046b99e3cb3d0907b8b049b74669
SHA1 26d4e00f633faf05a46ca26189776aa69dea87f4
SHA512 fa872fdeb2c7d0a7933944114931e3dffb4fbf82cd94036e1d26649062e98db6b7a03909cca23aeb54a7ab76c47f13fd0a2b61f3e3362979c54b66e2d603997e
SSDEEP 393216:n8FgKWbOghzGHYoSYYqZSdOGxM+4NmijOgyNNF25aBYwlks:qMbvzLYlZwOGxMlmLBPYYYw/
TLSH
T1032733AB516A52E5CF8147B42B8B18EC34C4785480FDA918768F5622F7A1C7E40DFEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_setup64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-87K1O.tmp\_isetup\_setup64.tmp
Size 6KB
SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
MD5 e4211d6d009757c078a9fac7ff4f03d4
SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
TLSH
T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVSTUDIO_PRO_1.11.2.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-CKL8D.tmp\SVSTUDIO_PRO_1.11.2.tmp
Size 3.0MB
SHA256 a41b7e8e9bf74184b7ae94c9ecc0597c604dd4ccd9727f0ddd567828a25a8e86
MD5 33467415fa5143e6207aa2bc4e6a43b6
SHA1 770fa07518b95ac11be1df4183fcf5cf3418a5ab
SHA512 80c45fa5fa0fe59f7469aa21a3f57b3b48e4a9caaf97e01e4d6dab45207269667cae19aedeccd594325a896f16a87f0153e96d888a1bdf88a22067e6bc092b07
SSDEEP 49152:sWGtLBcXqFpBR6SVb8kq4pgquLMMji4NYxtJpkxhGjIHTbO333dE:otLutqgwh4NYxtJpkxhGl333C
TLSH
T1F4E53A17F28C713ED06B3A364A33C690983BF66169168C2797FC794C8F365942A3E647
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.1_Aug_2026_65dca966_temp175a2fe8.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\.1_Aug_2026_65dca966_temp175a2fe8.svp
Size 1KB
SHA256 4e8298ae577bcf3fcc59cc8b56596c95a2aee86f14e42407b2266a7c52702e1b
MD5 fa15c28076320eca71849afc49b467b9
SHA1 319520e89e1e43b7a47b9b65e24be59747472edf
SHA512 1f7926706835a879ef15fc86c0f7a598892621c24b0a476da5d70c01cd9ee2cc505e7b46e6dd2e3d142f1016547254d24922803eef83a689bfcabe4985abda82
TLSH
T16F31BCA55133287716D2EC7C3B3D5A4387F112D812D40D260AEC4C1D279FD356A47AB2
MD5 SHA1 SHA512 TLSH

Submit Download

.1_Aug_2026_65dca966_temp8ba8afcb.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\.1_Aug_2026_65dca966_temp8ba8afcb.svp
Size 1KB
SHA256 7d24d0b2eba455c09db7352051d9e386d08ac75b7e11f151ea528f35656c4b96
MD5 2e44110212883c062972d5b05bbf6f37
SHA1 422fea9b39fcb04bc2c1925ed191f1f57fab8c6e
SHA512 7b7530ba36dceed1d8f1254e75c814f5d6cb146a1c663002ba982c8a34ef2e23496a1975a8d43a637f73dbc9cf065df3cbc420dbe2dea4a76d6113fb1967a7a3
TLSH
T1DA31C06651332C7715D2EC383B3D5A4387B2129412D44E3709EC5C1E27AF9357E436B2
MD5 SHA1 SHA512 TLSH

Submit Download

.1_Aug_2026_65dca966_tempd4030540.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\.1_Aug_2026_65dca966_tempd4030540.svp
Size 1KB
SHA256 51e62d39f282aa7fc4c765a526a436f15c03fd6fd00cd32020be8906a61a90bb
MD5 369e38d552902e57dc43125ae3baaec7
SHA1 9a35b6d04f7fb77a53a9abc00d80949051ad791a
SHA512 7931debbdf8b3b1972b47def99384c71a57947cf914eecf7c42e8bc3a3f95e622b78f8e1cf8dc9adc266fab9e3184895df7114f0ea0e4ede5b534f050482e12e
TLSH
T186319CA55233287716E3ED783B7D5A43C7B2129823D40D660AEC5C1E27AF9347A436B3
MD5 SHA1 SHA512 TLSH

Submit Download

.1_Aug_2026_65dca966_tempf6b3cb2.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\.1_Aug_2026_65dca966_tempf6b3cb2.svp
Size 1KB
SHA256 6663d7fdd9dee8f858fd3269114727b4ed44179860c2dcea198aab4a3af36569
MD5 e25b7c4e63f0c7aafc30c2cd31d02026
SHA1 ca19dee5e92ebee5138eb54a9bccc4f227f853f4
SHA512 6c299a455d926315bb9197388b4cfe0b508ed4b6818bd3dfef91162d499b16aab666d7474da846c95abac8ec226f9f15e560f05e106685530660654cca2b5f0c
TLSH
T1F0317EA551332C7715E2EC783B7D5A4387F2129422D44D660AEC4C1E279F9346A836B2
MD5 SHA1 SHA512 TLSH

Submit Download

1_Aug_2026_65dca966.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\1_Aug_2026_65dca966.svp
Size 1KB
SHA256 0709a8123894ec4ec85fbf93d1364eef745eba008c021da2b04d2464e3645189
MD5 d7c6d6df3cb9c5d703b189d53375a454
SHA1 5ad64dc4006e240028ce845d64578e887e9872ab
SHA512 8dfa9f78384e4ad2986b3cd380fc40ae99dd30b36745a05382686a245ae6808c0920bddec022ec07edfbca4e7172b4c7e79e11aff42feaa1f69e851390e40ba8
TLSH
T12531BE655133287756D2FC383B3D4A4387F1129423D44D2609EC4C1D27AF9356A432B2
MD5 SHA1 SHA512 TLSH

Submit Download

1_Aug_2026_65dca966.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\1_Aug_2026_65dca966.svp
Size 1KB
SHA256 c3db9c2ae80698d2f9cb817624ed33f723d196a29df6e2fc503b3f052293b15c
MD5 41e28e5043e1b70fef9d61eda54ec6d6
SHA1 3ede460d56b602d3171fd4ce113f161c341618a2
SHA512 ea4a14fc9071fd5c311ffe237e1f4160f39380890f789c5eb6415e6686df6f61279e5ce3fb86d29c4d326dc50f09bceef02fcae8ab9b0d0a20d25053dd1acb9f
TLSH
T15331BCA551332C7755D3EC3C3B7D4A83D7F2129822D40D660AEC4C1D27AF9346A436B2
MD5 SHA1 SHA512 TLSH

Submit Download

1_Aug_2026_65dca966.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\1_Aug_2026_65dca966.svp
Size 1KB
SHA256 33f0f089e691478ff40ef83a34c6403647cff79b6653a6f6aa033c5170b06b00
MD5 24cb4185e55d0829ad7ae38a49803dac
SHA1 11469edfeed0171122453c98aeed4c06285b0d28
SHA512 03bd47c739c118928396d1d444b2a087811f09424f1db7dab706726e9b91af2b0260197e4f4092c0bff127ce48f1653a28a4b74f6b1d0f38665a0810fe6b790c
TLSH
T18031BCA542332C7B16D3EC383B3D5A8387F2129412D44D664AEC4C1D27AF9346A833B2
MD5 SHA1 SHA512 TLSH

Submit Download

1_Aug_2026_65dca966.svp

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\1_Aug_2026_65dca966.svp
Size 1KB
SHA256 0399406eb428ac70a998d6a3d2d6a5403069699e14f210e89b1ad268d245a817
MD5 872de6374fca221e321e3e9771d5107a
SHA1 9e1a8b084e582759f8026ddb5a60183cce7b6f50
SHA512 718fef470d39ab0b28d12876f874be1e647077edc04b3ae591114edeb8a79bcf6ebf1c220b978f78829653db97ec8fcc82228cb49c5ae7ee8c472819ddb0d8fc
TLSH
T13631CE655133287B15D3ED383F3D5E838BB1129422D40D3A0AEC4C2E27AF9342A432F2
MD5 SHA1 SHA512 TLSH

Submit Download

1_Aug_2026_65dca966.svp~RFe5b2603.TMP

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\1_Aug_2026_65dca966.svp~RFe5b2603.TMP
Size 1KB
SHA256 6ee88156c7b5e88de100c872bd2e67fa09385caae70dbb9ed3b61d7543aa20e7
MD5 3010d6583570ba7724640c64b365aebc
SHA1 acc75e6856d45819db5d65a6f89ee441b4a7d0cd
SHA512 0b40d30e7ca359b56413d9f1cd42af5e9f956c2de0e4de1bbc23e7cd1e8d702e9c87d77f8b6e5e841d5d0dad56d2339991135fd47d0d7ee37f6bf68168308786
TLSH
T13231E06552332C7B16E2EC383B3D4B438BF2129413D44D2A0AEC4C1E279F9346E472B2
MD5 SHA1 SHA512 TLSH

Submit Download

session-3444

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\session-3444
Size 17B
SHA256 2c43182a027ffa22c592d18f583606ca78bd71f0b2719b5000603efbcdcb1bfa
MD5 6b8958aee85e5886f759b92e5cc697ef
SHA1 51b78fc694f2cabd2af66d3695dcf9b7d0966b7e
SHA512 8f3bf4d29304b653289cc1488658aa9b41971d1640c33fea2f9a1b9de786f88138874a5e00cfb16e45d80530f1eb3ebe74ccd388b5f8da48670e6a7b06d22a8b
MD5 SHA1 SHA512

Submit Download

settings.xml

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\settings\settings.xml
Size 129B
SHA256 fa2bcaa706e3c86e1e0d97e837791fb43d1651d2c3d48a34704e1e09a427b07e
MD5 9d968cb5e460c8d43313c6d5e26fe62f
SHA1 1b92704da5123f487ea7388e81f0675777232c44
SHA512 380b0cf5af126f795787e7d5c71a4feb9e8c2390362cb1f458598c57da5ce5e30b1148a4abd77cbb6b24ee77ebd214d84cb8790a7a7510623ab61af60297a02d
TLSH
T12BB092EA2102AD6A17A35A219A5ACD441271A5ED09C21A6426AB09A3254A8D807C728D
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1408-178-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/1408-174-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/1408-8-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/1408-9-0x0000000002810000-0x0000000002811000-memory.dmp

Download

memory/1408-5-0x0000000002810000-0x0000000002811000-memory.dmp

Download

memory/3444-182-0x0000000140000000-0x0000000142CEB000-memory.dmp

Download

memory/3444-181-0x00007FFE13B20000-0x00007FFE13B22000-memory.dmp

Download

memory/3444-180-0x00007FFE13B10000-0x00007FFE13B12000-memory.dmp

Download

memory/3556-179-0x0000000000400000-0x00000000004D5000-memory.dmp

Download

memory/3556-0-0x0000000000400000-0x00000000004D5000-memory.dmp

Download

memory/3556-7-0x0000000000400000-0x00000000004D5000-memory.dmp

Download