Analysis
- user interaction
yes - max time kernel
150s - max time network
196s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 02:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
flstudio.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
flstudio.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
fl studio/flstudio_win64_26.1.2.5557.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
fl studio/flstudio_win64_26.1.2.5557.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target flstudio.rar
- Size 1054.9MB
- Sample260804-clbzcsem8v
- SHA256 b9160dc0f8ae3c338c82bac10a3dffc54e3f4b72ef07bc022479b2472d24b61a
- MD5 30c715e7b8736d93d57f3b036ae33926
- SHA1 1675f5490a9d641c402ed761fdac3e413742bf20
- SHA512 721a9dab0622c562d2ea2ca0cf917d5860be7abed4e89732b7393b1074fff70b42cc6126c188251c736b7a12ffef9ff9e4f6b9bc8723ed63405c74cc13116fe5
- SSDEEP 25165824:2xP+h7l/asaIwbo1kI4k+NE7uDyoUkVqKlJCbORiZ/EmogFIc1v0I:OP+h7l/aTTKG6uDyZ2rlJCfsvgFp
- TLSH T1F6B9332224B6D1275E0E2D6801CCDF0DCE93C95934A6AAD0F696817E8CDAD67E3D03F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 984 flstudio_win64_26.1.2.5557.exe - Loads dropped DLL 21 IoCs
pid Process 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe 984 flstudio_win64_26.1.2.5557.exe - Drops desktop.ini file(s) 2 IoCs
description ioc Process File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Instruments\Keyboard\Close Grand\desktop.ini flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Instruments\Keyboard\Close Grand\desktop.ini flstudio_win64_26.1.2.5557.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\HQ Metal Kit\Kick 1 HQ Metal #3.wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\Jayce Lewis\JL Tom Direct Floor 06.flac flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\Rock\snare_oh 05.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Kicks\Attack Kick 05.wv flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Shakers\Attack Shaker 05.wv flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Legacy\Vocals\FLS_SpokenWord 001.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Shapes\Misc\SHP_Wire Scan.wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity Flangus\Vibrate.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\Jayce Lewis\JL Hat Overhead Pedal Hat 03.flac flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Foley\MA Bottle Strike 02.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\FL Studio Mobile Rack FX\Echo\Trance Delay.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Multiband Delay\Coarse HPF (morph).fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Wave Candy\Function\Oscilloscope.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Generators\Drumaxx\Dance\Dance 15 MC.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\SFX\Blang SFX 1.wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Legacy\Drums\Kits\Drum Kit 02\FLS_Hatpd 02.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity Convolver\Small Rooms\Bedroom.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity Convolver\Spring Reverb\Spring 09.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity Flangus\Classic.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity WaveShaper\Crossover.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\ZGameEditor Visualizer\Wizard\The Evolution of EQ 5.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Impulses\Exteriors\IMP graveyard_air.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Impulses\Reverb Devices\IMP Evnt - Cellar.wv flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Misc\Used by demo projects\Mehdi Ebrahiminejad - Never Out\PT_03_Synth Fills_170_G#_Wet_896700 - Part_2.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Impulses\Exteriors\IMP forest_medium.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Hi Hats\Attack Hat 15.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Hi Hats\Power CHat 13.wv flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Instruments\Guitar\Pignose\Pignose (8).wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity Convolver\FX\Forest Ravine.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Demo projects\Visual\ZGameEditor Visualizer flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Channel presets\3x Osc\SciFi 4.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Envelopes\Maps\Vel curve - no abrupt release.fnv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Cymbals\Volt CleanCrash 03.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\EQUO\Resonant lowpass.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Hardcore\Default\Dub&Dancehall 2 XS.hdprg flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Hats\Scot CH 1.wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\HQ Jazz Kit\Tom 4 HQ Jazz #2.wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Kicks\Power LongKick 07.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity NoteBook\Default.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Vocodex\Immediate\More testosterone.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\Groove Bias\snare 1 rim v3 rr1.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Legacy\Drums\FPC\Hi Hats\FPC_ClHH_GZid_003.wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Emphasis\Transient shaping (extreme).fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\ZGameEditor Visualizer\Wizard\HUD 21.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\ZGameEditor Visualizer\Wizard\ColoveContent\Others\COLOVE Watch\The Watch X2 by COLOVE - Strap.svg flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Artwork\Wallpapers\Fence.png flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Misc\Used by demo projects\Electroconductor - Inner Days\Shaker_2.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\Jayce Lewis\JL Toms Room Floor 03.flac flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Kicks\Attack Kick 59.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\ZGameEditor Visualizer\X Cynex\Psychadelic Beehive.fst flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Demo projects\Demo songs\DEDZII - NIGHT TERROR.flp flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Impulses\Reverb Devices\IMP Lex - Dense Warm Room.wv flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Claps\Volt CleanClapSnare 06.wv flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Fruity Formula Controller\Empty.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Plugin presets\Effects\Pitch Shifter\Music\Octave Down.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Channel presets\3x Osc\Chip 4.fst flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Hi Hats\Fracture Hat 70.wv flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Legacy\Instruments\Piano\Piano 2\Gz_C4ogg.wav flstudio_win64_26.1.2.5557.exe File created C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Misc\Used by demo projects\LeriQ - SHINE\RIRI x LERIQ 2025_Signature tag_1.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\Jayce Lewis\JL Kick Overhead 1 Kick 04.flac flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\SFX\Importer Blang SFX.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Shapes\Misc\SHP_BungList.wav flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Foley\MA Calculator Button 01.wv flstudio_win64_26.1.2.5557.exe File opened for modification C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums (ModeAudio)\Hi Hats\Downstream CHat 08.wv flstudio_win64_26.1.2.5557.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language flstudio_win64_26.1.2.5557.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3420 7zFM.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 3420 7zFM.exe Token: 35 3420 7zFM.exe Token: SeSecurityPrivilege 3420 7zFM.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3420 7zFM.exe 3420 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\flstudio.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3420
-
C:\Users\Admin\Desktop\flstudio_win64_26.1.2.5557.exe"C:\Users\Admin\Desktop\flstudio_win64_26.1.2.5557.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:984
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Impulses\Exteriors.nfo
- Size 29B
- SHA256 c5705dd82713be76cc5e4c1930589106d67cab8b6e905768a21233c77387db31
- MD5 c9e2cc184f1dd73cd5a66abcd8c6e0cd
- SHA1 ccb180bc3ef502a872f88d591a90571fd8c61fae
- SHA512 addbac550b8d084e8fb95cf82d7ccb13acdf434b2aaa63b8e7b8bc09a9cc0e5ecd8d8121762a0de6eb69d8ac4f07d7ae9b5b0969f72d36f5b042d76df181887e
- MD5 SHA1 SHA512
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Misc\Used by demo projects\Chan Gibbons x Ceebeaats - Time\CB DnB Snare.wav
- Size 6KB
- SHA256 55ce08381b3315e0ba38c45c88da8156c85a4128d31511984aeaf6480bf1df24
- MD5 08d99f4e1cf54feb7c4cd638dce350ea
- SHA1 32dd85394fec2d173ca52f54bcc1a4f4dc241831
- SHA512 0259546c3a0c73ee976b7abe895d7a3e5cd41be693758237628db61f99b6f282863da3d0aa4834017a4a1d96059c4144e6b60344ab0280bbadae08b9f457311e
- SSDEEP 96:zYL7bBoqxPmBCOaxOK+WCPsvAspLgieqBWJywXXFHldSMU2ithoTHQx:EfttxOIOWOKxCPs4OLgkBwXFiyithoQx
- TLSH T13ED15CDFDE2DD656EC26727861385263575078B0ABE035E37F8826F60FF9614B82016C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Misc\Used by demo projects\Chan Gibbons x Ceebeaats - Time\Chorus - Hum 2 (Left).wav
- Size 413KB
- SHA256 efdf1d90f7002781284ecb23a380e5023181e53adec80e18bd6df75ad76d55c5
- MD5 e4a65bac6776a3d3959cd40daf09e37a
- SHA1 d55dda1beef2114dba8553c24bdc7e21f05d881a
- SHA512 b820e376fef21144be8bf7fc89026cb45c6382b2cf508cf7b8df4ec54ce0960f3b326d609d6e9283d5bb8def883a19e3b5d1c620ed8d5bb3e6fb274c6c59903a
- SSDEEP 6144:tW80YMD4RZZmMYJG4UxL09GkfBuld7qJ6jw/R4nZQ1SkRTdc71Nisov4R1AdBfs3:tV0Ni3mMbdVfjgkKTSZ41LK
- TLSH T1FE9423A47C454577D0B634FADC0A1A415B7CA26F8B36D0803F767AEACA0A811ED46E4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Misc\Used by demo projects\Jay Cactus x Confz - Mic Check Ready\Track 22 (consolidated).wav
- Size 412KB
- SHA256 bffa6f8139709bdcb6327d51d273cb1ac9d7353eba7d3ad96c9e401ef529bdef
- MD5 7a35475f8f9d47315d7ec52bfd8ae698
- SHA1 727c0e3ee972ed613e67f48f5043e91aaa65f4c8
- SHA512 7e32d961e9a851c2c71808bfbd808bd64cbedd9d64b1200074cde7bde1b65123e5bbff6694859ec903c487050fad0425168d13a413a66de98cc5785d2f0b4101
- SSDEEP 6144:qcFj9okpM2MepD4pZfezHDZHQwa9wEd67qCsHWvSMYHWtgYbjgsi/2rr+:5Sze0enZmI7qpH8SMYHubUNo6
- TLSH T130942360DD8C1886CC9D76B8FC6A193C771871FE2B7E301570D1726EEA1236449A98EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Misc\Used by demo projects\P.Priime - Use Me\Amount Too - Bass.wav
- Size 396KB
- SHA256 a4a801580f480189c6fca13bb058911e4831d934fa1dc4597cfb2db451c02fc3
- MD5 77054e7dfd4bdb23b90bfcbad439eb9e
- SHA1 04df8d23fd3c0435fe06b02111720758385ce9c1
- SHA512 b81bfc50c02cd6d7c0cfea5c1352d6943b127514f74ce3b2e3c26ecc16a856cd1e099ef031e09865a72a6d93149b300f66c1800b8c21abc3aa37de9f51f2a0f9
- SSDEEP 12288:GX2gTGXIiZNcsxI/U9ZEYvmfx0KojUoCyuIXU:aWNZNcj63v2xbFyJU
- TLSH T1FB840277BB40AA55C4CC027ACF2A19392BE811B57BB44FD13C417645E8FE4D89C2BA83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kicks\Monster Kick 005.nfo
- Size 36B
- SHA256 f55f810b44800b37393cc2a97d85595f2a0ea3cd9c4d4416dc00c9dc8badc3d6
- MD5 1406de33f68d12ff32f186da3a596309
- SHA1 0d4c28f3f5a9290c553a33312bd0686ddda28eb2
- SHA512 143282705c3c19a24b217653b8af2cdb5378a4adb0b5093fca2643a38be74f4fbc06e9551d75f854091855ddc401fb65ae4560aa865a638346a831e7b9100d0d
- MD5 SHA1 SHA512
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Drums\Kits\Groove Bias\snare 4 v7 rr1.wav
- Size 9KB
- SHA256 f8c31012d32c60da332a6204133b832e610a38ba9506e42606fafc6d9b77053f
- MD5 d786090570f1b09f694aef4b78b5fb44
- SHA1 bb063717c78da303499bb0239ab6de0cd99ea079
- SHA512 25cabe81af1c5ccfb45de1c37f2064a4784842a1c03513a6ac59d5e5d49de684961a683d2dafa269087fe5b88b7f0551448f5a9cbd8a490a81cd30822ba7aed3
- SSDEEP 192:uttxO3uNllsUkdZqeH6QIk1kX+b074AT0cPnlvifGBUmfdxkrMeSxQ:utDwaHsNaeaQ0V7PFXheS2
- TLSH T152126BE18434D5C1FD072473B1B297E745923E3476D052CBFF8042AF296EEA5B961439
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Image-Line\FL Studio 2026\Data\Patches\Packs\Legacy\Drums\RealDrumkits\RD_Hat_6.wav
- Size 5KB
- SHA256 2f68d1362865ec229d560d6b4748ef7659696aea5294d5f1bb447bbb61023c39
- MD5 dc5fc06e1df47fadd5f1ec4a4a5b2aea
- SHA1 ed79736a5c4fad63616084c85d1bd64956d9c0f5
- SHA512 2d4b6d03c4b845d641729b24f1dc3332aed8e04165022410200aeb4b45dbdcbac9d132700a99476cca88e6b4b2d23684f56bbd242e97ad81ccdefafd4e2a0ff0
- SSDEEP 96:HptjZytrqSBjNhyBhW+GCqI7uhhJ837UdgnCijwJhYb9t7cujLGKpekwAJQg4:Jvy5nBjHyHWGq0o234gnjw/Yb9tw5QJa
- TLSH T198B14A4EF208A98FE51704B218B3E73686E1B27017F9D717E67A325A4DA3982795C1CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Image-Line\FL Studio 2026\FLEngine_x64.dll
- Size 21.2MB
- SHA256 ba3597b0d4ce3a407a008153c8c8712a9757b5513ea72d67258d3e20f8402bf4
- MD5 85b5f1cc1c05ca5be807aa659d412562
- SHA1 8b82e31cfddb8dd2688e9756967e0bfd17ebabb1
- SHA512 0a3e162c580f0b5e2ae0dd308c1a7495d7cf6b57c51862f70557e43bf947f64a74c68bfa8dc0a44c414ca87f5c61d306f5754d51952d3847c687accefc3ef1ab
- SSDEEP 98304:lIVl5t+fJEjwDFM3znCzeItoFr6KwDtCM5MTmtG51Y1vYlQQnzLIWBUFOn:XVDFi4ba+D5Iyqq1AQILIvFI
- TLSH T17F274B7F31E59118C16FC23AC2A74F519B33B4A91B31C3FB429012596F25AD8AE7E721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\ILSetup.dll
- Size 1.2MB
- SHA256 bee6fc430a05bdcf82226adcbbfba9abbe08fc065b97c1f2cfeb9f9c4e34cd25
- MD5 494dbd5993a47b3b720f5e0f6eb04c59
- SHA1 08d3f00ee435a9ddbb0afe7869a3183bd3e0a284
- SHA512 2e9305862c5c55e37d5533b6392a428694858880a8ca533f9a7260b7ee4220b79b5d45f5645526b631a05bfaa9fc0725b6e43b0a5681cb36b7b6c413083f386e
- SSDEEP 12288:9eOGI93yacPkwfUdKTzX54vZxYyQB8Og4X/WpeW9UnLDbXBF:9e+3y5MwfgKTL54vZxb88j4vWpeWqP/
- TLSH T130456E23B2C6A43EE0EB19366D33E557583F776125129C5A97F4098CCF293806E3E663
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\InstallOptions.dll
- Size 15KB
- SHA256 f34385901206a3952fe2724edb3b0b123fd897119c774ab68c8745de6662d990
- MD5 998189882c9f1be220c9faf0fd2bde15
- SHA1 787d50c46c9a2a48565f684fabc7503aca8b0493
- SHA512 e0c52ad851b476e7bcbadea8f993e5c6f9f70a9b46e2aebe8ee353a372b0bd5af95241240f880f49b9d91d240a4a2b7e7d2b7c8a18ca1654e607fa8d2772dfd6
- SSDEEP 192:zkByiog2tkjvs9/yb2GC5E5RatZzMHjphLAykyc5MT5/9v9GwBCMFauVizLY:znio7tgOO2GaW2zcjpAT5Ot9lVBZaL3
- TLSH T1AC622B117FC610B7EB9226712BFEA7139BB2B21018D19C0B8E7339462D7A605EF35652
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\System.dll
- Size 11KB
- SHA256 c4aaf80e3990185eeb5ea56bf841dbf5f3d02269d715f3bfdfe8b54aa797a7b9
- MD5 24523fe14bb9ba400a3950016b187915
- SHA1 6ec152b4e4ac04038d4608a8a206070185116036
- SHA512 ae73351d27109187f7c4e312bc30a165202f29d74c65dd0feaee75dab72b97d27c6482b1e95771063afec7e9f2ca03a27a11cd25e39228072b69c33fffef7257
- SSDEEP 192:cS8LqFZBOtRG/+VE6HwIobhj+PJu97wI88QF+wnY5LL:xZQtsh6HQdj4Ona85LL
- TLSH T163324A0347A081F1E151833C08673B27BBB9A72566F08C23AFD35881BD596D6BE79713
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\UserMgr.dll
- Size 23KB
- SHA256 7696c255014a543f720e189ab3fe48f62fcf43435465062649c96138eedb222f
- MD5 9210597fba3dfab3c69b1eb490205419
- SHA1 6e3ca39043756ed1cceaf2d4853e7cb6be1c64cb
- SHA512 4877daefdd34725791fba7c8cc2d85c4e91080ca7787a71ee9ffde71704ac40799b891f03d1f1805a31af6ddc35e335f74c9d620e87d517670a378c001cffb06
- SSDEEP 384:qy822ev7imqsdMCgfwnvmau3+zK8E1Iz6P/RdJ3AiMtDVeNvOCcN:q5TehhMCgfwnvmauiK8Eg6P5TQXBe
- TLSH T1E2B21A01728D4081F216BA3B39E6DB379BFC73B5571988C7F386270B61539C2A978236
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\ioA.ini
- Size 1KB
- SHA256 f5088101970aab2d00c04fdc88c1925ea9fe31904840fc0e1e35310e34aeb47a
- MD5 9ec441e39f5b5bd58ea04d3a413ba186
- SHA1 f2a9e0e65741b1359921106f2233609d1c86f5e4
- SHA512 5b669269647fdeaca0593e42e52e4636a0bebcce0403d28b55be88524e3b26cc40d0bf0b67870aac3aabee0de1eb143b868a923eb61e7e7d5e4d4b14df5a6f54
- TLSH T170317C632DF89039E2FAF148FBF545B153343401582DC95EE0E00A0E48E6A809567BEF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\ioAllUsersPage.ini
- Size 1010B
- SHA256 c0313e195465e521ef5cbd94e19a1abe70cf0d564ec38b017f1e09a276e30c15
- MD5 634fd2633a884035690fd3635c7ae34f
- SHA1 91af7c2af8a41563d33f944868d22673c6116e2d
- SHA512 810389998f4eb641228e5b4e2ec43849102d2d9e1890c17aff5067cbcd0e46bac7850f732815746cbdf62d4f698cc47002cad2aa2f3b442cec3a5652558b058a
- TLSH T1C2117C533AF85514F0AABA0DFAF94035A7397942082DC95EC0E10E0E54FA680817BBEB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\ioAllUsersPage.ini
- Size 1KB
- SHA256 4fc0f38172a9ea5765d3e6ca24b8d5f94d0cd6d3551d6a58e875fd25dde676bb
- MD5 6f9dab62a0eec82d3792bf0e8b3ed506
- SHA1 f84fa31dcadece1deb49cc44ecded1de1a7ed232
- SHA512 360397959f3d681c8d27a1cdbef7ac136d8d55276670afc8cef091f1ac40eee9c1f5f2b651068fe735547566f8d97fb04ea22febe1af02cfc90f8f046f69a2a2
- TLSH T1C8219D033EF90524F0ABB60DEBF54039A7397842581DC91ED0D20E0E48FAA80852BBDF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\ioAllUsersPage.ini
- Size 1KB
- SHA256 afaa1c399f5ffb9ec6bf7d3467d6b020226e10c1b87719445f9512f06c29e217
- MD5 c8bc2e2431145d76ddb0fe028b000f16
- SHA1 9bbd68f1ac32d61dfc701f980eea8c196caa3220
- SHA512 9f2251f648f545db29af0c10380be74575cf7a14c44c73dfc6cfd4ed135643d273875fdf268aa9ce051f733460f4d720f6d290cda8def54c706a81a65963f8ba
- TLSH T1A3218B033EF90524F0ABB60DEAF54039A7397942581DC91ED0D20A0E48FAA80852BBDF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\ioSpecial.ini
- Size 1KB
- SHA256 9facb0e9faf727601dacaf4d8e65cd31bb1ee0a8f5ffdf49bc472108926fa820
- MD5 cc54d166bbe80ca5bcb8841a1b104354
- SHA1 c732231bea918464f591671a41efde15ab3a461b
- SHA512 fbdfa5e6b412cb0f99fda08089f9e6ef5dbc986528d729a8566197b5e4c884351c84aa3b83e4911a40e5eddeaf469c5a66ee2c4fe2cab9a99101f54e4ea1c5e7
- TLSH T15621B0177AFC1518F2BBFB14FFB541759B3A7C56A838C50E81C10A0E09E5B409963BAB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nswB469.tmp\ioSpecial.ini
- Size 1KB
- SHA256 907a1d0a5cb3228fe576c406c193093210d0709dfd85163809f8b7ea28984436
- MD5 bf7b18bf0ad90abd833abaab2a352a5f
- SHA1 d15059fb9f24a5afe5899bd2e728970dffe55c0c
- SHA512 1598a066d6ae27557a65b6f0902c6ed7f7f5e3a94aeff074013a0795471e570b1a296645058f34fe2bd9fccc2fc464c2d2c97ee8a243307329dac056af752821
- TLSH T17121B0137AFC1104F2FAFB14FFB541759B3A7C56A839C61D41C1090E09E5B408963BAB
- MD5 SHA1 SHA512 TLSH