4d86b24c477690650098a2d26aaf85e2d60e6156c2a8b19c1c478700eb040101

Analysis

user interaction
yes
max time kernel
185s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 07:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.exe
Size 58.6MB
Sample260804-hv884seh63
SHA256 4d86b24c477690650098a2d26aaf85e2d60e6156c2a8b19c1c478700eb040101
MD5 478150faeccd0cd4142748de19bc4226
SHA1 c9996a054103cc12a898480bc38bdf04eb46a3ac
SHA512 2fa09b3768d555b52c767a4acb0e2098791c55bd37b95fb53493e55e6f4c9c444bfb8faea9634c47085a5327ac099d46ac61d5e33d5eeebd9ddc4c27e12b43eb
SSDEEP 1572864:RM1UN9zyz6y5o6DDq0EuRDgO3dNLNqiaaPyMGScHR:5zyf5o0rDjLNt5PlGrHR
TLSH
T188D7335BF3A8A93EC16B173641B246E14977BE543A2E8C1E1BE0B50CCF324A01D7B759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
4228	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
5624	SWAM Violin 3.exe
6136	SWAM Double Bass 3.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Common Files\VST3\SWAM\desktop.ini	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\desktop.ini	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM\desktop.ini	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp

Drops file in Program Files directory 54 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\VST3\SWAM\is-20C0B.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\is-6LANK.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\PlugIn.ico	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM\PlugIn.ico	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Viola 3.aaxplugin\Contents\x64\is-IESA7.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Cello 3.aaxplugin\is-KNNKF.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Viola 3.aaxplugin\is-MGNR6.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Audio Modeling\SWAM Double Bass\SWAM Double Bass 3.exe	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\VST3\SWAM	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Audio Modeling\SWAM\is-NRR3B.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM\desktop.ini	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\is-0PP5S.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Audio Modeling\SWAM Cello\is-BRO82.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Audio Modeling\SWAM Double Bass\is-KJP6A.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Audio Modeling\SWAM Viola\is-4E1TP.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\SWAM Double Bass 3.dll	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\SWAM Viola 3.dll	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Audio Modeling\SWAM Cello\SWAM Cello 3.exe	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Violin 3.aaxplugin	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\SWAM\is-0K6DK.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Viola 3.aaxplugin\is-8MJR8.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Double Bass 3.aaxplugin	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Cello 3.aaxplugin\Contents\x64\is-IJD77.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Violin 3.aaxplugin\Contents\x64\is-O5GNI.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Double Bass 3.aaxplugin\is-2Q687.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\is-LHOMA.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\SWAM Cello 3.dll	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Audio Modeling\SWAM\unins000.dat	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\desktop.ini	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Violin 3.aaxplugin\is-SDMBN.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Double Bass 3.aaxplugin\is-Q2HE0.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\is-C9RQM.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Audio Modeling\SWAM Viola\SWAM Viola 3.exe	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Cello 3.aaxplugin	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Viola 3.aaxplugin	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\is-FP6PR.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\VST3\SWAM\desktop.ini	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Double Bass 3.aaxplugin\Contents\x64\is-GK3F0.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Cello 3.aaxplugin\is-I73K7.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\VST3\SWAM\is-HF3N3.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\SWAM Violin 3.dll	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\SWAM\is-05LEO.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\VST3\SWAM\PlugIn.ico	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\VST3\SWAM\Strings\is-8FKLO.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\SWAM\Strings\is-6FUM9.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Audio Modeling\SWAM Violin\is-G49KB.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Audio Modeling\SWAM\unins000.dat	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File opened for modification	C:\Program Files\Audio Modeling\SWAM Violin\SWAM Violin 3.exe	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Violin 3.aaxplugin\is-056QA.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\VST3\SWAM\Strings\is-PK488.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\VST3\SWAM\Strings\is-G3S94.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
File created	C:\Program Files\Common Files\VST3\SWAM\Strings\is-MBNU4.tmp	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2284	msedge.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/4444-1-0x0000000000400000-0x00000000004E0000-memory.dmp	innosetup
behavioral1/memory/4444-7-0x0000000000400000-0x00000000004E0000-memory.dmp	innosetup
behavioral1/memory/4444-1579-0x0000000000400000-0x00000000004E0000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303015406203003"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{8CEDED86-EF08-448E-8FA7-CECA0FD66BE1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4228	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
4228	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe
3932	msedge.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
3932	msedge.exe
3932	msedge.exe
4228	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
3932	msedge.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
5624	SWAM Violin 3.exe
5624	SWAM Violin 3.exe
5624	SWAM Violin 3.exe
5624	SWAM Violin 3.exe
6136	SWAM Double Bass 3.exe
6136	SWAM Double Bass 3.exe
6136	SWAM Double Bass 3.exe
6136	SWAM Double Bass 3.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 4228	4444	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.exe	86
PID 4228 wrote to memory of 3932	4228	Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp	112
PID 3932 wrote to memory of 396	3932	msedge.exe	113
PID 3932 wrote to memory of 2284	3932	msedge.exe	114
PID 3932 wrote to memory of 2732	3932	msedge.exe	115
PID 3932 wrote to memory of 2732	3932	msedge.exe	115
PID 3932 wrote to memory of 2732	3932	msedge.exe	115
PID 3932 wrote to memory of 3980	3932	msedge.exe	117
PID 3932 wrote to memory of 3980	3932	msedge.exe	117
PID 3932 wrote to memory of 416	3932	msedge.exe	118
PID 3932 wrote to memory of 416	3932	msedge.exe	118
PID 3932 wrote to memory of 4788	3932	msedge.exe	119
PID 3932 wrote to memory of 416	3932	msedge.exe	118
PID 3932 wrote to memory of 4788	3932	msedge.exe	119
PID 3932 wrote to memory of 4788	3932	msedge.exe	119
PID 3932 wrote to memory of 4292	3932	msedge.exe	120
PID 3932 wrote to memory of 1792	3932	msedge.exe	121
PID 3932 wrote to memory of 4292	3932	msedge.exe	120
PID 3932 wrote to memory of 4292	3932	msedge.exe	120
PID 3932 wrote to memory of 1792	3932	msedge.exe	121
PID 3932 wrote to memory of 1792	3932	msedge.exe	121
PID 3932 wrote to memory of 1748	3932	msedge.exe	124
PID 3932 wrote to memory of 1748	3932	msedge.exe	124
PID 3932 wrote to memory of 1768	3932	msedge.exe	125
PID 3932 wrote to memory of 1768	3932	msedge.exe	125
PID 3932 wrote to memory of 1768	3932	msedge.exe	125
PID 3932 wrote to memory of 3712	3932	msedge.exe	127
PID 3932 wrote to memory of 3712	3932	msedge.exe	127
PID 3932 wrote to memory of 1376	3932	msedge.exe	129
PID 3932 wrote to memory of 1376	3932	msedge.exe	129
PID 3932 wrote to memory of 1376	3932	msedge.exe	129
PID 3932 wrote to memory of 2680	3932	msedge.exe	131
PID 3932 wrote to memory of 3964	3932	msedge.exe	132
PID 3932 wrote to memory of 3964	3932	msedge.exe	132
PID 3932 wrote to memory of 1584	3932	msedge.exe	133
PID 3932 wrote to memory of 1584	3932	msedge.exe	133
PID 3932 wrote to memory of 2452	3932	msedge.exe	134
PID 3932 wrote to memory of 2452	3932	msedge.exe	134
PID 3932 wrote to memory of 1764	3932	msedge.exe	135
PID 3932 wrote to memory of 1764	3932	msedge.exe	135
PID 3932 wrote to memory of 4864	3932	msedge.exe	136
PID 3932 wrote to memory of 4864	3932	msedge.exe	136
PID 3932 wrote to memory of 4788	3932	msedge.exe	137
PID 3932 wrote to memory of 4788	3932	msedge.exe	137
PID 3932 wrote to memory of 5644	3932	msedge.exe	138
PID 3932 wrote to memory of 5644	3932	msedge.exe	138
PID 3932 wrote to memory of 5720	3932	msedge.exe	140
PID 3932 wrote to memory of 5720	3932	msedge.exe	140
PID 3932 wrote to memory of 5720	3932	msedge.exe	140

C:\Users\Admin\AppData\Local\Temp\Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.exe
"C:\Users\Admin\AppData\Local\Temp\Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Users\Admin\AppData\Local\Temp\is-OM7T2.tmp\Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-OM7T2.tmp\Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp" /SL5="$601C2,60574096,861184,C:\Users\Admin\AppData\Local\Temp\Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.exe"
  2⤵
  - Executes dropped EXE
  - Drops desktop.ini file(s)
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://codec.kiev.ua/releases.html
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:3932
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7fff44b4c188,0x7fff44b4c194,0x7fff44b4c1a0
      4⤵
      PID:396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1817842578735084071,1810769503279982101,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
      4⤵
      System Time Discovery
      PID:2284
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,15731651969067741045,1005417941724980077,262144 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
      4⤵
      PID:2732
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,7830937866545422122,93140787859049410,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
      4⤵
      PID:3980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,3754255167575194959,3698520105470496086,2097152 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
      4⤵
      PID:416
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,6884825228931259391,14796880317264181704,2097152 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
      4⤵
      PID:4788
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,17106116811685466109,12266658837831665095,2097152 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
      4⤵
      PID:4292
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,1754321182800828569,7733275835227265590,2097152 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
      4⤵
      PID:1792
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,8371742208273629309,1126416841749863670,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
      4⤵
      PID:1748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5136,i,4217520037363966015,6789305862401775994,2097152 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:1
      4⤵
      PID:1768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,9518574735214134045,12148831893344286187,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:8
      4⤵
      PID:3712
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3576,i,12970540031323732458,12559120087870982386,2097152 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
      4⤵
      PID:1376
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,6069184464772268259,12107316076473674511,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
      4⤵
      PID:2584
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,6069184464772268259,12107316076473674511,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
      4⤵
      PID:2680
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,270049655571254429,10587759848516756171,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
      4⤵
      PID:3964
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,12716189390945619443,15597598458806563393,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
      4⤵
      PID:1584
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,15613402003693035792,9445129641341553167,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
      4⤵
      PID:2452
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,5470768128779740953,7182670504356254943,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
      4⤵
      PID:1764
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,13157080779454243310,6518029172358054156,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
      4⤵
      PID:4864
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,10403007918895545303,4989871753214709249,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
      4⤵
      PID:4788
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,6774149294536377505,14640897102616098930,524288 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
      4⤵
      PID:5644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6408,i,7295267529281060642,11225647673014644015,2097152 --field-trial-handle=2180,i,13192965389127819911,15034241633042774206,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:1
      4⤵
      PID:5720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1476

C:\Program Files\Audio Modeling\SWAM Violin\SWAM Violin 3.exe
"C:\Program Files\Audio Modeling\SWAM Violin\SWAM Violin 3.exe"
1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:5624

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x33c 0x38c
1⤵
PID:5836

C:\Program Files\Audio Modeling\SWAM Double Bass\SWAM Double Bass 3.exe
"C:\Program Files\Audio Modeling\SWAM Double Bass\SWAM Double Bass 3.exe"
1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:6136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SWAM Cello 3.exe

Path C:\Program Files\Audio Modeling\SWAM Cello\SWAM Cello 3.exe
Size 8.1MB
SHA256 b6d479c948f81349d1d53a54cc80b7d2f216e41a15486b0969c35ada65d4c2be
MD5 0b0af60fd093b468b470e06ade77c7e7
SHA1 25c86bee6b2c1cfc69653adb5ae6a6bf5c0191d9
SHA512 b9ee8be07da540086e9dd48804d55e3b4ff55bc0eec12ac73786c156614ff2aa5650f49d867964393112fbc52e1c544d6e59179bee6be16626e9a03a11c61f56
SSDEEP 196608:EUbE3MgWQ6tKsovaqlvplHiYUU2UBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB4:Gcgp6osmvplC
TLSH
T1D186AF83B27555C5C2E6D0788B2DA52BE331BC290B61DBD724D057663F239E28E7A370
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SWAM Double Bass 3.exe

Path C:\Program Files\Audio Modeling\SWAM Double Bass\SWAM Double Bass 3.exe
Size 8.2MB
SHA256 daa4816375fd18f21d1f4733b028400c09d84e77413658142b7b94cdc7339880
MD5 4b1fd1396fa2fc5ec88836314b20ea1d
SHA1 f03955fad25173e0a4ad4e298daa6465bcdfcd1e
SHA512 01ea1d3496bfbfe70767a67e61ca5d51a1001f8fe34b482f126fb35fb17d318fbfa30b33b96c6a4f50ecbcaec8382ae6bc34a6246e5e2f5fc33475e37daa4bf9
SSDEEP 196608:K6JXA0wYt5KQKkYvfaq1l6heU2UBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBz:NuBYt5KQvYv7l
TLSH
T14B869E43A27555C5C2E6D0788B2DA92BE331BC2D0BA1DBD724D057663F239E28E76370
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SWAM Viola 3.exe

Path C:\Program Files\Audio Modeling\SWAM Viola\SWAM Viola 3.exe
Size 8.1MB
SHA256 bd01c38826b11632bb70a049b3b10ab96c3c6dc50f73940fe83042d0f8f87a3d
MD5 54037d1f5285f19b76e7cb7b5bf499dc
SHA1 53a376c96db90db5ee466bdaa0170cbd1727992d
SHA512 ede7b41afbdd878c6fd592b1e4075bfca0f4743805d77c1a25a6026671d9684a0bbe2a2ef99c40cf176bd94236f8bcee7e647ccd700c5eab802a36f96d311387
SSDEEP 196608:lznAmWicixy3yaq4wvpl8dU2UBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB4:S3ijxyJwvpl
TLSH
T11F86AF83B27555C5C2E6D0788B2DA52BE331BC2907A1DBDB21D0576A3F239E24E76370
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SWAM Violin 3.exe

Path C:\Program Files\Audio Modeling\SWAM Violin\SWAM Violin 3.exe
Size 8.1MB
SHA256 cf7f3810232d792e13cad33d2b4513ef9c70ffb10afd03f62e5946a0adf406fc
MD5 93d6c0bc63c74b2a8a4dc419cb58fbaf
SHA1 5fbc04059dcd5f1b8a8a28db1ca24c9bb430e03d
SHA512 1b78f11c5ee83a32b96d1a3707963dcdf46c76718f4297c6fe194b41a3d57dfaf08ce089d0255217d9014f0bd9e5436b99e698e2f8396e33e3fcee3208dc00e1
SSDEEP 196608:jHU/7izzAokG3aq4wvpl7uVwU2UBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB:QIzAokBwvpl6
TLSH
T1D486AE43A27555C4C2E6D0788B2DAA2BE331BC2D0BA1DBD725D057663F239E24E76370
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-MGNR6.tmp

Path C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SWAM\SWAM Viola 3.aaxplugin\is-MGNR6.tmp
Size 126B
SHA256 5526ef6345adee7c693e58354dd72b095df152be62ff7298b4c6f6d0f91e2f83
MD5 798095cd31340606c8e81d0a5107d57e
SHA1 39d058c4d45ef84b188f7ece620106124eb3d74e
SHA512 9ca995c89d3f23cd2a977fb2826da1f75dc4caa4fe965f9aac3a6d486f6558429a44eaeea35217f85d94ba6d7c2c54ab520c9a1786133b2edd103e36159e53a1
TLSH
T190B09B15282F5020D57FC3071990BDCFF2041857985BE804C78287854EE17164FC855C
MD5 SHA1 SHA512 TLSH

Submit Download

is-05LEO.tmp

Path C:\Program Files\Steinberg\VSTPlugins\SWAM\is-05LEO.tmp
Size 52B
SHA256 18bff127523d28a681f44ed5eab58cf15e0dce657a9550a66a632f10b39d6ccf
MD5 8421dd4185528831953fe76f59e9d3ce
SHA1 dff2d64735bb2c7b4d7f302c15755ad887d1956b
SHA512 84e209e4d7043f896abb37e4592f9f23d6a1698af08b8bfa5801ba5720ffeba09e1a904e853ddf3a623f2c1db55f080a4c15c7131083b663a02d5cbf9906881e
TLSH
T18F900206545B5060D56EC34238D0D84AB2401C45DC15D804E65296820E977054E8871D
MD5 SHA1 SHA512 TLSH

Submit Download

is-0K6DK.tmp

Path C:\Program Files\Steinberg\VSTPlugins\SWAM\is-0K6DK.tmp
Size 83KB
SHA256 c85cca98892ef2c1eb705fe1269fb61e56d66850018f2c1754dfed131aa2778a
MD5 e2665312b6b1f5b02708d9823aa6daf4
SHA1 b9c70dd7df83ba5f01ec9bea95f7c163e06d2971
SHA512 e08cb6ffbffd6919eda1e0eccfdab35ae1003a4647afb21001950af5951924644db54364592b348bbb28371ef4227dbf7d8fa84bdfc09f232c2784ee6c6779aa
SSDEEP 768:tcq0Aof01/v/v/umw/vt/8//1/v/1KgBItFB79N:+q0X0s9/i6r79N
TLSH
T15783E611EA54D2D1C25A07B7E57786CA01246FF97DB6CA4D24CE3A301BBE5F2C92FA04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 03c9714ceda41208919b91db8014de24ae37606ed2abc96a2531b3653937df48
MD5 8c2296de8b61220530f453b2f30415dd
SHA1 2c66c88bc6a0f8267af3c1881fe9195ca1582177
SHA512 c741a1ee72d19a8af3a3823ca6df21b2e3afeeede73da7c80eb421ce9f7370fb162d00a8565078ba3856a8ccf78493a4b12f92955afe287b59ec5f2dc6911402
TLSH
T1E7D023307A3671C0C21E0030E4110B40236E40B230CF43476194440DADB40C1D2DFEC7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 71645f8fabb42611fdf75446825aa877e820a58c1d4f5c3d340d4c7f8e97e2fa
MD5 526254cfa84f421a3a065fd44ae5e25e
SHA1 118930444389e0e6ddb26e1a7153f266330dd97c
SHA512 806f43783cbbfa313c14d6900885b98d698b5d06291f1073c7510599c3f33719cb10da9feaabb8234398191fc5a3090d6e2cd402796fe304589ad6c806e2f0b5
TLSH
T1FD81C639C20341A5DB2D01B8B1CD112C34FB9AE9FEAB1E958CD56B7678323D5E39825C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c1a0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c1a0.TMP
Size 3KB
SHA256 c7cdfc54eecab828b2a221902bfc29067cb29da88e4522fee0e1d0b38ff5d41f
MD5 a42b5885173c109b2cb4c5d1307e7538
SHA1 d0cfe53f547231229142aadcd99b0fbe1f98dfea
SHA512 e3795c8fe92eae1d1a3258401c8dc907616762f8f673a569e8b424f03ce956ec537eef80b109e8940d317b73d92b85a607ac98e5fad1ac48e7d365ce9a53471b
TLSH
T11881C739C20301A5DB2D01B8B1CD112C34FB99E9FEAB1E958CD56B7674323D1E39825C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c9877f24130e3c206d86508229f613223cb98d71dfd978883643902bb0383885
MD5 8077ac7d02e89204a449eb7fc24a631e
SHA1 6d4074f059b5f590c098e404e73f73649e92eb66
SHA512 194e1138ce20da18697cadb07797c9bf1500e1b7ec5b400bed3fb05056bcdc1fcd1832a97d6a296a95bbe9372ee8d69a03099d35f9db85620286b74c1d2ad0d9
TLSH
T154418CF3C3E8856E894556F0AB18BE2BCE2E0954436C3D5A88E4AF1B93E2471E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 98a62fe5da99a4c98156b97761efb299c225b774d15224d7d281fe8a7e1b4c32
MD5 085bb9260c1abc41e5067b1b5e376100
SHA1 68622743b7eddda7a7620db32e6a34088610213c
SHA512 a8edd06919cd12a224cee4d0ea88a939c9f2c1bcc742b39af7e839ff8690919d92d078d25a6a118ec858fd5e360f0d0474e4ec9c5be99a0258b62527791588a0
SSDEEP 192:sxZQkR6yM/jK1Ml8MiE/f2/szPOYte/ZIdpWjHW6+WNGYzQijYIg4J:sxZQkQqE/f2/szPOqf0HbGxc
TLSH
T15352E752AA34A977CCCBD218BA557F53D6F51973E2800D449AFCDA1C00E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 470b43ca31e0539d539bf097d21656f68ce580fc87467cc9a802295fc317a4ee
MD5 1222f52fe05cee879071259f37a64c1e
SHA1 4094e32aeb117f4e795e271ab5668e7036e4358e
SHA512 764da422fc02fe67170a4fcf30e2b40319e948fe882242f29690319e9542807fbf8778b745ebd970a8cf01712c581d7c8826a308d767f05e4b217c72e7ac0a3f
SSDEEP 192:sxZQkR6yM/jK1Ml8tijE/f2/smWpVjPOYte/ZIdpWjHW6+WNGYTm3RaIgbFJ:sxZQkQVE/f2/smWvjPOqf0HbG0b
TLSH
T1EE52C611AA34997BCCCBD21CFA557F53D6F9183291900E549AFC9A1C01E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 31f6670e58ff8ea90268779c8a07848eded3decdf62899f77dd52cc889370651
MD5 8cf3a5c4d5772172e032e3c4977e1601
SHA1 ca61b36d8e5e3bb8d288a3ade04dad7352f15cd5
SHA512 6464c1ae67b721bfd6a20bc30c59c902d36060a7d5753c5f4b869b3a76312d0d9c7246b623339204f3a510435939555c07971150514dcbaf359d25a04b41d105
SSDEEP 768:LeW7kYn7pLuLf80Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVLPa5LlWYSjgrof:LeW7kYhEf80Wvqidau1jaCPa5LA3jrS6
TLSH
T10EF20A3B780CCB7E4F804E9CED2A7E9A6DE8018B56D8C95487FA844C03C66EB15175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8b44000892f35dd17657e3cbfaa612dee2be97e6c6eb54f5b4df9df38b4b91c8
MD5 1aeb23c67012c0d86c26d337a1ae5bcd
SHA1 4bff514421cd3befe189e4797762a495377c30af
SHA512 99dc47c3d94a4c3005f3372eea1321069daf1b42c75aebe2561cb116a3849a650b58049ed7e4cf198b049eaaf9ff04a8e2385c5ea05e44dfd86960a9856422e0
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTjNIdKeQAXyhIIXKJukNPI1K0M:KIbCKcjNmKeQqCIwKJu+PGK0M
TLSH
T1DC913042713B46513CBF299CA29AC6365F4235633818E87F7BB854A21E67E120DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2ffe5bf90c710ab8d041f682bfa984fad48d2e17a6a9d8815657fa0c3638830a
MD5 c3631a989bb5226b8a603023b6d49e5f
SHA1 8f80d333d2fea37fb1c3965e700e2bc94fe7d759
SHA512 f77a526a4b2f54c7f3659ce8ad396703819c7c93eefab19925709a1e4cc9d5698b50302ffb117c1693e6877c669cace01c91b652bfd12b455509b1cd5507a5b6
SSDEEP 192:MON064BAQmiUyB1YW5GBPKT++FdGsfaDVLouU6:MON06eAquW1dpcVkuU6
TLSH
T14802EA34AC796C7B9EB2AE45F4863B175FE8113BA5C41B44EAE85F1C009764C234382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 347512dd018107c94c10c4e095aad8223c01363368fcfa7510c18fe83c44aa42
MD5 7b0dde3b2ad84bf6faeccd6c4c9cbbed
SHA1 b0eeee580e1c6be16f088f4301e817dbd679af37
SHA512 de03419ec5aff70309c9ada608e9bfee9bcbbf9e9b319d85666d5ef91d41e2432c7646394dd89908acda2a6910212e174260eb998fa7650324c138bf7d189c5d
SSDEEP 192:bONI64BMQmiUy9YH5GBPKT++FdGsr2PNIWwVCqVuU6:bONI6ecjH1dpquV8U6
TLSH
T119120A349879AC2B5EA27105F48737539EE82177EDC16F54F6E89B1C009779C370A81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 12d03aeaeee6a8ab0d59cb93c69e1ae897f71a1eef3db0c95468b470366c93ec
MD5 a0d340aa6b64a2aea57e05401df3eb63
SHA1 aeb3a275d2d101d4dfd781bc0466fe1721149b16
SHA512 87d664320a67f6794a4bd3c2a704dbbd698510336488482b91414a62576dfec988fb09871ee347da7edb5ed60936279da2ab9aee97679cbfe146e1761b65943a
SSDEEP 384:nigZcIhsNdhzxbgL1GdpquV8BeRs9JKgqijUEN:vhK6YlV8TjKgqmUEN
TLSH
T1AD927C305836AE37A5A7B106F5863B478FF85077E5C05F58F2E8EF1C0056A98270B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 bad0eb35cde8d67c5c6501f3aa192f378882e692ac4c8292441d43a008b79890
MD5 ec3421527c025463d280ddffa1a554df
SHA1 9def045b7ad4bb654ff1784004356eaecfaa8f0c
SHA512 421e6ce3b169f875558facd9162887525e0402b72e9726db3db30e6b579915913898b5b10c4c28ab33ed950b3480221ec4cb80b8db0a307f8074b4585e648af1
SSDEEP 384:niRVZcIdsNdhzxbgX1GdpquDSA8tWI/orc9WkczBeRs9JKgqijUEN:MdKMYlh8src9kzTjKgqmUEN
TLSH
T12CC27C70D8755EE790E6F1C6A585EA472EF80137D9849E1CF2F8BA3D302F9B81712816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fce2b29-8a17-4bd8-b093-30f21f2ff37a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7fce2b29-8a17-4bd8-b093-30f21f2ff37a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 de6ff913141c76845f001a76d44172bb9d59395088075e70715045e3134f002a
MD5 49bd810546941367f46ad2ddac242e8b
SHA1 e42cc5285924f3fe8fc6a39dceb40abec5ce918d
SHA512 865d166591d8c210d6165d26908839fcd559c666fd48db1611223db6d5647db95c559f283fa232820b0f51a3d1e897ccd2046cdd334777c66656f3add1712f45
TLSH
T10441E568B6FD1144B3777F16ABF6A9AD887E7D762E06D45E00110D4E0632E00C9A2737
MD5 SHA1 SHA512 TLSH

Submit Download

3653ac81-06be-4536-ad88-b5e83da2d42e.tmp

Path C:\Users\Admin\AppData\Local\Temp\3653ac81-06be-4536-ad88-b5e83da2d42e.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

83df775f-1c64-497b-aaf7-b1a565fd82f2.tmp

Path C:\Users\Admin\AppData\Local\Temp\83df775f-1c64-497b-aaf7-b1a565fd82f2.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-OM7T2.tmp\Audio Modeling SWAM Solo Strings Bundle v3.0.0 CE.tmp
Size 3.0MB
SHA256 a97f435f9cf58c8ddfbe3a143cf44844e050dd57c543dae129099af7ea79856e
MD5 72d7c79a59e6823b433ac3c6e848b89c
SHA1 e6d92896598d25dee538b090827b952a16a7e7a0
SHA512 58dfb5611ed24dd93ae2e6a6f8c05788f6cfda4918c3cd69fb6b0c8dbc217a84d06468f45adbe15e5a268a4c0073267de997eb29caa77f5c0ddac733c7ccd63e
SSDEEP 49152:LLJwSihjOb6GLb4SKEs3DyOMC2GlwVl+yK3AHxTBNTunHp:pwSi0b67zeCKVl+yK3kBG
TLSH
T172E54A27F7886D3ED06B0B364A378650983B7E6279228D5F57F0390C8F355942E3EA46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3932_279283200\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7fcea07-3756-4bc5-8ec7-8f7f6e935fe0.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3932_886676195\a7fcea07-3756-4bc5-8ec7-8f7f6e935fe0.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sdb3_datastore.xml

Path C:\Users\Admin\AppData\Roaming\SWAMv3\Sdb3_datastore.xml
Size 692B
SHA256 c2f468b666a18c91acd9d541c0c5c1b88210870fcf14c5b8849a3987a8afa54c
MD5 6e9d2a855e2952ff9d90325fd2feb57a
SHA1 13799ecf0e5e84895dc471eacc68b10f05d8f055
SHA512 6e053a2a4c373b3bea1e42ec30a3dee524c90d02fe91232db9a126e3e372fe953e7825757c3681a075a4fecffac222b966accca591735e1c0e3e7e40a5a9b3ca
TLSH
T185019409F5599A351F704C463B65C606C685408607B5B3F9BDF82ABF07629D407C7C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Sdb3_datastore.xml~RFe5b2d56.TMP

Path C:\Users\Admin\AppData\Roaming\SWAMv3\Sdb3_datastore.xml~RFe5b2d56.TMP
Size 692B
SHA256 b77b6c47b8015b44cccc1d8ec3bd23195faf67e1fc8c31510f6594fb6643b145
MD5 8b7c51d704bd6c2ff68b299384bc4ae2
SHA1 ca58bf51b2a5290d5df8725fdf4b2a1623ed23e3
SHA512 8276b66e5dab0db8970279331cf8d9dd50466033b9626c3624ad5866da90c39e286f62dec888dd2866f55bb61c5702e3b8851455b97281c129b02ca27702992f
TLSH
T1F8019409F5599A351F704C463B25C606C685408607B573F9BDF82ABF07629D407CBC3B
MD5 SHA1 SHA512 TLSH

Submit Download

Svl3_datastore.xml

Path C:\Users\Admin\AppData\Roaming\SWAMv3\Svl3_datastore.xml
Size 684B
SHA256 4a03693d4595be5540dad7f7b6751d29dac6779b106636b72bf1342b7951c5f1
MD5 91896a36981e67a4aedebdc1d89409f8
SHA1 8bd3bada9642400ebb09a8fe1b565f5bf2654331
SHA512 2fe46b460bb600154466e0926c3261e0a088890c770584d92b1c5fbda08314f96d65fc284251fceda627f8306e2c1044c2bf5c48ee1e243661a84e2a19ad8966
TLSH
T144017B09E5899A240B7089462B32CA0AC685408507B473E9B9F82ABB076299417C7C77
MD5 SHA1 SHA512 TLSH

Submit Download

Svl3_datastore.xml~RFe5add51.TMP

Path C:\Users\Admin\AppData\Roaming\SWAMv3\Svl3_datastore.xml~RFe5add51.TMP
Size 684B
SHA256 fb917972543b21d92208501c2eea4ca8de9f023c8f61aca9f34f1e3ad8392c0e
MD5 0be2b1aff4b7d6f84739824345f0595b
SHA1 1b2a17d2715de60deee06bbc3fa048c3aa4ca8e7
SHA512 06456158f550783f9c8a31e4b8fc9e81e34e754a6dd9bcc703e1b16b4d30f2a3b5a53f5952dd203dc748eda622efaa28a6f31ee256ecced0b2cc6a6eafe98977
TLSH
T12A017B09E5899A240B7089422B22CA0AC685408507B473E9B9F82ABB076299417C7C77
MD5 SHA1 SHA512 TLSH

Submit Download

Wind Controller Default.swamec

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\Wind Controller Default.swamec
Size 3KB
SHA256 f8ca9e1b15ec63cb21c675ebb4471a91cd5d46602fa18d5a1b05dd8a5f46966f
MD5 8d77871b8a1ab2302651dfb4a9ab7cb9
SHA1 771ca3900e6afdf775a356f042a277219747b72d
SHA512 cb0e8327af71f48b12ce9e23799f17f3b3c682db8a65aedeabd6861f3b7ad450cb129d53938678a8ba922b295b739106bf34fa0102c36e812dc2e8840a7063cb
TLSH
T158815C20ECB5AB790979190A72DA94518F3B62D3B3440086758E735B9F3FC453323A28
MD5 SHA1 SHA512 TLSH

Submit Download

is-0GOU1.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-0GOU1.tmp
Size 1KB
SHA256 acbb58b842a8fbf574f9641ce2e6d6c88409f4dc9c14e780b211a0aa197ff4ee
MD5 3ccdaa46c900b44233dc0b0e1e15293f
SHA1 b9b7f560acfdd04feed1cca8667e54a72bb845a7
SHA512 ec165738d385b1c00e562e51f835172bf00ebb86e114bcd72c557a09f3a59ac4a95c81feb62b678c178733bbd7832e5241037ad402c30cf0fe1a5d43e9ff01e9
TLSH
T1DE31B560FDAEF93B7F722C5877864C56AEA94683F20505DAB0EC36870B73D844227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-0UA0Q.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-0UA0Q.tmp
Size 5KB
SHA256 9d01d52dfea52974ba3d1a5d00246940e6315d25a83cb4a54b913e98d6648e65
MD5 c0d49e91829b345c1f64844a9468e695
SHA1 8274e469ebd39fb446b3e087d3f5d62932d5f8e7
SHA512 e434e165a5620b4d4f54560fb3140706dc5283ef8e2fbc0b540d69d3c1beb3c2120151fb67b41aa206db8dac09f45e7e9c7a854a05eed6f9929c89a344ff8300
SSDEEP 96:JGQ4ZzPNwJhUKBhdVr8068mKZW318kzkQ8kW8k68myl8mw8mD83:JBne0/Vr8068m2W318kzkQ8kW8k68myT
TLSH
T175B16B20ECF5AB79067A150672DE94518F7B62D3B3440086B18EB35B9F3FC457327A68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-1H2K6.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-1H2K6.tmp
Size 4KB
SHA256 6bf9bb5d5ad27e8f0ac3530ae556836361f3d2871ee7bfbfe3986c4f73bde80e
MD5 095ea9d57744113d6b48227fd625bee6
SHA1 aa764b688156815dd3ad01bed6446a4b3e238354
SHA512 007a1154804de3e7a046868e3a06ed0a593480880f5c3f5945c72c1e38935123fa3ffa3283e6a7a82271b6234e7021eccfa08b95dbe2173d5d86f9c078257f74
SSDEEP 96:/cQ0zPnPhUdhdVd80KZW318kfkQ8kW8kq8kG8o:/vsed/Vd802W318kfkQ8kW8kq8kG8o
TLSH
T193814D20ECF5AB79067A150A72DA94518F7B62D3B305008675CEB35B9F3FC457323A28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-4RRLS.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-4RRLS.tmp
Size 4KB
SHA256 9d25117dd726903455aaa187e7dc65b8e15906a7340949b3bea258d4ca988ef9
MD5 3f9d5f16707eccd3862099d6af3789e1
SHA1 a451f0c83417cbf20fdffb0bc450593ef5c7ee4b
SHA512 d59011914f4684225032d902bc4da56a532327d34b2c52437f8b0880872f001d0c5b218f821876dbaadb0c898046804de86e81370bb55ee12674d3a5b7a1b758
SSDEEP 96:Ig0zPnPhUdrdVr8068mKZW318kfkQ8kW8k58Ur8e:IgsedJVr8068m2W318kfkQ8kW8k58Urr
TLSH
T132916D20ECF5AB79097A150A72DA94518F3B62D3B344008675CE735B9F3FC857327A68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-6PSL7.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-6PSL7.tmp
Size 1KB
SHA256 c4f51c2811580770ff96bdf1b7c183a93cea3a6637d3fe0c252727371abdea8e
MD5 7cc9516721a6764ab4d1632b41812675
SHA1 0c6443b4d127e9f5cda854709b606f4d610dba74
SHA512 7405296b1d6b45ad30e96fbd1bd7c6bbf651c4275db723f988528cc16d2c8b604604cf63f2c07a7d080161f7496d4a9d90c29022ef89e408400a64b7bc6b79c7
TLSH
T1D0319760FDAEF93B7F732C5877864C56AEA94683F20505DAB0EC36870B73D854227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-BUTNI.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-BUTNI.tmp
Size 4KB
SHA256 c971490f8960eaabc61022a5d6c45b2213b918ffac1c14f163146b7537e5fa2c
MD5 65a7b140753ef95f43d1d20763383e81
SHA1 b3e72a06780d698445f09ce846017c9360958531
SHA512 8294e72fb3fdfcb64dc857a395f117d239fb55c299d9fa5efdd676a97c17616db006506627a7c662c96e6539aa9df139fe605d4eb4774ae117b4d0d7db23d84b
SSDEEP 96:6IQ0zPnPhUdhdVd8068mKZW318kfkQ8kW8kq81:6jsed/Vd8068m2W318kfkQ8kW8kq81
TLSH
T10E914C20ECF5AB790A7A190A72DA94518F7B62D3B3040086758EB35B9F3FC457327A64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-CTNFT.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-CTNFT.tmp
Size 1KB
SHA256 8349a8f5804502e2b08e12d07307f2e118168a78418e4deee415ed143be0fddb
MD5 a93968658624201708cb36d1be0cef6f
SHA1 df00ba78ae0179fce84d5363774676926043b338
SHA512 b519eced23faf2346cb70fa1e9bf41d35b185eeb8e171279fae23c87d51d2cbfa6b7aa638b4c2beea3e103605aabf36ef36e15e7424efddf55765155239b76a4
TLSH
T1EC319960FDAEF93B7F732C5877864C56AEA94683F20505DAB0EC36870B73D854227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-DAAK4.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-DAAK4.tmp
Size 3KB
SHA256 ee6c41c71f2853057b4e19f8d2dd81dcb84288e8c15aa2d854347ab868e9d174
MD5 3f5ab18cae6274d399f938398471c71b
SHA1 75d799009f469bf8a858e8b07f7f7a06fa94be5d
SHA512 d73fa985e517b1f3a279d14aaac0d63aa3540c45a34f078de95179b5ac7b91dc0dff3d76b99ad5feb6d73d61bff053ede137a6f177a63fe4dae0120b7b9c77fa
TLSH
T150817D20FCF9EB79057A190A72DA94518F3A62D3B3040086B59E735B9F3FC452337A68
MD5 SHA1 SHA512 TLSH

Submit Download

is-FCAC1.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-FCAC1.tmp
Size 1KB
SHA256 17555635aa8a5b25e4d8bfe624ab3975e2b61eda175ddc85073a16d8daa4e88f
MD5 8877b8526c83c863ddace3dd399ad087
SHA1 225622061160078406ae5e4d7efdb2066e80f262
SHA512 2561de4ee4a9d53a64f27bf9244bfeee7a01285e0b1ca79d67b63bc7d9677ef154e71eca65456382fd46e52f6f4a3643ec3403c1881682020383db1da9bae715
TLSH
T1E0319560FDAEF93B7F722C5877864C56AEA94683F20505DAB0EC36870B73D854227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-FTRK7.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-FTRK7.tmp
Size 1KB
SHA256 c939c0c3c97afaf7ea8cd219b8d69360117aba8db6d25b9322905b57e748e783
MD5 2ecae46825429a76cbf037fe7e0a958b
SHA1 c2e1bd0fd3ff4f18a81f93b968157090a7e052ed
SHA512 b997fae6959dea47d13dc7c67aa9e92cf2542b091ee8656cc14bd4b99fcab4c484bbf16942e3d7c4c85daed12c19fc5e593750a90ef6e660a4e65ed66f91cab3
TLSH
T1E6319560FDAEF93B7F722C5877864C56AEA94683F20505DAB0EC36870B73D854227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-FU480.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-FU480.tmp
Size 3KB
SHA256 2b17deffd4ff8c25e44dd0a749fe9308d89a399514912eb5a74b019515819b26
MD5 ebad6ac768eff24a4f7a39fb52982a02
SHA1 7d59b1d0ac8fd1a67a64742b028618588a2fd508
SHA512 847d3ccbd60c156a7446937e71e5981cbece9a452abbda266c45e951fe895974d80cab8bd62f9b32affedf64f190087f723d1cffb0b185fb19401458e05cb74f
TLSH
T1EB815C20ECB5AB79097A190A72DA94518F7B62D3B3440086758EB35B9F3EC453327A28
MD5 SHA1 SHA512 TLSH

Submit Download

is-GSV1O.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-GSV1O.tmp
Size 3KB
SHA256 4eb7d373c325c45a6b4cd9a36dd14d2b28dfe878290b7dca6c593a6b5f77e8e1
MD5 e38ebdc12d6c916ff3a3b202108171de
SHA1 14906c075a98ea1aac220432932c0242624bd06b
SHA512 119d5addcb0acdd1625f53da572d3958535e7fbcf849c693218ee6b60deb583ad3621084f09d91e1890780f9259f265736d3a925125f78c236e9cfde4c7ca328
TLSH
T19C815D20FCF5EB79097A150A72DA94518F3A62D3B3050086B59E735B9F3FC452337A68
MD5 SHA1 SHA512 TLSH

Submit Download

is-HSO08.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-HSO08.tmp
Size 4KB
SHA256 e43b4b350981abdfc7dc62f6fb00dddfb1ccae607a88ec103f3a3c38d200475b
MD5 cd32bef16bc909cfb64eaf997fff7610
SHA1 6167adcab3102ace2499e8bb6dd018a04e4987d3
SHA512 782b5e6fed57a3b63b124ed0a63c2beabf7049971343a9388d6ccf019fd5d8879c0640388e16b60989981eeb59f040c116b5036ce74e9b3c733087111fec4377
SSDEEP 96:/hQ0zPnPhUdhdVd80KZW318kfkQ8kW8kq8kG8o:/ased/Vd802W318kfkQ8kW8kq8kG8o
TLSH
T1B3814D20ECF5AB790A7A150A72DA94518F7B62D3B305008675CEB35B9F3FC457323A28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-I0DEJ.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-I0DEJ.tmp
Size 3KB
SHA256 8406762a4b8d73bd4a1dba0bfd9974eafdb63d7530d888e9f3f51d2f179fd14f
MD5 2d0a3d60b0619157ace7eebb1bf99cf7
SHA1 8c470e8bda186ffc21c6c99a139b0b77675238aa
SHA512 cbd8fa4f90f5048533ad748ba5278cf03234b3b28060522bea4f47b1996e6bd9d7f5cd58397c2c3c56fa7ca5f18a91d8360a804e6fde7defafd44c242b5b4485
TLSH
T1A4815C20ECF5AB79097A190A72DA94518F3B62D3B3400086758E735B9F3FC453323A68
MD5 SHA1 SHA512 TLSH

Submit Download

is-I8GC6.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-I8GC6.tmp
Size 23B
SHA256 081c7dee717cb728f1bb5bb3a0b9dae781d9afdd7f49e44e2a35c702d30153ab
MD5 5dba3450ec1f4aee057d9b33bf35174b
SHA1 ac964f61d04ba2c3ee3e9cd48432d766acc60ef3
SHA512 50eac44b0a2d49cec4cca14be09e770dd1ca4e8612196e935f61c39ed3e8aaf0fe29a5236a21b7c700a66caad964eb16e6d55e5a07f24bc2d621694e5e64acab
MD5 SHA1 SHA512

Submit Download

is-J9E1I.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-J9E1I.tmp
Size 1KB
SHA256 1222ed46df8177a51eb50b5c2d30a5682436a50ecf901320044dfb461f0fe03b
MD5 6e358db50b070db974d418c4bbfa4ac5
SHA1 2b0568ee96859e2fcb498163c7afec7ccea6297b
SHA512 187dd23b1f14413e4d817c07c3dcd64467bf13122bca27df62e311228e42f890203cdfb5ad3543720d2829ca1a8a13a1a07e51b548c1d5c8a22af976c8edad80
TLSH
T12A31BB60FDAEF93B6F722C5877854C56AE694683F20505DAB0EC36870B73D454237894
MD5 SHA1 SHA512 TLSH

Submit Download

is-JU79D.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-JU79D.tmp
Size 3KB
SHA256 ba03155f027c5f81d39c718e5e9f0af382594e0ae17b3caba8d5594885b56801
MD5 3b573d11e1194bf7fe313657d3c1e69e
SHA1 1d762c9725ed342b7a022e539d56283fe7e3f1a1
SHA512 5c4a2181d18353938531a89d88dfbe803fbd24221753ab95ca72e6fba1f449d8572884344a300bd3016c0903edce3eee4a545d0aad3dec0b74db58836bf17891
TLSH
T139715C20ECF9EB790939190A73DA54518F3B62D3B3440086B58E725B9F3FC853327A64
MD5 SHA1 SHA512 TLSH

Submit Download

is-KKEBR.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-KKEBR.tmp
Size 1KB
SHA256 70b59a9d097823b0c2ce216ec5a6d61b0eaebc12d0121892aeaa50b256644375
MD5 11f62fc76ecea080054554e9d7818733
SHA1 9d607e001255083f12bad067ac60198808f87022
SHA512 3fe69557f39edce982129b56ae3bee526f03ca5b4506f312d98feb42641659f7f5f15bf4c8a05093d29c25a21484f3fb15cd3bbe6ad9eeb2e2ce79ba533ca571
TLSH
T15A31B760FDAEF93B7F722C5877864C56AEA94683F20505DAB0EC36870B73D854227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-M4JMU.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-M4JMU.tmp
Size 3KB
SHA256 d4475ab9dd4d7ce7dcd2ba2e665394ab1940057a99b897ea133cede63a63317d
MD5 387e7252b5cce9d1c4ce8fab46e97abe
SHA1 196e0603cec4749b39ad143fc7ce0a6a6a19bae1
SHA512 74b3d2a460286bbf9bb6e9c6dbbb0f35c72185c13b152ca414063238109f0d252f64fd08acd431f9085c0bb610282ede8e8a703971803f2ceae659f7945a22be
TLSH
T100714D20ECB5EB790979190A72DA94518F7B62D3F3450086758E735B9F3FC457323A28
MD5 SHA1 SHA512 TLSH

Submit Download

is-ME9ES.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-ME9ES.tmp
Size 1KB
SHA256 d77bc62b5dce02648d01be1087cc8496dd3642d6c29bccd651d0e005c8101a33
MD5 a5c5e26c59b09366856032196765c0fa
SHA1 6e44d6b584243e4e5a3348c2838a7d0c2a092498
SHA512 093a674ec4a1a8edd834dfd6f280e094da7f5e9349482f8651c0e1ccbdca947b96755d436619ba73314bea79e4c498c12d096faeceadf8473877a5ab746ae931
TLSH
T1FC319B60FDAEF93B6F722C5877864C56AE694683F20505DAB0EC36870B73D844237894
MD5 SHA1 SHA512 TLSH

Submit Download

is-NS2UC.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-NS2UC.tmp
Size 1KB
SHA256 74a4f0ba06f37ac113b48150955551156afcf7946145011c52bcbc066aefe073
MD5 289e4514ba4a41beb468159ea9cf13b3
SHA1 5e7832a244dcb83ad65de18937882692589765a8
SHA512 52d99e84918a1b1a5686dfdfd5acef33e550c6f9b321a4e87ff3e3d1cefafcb63e67993f220d9e19e2d7c1fa54d71f5355c8b358faf3177066048100d25f35cd
TLSH
T11C31B960FDAEF93B6F732C5877864C56AEA94683F20505DAB0EC36870B73D844227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-OCS2U.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-OCS2U.tmp
Size 1KB
SHA256 ed9b077057a5cefe49514db2c561e6aad2466f5ba2a4a8f6881f8a411b8be3da
MD5 a03b93cbbe1d65a77975ba306ca820ab
SHA1 8f03515ec7e01450dbdcab115535aa4dc98f7bf3
SHA512 9a61744a04ec0ae0398c622aea8bb0e669118c2891967272546f9aefbc77e28aba1d7060e77e9e36ee25cb9ab3e173e13f9280d20b82451550fec607ece47515
TLSH
T124319760FDAEF93B7F722C5877864C56AEA94683F20505DAB0EC36870B73D854237894
MD5 SHA1 SHA512 TLSH

Submit Download

is-PPA9L.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-PPA9L.tmp
Size 1KB
SHA256 d573eabf6baf144616149f72f5695387985acdfd49ce833797efabac49bc5547
MD5 b4b1927c2c7e25e8e601f23f65b94e9e
SHA1 5a104062d9632b122443173054fcb4325b625184
SHA512 2950050f7e459c1872951fd58961dd7d601d8731598546f88a4369c83fca1e05749053d54b4c07bb60a685ea9d32daa4055c64b821583d189b601267f9dc40bf
TLSH
T14A31D760FDAEF93B7F722C5877864C16AEA94683F20505DAB0EC36870B73D854237894
MD5 SHA1 SHA512 TLSH

Submit Download

is-QI3JI.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-QI3JI.tmp
Size 5KB
SHA256 1bb1a956b4905dc9d7a203beceab87eb2e78bd4bbc673bd9cbd60c539402128c
MD5 c57245dd78d7aee32cb3b38d0c6ef4d5
SHA1 42d608bbaa882784fa2fa3e5e66ac15fc9df8266
SHA512 4b47a8f7db2c1eb4b8651bff41571702edd90675669124d487fa1851e766a3c94e66fe92af001e42eb999957734e254e4dd5a3beba146bebf643f8f26d8cf5f4
SSDEEP 96:qZ10zMPhUKBhdVr8068mKZW318kfkQ8kW8Fmyl8kMi8kw8E6/m8e:qzxe0/Vr8068m2W318kfkQ8kW8Fmyl8p
TLSH
T173B14C20ECB5ABB5097A150672DE94914F7B62D3B3450086B18EB35BDF3FC457323A68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-QISQU.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-QISQU.tmp
Size 3KB
SHA256 9a4a0d0f09c0c234359f9f36c15516f55195d101cca1c9b85be50cb6306b8739
MD5 da3b46aa434b34082cfd2d96e4d0c6b7
SHA1 7a86529accf1d1c7049ca0be39992bb3c208f880
SHA512 e5a1b16629e57906b61ca7033c782651d6f6b7f045dcd8aacb18ac068faf0842593cc35da1a4e329edce2c8bc49c3d42c504bd4913b14ec1850232618813b566
TLSH
T1F3715C20ECF9EB79097A190A73DA54518F3A62D3B34400C6B18E725B9F3FC853327A64
MD5 SHA1 SHA512 TLSH

Submit Download

is-QOC47.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-QOC47.tmp
Size 1KB
SHA256 ef2f529ad1756f466f27842ef174c279b8f3f834ee5a15f910f6674cfd081dac
MD5 ff769aba5503d89002cd3a3e119f4191
SHA1 dacac61a2a24690689320868ef18cbd57d6d4ffe
SHA512 31041427b76088267c7d2884fb9e97345a33fcee0726a6bfb5b9a9a881f22dff895e84799b3b9d76f45568f394c3b21bc3629cc949284c60cfdea3851ab93f56
TLSH
T1D031B760FDAEF93B7F732C5877864C56AEA94683F20505DAB0EC36870B73D854227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-SLEAU.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-SLEAU.tmp
Size 3KB
SHA256 8a877854774e2c58f0b8639e1d0f3c24e3c2bb3cf64995fa79768465602f8bf0
MD5 62d36071800d1eb87652511b0540aca1
SHA1 9db3c1a008cfb24654a19e1cf9558c12d8fbf2bc
SHA512 6b2b08164c49f573f6598851ee156856404bb8a1b535867f3c3804321b05d2a7f969c68d9c40d85fc13b1a62d8ef9416d3287669a7928a891163ede97bd44a44
TLSH
T1D6817A20ECB5DBB9084A194A72DA90511F7B62D3F34500C671CEA79ADF1EC447326FA4
MD5 SHA1 SHA512 TLSH

Submit Download

is-SV26S.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-SV26S.tmp
Size 1KB
SHA256 be970a131e7c2f72ab2c8ab49392983ae2334ad0a0a355c5cf717d669cc79307
MD5 1509bee2d08df39094147affcd6de41f
SHA1 b7e34b2fe7760603efa6137c9efad058ae801a2f
SHA512 0a900d980b12f31b6faf18e95fbf5373fbeb2b4967c6408c7cdba7608469e188b45933f7100f9d99560a6839e870d0be3d5a045356ecc260f99aca93809ea47f
TLSH
T1FB319760FDAEF93B7F732C5877864C56AEA94683F20505DAB0EC36870B73D854227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-SVE72.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-SVE72.tmp
Size 3KB
SHA256 2461dbcc62ffcf987fe37102c50009bc951e12a0bf6afb5daf6082d306998ebf
MD5 131d4e19803980e110dd6111352367a2
SHA1 0a76b66e3a39009b5dcda475efd7fe14a96fc458
SHA512 be6c4e305b52dcd0c3b1269dd67c72367a9949d04570a7571bdc7e4c09d2f147ec4554b8329600b22b5df17b91b5fed0fb0a87b740ebbc5d18ee32cd2f0311e9
TLSH
T1A7815D20ECF5AB79097A190A72DA94518F7B62D3B344008675CEB35B9F3FC457323A68
MD5 SHA1 SHA512 TLSH

Submit Download

is-TUBAP.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-TUBAP.tmp
Size 3KB
SHA256 d3dc45f04d7c5a0d75e8e0a72fec4430d6deb6ff1cc2d7ebe12b7b6e71cfd99d
MD5 e7703e4ccb09ede604567b2bbbab77a3
SHA1 269ab291f938f7b76b31e3aa5e46e953b35416cb
SHA512 67c7be0583baed9436e83c5080fb0b4f1758073a0a86b66b0b00299ea70cc62b295c43d28e63ba0322399a354bf6876606ffd473cd17a936a96ce27081a7d71e
TLSH
T161814C20ECB5AB790979190A72DA94518F7B62D3B3440086B5CE735B9F3FC457323A68
MD5 SHA1 SHA512 TLSH

Submit Download

is-U6NS0.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-U6NS0.tmp
Size 1KB
SHA256 0f3b6a673ae9508beefb2864b5d01aad02c3d66af76fe034055d21fb97ef7ad6
MD5 25394d5b6c1d23ee342e556804311d28
SHA1 9414dedaa4a2f386e4b80bc8ea7ef6ec6c2cd099
SHA512 92de407c5faf3cc3b3c7d0ae29650a5e22c89bb9a857890daf70dfa35f57f255da22e6611f82a8a316c0fc28cd4b7baeb8d2402748aa687118eb3f2f6ade0e22
TLSH
T166319760FDAEF93B6F722C5877864C56AEA94683F20505DAB0EC36870B73D844227894
MD5 SHA1 SHA512 TLSH

Submit Download

is-UF6C6.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-UF6C6.tmp
Size 4KB
SHA256 79d1e2fc2efa2fc915cc2ca2e8aaac9ebe2615703472f529cc0b4675dad5ee36
MD5 1e09c316614e670c560fbf15b04496ea
SHA1 727a98d17131420a109022e75f1e576cac6d53e2
SHA512 0e567e5e695e2a84aca95b65fca6e06f5859344159175b44748a46f13728660f3a778e545acbc2f55761dc2babd29b70c2619cccfb7a98459466517128e42d98
SSDEEP 96:CY2Q0zPnPhUdhdVd8068mKZW318kfkQ8kW8kq8c78o:CYRsed/Vd8068m2W318kfkQ8kW8kq8cD
TLSH
T172916D20ECF5AB79067A150A72DA94518F3B62D3B304008675CEB31B9F3FC453323A68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-VSA9E.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-VSA9E.tmp
Size 3KB
SHA256 38a6cb32bdd84d8173f0724f5f827db1c2a9bb2259442eeabd4ec99405be217c
MD5 c9b3fceeee457f489701e91e79d47a02
SHA1 bcf3d95611ff813ffa0c5ac6ba994267f5a96d1e
SHA512 0dafe12d6150d166c3f1fd00a7af3ad2d4542befd1c8e8ee7efc5608d7579ffedf72109d2e9d1fb5f4638fcfb254be91e7506f837a33eb5fbcd12af2d0c8ead4
TLSH
T199817C20ECB5DBB9084A194972DA50521F7B62D3F34110C771CEA79ADF1EC847326FA4
MD5 SHA1 SHA512 TLSH

Submit Download

is-FR926.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\Presets\User\is-FR926.tmp
Size 35B
SHA256 557ca00e2cbe18c5115f0f736ee25ddb383cf9904d32d47f913f0c5d8d2400b5
MD5 2722d7e859d01087743add521734a1bb
SHA1 b6da5cfbd2a735ad360cff77d938251b73d9eb7b
SHA512 b05e19147b60b8d0bd493876181625f12f379ce1e1ab2893d62c516a0022ce1465758367126e3af5ee91aba0c440be18cd968b043dba6b546f989268ab559dac
MD5 SHA1 SHA512

Submit Download

is-JTF9D.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\is-JTF9D.tmp
Size 564KB
SHA256 152b4ed6cb5f6501a372c7f5e6e5f4f4037f061edd611074068c0472d650e9e2
MD5 e18fa122e91d29461a771156f6636b08
SHA1 7228671341be251ee7c72012af1f5fc4cb8d8793
SHA512 386dee7169c9c305ea4ae60b62327516d84599c19d002ef63bf44d1c1e4fa30c79e7ca54a190c33404b1a658ceede59e4f7d5c9f057210844b9f4f1305838df4
SSDEEP 12288:3S8OWWTEUFBC6vRcx+KOOOOOuBHwDxaCBe6scL1suVq61AfuOV9DOBbl2G:LVW9vCoKOOOOOuBQDxaCBeNcnq61EtJW
TLSH
T1FDC4AFED1D9D397473DD7AEC368913E8EAA87BED3A0B6D8D1DC61B2179083447A03142
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-TKF71.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\Resources\is-TKF71.tmp
Size 430KB
SHA256 1777e849a2a4227df67485513797cd505979ed68e684b585b40a6ff61418852e
MD5 16fc125a4a297f5f27005fc92febfa0f
SHA1 f6df603d7054acf1d2e46cc97622f213a0178195
SHA512 2a840067ed8229d38fa0893c97e3ca3a97995c7108c01231c48c27acb5b203d6e3edaf09523364df501bf32791cc8dff0e1fc5cf45d224743c83784cf8fdd31a
SSDEEP 12288:4j0EUnLDCPH56t4jBaEXlfAwLdGxt3Hfb+dfx2QV:4gZDGYwaEXloOu/byxDV
TLSH
T1E19423C394CFB1F681299D0886D9B3E1C8E8F95E1B198265FD09310DF188C377E9A7A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-9JA04.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\SoloStringsCommonResources\landscape\is-9JA04.tmp
Size 327KB
SHA256 723b41094d69c0976074f16e02e77eaed7f36420e17cffda3a34526d2f628704
MD5 fc53ed543a259e7e7cdf9f05f4e14f80
SHA1 044b80366ec9c112b4cd70ab1c7b26e5f53db024
SHA512 946843f5d75ef8cac1ff5ec297918d2fe3dcd2510794a49beda5b0e282c18dece5b78de4886949bd8c98724a86e07cd4b8cf8b98e72741763aeaefbd31ce5e73
SSDEEP 6144:O/K3bqfhaZHR4lexxdGozD4qv81aHtOlVp7u8RUuU2Va1GdWH6nEhyY5oum+4:O/KrVH7Hzlk1aH097BJ/OfMEhyY5ouP4
TLSH
T1EF64129FCD847977B29A4068B39AA96F45C50C43B370E95252D2A2BF5613FB00CF1E6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-HBV9F.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\SoloStringsCommonResources\landscape\is-HBV9F.tmp
Size 2.6MB
SHA256 c5f12661e91509b563dcf77c0fcb414e9b75b384d8b1503ab3a88138abb45dd3
MD5 c8990579ed2d44056e0bab8503c3878c
SHA1 2586295fe98595b8aa51bfbc52d0a17cf4ae6dd3
SHA512 52ca5db14fdcbc83cc2cd27299c8f3a1606b09353fc0d33503771d70676f398693dfbf37e68cb4bd17f62295f5182cd00fd59b6fc4c152716f0b8a27d87b3061
SSDEEP 49152:vz3JSAUZ2Wt/ETd+CxRuTgmUHBX1bj4ee4CjiKCDJXD/Cbr7pG/ZHBercGV25:z/4E00ygmURh4ee4gFgD/IvpG/Zherc/
TLSH
T11BC51211C3A0A6B3B45978A17685658345A96CB7F861EF0029E3FD9F5E93F300D70E8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-KR7MQ.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\SoloStringsCommonResources\landscape\is-KR7MQ.tmp
Size 1.2MB
SHA256 567a94db16b8b2ea9f79e07e813143f4aa8759c2dcdc0b38e65a62cdd382c54c
MD5 563be73d27993bc092bf7dc54b698dc5
SHA1 437a6174320f3a72c699f2de17621314ba29ec3f
SHA512 f01f8ff7593d4ffb04ab9c71515c9138b5394de42025db7ecc864055d2b2670a93bcfce3fa5e9fc777ee57259f6bc55c717f19ede22394587b9267e42769f538
SSDEEP 24576:6ByIw5DV2k8SmeZPZ8X63jfooZoe7XNuL3SFY6rk7FURCYQUZ:PwksKRK63j9FgL372kR4b
TLSH
T11A552206C2892133F2BAB84DB8D14963994B3D727D01FC50A39766FDA687B346C34DD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-1A9TR.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\SoloStringsCommonResources\portrait\is-1A9TR.tmp
Size 950KB
SHA256 ff864f36a1ace46055ece4b09de608300001dc0a8a892a78fcb6b10fd568a262
MD5 d2b7395a4136e0164d4611802fa648af
SHA1 05b49fe4d524040efb5fb3752d2f9c860e6a1345
SHA512 6b0c5627954eea612433a21c5504d4764a4bbfd8f0ee0cc985854039faa63930e24f1597a135c644d871c0192010a28911a0771d9b32b48992403156f4b9a55c
SSDEEP 24576:a1Rp5RqBcHhXzYuOVl8H6eae7PFfMQn7XoWIJ5Ye3lM5WnIzS:uRHRqBODYuJH6RIFfMgPIPjOwQS
TLSH
T174251295C241453AE6BE1580358A586728B2797AB124FD01079776FF3B22B348E34FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-DMCCV.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\SoloStringsCommonResources\portrait\is-DMCCV.tmp
Size 303KB
SHA256 432714d0ca019121ee4acbae5eb54980861988928314d9879febc55100011912
MD5 70d5161b0a27070d25d28713a5765df5
SHA1 f8feede090b4886fd5da426b6554c00f664a0441
SHA512 3c317575e912a61490d1ab221b92147164441550e4e645caa86b797593c47e1130d44264473cbc267b70c01b96fbbf31cd057b1741297a5c53e2907bc31416ec
SSDEEP 6144:cvdJfw+GzTZc4FdHA4zC5T1JY8kC8yHxae6X9yHBZaiKhhSHSu9:kdJkl344zkY8myRVtBZohhih
TLSH
T1D06412815492A6720AEDB57431454E896872B845F0C1EF12AB8845FEBE15770FFBC3BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-GKHED.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Viola\SoloStringsCommonResources\portrait\is-GKHED.tmp
Size 1.8MB
SHA256 89d4a3fb67e7c6cd031a5864ee1eb95f36c783cd8c7cf3288d47211b0bc389c5
MD5 1072098c152b1bde9d9443adabd6f9e0
SHA1 cedd9de4db67e45d69c51025fb4ee89e10ce80ff
SHA512 9695358e431bff6814c5d1feef4b5c343d2ac7e9dd18ed3711b33f816716ce42f7ce1b04bc2833d04a297f3d409a385fbbaa91323e3f1c33ea143fb23e95f2db
SSDEEP 49152:WSK4iRiQZjX/NxVfb8Bicq5C/EseNi58WWIceHSj2e1T6pQW4VBUthV:pK4iUIPJb8Bin5TsegiWWdGs2e1TBVBA
TLSH
T16B951200D39620BB718A162AF68A02C398543D7BF659CC516CD3F61F6B67F726CB9D02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Country.swamse

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\Country.swamse
Size 3KB
SHA256 9f08835602189006f48b07323c9a2142665936cfd5939cdadbf2d29b3858903a
MD5 50fc76db073323ec38b069efa365ca48
SHA1 72950fdbe5ae9f14bfe47bb08e7966bb048eca3e
SHA512 df91683ede7b6b82d64aead4abd99592ca0503c802f755b6f0f39a667ed0be53b0133a360116c802b7d5b6c4e71ad47dc48af14c6b1de1ab27e4e34f41f6d73b
TLSH
T18E710120B9AEE86B7E770D4E36C64C52ADBC5283F71404DAB0ED72CB1BBBC505423595
MD5 SHA1 SHA512 TLSH

Submit Download

Gipsy.swamse

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\Gipsy.swamse
Size 3KB
SHA256 c1025fff170c3337925cbc92c1552223d987398985754f5307954da403f598e9
MD5 a6104972156a6a777229bc8089ce6337
SHA1 d3ec7d51ceaad75151bd082608f5f2b23b008a4e
SHA512 a8e9566a606f8c72c51bcf23e7273b6d7e419e6c194dc822f937164cf575d540712c37acea97a0633b89aea96b3efc20d70eb521b4c86061d59ec21e6ae66f92
TLSH
T168711020B9AEE82B7A774D4E36C68C52ADBC5283F61404DAB0ED72CB0BBBC505033594
MD5 SHA1 SHA512 TLSH

Submit Download

Init.swam

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\Init.swam
Size 3KB
SHA256 c57b4be6935b0da50c71bec8938b20f4683e7a6dfae83ff82c8c4832c03be7e7
MD5 5051989852163888b7f614263933617b
SHA1 e29137d28e84f166535d936797a8002f2dc31066
SHA512 ddebb20b1bcef79963ea9191bdbc70e07b88226035e7cb8a7f4e1df1fe92f3783fb620d8712edb0b176c12ff4409b6f0608461d6dbcd5f18687960714e435334
TLSH
T17C71F460B9AEE86B7E774D4A36CA8C52ADBC5283F61004DAB0ED73CB1BBBC545033554
MD5 SHA1 SHA512 TLSH

Submit Download

Jazz.swamse

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\Jazz.swamse
Size 3KB
SHA256 44433fa0216d5f1cc49b39631dca8a887c82f9f0d48173f5afa654df34056253
MD5 4e57c8c4867cf895ea3fa4c95094340d
SHA1 b3028f217c2294e9926a72057c4d8890fd306a88
SHA512 5791c985f4fd76d95810aea25145dc2d25712538ac855da510690aced7f4f75f9e62d8f251c67b3658e1b8119a3463b62975c1d66a9234128032162503481543
TLSH
T18E711120B9AEE86B7E774D4E36C68C52ADBC5283F61404DAB0ED72CB1BBBC505073594
MD5 SHA1 SHA512 TLSH

Submit Download

Mozart.swamse

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\Mozart.swamse
Size 3KB
SHA256 084b35caaa2e420da5249b8f656f7db8638f43cb57d2b6c230d759996f6a4041
MD5 b2c64501d1e375f3028ce62ff29090e7
SHA1 1a104216bf451c24fff1943fbde6f2321f79a091
SHA512 94a9c309fac954477b61a6ad6a7605fa8c1953bc167d1d20b332766e47f9f81f7d52ebb8f6e848ce110ee1ab656d06b4e50ecc222b3629ff462ca93e15948a53
TLSH
T1BE711320B9AEE82B7E774D4E36C69C52EDBC5283F21404DAB0ED728B0BBBC505433591
MD5 SHA1 SHA512 TLSH

Submit Download

Pop.swam

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\Pop.swam
Size 3KB
SHA256 f55409ab61eea575618971255a0120377f22ab1e7e85829cca3ed7e9ed6ca6e3
MD5 d2af14aa0145b488ecb4a0d20b115017
SHA1 c0ab97320c92fa661d8c5bfd22da30f57257f71c
SHA512 10a1ddaf774d74e9ba2ca69a7f8240c92b7472263b9e2658f5f69e5391f7b3cd99ea9b1a704720e26680b761b9b1c1d1d2d2de41a220d75721da40c06da9a8f0
TLSH
T13B710320B9AEE86B7A770D4E36CA8C52ADBC5283F65404DAB0ED72CB0BBBC505073554
MD5 SHA1 SHA512 TLSH

Submit Download

Tchaikovsky.swam

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\Tchaikovsky.swam
Size 3KB
SHA256 0ebfa8fd0296273e815fffd260be0fc14e8b02104705edb4cb1a1f566620c038
MD5 c62a6050c61ab0c306362f105f17cdb3
SHA1 a6ae00fc90715d555ca913d0c5b33be2e462ec47
SHA512 e045c30591ee5abec0c7528fcb2de792b0701b68fc78dd85a0bf696693c869359f484137d820f2bdf959f9ee96785336446e09ceb243da2b6b711bacbbf37226
TLSH
T1E3710120B9AEE86B7E774D4A36C68C52ADB84283F21404DAB0ED728B1FBBC545033595
MD5 SHA1 SHA512 TLSH

Submit Download

is-HP8CC.tmp

Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloStrings\Strings\Violin\Resources\Presets\Factory\is-HP8CC.tmp
Size 4KB
SHA256 92eb498f50162471a50f3580c1138e510fe3d5fc2209c20f80f3b637bb822f22
MD5 a42f0869291821d673c9580a2f777804
SHA1 d4700213b5e86d37116b21de23eb6ef77b98d49a
SHA512 45d96f2b8458266206300194d7527e958cbbee952c7e90e4662074393166dc64d6ec6dacbc06321ac779d5459b80385f30d38803bb3dbf35917951556dddfc33
SSDEEP 96:ENQ4ZzPNwPhUKBhdVQ80B8mKZW318kfkQ8kxt2F:EOle0/VQ80B8m2W318kfkQ8kxt2F
TLSH
T1E8912D20E8F9AB690576150A72DA94518F7B62D3B3050086B5CEB35BDF3FC457323A24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4228-1578-0x0000000000400000-0x0000000000702000-memory.dmp

Download

memory/4228-21-0x0000000000400000-0x0000000000702000-memory.dmp

Download

memory/4228-1577-0x0000000000400000-0x0000000000702000-memory.dmp

Download

memory/4228-11-0x0000000000400000-0x0000000000702000-memory.dmp

Download

memory/4228-872-0x0000000000400000-0x0000000000702000-memory.dmp

Download

memory/4228-19-0x0000000000400000-0x0000000000702000-memory.dmp

Download

memory/4228-8-0x0000000000400000-0x0000000000702000-memory.dmp

Download

memory/4228-9-0x0000000000A20000-0x0000000000A21000-memory.dmp

Download

memory/4228-5-0x0000000000A20000-0x0000000000A21000-memory.dmp

Download

memory/4444-1579-0x0000000000400000-0x00000000004E0000-memory.dmp

Download

memory/4444-1-0x0000000000400000-0x00000000004E0000-memory.dmp

Download

memory/4444-7-0x0000000000400000-0x00000000004E0000-memory.dmp

Download