Resubmissions

09/08/2026, 15:20

260809-sqs2fattey7

09/08/2026, 15:15

260809-smz1kshj2x7

Analysis

  • user interaction
    yes
  • max time kernel
    155s
  • max time network
    165s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    09/08/2026, 15:15

General

  • Target
    pianoteq_setup_v912.exe
  • Size 133.6MB
  • Sample260809-smz1kshj2x
  • SHA256 225110705d0fc7a7a1847b2ec8eabc0329505c164053e63f9a5ed6bbd2b026a2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Modifies registry class 30 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\pianoteq_setup_v912.exe
    "C:\Users\Admin\AppData\Local\Temp\pianoteq_setup_v912.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4268
    • C:\Users\Admin\AppData\Local\Temp\is-85063.tmp\pianoteq_setup_v912.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-85063.tmp\pianoteq_setup_v912.tmp" /SL5="$90054,138841585,882176,C:\Users\Admin\AppData\Local\Temp\pianoteq_setup_v912.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4196
      • C:\Program Files\Modartt\Pianoteq 9\Pianoteq 9.exe
        "C:\Program Files\Modartt\Pianoteq 9\Pianoteq 9.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:4940

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ptq912p.dll

        • Path C:\Program Files\Modartt\Pianoteq 9\ptq912p.dll
        • Size 141KB
        • SHA256 9076aa7afe878788367b2311e67c065e48d2f6608aff3699e7f802323e07b402
        • MD5 SHA1 SHA512 SSDEEP TLSH

        K1.ptq

        • Path C:\ProgramData\Modartt\Pianoteq\Addons\K1.ptq
        • Size 1.0MB
        • SHA256 5f430eb02af4ad36d388d766a6697827fb2abfff6e2516c8ae53b709178ac18d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KIViR.ptq

        • Path C:\ProgramData\Modartt\Pianoteq\Addons\KIViR.ptq
        • Size 4.8MB
        • SHA256 011c8f9fc84d47ee42287b5bb86458ad98cd29d47775da22479aecb906947c33
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KPRAUSCH.ptq

        • Path C:\ProgramData\Modartt\Pianoteq\Addons\KPRAUSCH.ptq
        • Size 161KB
        • SHA256 25c9829d2108f6146b2b6e38cbe95404d621329adbc06f691b4d0c4217b1bb98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        R1_v410.ptq

        • Path C:\ProgramData\Modartt\Pianoteq\Addons\R1_v410.ptq
        • Size 371KB
        • SHA256 0facaad5a35d2aadf5667b044152907b8f8347f8635487bdcd261300ee6dd70f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STEINWAYDV80.ptq

        • Path C:\ProgramData\Modartt\Pianoteq\Addons\STEINWAYDV80.ptq
        • Size 1.8MB
        • SHA256 221126c849466ec253d2b9478955350a06c1a3fa25d1f10a9d45ee1106ca552c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        V3.ptq

        • Path C:\ProgramData\Modartt\Pianoteq\Addons\V3.ptq
        • Size 2.7MB
        • SHA256 c5790c235668e4c74c42ff8b099c843a87fa9342d132badafabb3ac8053a1e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bells.ptq

        • Path C:\ProgramData\Modartt\Pianoteq\Addons\bells.ptq
        • Size 568KB
        • SHA256 94a4998fec74e88822adf70bc86cc0fe4971d9e9b1ed183d0e350e97719d1c86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2 Blu.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\2 Blu.fxp
        • Size 40KB
        • SHA256 7b258402c4e60f39f185ee058f4d2016fd29f1d8f6b021bd34d495f2dd4f039f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        275cm.mics2nodelay.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\275cm.mics2nodelay.fxp
        • Size 6KB
        • SHA256 0bcf80aada0c221ae46e3de18de4ca5c47b983125bad2eb806d28c54f6edea75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        437 well tempered Parlor Grand.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\437 well tempered Parlor Grand.fxp
        • Size 8KB
        • SHA256 65fedf9a9df728b267fb3e34b56c143f05cef45ab435b4bad7e4ab19b04be08f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7-10-2014c.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\7-10-2014c.fxp
        • Size 41KB
        • SHA256 1978e32b285adb3a3bacd4492b35643cd962bce57f91c83348395a238f5b1297
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7-11-2014.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\7-11-2014.fxp
        • Size 41KB
        • SHA256 d211ca273985b1bbbc1507adeade9f0ecdd93aead8009ecc4de1a75ef5785ffb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7-12-2014.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\7-12-2014.fxp
        • Size 42KB
        • SHA256 4437bdddd8e35a18bc666e310052a715ccd7d60da3d05189296b83b05cd01a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7-4-2014.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\7-4-2014.fxp
        • Size 35KB
        • SHA256 79d568c10273c569be27d82834a902f013f3f22cffa9bfd7072c9e1c39c70097
        • MD5 SHA1 SHA512 SSDEEP TLSH

        8-6-2014.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\8-6-2014.fxp
        • Size 17KB
        • SHA256 25fd4c4cfc0b9024236cd5b93b662aee0368548a1e101491fd57e7ab00f7115c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        8-9-2014.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\8-9-2014.fxp
        • Size 25KB
        • SHA256 2b99a4efc9129b1c9d0fcb72ef821d8e695f001c6c8e569d3d4747560a07a4a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ARIUS 14.09.2016.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\ARIUS 14.09.2016.fxp
        • Size 63KB
        • SHA256 cc55c3300c1c2fcc57caf39e9d33724098d1027445093d742e5d28c0cc8073d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ARIUS 20.08.2016.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\ARIUS 20.08.2016.fxp
        • Size 63KB
        • SHA256 2084ca250a893d5f1f36decb34881c317d430a1851b4c68954a15ff4e09de580
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ARIUS Best Velocity Alignment.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\ARIUS Best Velocity Alignment.fxp
        • Size 63KB
        • SHA256 1224517a80ca958e12f65a2f02c7ac5556bbc7676bb1fb6228c17120d63d71d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ARIUS.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\ARIUS.fxp
        • Size 63KB
        • SHA256 9f96910660675c9e7cee7751d70cdb69e502cbc6ef6cbdf775b5050768b8c81f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        American Steinway.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\American Steinway.fxp
        • Size 12KB
        • SHA256 a3547a605b134bb2b5a0a3f1721d18a2553bcb94f31b503324e181dc51876c02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        American-274Concert1.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\American-274Concert1.fxp
        • Size 17KB
        • SHA256 88c4ba539329eaca3ff0eb5dc9f5e63cd296366f988ec2d845ca3ff69bdfc51d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AmericanGrandD1.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\AmericanGrandD1.fxp
        • Size 16KB
        • SHA256 9b0e3459cc9a5f8bb7238d1e641716d94aa3de72a452c95d706f18726874b62b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        B bell air2.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\B bell air2.fxp
        • Size 61KB
        • SHA256 7b53439227f7f7fb140edaa401c3a13a9ee9166200f6026c0037b7d79dc4027b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bill quasi MONO.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bill quasi MONO.fxp
        • Size 71KB
        • SHA256 736376273f0790f6b810a8be888c157521720ac16b110a24b09d89b5c0bbb215
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Blooming D4.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Blooming D4.fxp
        • Size 73KB
        • SHA256 2ca46eec8f87c045bcf9592481bb4a76e0487653bfa8651813319e71d0138bd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Blue-thner.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Blue-thner.fxp
        • Size 39KB
        • SHA256 377056ccccf6c8d9bf521b738a192cbfddd9df13762117e827dc0d8a7e035498
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner 278 (Player) 2.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner 278 (Player) 2.fxp
        • Size 40KB
        • SHA256 62c54e6f69627ce039565e5884286a441c787363d7260c72bd30150d1e22b7cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner 278 C.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner 278 C.fxp
        • Size 16KB
        • SHA256 3a3498d36f88767c51a9ac7f7ebc13537a05f45fd7d35697cb668810f3d9d2ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Classic Grand.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Classic Grand.fxp
        • Size 7KB
        • SHA256 c1742d1176e262b571a1146f33b82bf42938d0851aaca4ff58b887e07cd50f78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Concert Recording AB (unison C3-C4).fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Concert Recording AB (unison C3-C4).fxp
        • Size 62KB
        • SHA256 c2db2108bb5023d1a69807f77d7d291f3c0a4dc7e3a6d87885ee0c3205d8484a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Concert Recording AB Gould.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Concert Recording AB Gould.fxp
        • Size 61KB
        • SHA256 9512e44ab0912211e8201fef338c743c59c0a4779562b3d9340225a5e27eb0b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Concert Recording AB Jon.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Concert Recording AB Jon.fxp
        • Size 61KB
        • SHA256 8127897eac4dcb9f5557c0340ce5f6a0e53a0ac74092d8e473229a7bbfca2478
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Dulcet Hall.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Dulcet Hall.fxp
        • Size 7KB
        • SHA256 3e455001012e961a372ff99d24a5b381e2cb3c162f44ae2676ddb08f3c23d0f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Expressional.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Expressional.fxp
        • Size 10KB
        • SHA256 5cc394f01b04d6352a13d0e01c9bf617384864e405fa3607e7f58279cb75b358
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner J amber.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner J amber.fxp
        • Size 7KB
        • SHA256 cfa1ae6150f52e5cab4ebcb0a6cb7294b18cf3cd35b63f82f5dcf7dd6657fef7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner J crystal.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner J crystal.fxp
        • Size 7KB
        • SHA256 4d4f61421423da052e76f09d103d481fb41439079dc4e15a02d5c831552d2207
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner J sapphire.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner J sapphire.fxp
        • Size 7KB
        • SHA256 408a0d89ec70a9ad59b12b0862a7fa795f4521646b62b14f39444b0b27b6f1f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Model One AB 01-Claire de Lune .fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Model One AB 01-Claire de Lune .fxp
        • Size 9KB
        • SHA256 8e2ff1f95f400bd6ae53a4e1688a1b3a6941a54db1563fe4bed6ebda24a33cde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Scott Joplin - Modern.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Scott Joplin - Modern.fxp
        • Size 7KB
        • SHA256 b414e08b9b416774a26df56e9832d1fd1c00a5a6f53baea3d973f5ac791d2704
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Scott Joplin.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Scott Joplin.fxp
        • Size 7KB
        • SHA256 434a6cc1f1c78ca399af6ae34e09fecbdab24b43d7009127eac1172e3a3c94db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner Steinway.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner Steinway.fxp
        • Size 32KB
        • SHA256 366a8b85f118112f4297511b515aebc2a0fac6f948c5ee65b7b75a258059d3fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner-Grotrian.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner-Grotrian.fxp
        • Size 8KB
        • SHA256 308e05642b906e0acd6e1b01884495278fb269116a920150d6e0274a9ea55ab1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluethner.Grand.101.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluethner.Grand.101.fxp
        • Size 17KB
        • SHA256 8457301cded94ad17a3fdcb9e796624841845f59a2a163ae5cadf7efea7eeaa8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BluethnerGermanD.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\BluethnerGermanD.fxp
        • Size 19KB
        • SHA256 b116f9ab86f8ee5383355142b77b41f3ef36fe6f1f8fb2ccbee2908ae50b5fbd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BluethnerVienna.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\BluethnerVienna.fxp
        • Size 16KB
        • SHA256 375fa086d6a83e7d3b57bd00836235639fbd0932f078b107162d2f25bf07b1ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bluthner-Freeze1.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bluthner-Freeze1.fxp
        • Size 11KB
        • SHA256 2a0341c63139b8154b5a2932d82b15c4ff129c637680ac9b48ecc0b68ae7e155
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bosendorfer Imperial.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bosendorfer Imperial.fxp
        • Size 10KB
        • SHA256 d448b23dcf44925e150d5a49b0dd871d27735d9e3d8fe04898893d0d356530e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bosendorfer-Oscar Peterson(2).fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bosendorfer-Oscar Peterson(2).fxp
        • Size 7KB
        • SHA256 6afd06d8802b2466f36f7b5007482cbe44901ecc7b61c07f9241a0a7bd19a4bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bosendorfer-Oscar Peterson.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bosendorfer-Oscar Peterson.fxp
        • Size 7KB
        • SHA256 c1ef7fd760d7312a40d29780c0498b41cf914475aa9777fba561ff3a839cd584
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bright Model One BA.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Bright Model One BA.fxp
        • Size 7KB
        • SHA256 f3a01e5389f8e985c57113f68fc21c7c8dc1c96ceeb42848904577910576a46a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        C 2.26.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\C 2.26.fxp
        • Size 43KB
        • SHA256 fcb87a9a9faa922610ad95c8ef4487e5951c38c4536307023d84a358287f2a53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        C 2.26rev.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\C 2.26rev.fxp
        • Size 45KB
        • SHA256 b98579c486e48fd3e6cb68c9b369bca9e159065a6794882c58d9964845a18d41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        C. Bechstein-PRO.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\C. Bechstein-PRO.fxp
        • Size 14KB
        • SHA256 1d95491555d776b217d2869720345811db4016f1e9db6aa710254d2619ce5299
        • MD5 SHA1 SHA512 SSDEEP TLSH

        C. Bechstein-modern.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\C. Bechstein-modern.fxp
        • Size 8KB
        • SHA256 081fc514824a46ea06bedc3e92015acd214bca634b4016485d4841e56fd08b95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chick Blue Monk.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Chick Blue Monk.fxp
        • Size 72KB
        • SHA256 0f257dfadcc68cd242234e793e4a5f8fbe3cd6a4e4571bd102438bd31614adca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Chick.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\Chick.fxp
        • Size 6KB
        • SHA256 e04240e2836801d17725c21cd1b143e28c106030b9f1c262a34c80d49bc9bb3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CimbaHarp Bright.fxp

        • Path C:\ProgramData\Modartt\Pianoteq\Presets\FXP Corner v5\CimbaHarp Bright.fxp
        • Size 17KB
        • SHA256 228248e4bd0f4605e76e35027a719cc0bdd3f001d7a9b92d79cfa09b42afa470
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pianoteq_setup_v912.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-85063.tmp\pianoteq_setup_v912.tmp
        • Size 3.6MB
        • SHA256 b34e3de7a8385938c95a8737facc4fea80504453e21728fd10c99b69ed8ef919
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Pianoteq91.prefs

        • Path C:\Users\Admin\AppData\Roaming\Modartt\Pianoteq91.prefs
        • Size 210B
        • SHA256 5118c9fd91b4a0c95aa15c686b059019731056500f0d3565c12938db52fc458c
        • MD5 SHA1 SHA512 TLSH

        Pianoteq91.prefs

        • Path C:\Users\Admin\AppData\Roaming\Modartt\Pianoteq91.prefs
        • Size 250B
        • SHA256 971eceb2cd7a6ed2dfaa9df7f72e7ea825740a6313132a4d35a396ff707888aa
        • MD5 SHA1 SHA512 TLSH

        Pianoteq91.prefs

        • Path C:\Users\Admin\AppData\Roaming\Modartt\Pianoteq91.prefs
        • Size 56KB
        • SHA256 852932fcf21f471d162fbdfa56e6dc5e17a8376f49088917b41a3143e5da99ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Pianoteq91.prefs~RFe5a0c65.TMP

        • Path C:\Users\Admin\AppData\Roaming\Modartt\Pianoteq91.prefs~RFe5a0c65.TMP
        • Size 111B
        • SHA256 ecc2643e345518ed278f29c84b37456b51ce8ee96d5d0929576ebd26938909fd
        • MD5 SHA1 SHA512 TLSH

        memory/4196-5-0x0000000002D70000-0x0000000002D71000-memory.dmp

        memory/4196-5139-0x0000000000280000-0x000000000062E000-memory.dmp

        memory/4196-5127-0x0000000000280000-0x000000000062E000-memory.dmp

        memory/4196-5110-0x0000000000280000-0x000000000062E000-memory.dmp

        memory/4196-9-0x0000000002D70000-0x0000000002D71000-memory.dmp

        memory/4196-8-0x0000000000280000-0x000000000062E000-memory.dmp

        memory/4196-765-0x0000000000280000-0x000000000062E000-memory.dmp

        memory/4268-1-0x0000000000F90000-0x0000000001077000-memory.dmp

        memory/4268-5140-0x0000000000F90000-0x0000000001077000-memory.dmp

        memory/4268-7-0x0000000000F90000-0x0000000001077000-memory.dmp