cb6552ec9a7c6839c58f14d094360885f4793ebdccc1b4b652b55616aafb9e9a

Analysis

max time kernel
139s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/08/2026, 23:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Setup.msi
Size 715.0MB
Sample260815-3hrhraac28
SHA256 cb6552ec9a7c6839c58f14d094360885f4793ebdccc1b4b652b55616aafb9e9a
MD5 74503f7a8a0b49bd5884245ea119c227
SHA1 fca21579661cacc5d85b898f448d696d7dad64df
SHA512 ca0adc2f557a92eea3d91f48370545bce0e2971c28a4c66181e1d3fe87fcccf7baa47567eff58ec9f8c860c83a8f163769c8d41f5aa3c4013e33eaadade7f9c9
SSDEEP 12582912:aeYu5xkF9tN6fcEQusbazOlzllM9YYXbGtOAP54Mv9c2prj8EJG048aWZHbv6k1T:asO97MQFZl6bXbPABPmen8puv625
TLSH
T1A079335134375E97D1877637A3560346BF603C61A701CE22EA31BA9F1EBE2D42AB94C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
1536	InstallHelper.exe
4240	vcredist_x64.exe
1688	install.exe

Loads dropped DLL 9 IoCs

pid	Process
3104	MsiExec.exe
3104	MsiExec.exe
3104	MsiExec.exe
3104	MsiExec.exe
3104	MsiExec.exe
3508	MsiExec.exe
3508	MsiExec.exe
3900	MsiExec.exe
1688	install.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
4152	icacls.exe

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
15	4312	msiexec.exe

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File created	C:\ProgramData\Ableton\Live 9 Trial\Resources\Misc\Metronome\Desktop.ini	msiexec.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Propellerhead Software\ReWire\ReWire.dll	InstallHelper.exe
File opened for modification	C:\Program Files\Common Files\Propellerhead Software\ReWire\ReWire.dll	InstallHelper.exe
File created	C:\Program Files\Common Files\Propellerhead Software\Rex\REX Shared Library.dll	InstallHelper.exe

Drops file in Windows directory 11 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC421.tmp	msiexec.exe
File created	C:\Windows\Installer\SourceHash{A972C6E1-D2C8-45B2-BE49-DF94AB3004CF}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI105F.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC96F.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\e599215.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSICDE6.tmp	msiexec.exe
File created	C:\Windows\Installer\e599217.msi	msiexec.exe
File created	C:\Windows\Installer\e599215.msi	msiexec.exe

Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs

persistence privilege_escalation

Installer Packages

T1546.016

Msiexec

T1218.007

pid	Process
4312	msiexec.exe

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	icacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\Assignment = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.alp\DefaultIcon\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Resources\\Icons\\pack.ico,0"	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.asd	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adv	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adv\Shell	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.alc\ = "Ableton Live clip"	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.alc\Shell\open	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adg	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.amxd	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ableton\Shell\open\command	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.adg\ = "Ableton Live group preset"	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ableton	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1E6C279A8C2D2B54EB94FD49BA0340FC\VCRedist	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.als	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.alp\ = "Ableton Live pack"	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.adv\DefaultIcon\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Resources\\Icons\\preset.ico,0"	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adg\Shell\open\command	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.auz\Shell\open\command	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.amxd\Shell\open\command\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Program\\Ableton Live 9 Trial.exe \"%1\""	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1E6C279A8C2D2B54EB94FD49BA0340FC\ProductFeature	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.alp	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.alp\Shell	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.alc\Shell\open\command	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adv\DefaultIcon	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.amxd\ = "Ableton Max Device"	InstallHelper.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32-policy" = 4200250030004f005f00670047002a004a003d004f00290025007100570028007a004e0055006b00560043005200650064006900730074003e002c007d0050004e002c00320065006e007a003300270070005b00550021006c004900720021006e0000003600540043006c0046002e005f007400740035006200290038002100600024004b005a0046006d00460054005f00560043005f005200650064006900730074005f004300520054005f007800360034003e002c007d0050004e002c00320065006e007a003300270070005b00550021006c004900720021006e0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\4C674D93FCD6ABC4E8F261AF9E4CCBE0\1E6C279A8C2D2B54EB94FD49BA0340FC	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.alp\DefaultIcon	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.alc	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.alc\DefaultIcon	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.adv\Shell\open\command\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Program\\Ableton Live 9 Trial.exe \"%1\""	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ableton\ = "URL:Live Protocol"	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.als\Shell\open\command	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adv\Shell\open	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adg\Shell	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.adg\Shell\open\command\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Program\\Ableton Live 9 Trial.exe \"%1\""	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.auz\Shell\open\command\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Program\\Ableton Live 9 Trial.exe \"%1\""	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.amxd\Shell\open	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ableton\DefaultIcon\	InstallHelper.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\Version = "150994944"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.als\Shell	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.als\Shell\open	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.adv\ = "Ableton Live device preset"	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.adg\Shell\open	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.amxd\Shell	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ableton\Shell\open	InstallHelper.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\Microsoft.VC90.MFC,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32" = 4200250030004f005f00670047002a004a003d004f00290025007100570028007a004e0055006b00560043005200650064006900730074003e00360057002e002700490055007a0028005000330071003f0064004c0051004e00440029002500290000003600540043006c0046002e005f007400740035006200290038002100600024004b005a0046006d00460054005f00560043005f005200650064006900730074005f004d00460043005f007800360034003e00360057002e002700490055007a0028005000330071003f0064004c0051004e00440029002500290000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\PackageCode = "388D479E0E618C049BB26ACF8A4FF462"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.als\Shell\open\command\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Program\\Ableton Live 9 Trial.exe \"%1\""	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.auz	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1E6C279A8C2D2B54EB94FD49BA0340FC	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.alc\Shell\open\command\ = "C:\\ProgramData\\Ableton\\Live 9 Trial\\Program\\Ableton Live 9 Trial.exe \"%1\""	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ableton\DefaultIcon	InstallHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.amxd\Shell\open\command	InstallHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\ProductName = "Ableton Live 9 Trial"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\AuthorizedLUAApp = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\4C674D93FCD6ABC4E8F261AF9E4CCBE0	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\PackageName = "Setup.msi"	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2404	msiexec.exe
2404	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4312	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4312	msiexec.exe
Token: SeSecurityPrivilege	2404	msiexec.exe
Token: SeCreateTokenPrivilege	4312	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4312	msiexec.exe
Token: SeLockMemoryPrivilege	4312	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4312	msiexec.exe
Token: SeMachineAccountPrivilege	4312	msiexec.exe
Token: SeTcbPrivilege	4312	msiexec.exe
Token: SeSecurityPrivilege	4312	msiexec.exe
Token: SeTakeOwnershipPrivilege	4312	msiexec.exe
Token: SeLoadDriverPrivilege	4312	msiexec.exe
Token: SeSystemProfilePrivilege	4312	msiexec.exe
Token: SeSystemtimePrivilege	4312	msiexec.exe
Token: SeProfSingleProcessPrivilege	4312	msiexec.exe
Token: SeIncBasePriorityPrivilege	4312	msiexec.exe
Token: SeCreatePagefilePrivilege	4312	msiexec.exe
Token: SeCreatePermanentPrivilege	4312	msiexec.exe
Token: SeBackupPrivilege	4312	msiexec.exe
Token: SeRestorePrivilege	4312	msiexec.exe
Token: SeShutdownPrivilege	4312	msiexec.exe
Token: SeDebugPrivilege	4312	msiexec.exe
Token: SeAuditPrivilege	4312	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4312	msiexec.exe
Token: SeChangeNotifyPrivilege	4312	msiexec.exe
Token: SeRemoteShutdownPrivilege	4312	msiexec.exe
Token: SeUndockPrivilege	4312	msiexec.exe
Token: SeSyncAgentPrivilege	4312	msiexec.exe
Token: SeEnableDelegationPrivilege	4312	msiexec.exe
Token: SeManageVolumePrivilege	4312	msiexec.exe
Token: SeImpersonatePrivilege	4312	msiexec.exe
Token: SeCreateGlobalPrivilege	4312	msiexec.exe
Token: SeCreateTokenPrivilege	4312	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4312	msiexec.exe
Token: SeLockMemoryPrivilege	4312	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4312	msiexec.exe
Token: SeMachineAccountPrivilege	4312	msiexec.exe
Token: SeTcbPrivilege	4312	msiexec.exe
Token: SeSecurityPrivilege	4312	msiexec.exe
Token: SeTakeOwnershipPrivilege	4312	msiexec.exe
Token: SeLoadDriverPrivilege	4312	msiexec.exe
Token: SeSystemProfilePrivilege	4312	msiexec.exe
Token: SeSystemtimePrivilege	4312	msiexec.exe
Token: SeProfSingleProcessPrivilege	4312	msiexec.exe
Token: SeIncBasePriorityPrivilege	4312	msiexec.exe
Token: SeCreatePagefilePrivilege	4312	msiexec.exe
Token: SeCreatePermanentPrivilege	4312	msiexec.exe
Token: SeBackupPrivilege	4312	msiexec.exe
Token: SeRestorePrivilege	4312	msiexec.exe
Token: SeShutdownPrivilege	4312	msiexec.exe
Token: SeDebugPrivilege	4312	msiexec.exe
Token: SeAuditPrivilege	4312	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4312	msiexec.exe
Token: SeChangeNotifyPrivilege	4312	msiexec.exe
Token: SeRemoteShutdownPrivilege	4312	msiexec.exe
Token: SeUndockPrivilege	4312	msiexec.exe
Token: SeSyncAgentPrivilege	4312	msiexec.exe
Token: SeEnableDelegationPrivilege	4312	msiexec.exe
Token: SeManageVolumePrivilege	4312	msiexec.exe
Token: SeImpersonatePrivilege	4312	msiexec.exe
Token: SeCreateGlobalPrivilege	4312	msiexec.exe
Token: SeCreateTokenPrivilege	4312	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4312	msiexec.exe
Token: SeLockMemoryPrivilege	4312	msiexec.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4312	msiexec.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2404 wrote to memory of 3104	2404	msiexec.exe	95
PID 2404 wrote to memory of 2980	2404	msiexec.exe	105
PID 2404 wrote to memory of 3508	2404	msiexec.exe	108
PID 2404 wrote to memory of 3900	2404	msiexec.exe	114
PID 2404 wrote to memory of 1536	2404	msiexec.exe	112
PID 2404 wrote to memory of 4240	2404	msiexec.exe	113
PID 3900 wrote to memory of 4152	3900	MsiExec.exe	116
PID 4240 wrote to memory of 1688	4240	vcredist_x64.exe	118

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\msiexec.exe
msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Setup.msi
1⤵
- Badlisted process makes network request
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4312

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2404
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding C344B9693CCB78C51B4FC5FACC188D46 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:3104
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:2980
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 54D42FFD49BAB41D33C1ABBECA978BAC
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:3508
- C:\ProgramData\Ableton\Live 9 Trial\Program\InstallHelper.exe
  "C:\ProgramData\Ableton\Live 9 Trial\Program\InstallHelper.exe" "C:\ProgramData\Ableton\Live 9 Trial\Program\Ableton Live 9 Trial.exe" "C:\ProgramData\Ableton\Live 9 Trial\Resources\Icons" "Live" "ableton" "C:\ProgramData\Ableton\Live 9 Trial\Program\Ableton Live Engine.dll"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Modifies registry class
  PID:1536
- C:\ProgramData\Ableton\Live 9 Trial\Redist\vcredist_x64.exe
  "C:\ProgramData\Ableton\Live 9 Trial\Redist\vcredist_x64.exe" "/q"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4240
- - \??\f:\ba35831b50b2fcbeb17aa4\install.exe
    f:\ba35831b50b2fcbeb17aa4\.\install.exe "/q"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:1688
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 3394A9B0B4F31E42E206976D0A3A2996 E Global\MSI0000
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3900
- - C:\Windows\SysWOW64\icacls.exe
    "icacls.exe" "C:\ProgramData\Ableton\Live 9 Trial" "/Q" "/C" "/t" "/grant" "*S-1-1-0:(F)"
    3⤵
    - Modifies file permissions
    - System Location Discovery: System Language Discovery
    PID:4152

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:4916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Installer Packages

T1546.016

Privilege Escalation

Event Triggered Execution

T1546

Installer Packages

T1546.016

Defense Evasion

File and Directory Permissions Modification

T1222

System Binary Proxy Execution

T1218

Msiexec

T1218.007

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e599216.rbs

Path C:\Config.Msi\e599216.rbs
Size 2.9MB
SHA256 82fedffa430faa91218a0ac180a97af9cace17ef635024254021c2b11a07ef3c
MD5 76f6b52d7b67ed6f576c31c4264ba772
SHA1 098f05f3fbb0dc78b66327dadb2f83e67b85af9e
SHA512 74f2a69448027db41ff03609d8e3b6c840737b75424bf44641e955962a02da71cfa75ee06f3d454fb85c7ccbbd198c3bf9c81c8df1f606604ef1dbdd91d2a6f5
SSDEEP 12288:TiJ65E1S8N9OlUpdfYowBj5OcUKFKdCNA8EynhD7ONFZ1agaT9:GWEE8ga0uFZ1aP
TLSH
T1E6E5013B470A67C0D186D96617CCE91E59234D27DACC3C9EA5E51C4BEFA83C02AFDA14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual English.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual English.pdf
Size 25.3MB
SHA256 097428d9560ce2292a95549c1d58f05e7ca97fc22e47334036ddc3527cb15ce1
MD5 2cfc24fa462f57b67652b24745cd7a44
SHA1 eff84db00ca27e31e63182dcb3c4b4c4028b9a1c
SHA512 6050e84747f7a2cad96614dfef8fdf50f1a96a09ed19d28064d8859b0d60f1523e98d2717a700be829ed245a0b5a68af1d832d3b45d4b665ceea5d40839cc0ff
SSDEEP 786432:Jze8kh7y8jPdPQWL1fz1zK3+tRsqbAduCx3:QdtymdpFRvbyRx3
TLSH
T116472268E157EC4DF05183B42B6E336506AE716FDBC6708239FD8F698380D8A6F814D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual French.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual French.pdf
Size 24.8MB
SHA256 b99438f3a9a577d7b6c737f073de811b697368b71005346fc2fed9741e66de53
MD5 c23528385f1af2e724b35469a83ee4d1
SHA1 e63cf1fea0704c1a1948e39e8129ceea331cbca7
SHA512 70245ba562a58579c8a3a77f7312661b54ed70ac40a80aa91c657ee6edc9b9bd563a9476a04d3a2f1a284faed69ed6590883d4f750868ba002ade12029cb4677
SSDEEP 786432:X/e8Alq0ouBrH3Bk9Ne8SIXDxEub496lJ:W580frm9DaucglJ
TLSH
T14D471224D117EC8DF01287752B7A3769426E71BBD7C6608236FC8F69C780E8A5E824DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual German.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual German.pdf
Size 24.8MB
SHA256 e7c2c77fce2e667a5d38d7b68d38ebc74dbbd6231b872a5c8e8791ccde9bba2b
MD5 3c8644aa05405cf0f3eb29b7c647dd7b
SHA1 1eff99b15281681e6d97f05e0f8a9fb9294ad359
SHA512 ef16041095fe6865f3d3c71a0ef9d973c4aeea420b12c8acbfbe6cdb890377862ec2420b579f40cbfd6fc2497f148c2239471696f79b02d6d05b0af9dc7bb8d7
SSDEEP 786432:QTg8HaOXxfBNnQQ4msRSGvbdQqc9T4o7qf:9OvXfN+zpQv90gqf
TLSH
T1AB471224D157EC4DF0518775276A32B9926E71AB97C6648335FCCF68CB80E8A4FC20DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual Italian.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual Italian.pdf
Size 24.7MB
SHA256 a79163231463f61d9ba60ee6f05522886e71fafea806d71cebd33e2ce081087a
MD5 d7f789f4efd1681d979a75befbc0b502
SHA1 68349224f29806728a8020e7aa06dd32a287d222
SHA512 04abf60c8b2eea0db80e62bab31eece8d08fc4c84f12a5453b525ea6c91f058c0508542144d5a87b78ea3da3d696800e363b9170cb98c6d2e545ceccf2e5bf15
SSDEEP 786432:P8D8HbR466ldtloTXrcN3Jb5UslLpqhofp:+u14vdGe3UcLgKfp
TLSH
T1A6471224E157EC8DF001C3752B6E3365466EB1BBD7C6608235FDCF698780E8A5E860E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual Japanese.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual Japanese.pdf
Size 26.1MB
SHA256 b584aa7e17c67ab3db6416b357fde682161f75083fd03e5652b77457d0432282
MD5 45fa3daecd8b18533909f994124c13f2
SHA1 e6e9780e1d06b92720e0905376ec778f998767b7
SHA512 432cdd97b6eefbcd0ba92f49bc4a90a9fc7179639f66b404d8f8eff856c109c383fb628a3c4008703a386c8a83a263803c323a3ad988ddad8a370056b6763c50
SSDEEP 786432:RmE8td4gLl0XzA12b5vOFLExoqz86lBHdn6Z:rMugiX0Ixow8W9dns
TLSH
T132572224D157EC4DE042C779276E2269465EB1ABDBC7B08336FC8F699700E8A1F814DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual Spanish.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual Spanish.pdf
Size 24.7MB
SHA256 c4a4ce95275e79e86157cd37c9c379b470337632e4b34ac4c835401379b97949
MD5 486ed58b247ee18189975b02c62a4b2a
SHA1 82e9697ff4e0fcaf9997e68aa1cea0d67d491a5c
SHA512 bc000522afb7fb712277a9387f0a474a94522c96eaeb1ef50716c049e0c079d9dc33f0e3a6333e2220b90a4afb8356488570bb0815d3a8b89286605b74cd3feb
SSDEEP 786432:TzD8HsCvLQknreA1As7ZGi8Ht+ElWoNC1G9:TevvHnrj9y+YWuMG9
TLSH
T105471224E197EC9DF011C3B5276E3265526E71BBD7C6708235FC8F688780ECA5E824E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Licensing Information.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Legal\Licensing Information.pdf
Size 1.4MB
SHA256 95c91e646a39b12589fa009dec3ed13abe56cde7bdd65ca2642e460d355bf331
MD5 58d3f9d5c8d368f35a5f34ffbcc90ff6
SHA1 696022b37f9d8ed7dcf1fdb2fe876fc1e3aac32d
SHA512 ffba671c2cacb842ee7dd3696e1005e1cd0693554e4421ca6cd1517041cd90e0714182bf66d8217d7a12761364d000f6e9c5815f09bc186be21d3ef854200653
SSDEEP 24576:6YnYXxN3PB+NVSvU9eS9I7+C9xRCTt77T6DjnFj9nQ42i/Hq1uHsc8kmyZksVV6C:6UYhNfgN8vU0AQRCJAbFjKHii9c+Oksh
TLSH
T1FF65F099E360047BF8EC2100702B2A4B44553D3374AADC4898DBB96F635BFB6BC75D62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ableton Live Engine.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Program\Ableton Live Engine.dll
Size 9.2MB
SHA256 0bebcab684c5806dd42bfde86d97120007f235756ba74328d272f3b290c3e21e
MD5 6260b6a7e94cadf16426a4109f31b5bf
SHA1 a9ffac172a673d6ec58d9e23289a585f03689a88
SHA512 ae72a15dbccdf687cf6ab63c14efe8a29b95f22c9da818aa7a01e133c7850d1a25cf0246bf97e7d39eb8c872e46cd2f42cbbf7355c8b7cd9750c7ed0d541edb2
SSDEEP 98304:uLP4wyXkKqz8uJ8zLVVBHLcLIBwuYEkEkTxM:uLPTyUKqzvJ8zR3HLctuR
TLSH
T15DA6F64975F582A6D137907EE187FE9FD92220120B100ECB07E68B591EF77C549BBA32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallHelper.exe

Path C:\ProgramData\Ableton\Live 9 Trial\Program\InstallHelper.exe
Size 11.3MB
SHA256 9bdb8f761c1ed2caa01329e0860b3f19f85e009feb3c0dc40037560ee8d05fdb
MD5 9c2eb20ba2246f91116fe3ca5d6a36a2
SHA1 dfaeed7cb39eecb2ca952c65d4cba06f15b84ce5
SHA512 42504e4145ceeb0aa2115f01d382a7fc0c75c10d555919e1d97ac50cabe4f429960565f7a04ae21bbadc8e5fb9738d6e5d5cf7f332e5b68d2d8b11949fafda0b
SSDEEP 196608:fFlDL0My8A0zfk+crNC3gB2cpbhwInn3Pq:fTRyDocM3gBbhwInn/q
TLSH
T16EC6C959B9288262E133D5FFE5C39F8DDD72205227205EC7114ADB9E1E376DA803A732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Installation.cfg

Path C:\ProgramData\Ableton\Live 9 Trial\Program\Installation.cfg
Size 173B
SHA256 3cb59772c041dd564e337d787735dd051fbc8386eebfea6a9a45d6fc1e366e85
MD5 faeb366c2ed54d7ff7007fe74135795d
SHA1 bd804fc910ef54394828a66310a978b502f0fcb1
SHA512 067fd11379bc3ea094b5ba5a256ffb3ea3707f2d42a1c18e5fc8b49289d27a908dcee62112c5e99cf2b48be3d00a38d18132dee53fe699a379cbc68ae528ec2a
TLSH
T162C08075577247301416134ED315471460199982925DF75D739F8804BF4B8637175711
MD5 SHA1 SHA512 TLSH

Submit Download

VideoExportMMF.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Program\VideoExportMMF.dll
Size 385KB
SHA256 e3dbf34e8e61fd190a8e6c63b6e4f16d4764959103e37ce7196d8a3498d30728
MD5 973a1b45dc514d160410fbe14a092bc7
SHA1 4bdf0a0bca61860fb8f4fd52c761d4efdc2e5923
SHA512 7483556fd78d8deb0d069fb5f5d957b8a067314db7f3d238e89815fc9354945c8ca30052bb3d14167f80b48a4bc40cd79864da48fea78097b20f0db7c12b2122
SSDEEP 6144:CPMcPfoeB+ZO/n+kb6Na0di2OLU9iTfp4YaTh2cMP3ApClo+AU8:7cPfoeEO/++6NBdi1U9iDp48Yv
TLSH
T192843A4AF7B48866E122D139CA73868AE7B27C594B21938F1364535E3F33BE15D39321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REX Shared Library.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Redist\REX Shared Library.dll
Size 311KB
SHA256 3aeb56b1dd107aa6ed7b9c1358f0f4d0cc83418174dad597843ec257359fe0a6
MD5 97246a4446f34312adaf14e95fb7b1bf
SHA1 7b056e307b07bde9f1a30c7e195347cdef300b32
SHA512 bd1c079618619ffed2b8a7dd74eb2f80cecd416233975b791db55fb4bdcbbeec3929f9949dbf1361e27eab2a7bba745b924998f6d131c631607a9f32db726631
SSDEEP 6144:w9oCvZDZm+2VYnrzzc3y8eVdquNwoXejGJPoppuu+ToUukVg:w9oqZ4YY3y86JNwgPo7KoUukC
TLSH
T1C6642A2DBA699C72D023907ED5C3964BE3B230504B7097DB03A14B6E2E377D59C3A726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReWire.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Redist\ReWire.dll
Size 2.1MB
SHA256 08bd9c37ae6f38ee4410b8a5dcab992eb2082ef5845c2cc5dda9bfa88a086831
MD5 3f7d6398717d9bc8bd9116aeadc5234e
SHA1 a487aec494e27567c1e8dd4c794188547873a001
SHA512 b1b01cf1a952d40df897b3eb699986d735ec93e76a4cb4ce4a1e59b1526040cfdff827117c34f95c935a1687d4d9ed8390e26e27a518340815a5b9a43ec95c0e
SSDEEP 24576:/vluOWI/TLARZeFJ5kOnPpvJmS52vhahB7RtZid19MiyeFiAV:/vlUIugF7HtJmS5cqtZ019MiyeFiA
TLSH
T17CA5D71ABA28C221D177D0BFD5C39E8DE97230415B305ECB155A8BAE1E377DA843A731
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x64.exe

Path C:\ProgramData\Ableton\Live 9 Trial\Redist\vcredist_x64.exe
Size 5.0MB
SHA256 b811f2c047a3e828517c234bd4aa4883e1ec591d88fad21289ae68a6915a6665
MD5 e2ada570911edaaae7d1b3c979345fce
SHA1 a7c83077b8a28d409e36316d2d7321fa0ccdb7e8
SHA512 b890d83d36f3681a690828d8926139b4f13f8d2fcd258581542cf2fb7dce5d7e7e477731c9545a54a476ed5c2aaac44ce12d2c3d9b99c2c1c04a5ab4ee20c4b8
SSDEEP 98304:98I8/pCVmdbx2rU/xFnTBU8UeNeagEXtIgvjyGFDdo85qyKYr5NM62dNKViClWPg:9Avx2rw5Th8XeNyGtW0DJr5uDdQdWPet
TLSH
T10836337146138770D1E443B2789607CDFEA3ECA004226A7B9664FE2B5C05ABED59E70F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AudioToMIDI.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\AudioToMIDI.png
Size 13KB
SHA256 b461ab59cffa6685bd462479a16b240aafd216b7515a6b4ab5c13d92c25c44b4
MD5 3f96228196c5a75bac88e1248ad49da1
SHA1 0262eea7e827ff16172aab67a518ca7eb8ed34d6
SHA512 5fb3da57a5895c99dfbd064516794cc957968f53389b2a164fea1b5afd7c2c57b9452aa0141e9137c8ff7af51449dced01e1edb1fa308fae115992c2174ad8dc
SSDEEP 192:BS0tKg9E05TNbIYY0Ki7Xace6abyMvZUpWMsIBzxxM+fu7NMGvG1KWaTfsW0N6n:vXE05UMXacenyCZUwcxMr7NMG5WO9
TLSH
T14E52BFDAAE11A87C455FB9B60CFE8360CE29239C998224712F9176E921F1EDEDF10474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AudioToMIDIDialog.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\AudioToMIDIDialog.png
Size 15KB
SHA256 adc2416f2ac7bd42a96cc1c8bf5639cdf5a8ea76d1d5485ba455aad60d2358db
MD5 86eed0c173595223e804ed3636a0109d
SHA1 41f7061098d1eb8ef5eda10c68e5a21aa0798952
SHA512 915fd8e7fb434e2355f4aa8bd63d740ee5ff8d816f55565dd2428d93bf9bc0c4c9c33b2d17ded4ea7e7975451628ad0a6fd998e40e76cf04570cf487e4e1fea9
SSDEEP 384:xXE05oSCtGkAitiFAlJ4+lrkeFEOUeYnoX0rKqdPdPtJ6ka:935mAQi+lI9OKnoXWBLJ6ka
TLSH
T12962D1BFA680249B75A669A128C543815F4912ECD456293C3BC7708E38F4ED62F9C8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Browser.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Browser.png
Size 36KB
SHA256 7caddb9adc015b2b5387c7be0ad31d6d7e20a43691d1825128b8077fa3cdbeb4
MD5 79fb9f751b314818ae4e4ee297efbae4
SHA1 56efe86ea2908f4a1482fd0edc9a3847d1a86104
SHA512 2eb3bd566b5288ea94bb8f02e98d922975fd77deb0ab1177d8b60c53940c8727f8a911af86e6e02ca21f5f7a8426a3324aa49e01659f5ce3ddc66611cfbbc3aa
SSDEEP 768:U35idxmRJve+eiD2IgQn0E1hJvAj4w3+LQGPsPz0:na2BiybW9y4wvQ
TLSH
T1F803E0A6E6A64CB3E5F0D3205CDD862E9F31309A216E973C69563A500CD35C261DCDFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Compressor.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Compressor.png
Size 27KB
SHA256 44e448ee1cd8bb8b55e3af9514d39cc2e842ee0082a91d5ab44c524ddda731d8
MD5 09911a6ce0f08603c745b3c7964ea8ca
SHA1 a9fb246a93b9cdc9d9b457972140874ca233a3bf
SHA512 10e2c9f5e31f6ad5ffea501ca86e2122db572955dbfe966bfd86ad91c4f6a00c854acecbcd6078efd868b462a587c07d91a3d215b97ed31404a504ae880daf7c
SSDEEP 768:p35HLhe6aaCALwaxVFA0t4R32mIGlEjcFT/:XLg653LwaxV2jRVIBO
TLSH
T11EC2E1BEB86084937DE42D126E8D534F9FF0098D89A48A26CB8D0AC6B95CCCF455E51B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressorAutoRelease.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\CompressorAutoRelease.png
Size 7KB
SHA256 50f1884bd992aa4278027dca3b4528ec03cbfabf306fb73797ba09812260a6d9
MD5 f1abecd105fea6f415022730e6314871
SHA1 7434eed504b82db221f081b38a8ee6281f6622f8
SHA512 a9b878cb53e604e7576957bab87a55c2379aae87761c48ab8cd777d295ca3101054c5cb00e4e60f3ed88f05ddfe876f26bb4a1b39a771d596bbbb253475dc534
SSDEEP 192:yS0tKg9E05TkZFLW05+9ZzrqPQiUScm/Wv0FG6V:mXE05YZOzuoiUShd0K
TLSH
T140F1B0DFD590D8EE3E8D75124DCC6362A7995129F72063B04D9391C82410DAFDF8A271
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressorUpExpansion.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\CompressorUpExpansion.png
Size 11KB
SHA256 eb2b54c7af31d4365f5566f9c379d5e54de40e1fd4c16329d9a66ae15bda51a0
MD5 3baf4d0e22ab2e5b64c9e9d207cb3ffc
SHA1 0111bd826f6b0575a7196347dbbf2dfd9b6c4652
SHA512 b2969fb910cff5ea0fa9de2a0a1e959883425d38c3fb948dcdca68611976b7dc693e0f6b13fcb82376e92c86b08847c94b8ff53f57726c3181f3363d1234a8dd
SSDEEP 192:WNS0tKg9E05ThjYd1qMkyXFIYdOjUD3QWmlKY2FE2GbtaHJpc//rsv5AkgKQ:IXE05VYd1q8WY53KKxG+HJpc//IvGtF
TLSH
T1C832CF5B10029C565CC879001EE52319FB1E49FCE3D274782AC47CB42D68DAA6E2F7E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ComputerMIDIKeyboard.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\ComputerMIDIKeyboard.png
Size 4KB
SHA256 d403c85172ea628e61c3eec86b065715528d17445cdae8261ec87b9d16c89195
MD5 284fb4662fad2abf8c20f0f861fc1a09
SHA1 33f52bad4f0755086fc8d620d9cd49581f8d7ea4
SHA512 91367849ca7dca6f89773df046b5ea49e9ac895e9a80b82b71da235903bfc827e6e6f2e2369bd23c840a2e205b60bc9156b3baab82fbcca5958be77c10cb46b4
SSDEEP 96:bZ/I09Da01l+gmkyTt6Hk8nT1AI5kClw331I5XNDdz62Fgl88:bS0tKg9E05T1AI5a6BuH88
TLSH
T128A1AFDE80A4C4EF3D8B35400FCE864917FA223C865D2334E2A49FCE04D2C4B676A014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConsolidateToScene.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\ConsolidateToScene.png
Size 10KB
SHA256 96ff7eee37ee6509ce6d61e639369061208b339936dcd47f16b4e73e2cb23be6
MD5 8c66c3928a7c308c07ac9b1cb6e4b368
SHA1 45ad7e117b0cf84c6359148acbaa476172ca327d
SHA512 6307f412bf1179db066ad9307e768bca3340d82d6c2579cbde555d0cf7926da16ef4afcc10c1a92d4cde3674a01bf6f5af6bca95e37e9edafe318e7d7edb3a75
SSDEEP 192:JS0tKg9E05T92a3xILEN+GEEnoxQRMAMYXLtULMUjXmC4SxTeOg1YGea6Kgx:3XE05yLENuEnoxQxMYpCjRfx5g1Ys3Y
TLSH
T18322CF53D52400279FB5BEA619C84B8776ADB32D074B186C40C5B9DED99F28BAA120AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CurvedEnvelope.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\CurvedEnvelope.png
Size 5KB
SHA256 b2d5fc78abfb05b53d949828ce0fc82c9cf68696ad9814964e7fdc4c298bf63c
MD5 f8dbbf7fc187b5ac95581a78e1cc6be6
SHA1 a2ff73386fc13ca44066d813cf89419aa2a46f10
SHA512 095169a51beb75b8d48cad67d3b644342eb07372b0f619a183c9ddc5a844940f8fa27e18bbda63409b402a70edf3f00a34fc3f8d386360eab80c940f607372b7
SSDEEP 96:YZ/I09Da01l+gmkyTt6Hk8nTbIdVhXrsq1j3gZnJhWC8OfRq8JIkCTCyfSm:YS0tKg9E05T0dVhAqonuv8JtCTVfSm
TLSH
T17FC19DA2E950C08D7EDAB2B2068D5113B25D6198A7A23E7C30E7FAED5C21D0357710F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DashedAutomationLine.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\DashedAutomationLine.png
Size 3KB
SHA256 13d31c85f60b12816eed952f2bb86ed71d7ab2c2d59de45b48ed656594ce401d
MD5 e4ac8d344979c96a03db9c46ecbdb440
SHA1 81bf62b733335965b44c82a89236a47bc231dd99
SHA512 4d6eb1bd37cd78de761a4d71e0d1618e82cd88363a02a9bd9b77518fc46e2ef9dd104860bd31c96268e91f9a0889b83b1a57af1803cd56eec84dbc41e12ebbe5
TLSH
T1D4816E7A69B4A4DAA99E74741FDC8745DB78321C5E17223440D0E2CF44D4C1EEF7A076
MD5 SHA1 SHA512 TLSH

Submit Download

DefaultTracksContextMenu.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\DefaultTracksContextMenu.png
Size 13KB
SHA256 e05c04a991f0e59af7fae13aca2652765ecf6d9822cef67e2abcfc166f8be22f
MD5 6d8e8beb7c7c72884dcc835594634a97
SHA1 d1a637d5c73d2e0200a1e53d070d29126dedaae5
SHA512 3a0fcc329b281c8269a0096d3ccce1a6f099879b86d53d054d8e1b9830651fd63a522031bc5c1278a068f3f4ce3e1142e3c7dfa10fb2305f97ac93778fbee191
SSDEEP 384:3JXE050rA3KY9UrXrFqklxH36Rw8V20Odi5ckOvj0ju2:l350rUK4gXrFq0X6Rwq2+Gjv2
TLSH
T1BA52D10BD5588DC5F039BA22C4CB8F90FBBB5B1E535F683463C129923524A17977B8C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ848dbMode.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ848dbMode.png
Size 9KB
SHA256 c9dff1663c83b30f2697f673ecf411ed74eadc324b82dc8873395533b2ff66ce
MD5 bd6992cbdee23a201ecd42a215319f12
SHA1 d91680f3b2e46fe4951eaff4a61c350e328aa827
SHA512 e412ea36cd3516f302b188517845d198906c672977e5b6db3a9c44fc0ec0c0235f0a5344d7cd0c87767442ac65ed7f08bf3e7761a5295170e7894dd27406dc7c
SSDEEP 192:NS0tKg9E05TtWCX9tX1p+XmL8OIY+8vIPWBZkCbV4DDAfEMubWGIK6:LXE05hWCtsmLbIYc3CbVtEt2r
TLSH
T1EE22AFDDA5B0945E9A1E3091099D82952F5D736C62DF0A98CBCA8CFE8074D212BE349F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8AdaptiveQ.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8AdaptiveQ.png
Size 13KB
SHA256 aff2a9f94f62459ba8eee46f7e69a5e1cfe9bcd327ff51817abe7fdacf867346
MD5 de35336b8d8dee0bb0862aade7eddf94
SHA1 6c6180bb4c684d9b929e7fc1865c1e8d8c5fd87d
SHA512 d5e5d404e7947508f1a9c9e719bd9ac506dc94e8e0acc1704a64e3b8a3b3e3bd7640f0d0676a8323ba533a505aa38a7ab20f12641e6e16402aef2ab27523d094
SSDEEP 192:iS0tKg9E05TU/QcNJZcmEC0B3PugzEGVQ+gQtTYoIjwGkP/kgzBb8bhVxoUB2q:WXE05IQkcmECyfugzEGT1Yw1Nza3xKq
TLSH
T11352DF076DE7802E92723641255B11F9CB0232FB5F872855DBC0FDD832E2938AA73A75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8AnalyzeButton.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8AnalyzeButton.png
Size 7KB
SHA256 97ad7623499fee49bf33f0dccf40295421270b8fd6b94e4b359007bf4eb18419
MD5 ec27f2f06564e8ec10ac9c1788754b65
SHA1 1be2cf4ded445a6df2052ce9494b9f310b658ccc
SHA512 937727165dc14cccdf192078c874058d05f02968ba5ac1f74276b891adee06814d6a38c267a602d7f7398b2661fe4c00e331b1d134cfe03f2c68f831598be994
SSDEEP 192:EqS0tKg9E05TUfAR/XxlkC/lLWhdyWXzW38Ya7PC8:fXE05A4RvNLKTzWTu
TLSH
T1DDF1AF7FAEADF1D858D6330416A1AD406765D92C89782138F3614ADC682078F7FD20F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8Audition.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8Audition.png
Size 12KB
SHA256 f7784f4bfd371ddee3ba68c7fbdb7f7610a75f114c0af69e67a7376ccdf2a4ed
MD5 6939ef716f4123bb005b62e994a67b52
SHA1 b70cd5504b2e38af993772fb15806ebe35ff666d
SHA512 31a313b3659a165d2e90e0c4ae72ad76430d4ec493229c41433f6bd39b2728ecf310f6fe3cd87f66f32c9acee6f06858b8f9f7289da335abec5341f299c38059
SSDEEP 384:fXE05m3xKv44H/8hFktXNrVCEDklqe95f9PxC:P35mBKv44HhN5CE/e95VPxC
TLSH
T13E42DF87E4D0416F61CB7ED1025B5905E2AE1BACC9863DAF7AC3C9EA1064C47C3B003B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8DisplayToggle.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8DisplayToggle.png
Size 9KB
SHA256 175b796c4586de78c73c079979320c0ace42d673ac2ee977aa694bbbcf14b44d
MD5 ca6799a60d43f7a480dead3a60fe3aa3
SHA1 97cd81acd72d5c856bc1c24ac5524b79c16d85f3
SHA512 5c26f319989ec1aa0374dd6f983828aceaf14d593a1cd1e4b7dc0a844c7a0bb17b9cb734f0703957b9c7bb30773d2d090f41cc95b6b307cc0c7436ebfcb7d7f4
SSDEEP 192:KS0tKg9E05TGqNaytKucTiLaNp6aFDlVthGe2oLv01r/4:+XE05/MO3GpbFRVdA14
TLSH
T1D112BF3F197DBF983D8B518542C5F1008A0C23EC9781216CA1D97ACEA785F0B2BF0123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8MultiSelect.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8MultiSelect.png
Size 9KB
SHA256 59fb72657991e5943c2241784663b4a8df0ddfb3dfe319c831541d49c925a7ae
MD5 951afc92fd63885f500e8ff4e7e20a8c
SHA1 34f8576b3cabeda1caa7bbca927a0556e20d348b
SHA512 d49ca15433ece185dfaf45f0e1b2692cdf42bbaad8495e0a47b2bdafae0cd5fa5908ee268cb70b1808721c803ac37bd60b9232dbf92d0b5eb71df18c6077a183
SSDEEP 192:xS0tKg9E05T4VcTCmcon5Vek411fu9CcbuavLwdKPsTq1uFmqlS:fXE05sVcTCmconHeT11fu9bLwE/1uUqo
TLSH
T17022CFCBC384944D64ED74128EBDE62AF77F6319A495B8083250E9FDEA41D47F771408
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8Toggled.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8Toggled.png
Size 36KB
SHA256 b2b5df086d01c530e90a8f213f4ed085c6020c37856409a14d6eca8cbd36a9bf
MD5 582e06d343524484ed490390e4514855
SHA1 89ab02ec3ca2ac3f1dd0e70c5777085d8cd9ca53
SHA512 252811d90b088a16cc1ef21a297077cec038566013fcd36ad89c4bb4dfd16baeab6530178145db8a4c5eb30c1768801ccbc9c709af71fd86cfe275464740ece8
SSDEEP 768:L35hsd7oubs/waJH7YMNyS2KTJAPlidwwTsr/zNVmmGAqW:YoubUwaJ9NyShKwE8AqW
TLSH
T111F2F1E518E8453CDD0125808CCACEBD356EA678BDB93DDD0380A59D0DBEF55D324754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportDialog.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\ExportDialog.png
Size 34KB
SHA256 3a2b6f75511be8dcc0ec573311532e0c0a36fbada9041209baa84d7597725b6e
MD5 10927afe48d41bba6a016610ebc3dc00
SHA1 25ea725e7029a04035f94fd1c553accbf878bfcb
SHA512 30001808e5017142beb446216cde03e7851494b373e3b6d5b7c866b2a4a14e41f1fd4b67c60f505a5642003888db2e07ea0187be026ddbc1ec544967581f85fb
SSDEEP 768:5352SeR5yYfMb4isGBqlRsBNGRq+gAuULMyPh4wx4goGS:fWqb4i+2NWq+gAV4yZ4bg4
TLSH
T1E3F2F14F4010CC5C248877A23B7A6E68FBB3A0395B5F05943F7739605AA5B863305EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favorites.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Favorites.png
Size 13KB
SHA256 833dd02d991b1e9a0eafb0c4ec739d04e4e63391db09bc228ea0e343f1a97bdd
MD5 0eb73882ef56c69a76261de7751c96d2
SHA1 4958c153b591fe945d3e9628f5f8c37816b879c4
SHA512 71b5aa4dd621fb89549103c77a0abebeab45a47da9da7574d5ca40247fe28d1e9bce1b00f633dd86a32aa559f950073333581f91f4406f870e9dde6cba09ea81
SSDEEP 384:OfXE05VCA1Dxy5k/ehmXHveRXsIt8rXALa8b5p:4358Q//eh2HWRruTARp
TLSH
T1A952E16DC248E95FE51F7683046C6407DEAA82EC534B1B24BDE279CD4BBFE431618423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Gate.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Gate.png
Size 33KB
SHA256 1dd9524fe21e2d1aff91f29c47c2bfcee407d534fa42c86d0f400ec878b07482
MD5 758394a36287b21d87d0f72b33a358c5
SHA1 91ba1effe49cf2a4494ed5bc3a8682024f3e4d28
SHA512 c4c1b8b497d88aff27b68d00b80ea2e699133b355926b412f73bb9b07fba0d195aaaac783e6d429259fc12e6319e27be386076181da199bc22cebd1cea893a87
SSDEEP 768:C235m6oPNZvBQ5dGUwjtou8AtknOD9K94s408xDbWJGB27d6/:CNRlo5Qj1tky9a4s40ODg/ha
TLSH
T1E5F2F1D7AE24456D1C9CB4008E1E3887D842D28DE6AEF1787C553AE4362F5DD1F67843
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Glue.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Glue.png
Size 31KB
SHA256 237eb732eb41525025fa58b0d34c46df90bf8b586cd592db1b2ed00e5d9f7324
MD5 d2e3bc181adc64f0e7c514d6f0a4d0c6
SHA1 8b0e1e06461fad0e2c07b85846fdce5674f03e38
SHA512 d72573ab4cfa89f9c12a6bc902f1560be1ad54cbd7512ffc8896060f1e802382916befcd6a27e9570dac467d47f023709823a6097e72e9155810d1e6742e084c
SSDEEP 768:C35ptnzwfA9jm/nPoFoqes3eZ3fV10KEE1FKUH9LSrW1R:anwMjXFPReZd10dE1F5r1R
TLSH
T155E2E1E36FA4287E252FAB77C68C2067EB484142270679E8152F71ED89E39118F1DC82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LiveLesson.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Large\LiveLesson.png
Size 17KB
SHA256 7a74f580a5837ecaae652daf2d104f1696ff31df0fea921985a6007bb64bcd83
MD5 ea443380fa336fb4bf73dc2ec4a0d32e
SHA1 37bc0f6bb66dd53a1ececc00b8d137ced32d6ecc
SHA512 7f4ede9028ce6096fc366025d7cea5da61d33068742ee0b691d5df787fd54f17bfbcd8b98bf320bf162b91efd9002112a9a671d0b3dcaa2cd8f6b923c5e77ec0
SSDEEP 96:2SskEWR5xNXrNjNBFNpnXssc5ofvD9Gsh81b0SYyTstGgXnrUBJm+d+:2Ssktb5BRXDVe1hYjtn3rUq
TLSH
T171821824FDF1B830E449E6392EE428098CB38B83D9819D85BEDD4D57BF10B998D5F186
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsDE.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsDE.txt
Size 20KB
SHA256 6fe80bde67fa60ec623b5781d008ad3b77119d64822eada2e561ac179b19f7ed
MD5 a7302c32311598943617d7d497199e96
SHA1 93bba6c263392654f1d635792f8b55ac0f4aa129
SHA512 eaedf6400cc4bc1f949ea27d87e8cd40e95ce70f6b23002773c99462ee3f37efee0c0630d9c019faa8588fec459bac3f4a06463c2b80c481b2c2bae9c8e8109b
SSDEEP 384:6tJg5pmlCQQLo/xyjAczSCRV35665GDa6Wm3AMhoYnU7du7tZRq1IXmp:6tJmq9SzSCRR35wWm3Hed+3Rqu2p
TLSH
T1BE92C7B7FC8BA1518657F3623345DC93FB6C62BAB25C24249049C1BBA70F472536E0AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsEN.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsEN.txt
Size 17KB
SHA256 973350036d2201458d86c4bd86f3bd31af59cb9c3a3c5fbe87e542ad1ad10da9
MD5 6dc9ce7eeead49f578d8e4495cb11335
SHA1 d11ce821c009d80f935c42b9a4d718fabda98d11
SHA512 3bb0ae53e412afe4dcc1376708ab6f42e6a91474c32ace162fdea7ca756885e198f99a5d338caad8c25dbb747755f95e0ed494d0b77476617bdff8547ec93318
SSDEEP 384:0FKFyFhxiaeEkeCbLPT+Lqry0F5Bp2Obbda:Gog3iaIly4Rda
TLSH
T14282A6FBBE4853B30127D251328EA1D2FB30509C737A06A1A09DD6ACA70A871637F5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopButton.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\1-Live Basics Category\1-A Tour of Live Lessons\StopButton.png
Size 4KB
SHA256 72685e50b537170afb81c7e9441a43806aa6a3dfeffcaaffa54f96dd2ec81196
MD5 1cf0fb6f99335c00957929407d9bee96
SHA1 a7acc4cc0473448ac611484bb990754e488c4773
SHA512 941d2fe8d4431b0b3ef57d9ff9d693349cbcc33d081b0d55c1175cdf65bdc7c10f5b15f1725d6e3bec44ed3042a78e421b524dd50c6e907ceffafaaaa1bd6d6c
SSDEEP 96:lZ/I09Da01l+gmkyTt6Hk8nTLz70DuYncDz+dqSb:lS0tKg9E05TLv+uYcDydtb
TLSH
T144917DAF9D60B14E228EB18209DE4801B92A657EDF071375D4C3BBCE79A8C1627534D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowserShowHide.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\1-Live Basics Category\2-Recording Audio Lessons\BrowserShowHide.png
Size 7KB
SHA256 b8aafccea728b61587d3099059d6d79ba5c0d7c06730f8685767911307b69f6d
MD5 de023e29956ad6bb313b25728b92ddf0
SHA1 810301560aab3db0f8674167af13af673c6ec719
SHA512 1b18e9dd378b3ee65f4d64b425a007de596f2d5dddd57bfc85ae00e9c0e4cd9c858ebc71fa2d9b39e0608bd04b13ef7852273ba4fce556a54d1a0c0b5c7778cb
SSDEEP 96:cZ/I09Da01l+gmkyTt6Hk8nTsSpyAZNerNfFH1isYdqvopYx+VRYQ9fCAd3CUcyu:cS0tKg9E05TtTNerjsseWi9fhDcyabLl
TLSH
T1CBF19EFBD6A0E40DB99D30033C5D07C79F29366CDE67379CD08698D91465D875B920A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LeadInfoView.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\7-Operator Category\OP4-Lead Sounds Lessons\LeadInfoView.png
Size 19KB
SHA256 7317e4843996f1ae7400d1f77d10eae01f00bcc2b88538a503473540d4d73b88
MD5 58373473f268edd59fdf2c4b1d069bee
SHA1 1885428a4aba0f56b2acfe8c483875a4c2d82f76
SHA512 3be312834b24de5b6cfa083800aaf5d7b4ab1244f81ba7c166b316cebbf5a0e1f96c13b2947d27ea13599024f8c7a5ffb1d13cd4c35fdcede9691a054a49488f
SSDEEP 384:3LVES+DybGpwfSQXmZthPVOL73NJr9LUTWJ5DRuV+31YowYKm:b92ybGWvohPIf3NJCTmu5pm
TLSH
T18692E1739E9560D54CAD7183206D22A1A973228BA22B4B90D0FDBED7C943CEF01B5772
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideInfoViewFx.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\7-Operator Category\OP6-Rhythmic Textures Lessons\HideInfoViewFx.png
Size 1KB
SHA256 6fe23d714f3aa69a6ca1b5547898abe919728b1188ae75e076c3b38286e1da42
MD5 334b499c13175a3f512c69947a1bf5b3
SHA1 4677055fe5679f82036e69aa6a9be6a09445c2c2
SHA512 5877e602648b16a63182fac5f1de4412bf83f2f824757b6a061f9990e7e865a109209651a1830986b3da1684683c8b0a1719fa32b2e3e71ad3d1d7c834a10c0e
TLSH
T1B0310A9C962A683396BE126994EFF5C0B6E69264C731320BAEF0B015015097F1FA5314
MD5 SHA1 SHA512 TLSH

Submit Download

Bomba Congas-199bpm.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Latin Percussion\Bomba Congas-199bpm.agr
Size 8KB
SHA256 7e0259aa6d8b50a7275383cfc5d4eef0af04b251ef522b07b7767e58e083028b
MD5 ebd0c449a250a8021259e76c6e2bf221
SHA1 5eee48123c1266e13ad46da24bbfaf71f921e4c3
SHA512 0fc178a78a250a073396438a2fdea7fa7905c1326c698c7e7c86f402fde508302f6a4b262c4faa817ff70001a65178a11c58dd0f0168b1f7ac58bd087371f36f
SSDEEP 96:w/ta754mVM+txkMjBSNZCu1yGZt6qW+lT6+qPtBBtrIc0Epd25sQtbUt4nzuKnln:w/Id//tCRt6f+RaBgcB2O0/JlQO
TLSH
T1C802FD0357FD3607E1B79B322979007981377D7A0971EA7F00551A2E1E38A88CE2DBA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notator 16B Swing.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Notator\Notator 16B Swing.agr
Size 28KB
SHA256 858e202e9ffce78768ccc4a82cb5dbdcc28d80e79281b61255d7b55d50050b20
MD5 b88acfe53da438f3ce390fc85155c5de
SHA1 53bc7813c4c9fa4d1fa1b76b7f1537b9cc8e1295
SHA512 ebe797361ed6cd33b873e0fe0e9ac005deaa2634c599dc00cbde549b2b90f38e878c917e7353e3356ff10c73ae3ef559c3a2c9479a7e906d614c1bcff0a6c826
SSDEEP 384:n+5W6hTLCywH8Ay6I42OpBztYiE9tYIQ3mvD+P5/CtOpD0/Z2g/:24H8Ayk7rcZ2e
TLSH
T1B4D2586277FC7A04E1B3D73A5C7580B9C5727D668C14A17E2294366F0E39648CA28FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notator 8D Swing.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Notator\Notator 8D Swing.agr
Size 29KB
SHA256 a81b08f4f8551a70d7ce2f53a850ca5f6bfefe38c7b5b9e0f38aa96a8dc2f2a5
MD5 9e05f0d97e2835ddba50eb921ed2d161
SHA1 5ebdda6ef752643c35ff10964b9b9812d198dda4
SHA512 c04eb45bba0baa8d413780e72666b08ae21f642f7f39949b660356f78bead1a42a65c6aa0358d3a2b60cbe161f9d11c03d03a690a28e8980a07e3e892d7e45e6
SSDEEP 384:t+5W6hTDSywH8Aj6I42OpBxtYiE9tYIQvm+D+P5/CtOpD6IZ2g/:coH8AjkNUPZ2e
TLSH
T18BD27A6277FC7608E1B3D73A5C75807AC5727D6A4C14A17E2294366F0E39648CA28FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Swing 8-99.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Swing\Swing 8-99.agr
Size 6KB
SHA256 2753c75cdb2ded091019b2f77f982d8e113fd0303f3758a593b65542c77651e6
MD5 c347c3b19f5f3e4a44ac560607293c9f
SHA1 c2b4bd15e6fa7905c1d529cfc908bc95dfee3f47
SHA512 d6309638fc1c3be920fbe90d33414fa640627cfa4bcdba6ef2c9d0700b47a052eba08fd53127b37f51c5afebcd1f65a31d5efc600ffe71f133d92f8e368a593a
SSDEEP 96:Ya754vM+txkMjBSNZCu1yGZt6qW+lT64rGYKUOtH1mwpFr9d69jSfocmCJ9jSf:pdutCRt6f+RxrGKYRcM
TLSH
T1CDE1CD479BFC370AF1F797722971007A827A7DAA4561E57E0054252F1E38B88CE18BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

not-zip-safe

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Extensions\Updater\third_party\site-packages\nose-1.1.2-py2.5.egg\EGG-INFO\not-zip-safe
Size 1B
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09
MD5 SHA1 SHA512

Submit Download

top_level.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Extensions\WebConnector\third_party\site-packages\abl.vpath-0.7-py2.5.egg\EGG-INFO\top_level.txt
Size 4B
SHA256 9c042170ade924ceebd205c809c09f7525b1cfdb78edef48403f126bed255940
MD5 7a759802a9a11a923e0e333ca8227cf0
SHA1 26d7cd626fdd55841eec2a599007083ebeef9500
SHA512 b41c2b2bc76f1956224077ff8e12079a2fdda8b8c195bc06046cda667ea27f69fa6f04b26df611c613396ee92bef9bacdfcfdbd9129ceb72b6ae9dcf788b760c
MD5 SHA1 SHA512

Submit Download

__init__.py

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Extensions\WebConnector\third_party\site-packages\abl.vpath-0.7-py2.5.egg\abl\__init__.py
Size 75B
SHA256 4032724b98ed267185b12b8ec78dd9bcb0423ab1c89a6f0dad99397fd51159d9
MD5 1cdca3de4f8849a3d0d82b678710e112
SHA1 78b2c51d96cb678f669aca7e868d19c429e6be0c
SHA512 7da14aa35ead9f6d0efd90367613447a26738c15effc96b0c3c5fe9394cc2b4928e6ac3e1123efec4a75c7f8e0249c91a4b8b58f0ade8880a57549084b4cd61d
TLSH
T1EEA002911C8390F55630F711C1460CD396D70DF77E8198A002C42959B9C1FF75510A24
MD5 SHA1 SHA512 TLSH

Submit Download

02Clay.ask

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Skins\02Clay.ask
Size 7KB
SHA256 873e404cdf8b00d5e74180097bd9a9b7a5223537a5e44fcd416f815954473564
MD5 7784bbe42981f715d8cd5c43acf71e8f
SHA1 0c3f14d5159f470d72f2ed5f0d9a166b6fa03740
SHA512 e3a67d68008ba56995c76022abc81b13e1703e84c8d2ab29ed5784e4c21d29f54d5533374085d93cc43dc586ea9c1822cdb418e2705279d4109da5bc420d121f
SSDEEP 96:H///khX2+ixUjNCkiOohGwhOVGdG8GmC2bemhnACAxzDwpmuUGkqs9p2lusnroOA:/w2V4qeSACAvupPJz32YbK/B8BKG0
TLSH
T15DF124A213FC3E44F17B9FBE69F964B48867BB57141EAA6D10D0066F4B3890DC508B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5
Size 471B
SHA256 bb32a289c75d730a187e35b4841f186607ee1c6b96f5d2390d97a1866a1684bf
MD5 edee342df53d5a15d4e0f4d4dfd9495c
SHA1 f78fd6b762e11abda0ee7d8c42ac15a865f01077
SHA512 653c52b67cd574f0b3c3bb3bba470944ce881b6fa76703c6a76bdf6b9b8f83934f91064e441b8d7085a2d201b58cef9063a98d3b902cd60f810196dcc38ea991
TLSH
T1C1F0D42E54B5A3A37E42DCC436D1E8637064D95D4CC7470FD07915D24C53680A126C10
MD5 SHA1 SHA512 TLSH

Submit Download

66AE3BFDF94A732B262342AD2154B86E_B9E2B6493A41201AEA1B63B270E2B6FC

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66AE3BFDF94A732B262342AD2154B86E_B9E2B6493A41201AEA1B63B270E2B6FC
Size 471B
SHA256 b4a7e25cb925ddfe887f954f19ea84ed308efea791320c992aac8d36c9d85610
MD5 441ea71f6d86a1c4a542701de25323cf
SHA1 ad48d1d6d499734e5593c276c402ca99641f2c22
SHA512 f640d04d897e537d09f89595e368b67d13802920ecb2af36b3b3ccc222ed081ff2d86c754d89d566af95aca097975d4517efac5872cba2defe452a02e3ab6520
TLSH
T180F0230143BF2C814F20ECD879DC8A3F76B0469524E59DCBDC3999265C0CAF8D82D1D4
MD5 SHA1 SHA512 TLSH

Submit Download

42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5
Size 404B
SHA256 4bf6b5836efe8a7a42c6059cbffa3d2e11626975124b3ec0e9130a60df5aaa7d
MD5 3a88a8e586077b2df933d142317cafab
SHA1 4a207a4b881e4aabb503f37c2126c7619e7192cb
SHA512 9d2d59dae59e2e1fe716cb6d2addbd0a2de4af6248729c1918343c6e1f03f089b8a713c88f0ad71e8f7139b3b39f801228de22b05def6d2b2de0c3c9b94a179e
TLSH
T14FE0C6201AFF701EF4B09B3843EA91E89F4AF0029C208BBE0E80821E9F06E004E21C34
MD5 SHA1 SHA512 TLSH

Submit Download

66AE3BFDF94A732B262342AD2154B86E_B9E2B6493A41201AEA1B63B270E2B6FC

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_B9E2B6493A41201AEA1B63B270E2B6FC
Size 404B
SHA256 7d9a981a01999283827d59c54cf808e396545ae603067f64812eb751bdbc84a5
MD5 6be8a970625ffdeaa0eff7f3a9f9ef86
SHA1 032884999f5b6ef2e7278afd6268568b9bd30607
SHA512 87eabdcd67d1c72601c1252b6ddd98b97fc484311c238d07b4d8bdd9c052efc0d6674fb84768215e1620211b8dc90899bb721ddc5cd747d805ca69e39a2c63fc
TLSH
T1B6E0C62836FA02ACF5B0CC310ACEB1718AA4F1049804D76B2BD452099B02900CC32937
MD5 SHA1 SHA512 TLSH

Submit Download

MSI205F.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI205F.tmp
Size 38KB
SHA256 263c6ccd40e6e0f14a98d8b3ac9f7ebb5c537c2ae8de182fd6374ff1c1b1129b
MD5 3154e548d576f110fcbcf2e09e483d4b
SHA1 4748b46a0e8d4858c350052872a57a34f6c2e7fe
SHA512 d006798d4b4fae3d73082a04d3bf9386a64c1ad7f7808fcf56b0c42970bf74ebe4c270c0468a8dfc8c107f3fc7b95031c9bcd973ad98b1cef0502cd260b86a2a
SSDEEP 768:cwp+wLPPXVpPxgeF80+mZdZ3IaN1jTa1AgnZOtkUkB2dyAJ:Swz3m5bmZdZlj8AgnZOt2QdyAJ
TLSH
T1EF036C127706C5F2CA8933F0B59A936D4BBDB8412BE012E7E3639BAF0FA41C91573152
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI39F4.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI39F4.tmp
Size 67KB
SHA256 3b727a1a70641abae30bf2d0b3ba1edfcc44b2873364942b9ecd69bf57defb40
MD5 d54dda22bb374be5ac6862ea757cad82
SHA1 ff2a6710991145c039915869b3887536376b3b83
SHA512 018fff3bd7f613f8546037c0b7bacb3a0abd35f51f6bdd33f913341196900da350d824a598616147784f01aba1a2ec0d7e6de2bd05964328028d5420361a5151
SSDEEP 1536:U0bOkVGVspAwPhVq9othBh65GwDcTJfR1nAj:h6kVG6pAgMcTJ51nA
TLSH
T152636C217350C67AC196283AA465C7722E7E75301BF585CBBB5707BE9E312C0B77A30A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VWL1307.tmp

Path C:\Users\Admin\AppData\Local\Temp\VWL1307.tmp
Size 392B
SHA256 79fb07dc4943a7272716060df753c83320ec80d93c13378649673015a06b3a17
MD5 b353ef61f7e09a70347b440d40baaa85
SHA1 2e211dda79093779693530ebd9b7ec68dcddae8e
SHA512 7c2ebf0289dbf4b5e57294d5e1737788e9f852d5dee67ccad7bafc056ab3106f2449f498205cfd600fe64a2ad2e1afde3ac11783ab86c23dd9047bb2fe9997e6
TLSH
T1A1E09A2A63DD655AFCA75E9AD9F640637B35BC647878C50C20E1235C50F1001F571777
MD5 SHA1 SHA512 TLSH

Submit Download

MSIC96F.tmp

Path C:\Windows\Installer\MSIC96F.tmp
Size 155KB
SHA256 e8be4bebbec150dea0fffe4ad32dd4b7f2a2cee317efb3fe8f127e49e64794e7
MD5 84fe6543a5357793615375e62914c76a
SHA1 3e80ecbc17359e2a5d6691abb86f1e6526e1d980
SHA512 f666166006c3c8d54fd42b09777dd3039244fbe9f48e5d1a76259b35c5eb8490d7dea868ca7080c9e8f04ffca395a0c028a2d86ae5bfd2b7dbdf8a2d555b71e1
SSDEEP 1536:aJqCsjr+AtNOLtIWM+ZlV6ZmyJPeYuv/ePdifw4PGHHXtRBgS1RHS/gAMXnO2X+g:gO+ENIIWM+lKek17yd2X+VLnOkyqE
TLSH
T13DF37D313190917EF2B21877E62AC3719E3DF1280B70859D5B824A9FA924497FBF7712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 24.1MB
SHA256 e5b72063738112c6f64cd09aaa28bf3d571742dbf4e3b49701fac5c1fb51312c
MD5 e6cade51b1c72f96fd8202d811c261f9
SHA1 f4142dfc4f576b9f9d49f876ae5675b82def1619
SHA512 8a5a5290ad2193284ffc07d29499f3d84c3c4f484eb82239971569bce232db9a0c78d6c391358b7d80f3e57804cb4c102a3747072e0bea9ed83459959b4f1671
SSDEEP 24576:Su8m+1zodoO/vvTL7W6u/maObDkzylKSGM2NIFb1ykqredzHIvlzicRRv:V
TLSH
T1D747B22477F92210E7F79E3CA8F06A234D3A7D5B9C259E8D45411B4E0921FB0E872F5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{28dab977-f6f2-404a-b502-97e53ba12b3b}_OnDiskSnapshotProp

Path \??\Volume{0dfc9b49-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{28dab977-f6f2-404a-b502-97e53ba12b3b}_OnDiskSnapshotProp
Size 6KB
SHA256 ed9958847343b81d0f59378e684962c09eec986d621828c102ac01de3ea00a89
MD5 88ff6442bee53fad335612b3996c3adb
SHA1 d2510ba255f27a687844a3fdf187a0964266d05a
SHA512 edfaab73708dbee33e8ba695bb56e5fe62efe310f684819182b3aa1bcca22ddea093e65bfa6a9aeb81bc399cffbc40fd4242bda269b08649ebc5acebb3c80831
SSDEEP 96:F9VeJ3GPGtvc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpuN:HVaGPGnb++ZVmN
TLSH
T17ED189185AF54711E2B3AB3129F14553A877B911EF33CB8E0298638E6670A10F935F6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1536-9206-0x0000000002FE0000-0x0000000003010000-memory.dmp

Download

memory/1536-9187-0x00000000019C0000-0x0000000001AEA000-memory.dmp

Download

memory/1536-9161-0x0000000002460000-0x00000000024CB000-memory.dmp

Download

memory/1536-9164-0x00000000026F0000-0x000000000279C000-memory.dmp

Download

memory/1536-9168-0x0000000002980000-0x0000000002CD5000-memory.dmp

Download

memory/1536-9175-0x0000000002FE0000-0x0000000003010000-memory.dmp

Download

memory/1536-9176-0x00000000049B0000-0x0000000005140000-memory.dmp

Download

memory/1536-9179-0x0000000004860000-0x000000000487F000-memory.dmp

Download

memory/1536-9199-0x0000000002980000-0x0000000002CD5000-memory.dmp

Download

memory/1536-9211-0x0000000005530000-0x0000000005563000-memory.dmp

Download

memory/1536-9210-0x0000000004860000-0x000000000487F000-memory.dmp

Download

memory/1536-9209-0x0000000005140000-0x00000000051ED000-memory.dmp

Download

memory/1536-9208-0x0000000004830000-0x000000000485C000-memory.dmp

Download

memory/1536-9207-0x00000000049B0000-0x0000000005140000-memory.dmp

Download

memory/1536-9132-0x0000000000FE0000-0x0000000000FFD000-memory.dmp

Download

memory/1536-9205-0x0000000002F60000-0x0000000002F8C000-memory.dmp

Download

memory/1536-9204-0x0000000002EC0000-0x0000000002F5B000-memory.dmp

Download

memory/1536-9203-0x0000000002DB0000-0x0000000002EBB000-memory.dmp

Download

memory/1536-9201-0x0000000002CE0000-0x0000000002D7D000-memory.dmp

Download

memory/1536-9200-0x00000000027A0000-0x000000000283E000-memory.dmp

Download

memory/1536-9198-0x0000000002880000-0x0000000002980000-memory.dmp

Download

memory/1536-9197-0x0000000002870000-0x000000000287A000-memory.dmp

Download

memory/1536-9196-0x0000000002840000-0x0000000002867000-memory.dmp

Download

memory/1536-9195-0x00000000026F0000-0x000000000279C000-memory.dmp

Download

memory/1536-9194-0x0000000002500000-0x00000000026E4000-memory.dmp

Download

memory/1536-9190-0x0000000001AF0000-0x000000000222F000-memory.dmp

Download

memory/1536-9192-0x0000000002460000-0x00000000024CB000-memory.dmp

Download

memory/1536-9191-0x0000000002280000-0x0000000002421000-memory.dmp

Download

memory/1536-9188-0x0000000000FE0000-0x0000000000FFD000-memory.dmp

Download

memory/1536-9130-0x00000000019C0000-0x0000000001AEA000-memory.dmp

Download

memory/1536-9186-0x0000000001960000-0x00000000019B5000-memory.dmp

Download

memory/1536-9185-0x0000000001830000-0x000000000195A000-memory.dmp

Download

memory/1536-9184-0x00000000015A0000-0x0000000001630000-memory.dmp

Download

memory/1536-9183-0x0000000001200000-0x00000000014C9000-memory.dmp

Download

memory/1536-9182-0x0000000001140000-0x00000000011FE000-memory.dmp

Download

memory/1536-9193-0x0000000002230000-0x000000000225B000-memory.dmp

Download

memory/1536-9178-0x0000000005140000-0x00000000051ED000-memory.dmp

Download

memory/1536-9177-0x0000000004830000-0x000000000485C000-memory.dmp

Download

memory/1536-9174-0x0000000002F60000-0x0000000002F8C000-memory.dmp

Download

memory/1536-9173-0x0000000002EC0000-0x0000000002F5B000-memory.dmp

Download

memory/1536-9172-0x0000000002DB0000-0x0000000002EBB000-memory.dmp

Download

memory/1536-9171-0x0000000002D80000-0x0000000002DA2000-memory.dmp

Download

memory/1536-9170-0x0000000002CE0000-0x0000000002D7D000-memory.dmp

Download

memory/1536-9169-0x00000000027A0000-0x000000000283E000-memory.dmp

Download

memory/1536-9167-0x0000000002880000-0x0000000002980000-memory.dmp

Download

memory/1536-9166-0x0000000002870000-0x000000000287A000-memory.dmp

Download

memory/1536-9165-0x0000000002840000-0x0000000002867000-memory.dmp

Download

memory/1536-9163-0x0000000002500000-0x00000000026E4000-memory.dmp

Download

memory/1536-9160-0x0000000002280000-0x0000000002421000-memory.dmp

Download

memory/1536-9162-0x0000000002230000-0x000000000225B000-memory.dmp

Download

memory/1536-9135-0x0000000001AF0000-0x000000000222F000-memory.dmp

Download

memory/1536-9129-0x0000000001960000-0x00000000019B5000-memory.dmp

Download

memory/1536-9128-0x0000000001830000-0x000000000195A000-memory.dmp

Download

memory/1536-9127-0x00000000015A0000-0x0000000001630000-memory.dmp

Download

memory/1536-9126-0x0000000001200000-0x00000000014C9000-memory.dmp

Download

memory/1536-9133-0x0000000001000000-0x0000000001008000-memory.dmp

Download

memory/1536-9124-0x0000000001140000-0x00000000011FE000-memory.dmp

Download