cb6552ec9a7c6839c58f14d094360885f4793ebdccc1b4b652b55616aafb9e9a

Analysis

max time kernel
148s
max time network
188s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 23:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Setup.msi
Size 715.0MB
Sample260815-3hrhraac28
SHA256 cb6552ec9a7c6839c58f14d094360885f4793ebdccc1b4b652b55616aafb9e9a
MD5 74503f7a8a0b49bd5884245ea119c227
SHA1 fca21579661cacc5d85b898f448d696d7dad64df
SHA512 ca0adc2f557a92eea3d91f48370545bce0e2971c28a4c66181e1d3fe87fcccf7baa47567eff58ec9f8c860c83a8f163769c8d41f5aa3c4013e33eaadade7f9c9
SSDEEP 12582912:aeYu5xkF9tN6fcEQusbazOlzllM9YYXbGtOAP54Mv9c2prj8EJG048aWZHbv6k1T:asO97MQFZl6bXbPABPmen8puv625
TLSH
T1A079335134375E97D1877637A3560346BF603C61A701CE22EA31BA9F1EBE2D42AB94C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Malware Config

Signatures

Loads dropped DLL 7 IoCs

pid	Process
1800	MsiExec.exe
1800	MsiExec.exe
1800	MsiExec.exe
1800	MsiExec.exe
1800	MsiExec.exe
3388	MsiExec.exe
3388	MsiExec.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
2036	icacls.exe

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	4368	msiexec.exe

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File created	C:\ProgramData\Ableton\Live 9 Trial\Resources\Misc\Metronome\Desktop.ini	msiexec.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe

Drops file in Windows directory 13 IoCs

description	ioc	Process
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI4D80.tmp	msiexec.exe
File created	C:\Windows\Installer\SourceHash{A972C6E1-D2C8-45B2-BE49-DF94AB3004CF}	msiexec.exe
File created	C:\Windows\SystemTemp\~DFF4DC455E082B8059.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI567A.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI8E25.tmp	msiexec.exe
File created	C:\Windows\Installer\e5af6a6.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\SystemTemp\~DF86601576466BFA4C.TMP	msiexec.exe
File created	C:\Windows\Installer\e5af6a8.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI7049.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\e5af6a6.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe

Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs

persistence privilege_escalation

Installer Packages

T1546.016

Msiexec

T1218.007

pid	Process
4368	msiexec.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Modifies registry class 28 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1E6C279A8C2D2B54EB94FD49BA0340FC\ProductFeature	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32-policy" = 4200250030004f005f00670047002a004a003d004f00290025007100570028007a004e0055006b00560043005200650064006900730074003e002c007d0050004e002c00320065006e007a003300270070005b00550021006c004900720021006e0000003600540043006c0046002e005f007400740035006200290038002100600024004b005a0046006d00460054005f00560043005f005200650064006900730074005f004300520054005f007800360034003e002c007d0050004e002c00320065006e007a003300270070005b00550021006c004900720021006e0000000000	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\Microsoft.VC90.MFC,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32" = 4200250030004f005f00670047002a004a003d004f00290025007100570028007a004e0055006b00560043005200650064006900730074003e00360057002e002700490055007a0028005000330071003f0064004c0051004e00440029002500290000003600540043006c0046002e005f007400740035006200290038002100600024004b005a0046006d00460054005f00560043005f005200650064006900730074005f004d00460043005f007800360034003e00360057002e002700490055007a0028005000330071003f0064004c0051004e00440029002500290000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\ProductName = "Ableton Live 9 Trial"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\Assignment = "1"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\AuthorizedLUAApp = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\4C674D93FCD6ABC4E8F261AF9E4CCBE0	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\4C674D93FCD6ABC4E8F261AF9E4CCBE0\1E6C279A8C2D2B54EB94FD49BA0340FC	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\Clients = 3a0000000000	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\policy.9.0.Microsoft.VC90.MFC,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32-policy" = 4200250030004f005f00670047002a004a003d004f00290025007100570028007a004e0055006b00560043005200650064006900730074003e005e002a00320070005a00740060003f0050003500620061005700370038003400280076006c006b0000003600540043006c0046002e005f007400740035006200290038002100600024004b005a0046006d00460054005f00560043005f005200650064006900730074005f004d00460043005f007800360034003e005e002a00320070005a00740060003f0050003500620061005700370038003400280076006c006b0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1E6C279A8C2D2B54EB94FD49BA0340FC\VCRedist	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\PackageName = "Setup.msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\Media\1 = ";"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32" = 4200250030004f005f00670047002a004a003d004f00290025007100570028007a004e0055006b00560043005200650064006900730074003e0028002e006f0034002e0054004c005e00690033005a00760060007d00610026003f0049002900260000003600540043006c0046002e005f007400740035006200290038002100600024004b005a0046006d00460054005f00560043005f005200650064006900730074005f004300520054005f007800360034003e0028002e006f0034002e0054004c005e00690033005a00760060007d00610026003f0049002900260000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1E6C279A8C2D2B54EB94FD49BA0340FC	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\PackageCode = "388D479E0E618C049BB26ACF8A4FF462"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\Version = "150994944"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1E6C279A8C2D2B54EB94FD49BA0340FC\SourceList\Net	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3148	msiexec.exe
3148	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4368	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4368	msiexec.exe
Token: SeSecurityPrivilege	3148	msiexec.exe
Token: SeCreateTokenPrivilege	4368	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4368	msiexec.exe
Token: SeLockMemoryPrivilege	4368	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4368	msiexec.exe
Token: SeMachineAccountPrivilege	4368	msiexec.exe
Token: SeTcbPrivilege	4368	msiexec.exe
Token: SeSecurityPrivilege	4368	msiexec.exe
Token: SeTakeOwnershipPrivilege	4368	msiexec.exe
Token: SeLoadDriverPrivilege	4368	msiexec.exe
Token: SeSystemProfilePrivilege	4368	msiexec.exe
Token: SeSystemtimePrivilege	4368	msiexec.exe
Token: SeProfSingleProcessPrivilege	4368	msiexec.exe
Token: SeIncBasePriorityPrivilege	4368	msiexec.exe
Token: SeCreatePagefilePrivilege	4368	msiexec.exe
Token: SeCreatePermanentPrivilege	4368	msiexec.exe
Token: SeBackupPrivilege	4368	msiexec.exe
Token: SeRestorePrivilege	4368	msiexec.exe
Token: SeShutdownPrivilege	4368	msiexec.exe
Token: SeDebugPrivilege	4368	msiexec.exe
Token: SeAuditPrivilege	4368	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4368	msiexec.exe
Token: SeChangeNotifyPrivilege	4368	msiexec.exe
Token: SeRemoteShutdownPrivilege	4368	msiexec.exe
Token: SeUndockPrivilege	4368	msiexec.exe
Token: SeSyncAgentPrivilege	4368	msiexec.exe
Token: SeEnableDelegationPrivilege	4368	msiexec.exe
Token: SeManageVolumePrivilege	4368	msiexec.exe
Token: SeImpersonatePrivilege	4368	msiexec.exe
Token: SeCreateGlobalPrivilege	4368	msiexec.exe
Token: SeCreateTokenPrivilege	4368	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4368	msiexec.exe
Token: SeLockMemoryPrivilege	4368	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4368	msiexec.exe
Token: SeMachineAccountPrivilege	4368	msiexec.exe
Token: SeTcbPrivilege	4368	msiexec.exe
Token: SeSecurityPrivilege	4368	msiexec.exe
Token: SeTakeOwnershipPrivilege	4368	msiexec.exe
Token: SeLoadDriverPrivilege	4368	msiexec.exe
Token: SeSystemProfilePrivilege	4368	msiexec.exe
Token: SeSystemtimePrivilege	4368	msiexec.exe
Token: SeProfSingleProcessPrivilege	4368	msiexec.exe
Token: SeIncBasePriorityPrivilege	4368	msiexec.exe
Token: SeCreatePagefilePrivilege	4368	msiexec.exe
Token: SeCreatePermanentPrivilege	4368	msiexec.exe
Token: SeBackupPrivilege	4368	msiexec.exe
Token: SeRestorePrivilege	4368	msiexec.exe
Token: SeShutdownPrivilege	4368	msiexec.exe
Token: SeDebugPrivilege	4368	msiexec.exe
Token: SeAuditPrivilege	4368	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4368	msiexec.exe
Token: SeChangeNotifyPrivilege	4368	msiexec.exe
Token: SeRemoteShutdownPrivilege	4368	msiexec.exe
Token: SeUndockPrivilege	4368	msiexec.exe
Token: SeSyncAgentPrivilege	4368	msiexec.exe
Token: SeEnableDelegationPrivilege	4368	msiexec.exe
Token: SeManageVolumePrivilege	4368	msiexec.exe
Token: SeImpersonatePrivilege	4368	msiexec.exe
Token: SeCreateGlobalPrivilege	4368	msiexec.exe
Token: SeCreateTokenPrivilege	4368	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4368	msiexec.exe
Token: SeLockMemoryPrivilege	4368	msiexec.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4368	msiexec.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4368	msiexec.exe
3148	msiexec.exe
1800	MsiExec.exe
3388	MsiExec.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3148 wrote to memory of 1800	3148	msiexec.exe	90
PID 3148 wrote to memory of 4456	3148	msiexec.exe	96
PID 3148 wrote to memory of 3388	3148	msiexec.exe	98

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\msiexec.exe
msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Setup.msi
1⤵
- Badlisted process makes network request
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4368

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3148
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 400D18E9AD5B53661529BA2249922AE6 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:1800
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:4456
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding A1658AD9EB45FD50C0F52D93EF1632AE
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3388
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 544757C0BD75A22302418BFA82AA23C3 E Global\MSI0000
  2⤵
  PID:2316
- - C:\Windows\SysWOW64\icacls.exe
    "icacls.exe" "C:\ProgramData\Ableton\Live 9 Trial" "/Q" "/C" "/t" "/grant" "*S-1-1-0:(F)"
    3⤵
    - Modifies file permissions
    PID:2036
- C:\ProgramData\Ableton\Live 9 Trial\Redist\vcredist_x64.exe
  "C:\ProgramData\Ableton\Live 9 Trial\Redist\vcredist_x64.exe" "/q"
  2⤵
  PID:5836
- - \??\f:\575a0b2d4f474cec86ea77e44d5acb6f\install.exe
    f:\575a0b2d4f474cec86ea77e44d5acb6f\.\install.exe "/q"
    3⤵
    PID:4468
- C:\ProgramData\Ableton\Live 9 Trial\Program\InstallHelper.exe
  "C:\ProgramData\Ableton\Live 9 Trial\Program\InstallHelper.exe" "C:\ProgramData\Ableton\Live 9 Trial\Program\Ableton Live 9 Trial.exe" "C:\ProgramData\Ableton\Live 9 Trial\Resources\Icons" "Live" "ableton" "C:\ProgramData\Ableton\Live 9 Trial\Program\Ableton Live Engine.dll"
  2⤵
  PID:4540

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3896

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:2412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Installer Packages

T1546.016

Privilege Escalation

Event Triggered Execution

T1546

Installer Packages

T1546.016

Defense Evasion

File and Directory Permissions Modification

T1222

System Binary Proxy Execution

T1218

Msiexec

T1218.007

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

User Manual English.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual English.pdf
Size 2.0MB
SHA256 5b6913b72b7e47adef13cf4144e5e54b6f1b5f34562ddab305a76595d199be77
MD5 17cd3961e667dfb0d0ef5f52d00a9872
SHA1 6a0de299c3e92d682bc3b71e47ff1fe0a7927f84
SHA512 62bc824a1addd6678d3400a25a8399f712dbaeed582dcaa427c422f51899450ed23251491df405f1fd9a6c375af4ddbfad15d432fbbe8d138bcdf3192e700cbd
SSDEEP 49152:7USTUybaaF/CotWPfnen9JB+3FefTAGAUarJ825Xt:7XoybaaFlWXenTY3EAUarJ825Xt
TLSH
T1C5A512786323ED5DE111C3786BAB07A192AD32BED70731433A6D8F3A46608C25F895DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual French.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual French.pdf
Size 1.2MB
SHA256 bdb13284cc456b5df2e0f3f110be10858b11da2fd45e532267e0f48f98468129
MD5 902be231b6cf5ee0638d3e08c7e0ab05
SHA1 d34d80a5a420b91f82d53b24799f52cae04b384f
SHA512 55f0364b907f303744229507659d59df7c29989cd474761dd1d50d6f8fee386dc4bbfbbbf87fe6b5c274fbf7af9402d197e8e939f0e994c1aa9843592571bd2c
SSDEEP 24576:O16IcMA2ekRkjhLE/sJTcd9CZ24fyGrGVVbZAWitYi5n9uiyQw/cCAh4ib:dIRrRkksJI/Cli2uIw0Vb
TLSH
T1E55502386667ED5EE11187746B7A07E5839D32B9E70731433A6D8F3944608C3AF8A0DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual German.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual German.pdf
Size 1.2MB
SHA256 dd5c9da93cecbe697b2e72aa634080aef074cb456cc5a9b0189616b9e92605f4
MD5 2cce37b8da9c84ddf9a8daf1370a6518
SHA1 60a7c39a16fb1134b34242947a15b7920e18c285
SHA512 a79f23cdb721ce01710040bc18e6371b2c2baac35ed4e7d86f0e0ea8da532fc091e96d209b0d4c5b5ec866aa984d42fd0ec4250d9b75ab8374f531b2e2ba3108
SSDEEP 24576:kdmbmnHkwGhK4E/0clcd9CZ24f0irOVtbZA3itEizInUZilQWc6m:7+EwXz0cC/Cj0NZNTF
TLSH
T1DF4502386627EE9DD112C77467AA03E693AD327DA30631433A6D8F3945508C3DFC61EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual Italian.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual Italian.pdf
Size 1.2MB
SHA256 465ccace9c2a448c364f46205e32c22f85c2ea1bc12be5726ff902ffd6e9a66b
MD5 db5bfa308e65a4f06fadd6c21247b457
SHA1 5066db770fca7682d31febeaf50c6bbe067e60b5
SHA512 2003ba3abe1fcd38df04fe7e9010274d40148363aa727a9f57dd4c2eeb9422c591f2893f253fd11c062229433febb2eca66aae831141f2e513057576b613e658
SSDEEP 24576:dzinlkezhIE/czfcd9CZ24fp9arMVRbZAEitKihnvjPiq/QBc45h4x6:Q2eJczE/C6UyPpIGB6
TLSH
T19B5502786627ED9DE111C3746B6F07E5929D32B9E30731433A6D8F3945608C2AFCA0E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual Japanese.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual Japanese.pdf
Size 1.4MB
SHA256 19ad991ab7ec8a057b1d8048c19701fa6492b94f8be35021c6f93f435c8638f9
MD5 8ea49f719546d04504109bcb5c971afe
SHA1 f350e624c0e536b494c2accf6f71886c6f08a540
SHA512 78401e3af94aa59d2b09913844f7023ff169e13a54ff943c101e3538c45bc533342cb2429c86865a6f854bc5ad8ca9cbcb198de5ac643f9a07416e6de85aa546
SSDEEP 24576:hS1pfV1W4Yr3S7nkrRhLNE/HOZcd9CZ24fuA12rdVQbZAMitly6i0n0kihMQLt:UvfV1TYr+krvcHOG/CyW7/k4TLt
TLSH
T1D0651278A223EC5EE113C73457AA07E291AE32BDD30776433B288F3955508D36F865DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

User Manual Spanish.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Docs\User Manual Spanish.pdf
Size 1.3MB
SHA256 2d7f55bf5a6c8ce735600a7c89b3c67637ec30a7814d9c020b0c72a7aae76596
MD5 2a598e9bae6052f397e723d947969ed5
SHA1 c54b4b00dcc6128814cc46686753aa6e2e0e244b
SHA512 3959e8a647174ea905bcefdfaea76eee5d3e8bbc89048bde3084bde38089d8d0ec9ac32f0c6f1f84f2c5fbbb1fa79fc96533e21089fa5d7df955cee4a0a3a532
SSDEEP 24576:nNDk8nhqE/tB/Icd9CZ24f5YrRVMbZAvitzi4ndGiDQgcCsh4c/GUk5Hwe:No83f/1/CGOJGz9v/GUIQe
TLSH
T1325512386663ED9DD122C3746B6B07E1935D327DE30731433A6D8F3949608C2AF865DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Licensing Information.pdf

Path C:\ProgramData\Ableton\Live 9 Trial\Legal\Licensing Information.pdf
Size 1.1MB
SHA256 a919f7e865303cdb84032d2983f45443c9e8b85cae825fb547c0430747a83f06
MD5 0b57d1c997495063e9ffb36a383fee36
SHA1 ce8f677739c9df5c26aecc2473a6e48291434dcd
SHA512 1983c2464bda16097a35e6da13fc2778aff321fc58c0b0de61802b965a20d4ce1721aafcd3ced11b9610d051a5ab45e3848b7049ce04f58cea89f84cc4223a3a
SSDEEP 24576:6YnYXxN3PB+NVSvU9eS9I7+C9xRCTt77T6DjnFj9nQ42i/Hq1ur:6UYhNfgN8vU0AQRCJAbFjKHii2
TLSH
T11945EF9DE360043BB8EC2110746B1B5B44552C7370AADC4898CBB86F274BFB6BD75DA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ableton Live Engine.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Program\Ableton Live Engine.dll
Size 1.5MB
SHA256 de9dc908cc54b138c76ba8c073fff1d02268b3d615a3077029d6f768d064509b
MD5 3b304ab2bf07c36fccced9a06eb05cdd
SHA1 d166f7596305d9a0c71a67f3b898c15a72d9e188
SHA512 b666e41f051e251fbacdc8dcf0511cb249ec8f295383d9a46f0191a9e5bb28a811bbb7ea4992c3a2185f2f5e8d2480ab5da05321a0849309b2a5bacbfacdd0e2
SSDEEP 24576:LBiTIRuLPlCC9NOym8vr1q5LLfCfZpaqR2RBYU298prHpxoi:LBELPl2ym8vr1q5LLfCfZpaqR2RBYU2Q
TLSH
T1DE75298A21F2A899903FD01DB1C8F94FE76134154B640DDF83A286995FA3FC54DFB622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallHelper.exe

Path C:\ProgramData\Ableton\Live 9 Trial\Program\InstallHelper.exe
Size 2.9MB
SHA256 30290b39c8a790467b07d79709f16898ee268782bf9ee5edfb64cb5bc6cc8d1a
MD5 1f6c0624f9694d4b3569eac4cbb3f6fa
SHA1 a54ac0153b42c1f0f65437a5632da102afc0531d
SHA512 896d522616d058d209e4351e4ba93a3021bce649b3d53b88b9685d7c1d42b6e2e43b12ce2292a25130bbde8b1fb579f21d165307730888ce96fb7f4b1cddc006
SSDEEP 49152:fxPmnD2ltukL8tPfXMcpZNAdxiCN3n5Enl0WUu2TRFa:fx/lMkL0XXMy8A0zfa
TLSH
T137D5088F57B810AAD1BBD15EDAC5A60BF2F134244B75ABCF45A10B4A2F63EE5507E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Installation.cfg

Path C:\ProgramData\Ableton\Live 9 Trial\Program\Installation.cfg
Size 173B
SHA256 3cb59772c041dd564e337d787735dd051fbc8386eebfea6a9a45d6fc1e366e85
MD5 faeb366c2ed54d7ff7007fe74135795d
SHA1 bd804fc910ef54394828a66310a978b502f0fcb1
SHA512 067fd11379bc3ea094b5ba5a256ffb3ea3707f2d42a1c18e5fc8b49289d27a908dcee62112c5e99cf2b48be3d00a38d18132dee53fe699a379cbc68ae528ec2a
TLSH
T162C08075577247301416134ED315471460199982925DF75D739F8804BF4B8637175711
MD5 SHA1 SHA512 TLSH

Submit Download

VideoExportMMF.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Program\VideoExportMMF.dll
Size 385KB
SHA256 e3dbf34e8e61fd190a8e6c63b6e4f16d4764959103e37ce7196d8a3498d30728
MD5 973a1b45dc514d160410fbe14a092bc7
SHA1 4bdf0a0bca61860fb8f4fd52c761d4efdc2e5923
SHA512 7483556fd78d8deb0d069fb5f5d957b8a067314db7f3d238e89815fc9354945c8ca30052bb3d14167f80b48a4bc40cd79864da48fea78097b20f0db7c12b2122
SSDEEP 6144:CPMcPfoeB+ZO/n+kb6Na0di2OLU9iTfp4YaTh2cMP3ApClo+AU8:7cPfoeEO/++6NBdi1U9iDp48Yv
TLSH
T192843A4AF7B48866E122D139CA73868AE7B27C594B21938F1364535E3F33BE15D39321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REX Shared Library.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Redist\REX Shared Library.dll
Size 311KB
SHA256 3aeb56b1dd107aa6ed7b9c1358f0f4d0cc83418174dad597843ec257359fe0a6
MD5 97246a4446f34312adaf14e95fb7b1bf
SHA1 7b056e307b07bde9f1a30c7e195347cdef300b32
SHA512 bd1c079618619ffed2b8a7dd74eb2f80cecd416233975b791db55fb4bdcbbeec3929f9949dbf1361e27eab2a7bba745b924998f6d131c631607a9f32db726631
SSDEEP 6144:w9oCvZDZm+2VYnrzzc3y8eVdquNwoXejGJPoppuu+ToUukVg:w9oqZ4YY3y86JNwgPo7KoUukC
TLSH
T1C6642A2DBA699C72D023907ED5C3964BE3B230504B7097DB03A14B6E2E377D59C3A726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReWire.dll

Path C:\ProgramData\Ableton\Live 9 Trial\Redist\ReWire.dll
Size 1.1MB
SHA256 1d2704d30a25b7114c1ea47bc6d99f11d998202d22879206cdffddcdbfbe9900
MD5 d60450617f7b146f92f8696a1f45ae67
SHA1 7757acb17c10f9ea2a11c15bfdba5155512681c0
SHA512 8b3855aef43f50f0282f97f4e92f3a9fcd86f345968dd2b144b66cb71b9b1ada39ccea9e0a5c6dd32309c7ce9eb832857822cc3953ba75e953dca51927d4c3d6
SSDEEP 12288:GynVlvgYZQOWI/K534L2bRNbF4Fkizl5kOSUPTzDdvPBmSwH:/vluOWI/TLARZeFJ5kOnPpvJmSU
TLSH
T1AC35084EA7750069D1BAD16EDB86A10BE2F134148B31AFCF59B14B8A1F23FE5913E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x64.exe

Path C:\ProgramData\Ableton\Live 9 Trial\Redist\vcredist_x64.exe
Size 3.4MB
SHA256 f4b8430f1bee32735263bd3e4f6ba00d1e09850304610cc4a8d01c01b0d9edd1
MD5 f2ba3f0c366f21b4279ba36543780340
SHA1 cf6858dd24cceb5418cbe0a2d8f39d4ebd7ad0ee
SHA512 cbac5d8511cdd274a201425fd9ef2f3b94c7dcd3fdba6d1a272ba55f78d56a7aa9a4093271bd3312bd403c07491ba5784b4754bec26bf18b3c0a3fdffc643263
SSDEEP 98304:98I8/pCVmdbx2rU/xFnTBU8UeNeagEXtIgvjyGFDdo85qp:9Avx2rw5Th8XeNyGtW08
TLSH
T170F533B5452342A0E2E08632B56243CEFD92E8E15652FF278B44FF759E149ADF85C20F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x64.exe

Path C:\ProgramData\Ableton\Live 9 Trial\Redist\vcredist_x64.exe
Size 3.2MB
SHA256 f06ed7a7d48eef93f1570576354527790bc3e6ce2e3414573e9e0ba845a04667
MD5 6dcc629000c826aba3baf290dfcd4ce0
SHA1 b36773e65a40421f565b307e41ebdd4127a70bdb
SHA512 3a1ecee7cc56b69013013d0fc06c83c17ad7d7d5b1fb9b90b8be71410a2b2ef13240d1ab884c69376e7ad5c60925a76595061ada28ab7f8afc505ca87b080770
SSDEEP 98304:98I8/pCVmdbx2rU/xFnTBU8UeNeagEXtIgvjyGFDdo85qg:9Avx2rw5Th8XeNyGtW0h
TLSH
T1D9F533B586234360D2E48632B56243CDFC62EDD14A52FB26CB08FF799E14869FC5D20B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AudioToMIDI.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\AudioToMIDI.png
Size 13KB
SHA256 b461ab59cffa6685bd462479a16b240aafd216b7515a6b4ab5c13d92c25c44b4
MD5 3f96228196c5a75bac88e1248ad49da1
SHA1 0262eea7e827ff16172aab67a518ca7eb8ed34d6
SHA512 5fb3da57a5895c99dfbd064516794cc957968f53389b2a164fea1b5afd7c2c57b9452aa0141e9137c8ff7af51449dced01e1edb1fa308fae115992c2174ad8dc
SSDEEP 192:BS0tKg9E05TNbIYY0Ki7Xace6abyMvZUpWMsIBzxxM+fu7NMGvG1KWaTfsW0N6n:vXE05UMXacenyCZUwcxMr7NMG5WO9
TLSH
T14E52BFDAAE11A87C455FB9B60CFE8360CE29239C998224712F9176E921F1EDEDF10474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AudioToMIDIDialog.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\AudioToMIDIDialog.png
Size 15KB
SHA256 adc2416f2ac7bd42a96cc1c8bf5639cdf5a8ea76d1d5485ba455aad60d2358db
MD5 86eed0c173595223e804ed3636a0109d
SHA1 41f7061098d1eb8ef5eda10c68e5a21aa0798952
SHA512 915fd8e7fb434e2355f4aa8bd63d740ee5ff8d816f55565dd2428d93bf9bc0c4c9c33b2d17ded4ea7e7975451628ad0a6fd998e40e76cf04570cf487e4e1fea9
SSDEEP 384:xXE05oSCtGkAitiFAlJ4+lrkeFEOUeYnoX0rKqdPdPtJ6ka:935mAQi+lI9OKnoXWBLJ6ka
TLSH
T12962D1BFA680249B75A669A128C543815F4912ECD456293C3BC7708E38F4ED62F9C8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Browser.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Browser.png
Size 36KB
SHA256 7caddb9adc015b2b5387c7be0ad31d6d7e20a43691d1825128b8077fa3cdbeb4
MD5 79fb9f751b314818ae4e4ee297efbae4
SHA1 56efe86ea2908f4a1482fd0edc9a3847d1a86104
SHA512 2eb3bd566b5288ea94bb8f02e98d922975fd77deb0ab1177d8b60c53940c8727f8a911af86e6e02ca21f5f7a8426a3324aa49e01659f5ce3ddc66611cfbbc3aa
SSDEEP 768:U35idxmRJve+eiD2IgQn0E1hJvAj4w3+LQGPsPz0:na2BiybW9y4wvQ
TLSH
T1F803E0A6E6A64CB3E5F0D3205CDD862E9F31309A216E973C69563A500CD35C261DCDFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Compressor.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Compressor.png
Size 27KB
SHA256 44e448ee1cd8bb8b55e3af9514d39cc2e842ee0082a91d5ab44c524ddda731d8
MD5 09911a6ce0f08603c745b3c7964ea8ca
SHA1 a9fb246a93b9cdc9d9b457972140874ca233a3bf
SHA512 10e2c9f5e31f6ad5ffea501ca86e2122db572955dbfe966bfd86ad91c4f6a00c854acecbcd6078efd868b462a587c07d91a3d215b97ed31404a504ae880daf7c
SSDEEP 768:p35HLhe6aaCALwaxVFA0t4R32mIGlEjcFT/:XLg653LwaxV2jRVIBO
TLSH
T11EC2E1BEB86084937DE42D126E8D534F9FF0098D89A48A26CB8D0AC6B95CCCF455E51B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressorAutoRelease.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\CompressorAutoRelease.png
Size 7KB
SHA256 50f1884bd992aa4278027dca3b4528ec03cbfabf306fb73797ba09812260a6d9
MD5 f1abecd105fea6f415022730e6314871
SHA1 7434eed504b82db221f081b38a8ee6281f6622f8
SHA512 a9b878cb53e604e7576957bab87a55c2379aae87761c48ab8cd777d295ca3101054c5cb00e4e60f3ed88f05ddfe876f26bb4a1b39a771d596bbbb253475dc534
SSDEEP 192:yS0tKg9E05TkZFLW05+9ZzrqPQiUScm/Wv0FG6V:mXE05YZOzuoiUShd0K
TLSH
T140F1B0DFD590D8EE3E8D75124DCC6362A7995129F72063B04D9391C82410DAFDF8A271
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressorUpExpansion.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\CompressorUpExpansion.png
Size 11KB
SHA256 eb2b54c7af31d4365f5566f9c379d5e54de40e1fd4c16329d9a66ae15bda51a0
MD5 3baf4d0e22ab2e5b64c9e9d207cb3ffc
SHA1 0111bd826f6b0575a7196347dbbf2dfd9b6c4652
SHA512 b2969fb910cff5ea0fa9de2a0a1e959883425d38c3fb948dcdca68611976b7dc693e0f6b13fcb82376e92c86b08847c94b8ff53f57726c3181f3363d1234a8dd
SSDEEP 192:WNS0tKg9E05ThjYd1qMkyXFIYdOjUD3QWmlKY2FE2GbtaHJpc//rsv5AkgKQ:IXE05VYd1q8WY53KKxG+HJpc//IvGtF
TLSH
T1C832CF5B10029C565CC879001EE52319FB1E49FCE3D274782AC47CB42D68DAA6E2F7E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConsolidateToScene.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\ConsolidateToScene.png
Size 10KB
SHA256 96ff7eee37ee6509ce6d61e639369061208b339936dcd47f16b4e73e2cb23be6
MD5 8c66c3928a7c308c07ac9b1cb6e4b368
SHA1 45ad7e117b0cf84c6359148acbaa476172ca327d
SHA512 6307f412bf1179db066ad9307e768bca3340d82d6c2579cbde555d0cf7926da16ef4afcc10c1a92d4cde3674a01bf6f5af6bca95e37e9edafe318e7d7edb3a75
SSDEEP 192:JS0tKg9E05T92a3xILEN+GEEnoxQRMAMYXLtULMUjXmC4SxTeOg1YGea6Kgx:3XE05yLENuEnoxQxMYpCjRfx5g1Ys3Y
TLSH
T18322CF53D52400279FB5BEA619C84B8776ADB32D074B186C40C5B9DED99F28BAA120AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ848dbMode.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ848dbMode.png
Size 9KB
SHA256 c9dff1663c83b30f2697f673ecf411ed74eadc324b82dc8873395533b2ff66ce
MD5 bd6992cbdee23a201ecd42a215319f12
SHA1 d91680f3b2e46fe4951eaff4a61c350e328aa827
SHA512 e412ea36cd3516f302b188517845d198906c672977e5b6db3a9c44fc0ec0c0235f0a5344d7cd0c87767442ac65ed7f08bf3e7761a5295170e7894dd27406dc7c
SSDEEP 192:NS0tKg9E05TtWCX9tX1p+XmL8OIY+8vIPWBZkCbV4DDAfEMubWGIK6:LXE05hWCtsmLbIYc3CbVtEt2r
TLSH
T1EE22AFDDA5B0945E9A1E3091099D82952F5D736C62DF0A98CBCA8CFE8074D212BE349F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8AdaptiveQ.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8AdaptiveQ.png
Size 13KB
SHA256 aff2a9f94f62459ba8eee46f7e69a5e1cfe9bcd327ff51817abe7fdacf867346
MD5 de35336b8d8dee0bb0862aade7eddf94
SHA1 6c6180bb4c684d9b929e7fc1865c1e8d8c5fd87d
SHA512 d5e5d404e7947508f1a9c9e719bd9ac506dc94e8e0acc1704a64e3b8a3b3e3bd7640f0d0676a8323ba533a505aa38a7ab20f12641e6e16402aef2ab27523d094
SSDEEP 192:iS0tKg9E05TU/QcNJZcmEC0B3PugzEGVQ+gQtTYoIjwGkP/kgzBb8bhVxoUB2q:WXE05IQkcmECyfugzEGT1Yw1Nza3xKq
TLSH
T11352DF076DE7802E92723641255B11F9CB0232FB5F872855DBC0FDD832E2938AA73A75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8AnalyzeButton.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8AnalyzeButton.png
Size 7KB
SHA256 97ad7623499fee49bf33f0dccf40295421270b8fd6b94e4b359007bf4eb18419
MD5 ec27f2f06564e8ec10ac9c1788754b65
SHA1 1be2cf4ded445a6df2052ce9494b9f310b658ccc
SHA512 937727165dc14cccdf192078c874058d05f02968ba5ac1f74276b891adee06814d6a38c267a602d7f7398b2661fe4c00e331b1d134cfe03f2c68f831598be994
SSDEEP 192:EqS0tKg9E05TUfAR/XxlkC/lLWhdyWXzW38Ya7PC8:fXE05A4RvNLKTzWTu
TLSH
T1DDF1AF7FAEADF1D858D6330416A1AD406765D92C89782138F3614ADC682078F7FD20F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8DisplayToggle.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8DisplayToggle.png
Size 9KB
SHA256 175b796c4586de78c73c079979320c0ace42d673ac2ee977aa694bbbcf14b44d
MD5 ca6799a60d43f7a480dead3a60fe3aa3
SHA1 97cd81acd72d5c856bc1c24ac5524b79c16d85f3
SHA512 5c26f319989ec1aa0374dd6f983828aceaf14d593a1cd1e4b7dc0a844c7a0bb17b9cb734f0703957b9c7bb30773d2d090f41cc95b6b307cc0c7436ebfcb7d7f4
SSDEEP 192:KS0tKg9E05TGqNaytKucTiLaNp6aFDlVthGe2oLv01r/4:+XE05/MO3GpbFRVdA14
TLSH
T1D112BF3F197DBF983D8B518542C5F1008A0C23EC9781216CA1D97ACEA785F0B2BF0123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8MultiSelect.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8MultiSelect.png
Size 9KB
SHA256 59fb72657991e5943c2241784663b4a8df0ddfb3dfe319c831541d49c925a7ae
MD5 951afc92fd63885f500e8ff4e7e20a8c
SHA1 34f8576b3cabeda1caa7bbca927a0556e20d348b
SHA512 d49ca15433ece185dfaf45f0e1b2692cdf42bbaad8495e0a47b2bdafae0cd5fa5908ee268cb70b1808721c803ac37bd60b9232dbf92d0b5eb71df18c6077a183
SSDEEP 192:xS0tKg9E05T4VcTCmcon5Vek411fu9CcbuavLwdKPsTq1uFmqlS:fXE05sVcTCmconHeT11fu9bLwE/1uUqo
TLSH
T17022CFCBC384944D64ED74128EBDE62AF77F6319A495B8083250E9FDEA41D47F771408
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EQ8Toggled.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\EQ8Toggled.png
Size 36KB
SHA256 b2b5df086d01c530e90a8f213f4ed085c6020c37856409a14d6eca8cbd36a9bf
MD5 582e06d343524484ed490390e4514855
SHA1 89ab02ec3ca2ac3f1dd0e70c5777085d8cd9ca53
SHA512 252811d90b088a16cc1ef21a297077cec038566013fcd36ad89c4bb4dfd16baeab6530178145db8a4c5eb30c1768801ccbc9c709af71fd86cfe275464740ece8
SSDEEP 768:L35hsd7oubs/waJH7YMNyS2KTJAPlidwwTsr/zNVmmGAqW:YoubUwaJ9NyShKwE8AqW
TLSH
T111F2F1E518E8453CDD0125808CCACEBD356EA678BDB93DDD0380A59D0DBEF55D324754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportDialog.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\ExportDialog.png
Size 34KB
SHA256 3a2b6f75511be8dcc0ec573311532e0c0a36fbada9041209baa84d7597725b6e
MD5 10927afe48d41bba6a016610ebc3dc00
SHA1 25ea725e7029a04035f94fd1c553accbf878bfcb
SHA512 30001808e5017142beb446216cde03e7851494b373e3b6d5b7c866b2a4a14e41f1fd4b67c60f505a5642003888db2e07ea0187be026ddbc1ec544967581f85fb
SSDEEP 768:5352SeR5yYfMb4isGBqlRsBNGRq+gAuULMyPh4wx4goGS:fWqb4i+2NWq+gAV4yZ4bg4
TLSH
T1E3F2F14F4010CC5C248877A23B7A6E68FBB3A0395B5F05943F7739605AA5B863305EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favorites.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Favorites.png
Size 13KB
SHA256 833dd02d991b1e9a0eafb0c4ec739d04e4e63391db09bc228ea0e343f1a97bdd
MD5 0eb73882ef56c69a76261de7751c96d2
SHA1 4958c153b591fe945d3e9628f5f8c37816b879c4
SHA512 71b5aa4dd621fb89549103c77a0abebeab45a47da9da7574d5ca40247fe28d1e9bce1b00f633dd86a32aa559f950073333581f91f4406f870e9dde6cba09ea81
SSDEEP 384:OfXE05VCA1Dxy5k/ehmXHveRXsIt8rXALa8b5p:4358Q//eh2HWRruTARp
TLSH
T1A952E16DC248E95FE51F7683046C6407DEAA82EC534B1B24BDE279CD4BBFE431618423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Glue.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Glue.png
Size 31KB
SHA256 237eb732eb41525025fa58b0d34c46df90bf8b586cd592db1b2ed00e5d9f7324
MD5 d2e3bc181adc64f0e7c514d6f0a4d0c6
SHA1 8b0e1e06461fad0e2c07b85846fdce5674f03e38
SHA512 d72573ab4cfa89f9c12a6bc902f1560be1ad54cbd7512ffc8896060f1e802382916befcd6a27e9570dac467d47f023709823a6097e72e9155810d1e6742e084c
SSDEEP 768:C35ptnzwfA9jm/nPoFoqes3eZ3fV10KEE1FKUH9LSrW1R:anwMjXFPReZd10dE1F5r1R
TLSH
T155E2E1E36FA4287E252FAB77C68C2067EB484142270679E8152F71ED89E39118F1DC82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LiveLesson.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\Large\LiveLesson.png
Size 17KB
SHA256 7a74f580a5837ecaae652daf2d104f1696ff31df0fea921985a6007bb64bcd83
MD5 ea443380fa336fb4bf73dc2ec4a0d32e
SHA1 37bc0f6bb66dd53a1ececc00b8d137ced32d6ecc
SHA512 7f4ede9028ce6096fc366025d7cea5da61d33068742ee0b691d5df787fd54f17bfbcd8b98bf320bf162b91efd9002112a9a671d0b3dcaa2cd8f6b923c5e77ec0
SSDEEP 96:2SskEWR5xNXrNjNBFNpnXssc5ofvD9Gsh81b0SYyTstGgXnrUBJm+d+:2Ssktb5BRXDVe1hYjtn3rUq
TLSH
T171821824FDF1B830E449E6392EE428098CB38B83D9819D85BEDD4D57BF10B998D5F186
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsDE.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsDE.txt
Size 20KB
SHA256 6fe80bde67fa60ec623b5781d008ad3b77119d64822eada2e561ac179b19f7ed
MD5 a7302c32311598943617d7d497199e96
SHA1 93bba6c263392654f1d635792f8b55ac0f4aa129
SHA512 eaedf6400cc4bc1f949ea27d87e8cd40e95ce70f6b23002773c99462ee3f37efee0c0630d9c019faa8588fec459bac3f4a06463c2b80c481b2c2bae9c8e8109b
SSDEEP 384:6tJg5pmlCQQLo/xyjAczSCRV35665GDa6Wm3AMhoYnU7du7tZRq1IXmp:6tJmq9SzSCRR35wWm3Hed+3Rqu2p
TLSH
T1BE92C7B7FC8BA1518657F3623345DC93FB6C62BAB25C24249049C1BBA70F472536E0AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsEN.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsEN.txt
Size 17KB
SHA256 973350036d2201458d86c4bd86f3bd31af59cb9c3a3c5fbe87e542ad1ad10da9
MD5 6dc9ce7eeead49f578d8e4495cb11335
SHA1 d11ce821c009d80f935c42b9a4d718fabda98d11
SHA512 3bb0ae53e412afe4dcc1376708ab6f42e6a91474c32ace162fdea7ca756885e198f99a5d338caad8c25dbb747755f95e0ed494d0b77476617bdff8547ec93318
SSDEEP 384:0FKFyFhxiaeEkeCbLPT+Lqry0F5Bp2Obbda:Gog3iaIly4Rda
TLSH
T14282A6FBBE4853B30127D251328EA1D2FB30509C737A06A1A09DD6ACA70A871637F5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsES.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsES.txt
Size 20KB
SHA256 528ccb1b4ec9b1303f0cb42a1fe3a43e9d25ead2acf9467f258412b3eefbd40a
MD5 bec55404e6410fd8a96616a317435280
SHA1 7a59f634a8e334ddb13faeb4d277fd0565b8a40c
SHA512 707b5e05c86db59e4b26e40978b6ca298317078c29bcbfac7edcba94c4df7e108377201d98a7a8166d59636e9b5c64720b99d7c9f27a425b08514511b9423acb
SSDEEP 384:/VzdDQ4fDA2qw7YydM/BKPVWYqrmGEicLth0+VMVj7A1XMBE:/tRrV96BKP0sGhA30akA18E
TLSH
T1BF92A3B76DC9176310E2E38A7287E153E2949484711CC246F086D76AB3CD99CE23FA8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsFR.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsFR.txt
Size 21KB
SHA256 c23711d8b8229db435cc7b776abac6f5a8a364fc55a53566a2036d397629525c
MD5 ea4ba09f8d95885e66814b1ab409b281
SHA1 9b90b448cec17fc67dcdc6491a36bee237f5cc2f
SHA512 b29d8b1f0516bdce45160db9ffcb70cdc4f0d849f50c05de465db07590c52419f599fa7d2df4ce08d2391c7c105106f937817b4e2c59e853ba31c6a2513efdb9
SSDEEP 384:Qh9P3yrnjsInq76Hzld9vKtCDQdDAxScJMcJ8VqHHue85Y+y43Cd9HI9Sj14H0y:Qh9Kro7ap5DQd71cJ8VqnuQKy1iX
TLSH
T174A2D8FFBDD8118304C7D26376536093E538C584726DC148E89A9ADAA78DCA873AF4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsIT.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsIT.txt
Size 20KB
SHA256 7cd1280fd5e25064060bfa29d68ea0bb98d052b8dbdb10c0204644471182219c
MD5 ab166d6a9a549f50ae721b6ae2fda149
SHA1 135b51ed6b97e2c1a3321a676cca527b5125ea73
SHA512 f3ab1d4ab6f6174d25f457c97d141a0f72e4fdf8930ba7b3d5d889b1dcc742f73e51ac1acec3b914ffbf8d6553710fc6d76d9b1ba004be82fd9d414529aafb6e
SSDEEP 384:Dkcui26uxpRUZSS6yblCLUKMjF0vI67pt2RwowFDVap:DkcnmIZ7ZsQ/F0gypiwZTap
TLSH
T11E92F8BA6D86502614EBE361B2926083F322D4DCFF692120F1CA476DA3CDD50F27E51E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LessonsJA.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LessonsJA.txt
Size 24KB
SHA256 24edaca43885dcaf5ec733b3628f42f8edbb74fbb0ee32f53a8c9458fab33f92
MD5 c455d9f5db5aeb7763c0a7f0edd2d3e6
SHA1 abc5813d893abca77ee05d0165a128d6fadd7cb2
SHA512 897346076ec2505df3a0ddd4240aa181b1170108cd54c43bbf3c8de99933a22bd97ea0aa11bc4e357f1f6c371d7f7d20e8b84fa42cf01d671df78b7acb766232
SSDEEP 384:E2RuN7d/66WTQycTL1SJjm6D1Dd3iovBBE:E224mv1eh3jBBE
TLSH
T172B221BCEFC5A4358D21C3E2285C65D1F08A9CABFDA33535403CD475BA6169EE40DAB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LinkedEnvelopesWarp.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\0-What's New Category\1-What's New Lessons\LinkedEnvelopesWarp.png
Size 11KB
SHA256 50a481e637175810a9684710f47c30b71bbff714de62ac665df8966dbaac0e88
MD5 5a03d3ea97e301db640aa1a3c03bf60b
SHA1 bbdcdd6f1ee75d203ca61a9ee3c5c5fbcf8313ce
SHA512 0715b5ffdc5895d2395418d0621a0b49edc0e5254f74dc3d1c054e814fbb3579aff09d9ac8178a07f562a7fe77318f84420a1d66c0146ed34ebaea8b6dcc238e
SSDEEP 192:QS0tKg9E05TX7EUvsxm+2sVgMuTm2fWk6o7JiEvhjE5C8KnOqPcbT1TAvy7xXekZ:UXE05zBsxeHMYfV9pI5C8K7UHHtuq5
TLSH
T10A42D00D9C51C8AA98BAFD84218D14C7EA77A3F791460B3C6593F4CEA07CC0B9D5C02E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopButton.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\1-Live Basics Category\1-A Tour of Live Lessons\StopButton.png
Size 4KB
SHA256 72685e50b537170afb81c7e9441a43806aa6a3dfeffcaaffa54f96dd2ec81196
MD5 1cf0fb6f99335c00957929407d9bee96
SHA1 a7acc4cc0473448ac611484bb990754e488c4773
SHA512 941d2fe8d4431b0b3ef57d9ff9d693349cbcc33d081b0d55c1175cdf65bdc7c10f5b15f1725d6e3bec44ed3042a78e421b524dd50c6e907ceffafaaaa1bd6d6c
SSDEEP 96:lZ/I09Da01l+gmkyTt6Hk8nTLz70DuYncDz+dqSb:lS0tKg9E05TLv+uYcDydtb
TLSH
T144917DAF9D60B14E228EB18209DE4801B92A657EDF071375D4C3BBCE79A8C1627534D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowserShowHide.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\1-Live Basics Category\2-Recording Audio Lessons\BrowserShowHide.png
Size 7KB
SHA256 b8aafccea728b61587d3099059d6d79ba5c0d7c06730f8685767911307b69f6d
MD5 de023e29956ad6bb313b25728b92ddf0
SHA1 810301560aab3db0f8674167af13af673c6ec719
SHA512 1b18e9dd378b3ee65f4d64b425a007de596f2d5dddd57bfc85ae00e9c0e4cd9c858ebc71fa2d9b39e0608bd04b13ef7852273ba4fce556a54d1a0c0b5c7778cb
SSDEEP 96:cZ/I09Da01l+gmkyTt6Hk8nTsSpyAZNerNfFH1isYdqvopYx+VRYQ9fCAd3CUcyu:cS0tKg9E05TtTNerjsseWi9fhDcyabLl
TLSH
T1CBF19EFBD6A0E40DB99D30033C5D07C79F29366CDE67379CD08698D91465D875B920A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LeadInfoView.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\7-Operator Category\OP4-Lead Sounds Lessons\LeadInfoView.png
Size 19KB
SHA256 7317e4843996f1ae7400d1f77d10eae01f00bcc2b88538a503473540d4d73b88
MD5 58373473f268edd59fdf2c4b1d069bee
SHA1 1885428a4aba0f56b2acfe8c483875a4c2d82f76
SHA512 3be312834b24de5b6cfa083800aaf5d7b4ab1244f81ba7c166b316cebbf5a0e1f96c13b2947d27ea13599024f8c7a5ffb1d13cd4c35fdcede9691a054a49488f
SSDEEP 384:3LVES+DybGpwfSQXmZthPVOL73NJr9LUTWJ5DRuV+31YowYKm:b92ybGWvohPIf3NJCTmu5pm
TLSH
T18692E1739E9560D54CAD7183206D22A1A973228BA22B4B90D0FDBED7C943CEF01B5772
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideInfoViewFx.png

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Builtin Lessons\7-Operator Category\OP6-Rhythmic Textures Lessons\HideInfoViewFx.png
Size 1KB
SHA256 6fe23d714f3aa69a6ca1b5547898abe919728b1188ae75e076c3b38286e1da42
MD5 334b499c13175a3f512c69947a1bf5b3
SHA1 4677055fe5679f82036e69aa6a9be6a09445c2c2
SHA512 5877e602648b16a63182fac5f1de4412bf83f2f824757b6a061f9990e7e865a109209651a1830986b3da1684683c8b0a1719fa32b2e3e71ad3d1d7c834a10c0e
TLSH
T1B0310A9C962A683396BE126994EFF5C0B6E69264C731320BAEF0B015015097F1FA5314
MD5 SHA1 SHA512 TLSH

Submit Download

Bomba Congas-199bpm.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Latin Percussion\Bomba Congas-199bpm.agr
Size 8KB
SHA256 7e0259aa6d8b50a7275383cfc5d4eef0af04b251ef522b07b7767e58e083028b
MD5 ebd0c449a250a8021259e76c6e2bf221
SHA1 5eee48123c1266e13ad46da24bbfaf71f921e4c3
SHA512 0fc178a78a250a073396438a2fdea7fa7905c1326c698c7e7c86f402fde508302f6a4b262c4faa817ff70001a65178a11c58dd0f0168b1f7ac58bd087371f36f
SSDEEP 96:w/ta754mVM+txkMjBSNZCu1yGZt6qW+lT6+qPtBBtrIc0Epd25sQtbUt4nzuKnln:w/Id//tCRt6f+RaBgcB2O0/JlQO
TLSH
T1C802FD0357FD3607E1B79B322979007981377D7A0971EA7F00551A2E1E38A88CE2DBA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notator 16B Swing.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Notator\Notator 16B Swing.agr
Size 28KB
SHA256 858e202e9ffce78768ccc4a82cb5dbdcc28d80e79281b61255d7b55d50050b20
MD5 b88acfe53da438f3ce390fc85155c5de
SHA1 53bc7813c4c9fa4d1fa1b76b7f1537b9cc8e1295
SHA512 ebe797361ed6cd33b873e0fe0e9ac005deaa2634c599dc00cbde549b2b90f38e878c917e7353e3356ff10c73ae3ef559c3a2c9479a7e906d614c1bcff0a6c826
SSDEEP 384:n+5W6hTLCywH8Ay6I42OpBztYiE9tYIQ3mvD+P5/CtOpD0/Z2g/:24H8Ayk7rcZ2e
TLSH
T1B4D2586277FC7A04E1B3D73A5C7580B9C5727D668C14A17E2294366F0E39648CA28FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notator 8D Swing.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Notator\Notator 8D Swing.agr
Size 29KB
SHA256 a81b08f4f8551a70d7ce2f53a850ca5f6bfefe38c7b5b9e0f38aa96a8dc2f2a5
MD5 9e05f0d97e2835ddba50eb921ed2d161
SHA1 5ebdda6ef752643c35ff10964b9b9812d198dda4
SHA512 c04eb45bba0baa8d413780e72666b08ae21f642f7f39949b660356f78bead1a42a65c6aa0358d3a2b60cbe161f9d11c03d03a690a28e8980a07e3e892d7e45e6
SSDEEP 384:t+5W6hTDSywH8Aj6I42OpBxtYiE9tYIQvm+D+P5/CtOpD6IZ2g/:coH8AjkNUPZ2e
TLSH
T18BD27A6277FC7608E1B3D73A5C75807AC5727D6A4C14A17E2294366F0E39648CA28FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Swing 8-99.agr

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Core Library\Swing and Groove\Swing\Swing 8-99.agr
Size 6KB
SHA256 2753c75cdb2ded091019b2f77f982d8e113fd0303f3758a593b65542c77651e6
MD5 c347c3b19f5f3e4a44ac560607293c9f
SHA1 c2b4bd15e6fa7905c1d529cfc908bc95dfee3f47
SHA512 d6309638fc1c3be920fbe90d33414fa640627cfa4bcdba6ef2c9d0700b47a052eba08fd53127b37f51c5afebcd1f65a31d5efc600ffe71f133d92f8e368a593a
SSDEEP 96:Ya754vM+txkMjBSNZCu1yGZt6qW+lT64rGYKUOtH1mwpFr9d69jSfocmCJ9jSf:pdutCRt6f+RxrGKYRcM
TLSH
T1CDE1CD479BFC370AF1F797722971007A827A7DAA4561E57E0054252F1E38B88CE18BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

not-zip-safe

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Extensions\Updater\third_party\site-packages\nose-1.1.2-py2.5.egg\EGG-INFO\not-zip-safe
Size 1B
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09
MD5 SHA1 SHA512

Submit Download

top_level.txt

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Extensions\WebConnector\third_party\site-packages\abl.vpath-0.7-py2.5.egg\EGG-INFO\top_level.txt
Size 4B
SHA256 9c042170ade924ceebd205c809c09f7525b1cfdb78edef48403f126bed255940
MD5 7a759802a9a11a923e0e333ca8227cf0
SHA1 26d7cd626fdd55841eec2a599007083ebeef9500
SHA512 b41c2b2bc76f1956224077ff8e12079a2fdda8b8c195bc06046cda667ea27f69fa6f04b26df611c613396ee92bef9bacdfcfdbd9129ceb72b6ae9dcf788b760c
MD5 SHA1 SHA512

Submit Download

__init__.py

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Extensions\WebConnector\third_party\site-packages\abl.vpath-0.7-py2.5.egg\abl\__init__.py
Size 75B
SHA256 4032724b98ed267185b12b8ec78dd9bcb0423ab1c89a6f0dad99397fd51159d9
MD5 1cdca3de4f8849a3d0d82b678710e112
SHA1 78b2c51d96cb678f669aca7e868d19c429e6be0c
SHA512 7da14aa35ead9f6d0efd90367613447a26738c15effc96b0c3c5fe9394cc2b4928e6ac3e1123efec4a75c7f8e0249c91a4b8b58f0ade8880a57549084b4cd61d
TLSH
T1EEA002911C8390F55630F711C1460CD396D70DF77E8198A002C42959B9C1FF75510A24
MD5 SHA1 SHA512 TLSH

Submit Download

02Clay.ask

Path C:\ProgramData\Ableton\Live 9 Trial\Resources\Skins\02Clay.ask
Size 7KB
SHA256 873e404cdf8b00d5e74180097bd9a9b7a5223537a5e44fcd416f815954473564
MD5 7784bbe42981f715d8cd5c43acf71e8f
SHA1 0c3f14d5159f470d72f2ed5f0d9a166b6fa03740
SHA512 e3a67d68008ba56995c76022abc81b13e1703e84c8d2ab29ed5784e4c21d29f54d5533374085d93cc43dc586ea9c1822cdb418e2705279d4109da5bc420d121f
SSDEEP 96:H///khX2+ixUjNCkiOohGwhOVGdG8GmC2bemhnACAxzDwpmuUGkqs9p2lusnroOA:/w2V4qeSACAvupPJz32YbK/B8BKG0
TLSH
T15DF124A213FC3E44F17B9FBE69F964B48867BB57141EAA6D10D0066F4B3890DC508B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI835A.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI835A.tmp
Size 38KB
SHA256 263c6ccd40e6e0f14a98d8b3ac9f7ebb5c537c2ae8de182fd6374ff1c1b1129b
MD5 3154e548d576f110fcbcf2e09e483d4b
SHA1 4748b46a0e8d4858c350052872a57a34f6c2e7fe
SHA512 d006798d4b4fae3d73082a04d3bf9386a64c1ad7f7808fcf56b0c42970bf74ebe4c270c0468a8dfc8c107f3fc7b95031c9bcd973ad98b1cef0502cd260b86a2a
SSDEEP 768:cwp+wLPPXVpPxgeF80+mZdZ3IaN1jTa1AgnZOtkUkB2dyAJ:Swz3m5bmZdZlj8AgnZOt2QdyAJ
TLSH
T1EF036C127706C5F2CA8933F0B59A936D4BBDB8412BE012E7E3639BAF0FA41C91573152
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI9CD0.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI9CD0.tmp
Size 67KB
SHA256 3b727a1a70641abae30bf2d0b3ba1edfcc44b2873364942b9ecd69bf57defb40
MD5 d54dda22bb374be5ac6862ea757cad82
SHA1 ff2a6710991145c039915869b3887536376b3b83
SHA512 018fff3bd7f613f8546037c0b7bacb3a0abd35f51f6bdd33f913341196900da350d824a598616147784f01aba1a2ec0d7e6de2bd05964328028d5420361a5151
SSDEEP 1536:U0bOkVGVspAwPhVq9othBh65GwDcTJfR1nAj:h6kVG6pAgMcTJ51nA
TLSH
T152636C217350C67AC196283AA465C7722E7E75301BF585CBBB5707BE9E312C0B77A30A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI7049.tmp

Path C:\Windows\Installer\MSI7049.tmp
Size 155KB
SHA256 e8be4bebbec150dea0fffe4ad32dd4b7f2a2cee317efb3fe8f127e49e64794e7
MD5 84fe6543a5357793615375e62914c76a
SHA1 3e80ecbc17359e2a5d6691abb86f1e6526e1d980
SHA512 f666166006c3c8d54fd42b09777dd3039244fbe9f48e5d1a76259b35c5eb8490d7dea868ca7080c9e8f04ffca395a0c028a2d86ae5bfd2b7dbdf8a2d555b71e1
SSDEEP 1536:aJqCsjr+AtNOLtIWM+ZlV6ZmyJPeYuv/ePdifw4PGHHXtRBgS1RHS/gAMXnO2X+g:gO+ENIIWM+lKek17yd2X+VLnOkyqE
TLSH
T13DF37D313190917EF2B21877E62AC3719E3DF1280B70859D5B824A9FA924497FBF7712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 26.1MB
SHA256 092d2bc995f304fe44887a3c466c761a8387d717a25b414ba24a34d45e68a583
MD5 fc242c237de99c372a8f7cdbc5695182
SHA1 d37a53d4896e635a5c9648eac99ba8c9caf728bd
SHA512 c0accee69f38d2be69084da09fe7821027777b6049a4e657d9c9f4c58ea8fd90fcf9779a8acda9ea0f033a16a60d32cb60cfcb350b02ce60a230abf5445083f8
SSDEEP 24576:3Fo3DMPZdoO/vvTL/yAsMilQPrOWX7rf0R6e9BCE65iqpLNMMoR2s12NoeG:DH4
TLSH
T1ED57B51436F92100E7F79E3CA8F06A234D397D5BAC19DE8D45511B8E0922F71E872F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{b638bd97-d8e2-46fd-a7b2-3e1f4dbbdb85}_OnDiskSnapshotProp

Path \??\Volume{c61fbfff-0000-0000-0000-d08302000000}\System Volume Information\SPP\OnlineMetadataCache\{b638bd97-d8e2-46fd-a7b2-3e1f4dbbdb85}_OnDiskSnapshotProp
Size 6KB
SHA256 50fb714d7f82dddc750b46602cf04342ad94113edd8d8a12e709201f5d503d11
MD5 6f4bf1af9d40b75eb93d552c38662609
SHA1 31463d562ee1b4e92486eecae11da61d9791c5df
SHA512 c0344e7079d1afaa38c3baed0ad9f32891afa6ad12b42cadc9177241b98f49ccaee5fddc7f9e57fb522cb46361f89dab4af79c70d2ff1625c112568df8041e1f
SSDEEP 96:FlEeW5mJlDvc6DD84LTHzbOHXOHBlBRQn8Sc9XE56tOSVQpuN:DEhcl/b++uVmN
TLSH
T17CD188085AF54311E2B3AB3229F18557A877B811FF33CB8E0198238E6671910F935F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3148-32-0x000001C5ACBB0000-0x000001C5AD554000-memory.dmp

Download