Analysis
- user interaction
yes - max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/08/2026, 06:39
Static task
static1
Behavioral task
behavioral1
Sample
MuseScore-Studio-4.7.4.260706075-x86_64.msi
Resource
win10v2004-20260513-en
windows10-2004-x64
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
MuseScore-Studio-4.7.4.260706075-x86_64.msi
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
General
- Target MuseScore-Studio-4.7.4.260706075-x86_64.msi
- Size 121.9MB
- Sample260820-he3rds1epd
- SHA256 64fe70e5cb9ffe159d047d1e88db567bd101f60d36b0de28feb674716929a378
- MD5 74a8a5c3009190e3cd6210ec39491c61
- SHA1 4af8e109e992f7ccffb616967cb26af6906fdfe0
- SHA512 aa52670469426607f282c46eb2b5694e52fb8fb3a110179057de80312446e36a9b41b8b3135c320d2271d1988d41cf35340f64ae90f079c6992fded8db872d25
- SSDEEP 3145728:GkIElqFRvqUS/T5CB2iI7Jr/XX8lbW5gUYIOmd+aKthg:SKQRiUa5CBREr/W5J/3g
- TLSH T1E85833301B0D2A6BF2755137A8E8DB75CA170C9AD7C283457A7DB79C5CF61888BE3182
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation MuseScore4.exe - Executes dropped EXE 2 IoCs
pid Process 2160 MuseScore4.exe 4348 crashpad_handler.exe - Loads dropped DLL 59 IoCs
pid Process 4520 MsiExec.exe 4520 MsiExec.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe 2160 MuseScore4.exe - Badlisted process makes network request 7 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 8 2152 msiexec.exe 15 2152 msiexec.exe 17 2152 msiexec.exe 18 2152 msiexec.exe 26 2152 msiexec.exe 27 2152 msiexec.exe 41 2152 msiexec.exe - Enumerates connected drives 3 TTPs 46 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\V: msiexec.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\MuseScore 4\templates\02-Choral\04-SATB_Closed_Score\viewsettings.json msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Basic\MenuBarItem.qml msiexec.exe File created C:\Program Files\MuseScore 4\tables\de-g2-core-patterns.dic msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Universal\VerticalHeaderViewDelegate.qml msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-background-down-hovered.png msiexec.exe File created C:\Program Files\MuseScore 4\tables\ml-in-g1.utb msiexec.exe File created C:\Program Files\MuseScore 4\tables\sw-ke-g1-5.ctb msiexec.exe File created C:\Program Files\MuseScore 4\templates\07-Band_and_Percussion\05-Small_Marching_Band\audiosettings.json msiexec.exe File created C:\Program Files\MuseScore 4\tables\digits8Dots.uti msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\textarea-background-disabled.png msiexec.exe File created C:\Program Files\MuseScore 4\bin\Qt6QmlWorkerScript.dll msiexec.exe File created C:\Program Files\MuseScore 4\locale\qt_ca.qm msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\qmldir msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Material\impl\BoxShadow.qml msiexec.exe File created C:\Program Files\MuseScore 4\tables\fr-bfu-g2.ctb msiexec.exe File created C:\Program Files\MuseScore 4\tables\ko.cti msiexec.exe File created C:\Program Files\MuseScore 4\tables\sot-za-g2.ctb msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-up-icon.png msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\impl\RadioIndicator.qml msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-up-background-atlimit.png msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\locale\instruments_et.qm msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Material\Drawer.qml msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Windows\SpinBox.qml msiexec.exe File created C:\Program Files\MuseScore 4\templates\04-Solo\01-Guitar\score_style.mss msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\bin\concrt140.dll msiexec.exe File created C:\Program Files\MuseScore 4\locale\qtbase_de.qm msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\locale\qt_hu.qm msiexec.exe File created C:\Program Files\MuseScore 4\qml\Qt5Compat\GraphicalEffects\HueSaturation.qml msiexec.exe File created C:\Program Files\MuseScore 4\tables\sin.cti msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Imagine\SelectionRectangle.qml msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\combobox-indicator-open.png msiexec.exe File created C:\Program Files\MuseScore 4\locale\instruments_sv.qm msiexec.exe File created C:\Program Files\MuseScore 4\tables\no-no-8dot-fallback-6dot-g0.utb msiexec.exe File created C:\Program Files\MuseScore 4\tables\unicode-braille.utb msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\locale\instruments_mn_MN.qm msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Universal\ToolTip.qml msiexec.exe File created C:\Program Files\MuseScore 4\locale\instruments_en.qm msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Universal\impl\qmldir msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\slider-handle-pressed.png msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\locale\instruments_gd.qm msiexec.exe File created C:\Program Files\MuseScore 4\locale\instruments_ru.qm msiexec.exe File created C:\Program Files\MuseScore 4\locale\instruments_sl.qm msiexec.exe File created C:\Program Files\MuseScore 4\tables\ru.ctb msiexec.exe File created C:\Program Files\MuseScore 4\translations\qt_pt_BR.qm msiexec.exe File created C:\Program Files\MuseScore 4\templates\02-Choral\05-SATB_Closed_Score_+_Organ\score_style.mss msiexec.exe File created C:\Program Files\MuseScore 4\templates\01-General\03-Grand_Staff\viewsettings.json msiexec.exe File created C:\Program Files\MuseScore 4\locale\qt_sv.qm msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\Windows\impl\qmldir msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\tables\hyph_ru.dic msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe File created C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] msiexec.exe - Drops file in Windows directory 8 IoCs
description ioc Process File created C:\Windows\Installer\SourceHash{56262B8B-ED38-4D6B-BCE7-BE42FC90FBA7} msiexec.exe File opened for modification C:\Windows\Installer\MSICE52.tmp msiexec.exe File created C:\Windows\Installer\e59b8f8.msi msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\Installer\e59b8f6.msi msiexec.exe File opened for modification C:\Windows\Installer\e59b8f6.msi msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 2152 msiexec.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MsiExec.exe - Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 0000000004000000306421734df6c2060000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff000000002701010000080000306421730000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01200000000000020ed35000000ffffffff00000000070001000068090030642173000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff350000000000000005000000ffffffff000000000700010000f8ff1a30642173000000000000f0ff350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff3a0000000000000005000000ffffffff000000000700010000f87f1d30642173000000000000f0ff3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe - Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz.4.stable\DefaultIcon msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz\CurVer\ = "MuseScore.mscz.4.stable" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.ove msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz.4.stable\shell\open\command\ = "\"C:\\Program Files\\MuseScore 4\\bin\\MuseScore4.exe\" \"%1\"" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz\CurVer msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscz\ = "MuseScore.mscz.4.stable" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscx\CurVer\ = "MuseScore.mscx.4.stable" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscs msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.sf2 msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscx.4.stable\shell msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs.4.stable msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs\CurVer\ = "MuseScore.mscs.4.stable" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz~.4.stable\shell msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\musescore msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\FriendlyAppName = "MuseScore Studio 4" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs.4.stable\shell\open\command\ = "\"C:\\Program Files\\MuseScore 4\\bin\\MuseScore4.exe\" \"%1\"" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz~.4.stable\shell\open\command\ = "\"C:\\Program Files\\MuseScore 4\\bin\\MuseScore4.exe\" \"%1\"" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.Url.musescore\CurVer msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.mscz~ msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.midi msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\shell\open msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscz\Content Type = "application/x-musescore" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz~.4.stable\shell\open msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.musicxml msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.cap msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs.4.stable\shell\open\command msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscs\ = "MuseScore.mscs.4.stable" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscz~\ = "MuseScore.mscz~.4.stable" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\musescore\ = "URL:MuseScore URL" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.kar msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.sgu msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.mgu msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\shell\open\command msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz.4.stable\shell msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscx.4.stable\shell\open msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscx\Content Type = "application/x-musescore+xml" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.xml msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscx.4.stable\ = "MuseScore Uncompressed File" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs.4.stable\shell msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs.4.stable\shell\open msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz~.4.stable\shell\open\command msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscz~ msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.Url.musescore.4.stable\shell\open\command msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.Url.musescore msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.bww msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.md msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.ptb msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz.4.stable msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscx.4.stable\DefaultIcon\ = "C:\\Program Files\\MuseScore 4\\bin\\MuseScore4.exe,2" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscx.4.stable\shell\open\command\ = "\"C:\\Program Files\\MuseScore 4\\bin\\MuseScore4.exe\" \"%1\"" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscx msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.mscx\ = "MuseScore.mscx.4.stable" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.mscx msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.gp3 msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscs\CurVer msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz~.4.stable\ = "MuseScore Backup File" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz~.4.stable\DefaultIcon msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.Url.musescore.4.stable\DefaultIcon\ = "C:\\Program Files\\MuseScore 4\\bin\\MuseScore4.exe,1" msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\musescore\URL Protocol msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\MuseScore Studio 4 stable.exe\SupportedTypes\.gp5 msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\MuseScore.mscz.4.stable\ = "MuseScore File" msiexec.exe - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2160 MuseScore4.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3948 msiexec.exe 3948 msiexec.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2152 msiexec.exe Token: SeIncreaseQuotaPrivilege 2152 msiexec.exe Token: SeSecurityPrivilege 3948 msiexec.exe Token: SeCreateTokenPrivilege 2152 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 2152 msiexec.exe Token: SeLockMemoryPrivilege 2152 msiexec.exe Token: SeIncreaseQuotaPrivilege 2152 msiexec.exe Token: SeMachineAccountPrivilege 2152 msiexec.exe Token: SeTcbPrivilege 2152 msiexec.exe Token: SeSecurityPrivilege 2152 msiexec.exe Token: SeTakeOwnershipPrivilege 2152 msiexec.exe Token: SeLoadDriverPrivilege 2152 msiexec.exe Token: SeSystemProfilePrivilege 2152 msiexec.exe Token: SeSystemtimePrivilege 2152 msiexec.exe Token: SeProfSingleProcessPrivilege 2152 msiexec.exe Token: SeIncBasePriorityPrivilege 2152 msiexec.exe Token: SeCreatePagefilePrivilege 2152 msiexec.exe Token: SeCreatePermanentPrivilege 2152 msiexec.exe Token: SeBackupPrivilege 2152 msiexec.exe Token: SeRestorePrivilege 2152 msiexec.exe Token: SeShutdownPrivilege 2152 msiexec.exe Token: SeDebugPrivilege 2152 msiexec.exe Token: SeAuditPrivilege 2152 msiexec.exe Token: SeSystemEnvironmentPrivilege 2152 msiexec.exe Token: SeChangeNotifyPrivilege 2152 msiexec.exe Token: SeRemoteShutdownPrivilege 2152 msiexec.exe Token: SeUndockPrivilege 2152 msiexec.exe Token: SeSyncAgentPrivilege 2152 msiexec.exe Token: SeEnableDelegationPrivilege 2152 msiexec.exe Token: SeManageVolumePrivilege 2152 msiexec.exe Token: SeImpersonatePrivilege 2152 msiexec.exe Token: SeCreateGlobalPrivilege 2152 msiexec.exe Token: SeCreateTokenPrivilege 2152 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 2152 msiexec.exe Token: SeLockMemoryPrivilege 2152 msiexec.exe Token: SeIncreaseQuotaPrivilege 2152 msiexec.exe Token: SeMachineAccountPrivilege 2152 msiexec.exe Token: SeTcbPrivilege 2152 msiexec.exe Token: SeSecurityPrivilege 2152 msiexec.exe Token: SeTakeOwnershipPrivilege 2152 msiexec.exe Token: SeLoadDriverPrivilege 2152 msiexec.exe Token: SeSystemProfilePrivilege 2152 msiexec.exe Token: SeSystemtimePrivilege 2152 msiexec.exe Token: SeProfSingleProcessPrivilege 2152 msiexec.exe Token: SeIncBasePriorityPrivilege 2152 msiexec.exe Token: SeCreatePagefilePrivilege 2152 msiexec.exe Token: SeCreatePermanentPrivilege 2152 msiexec.exe Token: SeBackupPrivilege 2152 msiexec.exe Token: SeRestorePrivilege 2152 msiexec.exe Token: SeShutdownPrivilege 2152 msiexec.exe Token: SeDebugPrivilege 2152 msiexec.exe Token: SeAuditPrivilege 2152 msiexec.exe Token: SeSystemEnvironmentPrivilege 2152 msiexec.exe Token: SeChangeNotifyPrivilege 2152 msiexec.exe Token: SeRemoteShutdownPrivilege 2152 msiexec.exe Token: SeUndockPrivilege 2152 msiexec.exe Token: SeSyncAgentPrivilege 2152 msiexec.exe Token: SeEnableDelegationPrivilege 2152 msiexec.exe Token: SeManageVolumePrivilege 2152 msiexec.exe Token: SeImpersonatePrivilege 2152 msiexec.exe Token: SeCreateGlobalPrivilege 2152 msiexec.exe Token: SeCreateTokenPrivilege 2152 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 2152 msiexec.exe Token: SeLockMemoryPrivilege 2152 msiexec.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 2152 msiexec.exe 2152 msiexec.exe 2160 MuseScore4.exe 2160 MuseScore4.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2160 MuseScore4.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2160 MuseScore4.exe - Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3948 wrote to memory of 4520 3948 msiexec.exe 100 PID 3948 wrote to memory of 388 3948 msiexec.exe 104 PID 4520 wrote to memory of 2160 4520 MsiExec.exe 108 PID 2160 wrote to memory of 4348 2160 MuseScore4.exe 109 - Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I C:\Users\Admin\AppData\Local\Temp\MuseScore-Studio-4.7.4.260706075-x86_64.msi1⤵
- Badlisted process makes network request
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2152
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3948 -
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 244120E14762CB6D2DE683FBA6439E16 C2⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4520 -
C:\Program Files\MuseScore 4\bin\MuseScore4.exe"C:\Program Files\MuseScore 4\bin\MuseScore4.exe"3⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2160 -
C:\Program Files\MuseScore 4\bin\crashpad_handler.exe"C:/Program Files/MuseScore 4/bin/crashpad_handler.exe" --no-rate-limit --no-upload-gzip --database=C:/Users/Admin/AppData/Local/MuseScore/MuseScore4/logs/dumps --metrics-dir=C:/Users/Admin/AppData/Local/MuseScore/MuseScore4/logs/dumps --url=https://sentry.musescore.com/api/4/minidump/?sentry_key=013ac5ec0341c7289578bffd695a39a5 --annotation=sentry[release]=4.7.4.260706075 --initial-client-data=0x5fc,0x600,0x604,0x5f8,0x608,0x7ff7d8c96320,0x7ff7d8c96338,0x7ff7d8c963504⤵
- Executes dropped EXE
PID:4348
-
-
-
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:22⤵PID:388
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
PID:2992
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e59b8f7.rbs
- Size 546KB
- SHA256 9642c0900c40f76da2c2033f9a56d3e2b78084bd863d5c78ba6c84058f9b9981
- MD5 dd205bad572da3e819da7b3bae0f8c7b
- SHA1 ba2229a4ce6b77092536641eab989406625b2e57
- SHA512 d127988dfdb8283c2a45299042250db74591e0dd0e76a12a9d3033ca194ec70d2742edb693baff7b5c2840e78a77f7f71f1a9cc9a3c0298943fdab18decc4b90
- SSDEEP 3072:jEhON58CFTwMSsGhR/tkPxh/pbuFx8uEnWni14yT9TJ4P3rEL:jEwNnFT3SJhptkPxhpKxNEnWnt7PAL
- TLSH T12FC4D2784D53D3E5F31628F19390B608574C4A1EA78D953F6B9CEF1FECC9980A2E6884
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Core.dll
- Size 9.8MB
- SHA256 b98eea394a95563879b614dbd4432ce074b0fceeb154c3bae252f4e7a9376a40
- MD5 8119eae4c693c51b6760094df8515a9c
- SHA1 f7195e76416b8242c8d087a60f4ec9f9290672d6
- SHA512 0a7a795ea6d781ed53609b696ab98f7789b993052697f991eef1c9d756d924a1b8a829d7fe9c0dd9e8f3ff6858cdfd3ed15d872c1c1e885b1cd270b031b2882b
- SSDEEP 98304:4VLKyLebAofeVMKFdu9CwJsv6t6mJMSKgVcC/3c/:WWPBSMKFdu9CwJsv6t6mSStZ/3u
- TLSH T1E4A6390766FA0011FAFBDA34DAB75112DBB27C466B3496DF025861185E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Core5Compat.dll
- Size 855KB
- SHA256 9238290d153c279db5f9fa38400b45666dad7108ec81062c2c7c8849070f9daf
- MD5 a5853984241bfa724baabf287d4f928d
- SHA1 646cb867d318404d510cbc81bf194edcf8782e23
- SHA512 7d9b47a06d6cbdca40a57c2096e7e7cd5ed4f35b130694b21bc81654981d1dc849502b2cd7a40b21bf98314c31fc478ae2134dedb2088b1ad6080640f5c6e42f
- SSDEEP 12288:r2kYPoKBw7JOlfDoeNLyPGE/4717VKIxBDPzHkSrGGEfvrfXkp4OH7L:GoQkOlfDofG7VRDPTwXflO/
- TLSH T11815BE7772A80956F52BC03DCEA3A913D7B73016536286EFA66087077E63BF1297C211
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Gui.dll
- Size 9.1MB
- SHA256 28ca8b9e7d3d1c4e3cfafd6fe63877a05cf10202a240134a11f98384f01c9e37
- MD5 bf3ef92f9e109770a7effc3f623caa17
- SHA1 3dca2e5b640731c88921b26380c3af740b9a9b44
- SHA512 20ed40767f103a393e6ec7777d20bf484ccff1f08fbb698dc8d9b856e169d6cc31c2fe69893529d75feed6da5b6f82bc21a1a6b69a53096d0efd386daf1b29a2
- SSDEEP 98304:n17B8zKQ16be6OAZl5XWv7StQiYBNXcqQYOPTmeL:36ie6ZZTdtQiYBNMVPTmE
- TLSH T192A68D57A2A911D8D57BD13CCB9B9517EBB2701503629BDB02A0CA152F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Network.dll
- Size 1.7MB
- SHA256 905e1ce3947fadaad566b6deffe345daf7f6efbc57207ea7fcdbfa77669e3de6
- MD5 db8f3337ef680c805b0c49504cea7ab2
- SHA1 9348cfb2f237047c638b231faf7714ac97e919e3
- SHA512 aaa0cda6c228b54a96c9c6d5b24f1345609f61627788f0e67329d68d515cb38393691aa78e140d1da34dcea1ee4a4ddf6074c31a199d6239ea2b34898ddc0f24
- SSDEEP 12288:D9onO5TLgx8PlBYyrw3hutJJ5za2rJq9OeBEd4yhexi9TQ75L3EXpX1mil:+83gxGmFRiJJ51rJq9OvdDhOi+75mXIM
- TLSH T135856B57A3A441D6D46ED13DCB4B8A0BF772700483669BDF02658A152F73BE22B7E360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6NetworkAuth.dll
- Size 285KB
- SHA256 2b2cee4bf6cd28c7c65cadc21089902062ac8c76b74340c7c205e2b5db79a4cd
- MD5 489b1972f4c7b330515b4739de58ad95
- SHA1 077934747efdf78732e1ac4a900ac1d03a091f0e
- SHA512 1f2dc46edea7651a23493bed86154b0f8f87c51a36778fbd3862c87a8e3f2b3add3ec4e779a0b6a346b6da66587f49b98fae7342854ea0381ea28c21150b386b
- SSDEEP 3072:nPntlHGgash+B1RBKQ5NSuxBqcKu215Pdp8CqhwoLW1kJERAXWBJnuo1kIuxmwBe:v/+B5N5Bqcf215PdpToyyiuGux9Bfm
- TLSH T1A1542917A3A20DC2DC2BC179CA5B8613E6B374004752DBEF46658B4A1F677E2BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6OpenGL.dll
- Size 1.9MB
- SHA256 a41b71127d07924ddda67e787e8765ebf60f217817199f1becdd63f3db88847e
- MD5 a29a79ca0a5bd2a88c09b43c9a7f95d3
- SHA1 98ba5b9b7a4493085603c5416419c6f3f397a3c6
- SHA512 35868eca9195b3d8738a8e84e1263d067141ef3823499cda32e8a33902bd7f229bd06d0a57080e8bc1c8138f37d77f1432eb2f455b36927aa6437c28301f1a0a
- SSDEEP 12288:XyA2ngdKBJuEum86y+TjfI1CkX9RDYXKI297FcVlE/LY9QS:QaYum9V/feRzDYucGLY93
- TLSH T19995FFD5624AB622C976E2BE930F057E60F3AD57C3424BC388155B490AB57EE0B7FC06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6PrintSupport.dll
- Size 397KB
- SHA256 73b204c1dc66e7c49c1337fdbe4a4aab378eb31ecfe823ed1b009261b4c3925a
- MD5 5e02f2268005618e3b886aef9a467878
- SHA1 c703959abbf18fb4eca391efa0b8a0bd86371bc3
- SHA512 5ca1160dc5920a4b3ea5268bce2f1ac4ca7a3f05a6ad984927223d27d05fca0bb4a724a942a43925f0ccb01fec7e415a8561fc0cd3b77a022949914dad458548
- SSDEEP 6144:qZNXMVX+hr/8b3Dovv020dRuVWYm3A2Bqa5sGc4sTFPZ4i5oYd3mgvP69zI4Xu5K:2NXC+hrs3O020dRcWY524O
- TLSH T149842987EE650181DD5AD23C8A7B8616D173B0D80363C7CF022E9A09AE6B7E17C7D794
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Qml.dll
- Size 5.1MB
- SHA256 b1cad2aef8936cede67fecdc13c8eb930c77d0b189a1e970d72ab903902e611d
- MD5 6d8f706bda96e72763fa2ef6c56444d6
- SHA1 8dc1a98b2d6fe6182a93150ac3922798858b2b43
- SHA512 e6bf387f7ea3420ace1d54b5ad46869e03c7540f49f4d79c3636c56ae973da25d60b337bb5be68107d31cdea048678e21b214579ab7255d6e59c88cd31239bfa
- SSDEEP 49152:96wWlXdfMOQ9V8kAnNY+QE1NIuEM+7fPA86d/gtzPyXrUckEpqBdyvYaCthN48d+:Ps46ldgaQw/h9yoJ
- TLSH T1E4367C5762E51299C07AD27DCB5B4907DBB3B40503719BEB11A08A5A2F73BF21B7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6QmlMeta.dll
- Size 156KB
- SHA256 6da039d0fd79d978b87d6477d2aa60e6161b7f7f8f2dd66006517fb4656afcbd
- MD5 c94c84e313900b934cd105335571f840
- SHA1 67217938c902d23c0be234514a95abe5237ca2ba
- SHA512 b67a9146691a31daa362fc0d19b76f936c7f9e462f6e26d2e2d1fcaf26aeb601c851ef129290e33cff58493645f8d686d6b15c1decc2d751f96aaf723c08c77c
- SSDEEP 3072:6xEv0LAPquM+kiKqqkIfcWGGA/9Uw9vkWBQ3Oh8SCeTYjulJ:uEv0LAyuM+sNcWG3hhTH
- TLSH T148F3496373A041C7D466C3B9CA8B0A05F7B2B0108762DBDF1255C62A5FA33D23E7D2A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6QmlModels.dll
- Size 963KB
- SHA256 3e4075935cd52710628d559e690391ef0bf03f4484aa47ddf1287c57aa0066a0
- MD5 57005bcb5a14b0c6ae60113eafc24885
- SHA1 80058e82b350bd43c441bcd2322c6cd3b3c988be
- SHA512 3d573cd76a399b03f0bef29cc28b1d7f43d1a383767240a4aded35c7ec4526b722d291ada89ce9447624edda07556fe6db1148d1ccdecf47dd8ebe1c8ee33d3a
- SSDEEP 12288:ysKsNHFA+rpZUnIgE8q3kfGtbqNgI5tuS01Q1bK:ys6+tZgE8GtbZI5tuS01Q4
- TLSH T140257C57F79502C5C8BAC23ECB6B4906EBB3B0481361A7CB126186163FA7BE11B7D354
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6QmlWorkerScript.dll
- Size 74KB
- SHA256 e1ceef21a868e29ddad78624039219676ceff591eb7304c151ff8b5e8bb74c73
- MD5 e5c9e37136d7144d39b6fad92f1e5209
- SHA1 70a08f49daea91bc5e8b7306edccaa9efe873752
- SHA512 1863f8d279197497bbc3efb1a3774c2e8f7db498cebb1c2bde7e49c72b2724fad5472f526610b4ab4d84c772cb00621f4d50416ff3a1882a7e85fd379766b551
- SSDEEP 768:vv/1vDstoSUxbULVxgk24OGCV5h/0slsEalkfAAT6aUPUktV5wt9YzhK2oq9A6zs:9At7Br5pC3SOCpATBAI9YzhK3F697uQ2
- TLSH T11D736C8727A1858AD427D339C6074B2AEA77F0400752EBDF0219C66A3F633C26E7C695
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Quick.dll
- Size 6.2MB
- SHA256 14ab58cbe8aabd2eedad322c361119ff628eb602ea62998a5da1051071aeca7e
- MD5 641242170fc952f7b4e48c7888813581
- SHA1 69f555299b07d66128059e68830b2ec5db387e40
- SHA512 dc48ace81ed89461f06c335f1117e4ed053994e0626ea5344d118c26246f3ff2b4d20afc19729d716de639bf43a2dd67fd65ee2ed8243a37d5bf63463f7e6d58
- SSDEEP 98304:vWmmvFDaQ7Om7p9/78CUAcjIskKjSm2UAX:vWfNDaAOmn/78CUPjIyjSFUE
- TLSH T13B667C1B67E90185C46BE13DC65B4512EAB2B4806352DBCF12718A582FB37E12FFE790
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Svg.dll
- Size 617KB
- SHA256 982a589e52680d7b525da0031eba783d3bbd77e6611cdea5cd276a2b9213f4c9
- MD5 07f4bfaabb00650a39f46072d517554c
- SHA1 75269c10d4eff23559355a0e00b4543d9b9a6328
- SHA512 e01335f2d79fc7b1222645ccf196bc6c138a2e0cd72056455de9a65a62f3b39c89ce43c0cfd3b4b566960c46acc0c2996f360e35c62824bf87ee7137e5fca467
- SSDEEP 6144:Z10fGG/FNHToqobivsTRkcjIfIl3mIRuo2zibhHmCBGyOkOc0CH4x5Yj7Fm3yWZ+:Z10e+NH0xb7rZmIRWWZmCRmc0mx51Gs
- TLSH T173D45C67B3A60785D4AAD13CCB5B8422EBB370440362D7EF41B58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6WebSockets.dll
- Size 213KB
- SHA256 482d6167c35761398691ad709f43381560d998d26ee5d11f2a5efce8cae8f31b
- MD5 97ad77218576aa0cc7d6c53d4292ba26
- SHA1 d1ef5306e23d35d03d242ce7be247bdce4f1e4cc
- SHA512 7074efa1878ea42233cc6ba48c300afea5b533d5b7df60b00c3ce5deab6cf81871c2bd949c9926fd8a8d95c8cb18072edc41fb404b63697710e3fbd077cbeec9
- SSDEEP 3072:o9cco8RonQ4A93dVEKdU0NHNYm6c9UEwdweeeuFs/FP1d2LFQ:1caQ4DutF6cBwuiuq/51dYQ
- TLSH T1A3240813766511C2E976D278CA4B8913F773B00057229BEF42658A392F277E6FE3D290
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\Qt6Widgets.dll
- Size 6.3MB
- SHA256 f383fb6b3f6996efe23327ff607e7298fc47ee76e8b8ef8a65f8d2e0a91707e4
- MD5 10cae5e4a928d4f4c027a2a689916144
- SHA1 b48b2719f4fefdbfece73addc2e3efb5f32bd3da
- SHA512 5e4adcb58564346b38fccc96fb992d9069a9cbc2c5b47c6cd5781abbc718634e14237e219a58210e7e9bfc21a02bd1e35efa8321b5bfc0bdec0322cc8c560e8b
- SSDEEP 98304:JLNqD/uTGvqxgiJaj4mxHJpd9tozE2XJHTY8:5NqDaGvqxgiJajFxHJpd9tozE2XJzr
- TLSH T1C3666B5763EA0185C5AFD13DCB0B8A17E6B2700443229BCB1169CE592F73BE16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\icuuc.dll
- Size 36KB
- SHA256 9e132fc1cae204b3be8d5bc56fa1049d6eb2ae5a9701b84bb2ccd4af812e28b5
- MD5 f3c8d64720dad0bac78a94ebf465efb3
- SHA1 c25e90b5719f31af0b47415f3007197dbe59cf8c
- SHA512 2866783751cf5a3e6bdefa34cdfaae6f1940ab2ab2212bb6b6552acce80c8cc79c8a761eac131bad090c1bac8cc98ca233e4da6a63def26f2066932c3b0e8040
- SSDEEP 768:YCFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mu:J/prGPh7tm8T90
- TLSH T1DBF2D74DC8044F62D3A7EB3F697C392F1922099ABF69FBB8EEB4C99441D520D10B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\msvcp140.dll
- Size 628KB
- SHA256 7c26614e1d733892c2deac7e245ce115504b1d80592dd0a01b08e3e5a55f89ca
- MD5 4796bb351c00d47717906bbee4e20837
- SHA1 480c725faafa25d2274bde6f8791bcd8b525e5e5
- SHA512 2777a9b104f0ac244d90572e02c2f2fb911ce4e8bd9f7b099074d5614c9a7d423c14eb6c46087167e160b6c614d6fbdd9b762b41eb7f023ff66ee65837071db5
- SSDEEP 12288:60hIKSLeXl9vce+YtEd5tFYDIpDv5bKwWKBaXzogmIGq2HZ5D13EXwbkDZmaD4EJ:60VkwDIpsezBbkDZmaDH50NQEKZm+jWA
- TLSH T1E8D42923774D02A0D195F2B9A1C74306E7F1B8464323A3C392EADA6D2F5B3D9677B250
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\msvcp140_1.dll
- Size 34KB
- SHA256 206c931bf90fdad8816de3b5e2ef80b2bcaa9406c89ecc05fe6fddffe251e982
- MD5 d2b43663ed95d09af78bfab3484b1916
- SHA1 52f87dc7563078c0b9f839ecb1f9bea11ad608df
- SHA512 8984cff1c8f6eec407dd4cf7599950f42fc7dc9926e6ed3120cb1a4ab9f4f6ca5b3d040c8451adf2113ecbd4301d21f1ca88c9878618ceb5f3da3b4edce71663
- SSDEEP 384:FtXxBY5SA78zxAXUaWdWcu5gWAJk6St+e2KxaoR9z/bcIH2y4GlN5vEMgYR9ztDh:FtXrAh74RsuJc009zZXdrgE9zRh
- TLSH T157F25BD6A7688442ECA6183482E9CE437C7DB7D60F20A6DB12A2E51C0C937C5FA3595E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\msvcp140_2.dll
- Size 268KB
- SHA256 d50d7883f20d1dc6191768d3746f52dd9cac89c346ffaed5be1f110c2f34a838
- MD5 80d633b41909290fccc9cda534ca7128
- SHA1 72d779fdd27916e918ae4c15323d8c336074dac4
- SHA512 ff594e63fabaae58da7383b57d4d90322e6d2b2da42f99e58e3210931e043f8236cc8dd1f437e3d343da63af660b9299dee46a8d6e8aa27a096e8bdebfabd817
- SSDEEP 6144:m7KX1bsaPn3JrdfsUOEw/tpn76cAYQWO0H:iArNdZ9W9
- TLSH T1A1441615B94A1EBFC8E6E8B085397402FD2229014765C4CB1BC31D5E6B2BBD77EB341A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\platforms\qwindows.dll
- Size 974KB
- SHA256 540211565db496024246cb8a44437212e6b967f3ee7b899e888f41cc556bf041
- MD5 8a905bb23580027f31681253da1af590
- SHA1 25557385212adb726fff539b165aa54eb3875163
- SHA512 ebe78f485a73fe4b57c466fa58153903f261da315d470b50ae233543acd671dd0269ddca355e1a25928259e26301ea6d08fd1f132f595ba5b9985b7170dd5677
- SSDEEP 12288:3EhqYCXtrx8ASfukqEZ8l4382P3Q464RSQivRYtG:3Eh5aOXfukqNl43Nh64z8l
- TLSH T139256C1B63A80255E83AC17ECE5B8713D6B3746903A186DB0161CE197F337E32A3DB59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\vcruntime140.dll
- Size 174KB
- SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
- MD5 07bc2f9c4c1b07e1cc013ca0079b31ac
- SHA1 1098f2a834146995df7a91c78f72f210d8d2d12d
- SHA512 8fd063d61d1c57bfae5ef105b1796c141ef2752dbad17ae79f974c417542c075bc8b4ac12163629a74e43004fd9cf170a76de9d11841b6e5c236f5b47fbbb09b
- SSDEEP 3072:aoq3aLPst/GrhA4gBSnSQ37QwZyeBB0ecbavp7D:aofLPsmBnSQ3VyeBB0ecbaV
- TLSH T1C6048D51B2CC00B2E92B9674CCD69553D6B1B0057B30AADF47A846782F33FF2A63DA15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\bin\vcruntime140_1.dll
- Size 48KB
- SHA256 a7146c08f89fe5b04541ab507cdb59ff7b44534d4ba3c668a426c6450a03434e
- MD5 bbfa92d8173376c972fd58dcf5ca6aaa
- SHA1 b7b4b6e7045caccc0f790e3395e1f514d01f6b2f
- SHA512 f5856e7cb7bc8f40efc276f8e7024db9176052ebd47cd02e799aacde650293992a84a6a4856dd974077e94e688bb4ed67f18c1dfd8357afa8698dd0dfead68d3
- SSDEEP 768:bmiyc1PGhsryS/TAiblJce9z4Snqdlfe9z1Y:2cF8srygDlSaz4Ez1Y
- TLSH T1DA235E8193BC8086E8B798B480EBDF13BD3DB661976192CF1BA1E15C1D537C0D73926A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\combobox-indicator-focused.png
- Size 120B
- SHA256 dda8d0d5444670f0a82f7b7aabf1f771d94d0c418f15be75b120137758932c7a
- MD5 a9d763e92351af2d6d6fb16b17e36490
- SHA1 c45d83865e7c09c8ad6f790fdcb9640eca207a5e
- SHA512 563f33bafd2fa7263eba83b6285b84d47255d9e23fd3c41ec9684b64bf820723631ac8f162765ba36e6f393c00aaeb73f3c38406693a19d7ae13630c42cd53ad
- TLSH T193B02B92E0912824C7084133120CD550A8115448448900302700D431221E10C0050F33
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 167B
- SHA256 6d584df93b6785277a090e3c2d46ebba057d262253dfcebbb81585a9f48658c1
- MD5 5829742e78fdd6cb8f893903fc814778
- SHA1 e2e3a2ebaea56c3664004e7c5758967a04862d36
- SHA512 7e4ccedbf24842f9f00123415c16e4858ef70b76783358601e5024d22faabe128ac78b314f9846af8c79818363c2f64ab77902e6ee67e2ea802ff76bfc1e9b72
- TLSH T151C08CCA62B15C698EC8456B938620A49CC40C5D28218A638286767C5DB232AA983783
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 177B
- SHA256 340dfb8f5d90ee5d986eb4b3570a2b3481ca50048a1a5eb38144e13a598d9bc9
- MD5 7a6d8bc2b7b89f67d0071fd478f03c56
- SHA1 debb609ccbf690c74690b13c424530b5fb6e1293
- SHA512 08939949b87639243e0dff61be03fedb314b76429c93248face3d8d159c3ba925b39405bfb88a70edec038312d0773cf8b770f9aab410df7b169be8ed8d52378
- TLSH T176C08CA763A09E32DE45A8F7C34A184584395D10ABA2029F8068B46F1A34192DA8AA63
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 698B
- SHA256 caf54e636473e19db45d86b01fb79142bf28e916030ec3b60272a14643313460
- MD5 bac5eff99d83f1b5c73fde4cd05c9db9
- SHA1 4824a9748cce1bf329558dc887bac4a509d197b5
- SHA512 8c46a4bd86b8f5e8cc4634b6af3d4f81a5dfe7f9462fcaf6aabc818fb085cb3724508d926c84a0243c69af585c1bf9ad95e02c2ed25df38ba2107815467a18d6
- TLSH T1D90123D7505614D907412E6E436C54204DB80E1C7179B2176288F3FC497591C3CEC0AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 935B
- SHA256 60f757e557455aef99ad54ae55c3e8d18347fdef0bdc5af176055e154e7b8f38
- MD5 2f2fb4bb6e72e89435b356a6cf44c81e
- SHA1 11f3ee2d3f0cd0dd9002b33399a714d0721abf56
- SHA512 ac4bffda40907144446200808994e35c1a8512d95f3c71fc7bf6ccb41853e7dd44f63424ae1fb592a54677fb6bb3e778335541fdc6f0720b0f990cf72af93128
- TLSH T1B91163DB3918BCD685990A2F156A3211917A5E1D2025DB23A15CB8BB0F70F88A08E88A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\rangeslider-first-handle.png
- Size 493B
- SHA256 4d5d16a9ef3db072309d531e11057076bfa7b03f4f47f6bd8a7d89d1fe0bd39b
- MD5 9848e43810261e6570a4cf83c3752b4c
- SHA1 6c228608e331b9fa2cf9a44e74c7507c19af7d63
- SHA512 4fa4df1cb5e08f14d1e990280e834fface6270ed637ce1cdb1799f1e568e78be9aa7f440af1d2002c5f50e2f22a96199e1fea6d957d996d09cd05e0b2911801f
- TLSH T1BFF0A357321FEC47C904D6E888A84196EA2A7D97354A73B72A267CDC093EFD8C5C9143
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 1KB
- SHA256 f38227a12d179e016f9b2696d3dc8ec4c6c96c275cfccbe839dd5ba0c51d9b26
- MD5 5eb1ce92eb912af9509c4277272943b5
- SHA1 77d4586a33e99ab715a628af2ba6adac2aa7e39d
- SHA512 b1865a0eb9fa04138ec132cefc0008f70f5f181c39e4125b694079f23feaee70c92bdc58f9f5d243cba9298785a3bd2eed35638ae4c322b2e1e0303b36b47b7d
- TLSH T1B9210AC634AE983370B15B9EA0CEC196FE862CF3092405A483DD78EA577BF8604681C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 875B
- SHA256 6001207502a85ce95a405c9100e575994dab92e04fd28c1c66eefc69c52dc3ad
- MD5 775918baa819c1f84b2d51392985de66
- SHA1 1dc21dc416d21177ccd58bdbf93596cb5ecc997a
- SHA512 98d4cabd4361dc4e2226e0a2911c918a52e51cd8ce67348d0996dac0607922776b0fc72d6a527e6d46f8c12e71c606d6fa4634db9bbd18cfcc3a4a26d317f42f
- TLSH T1B5114652DA5F1477A9B0300895DD01D0DA611E4035693AF7858A7EE94036ED71C9C3A7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\slider-handle-pressed.png
- Size 442B
- SHA256 e04fbcc696a2ea2a326a1b7bc57f25a0e1b33091e588889da5a9d7015c595022
- MD5 34b81abeeef2a5fcceb972f1e3cf2997
- SHA1 e262ba643aace4b66c93842989135209a7b8df85
- SHA512 e575c06e29890e63c6898b31754b419eeb73ff87d7d71d0787a8fcc3d2a30c82cdd83eb94139d9f0f25d9001da9e030d7c06ba1ea2392c191d6cd9e2112fe4f7
- TLSH T1E3F0ABDA6B9F28AA8409581A10A891228C2C1C00BC20FFCB6789B46C1570E9682C410B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 683B
- SHA256 349cb567bded99187024758d0cb9cda60b55227a4d7fe1763f7f41753f692d7c
- MD5 d0e50dd9b89b841d6ef1cd78d2e3d1f6
- SHA1 9018ef9ff9e0f1946be96597b5f344715efaa773
- SHA512 8d09c2d0f369a673c8d9b7092b46b0ad68320a217fd4936133727331e6125ae0129c4986c3503cccca8246058ff7b07e70cb30456f480c6950490fcaa87f4d0d
- TLSH T1B50162FB16C32956B604D0E19850B80C05397F26BE520DAF5538FD2E8472D0FE782A07
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 1KB
- SHA256 4c9186092eabc6788e704b074423e009cd3b80a8d5de0bb1ada6f7599f91bb9c
- MD5 16464a005372e7a0092f1721f96a3fb0
- SHA1 900e4a0b3744bd390f89592e236bc7e2358b16d1
- SHA512 1f854ecd6dc27978a54b4ab507c662eea0c2ad4209306b0c568b4ee8a4b2c2d37d5304eb91f180eff43db9d1ba9e1310c72a76c41312fd15de0dd3fede20b67a
- TLSH T1E0218683B5705D2B5971FE17D4284544AED18EAC3F6400EAD1B6312E3679941C35B33D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-background-up-pressed.png
- Size 317B
- SHA256 237ff3516492b63b2ed41562ea6e3b983f277a2375f12d427a0a7769cec15043
- MD5 d0b3581b97087f79fa2e265737f44eb1
- SHA1 34add1ba94fc3b95c7335ebd9a821487bfd6ca00
- SHA512 68125745776591cc7c9869f938c42c2b19021027aa0c1c08069e4b9cb9c4425389e88134b39558832051ad64762966642c9c07c8d71ff0979b3b5e34f2e8cf64
- TLSH T104E02BF68AD0192FC6CE8FF706680716D9212CEAB813B0145111F4191C30B0EE0DAA05
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 92B
- SHA256 4a812392a115a37694707507b84dc3c789fb3880c298cce2a7d31f1d837f601f
- MD5 c710613ae2b8f9e620c1663ebb8a8de5
- SHA1 fce48edc3b6183fedf5fc3ff29c68c7afcaea290
- SHA512 c35dc15a92d3df91ba6b0a2c1458b5841f4df5dcf8706566ebd7e72e609b96e7f09c8141cd099a805234318d127e147c21cb58601781b151f6bbdf61a44ab67a
- TLSH T108B012EB56400E28C0A2013B673A8040C4B072078A310104090584305C125440544352
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-down-background.png
- Size 83B
- SHA256 8285acc7fe450d3a72eed1432566f7aa90af7ee33a154aa7402dc707018979b7
- MD5 abd4a5f439d8f789c9f460945c09fefd
- SHA1 dad89434297a1fcb7baa221f8c924fe1e0df9cfc
- SHA512 d73432e7014978d01ee440de8144ec6d9d62cbc3c8e040de94dc2b7c2aac4c62d5582ac3dea1c1619d7e4bb9582af8a96cdf836aa292149ae3b1bef74f5dfdf0
- TLSH T1D9A012E28F4068A8D09502778526D070C876010100B30008901A8230B540A0010C4302
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-down-icon-hovered.png
- Size 118B
- SHA256 33f189b55282b1a6d904fd2424cdc051fbd3af17b942899942fc6daf46280146
- MD5 ed93c06f00fc6df9f9a60e049ee927df
- SHA1 35443a7419b91d784a93e7e89b686a4d6577dffd
- SHA512 d2b1cd6c0f6f416dd96ee9719357d088355bd9cfdb328ebc1b96d6273cfe4652ccc37e8f66d3b654f3be4b168e881b7b2f6fd8260ca2a115fb15090af2bd8723
- TLSH T16AB09BC5D15159FCCD41317B94491220D9356D2539594FD9551A553714D5045F14130D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 211B
- SHA256 d712f165711bf5e0f265607705a4e83452c8fcbc59e106238663664f791f28e5
- MD5 26568e7446e134efd965b6b5aa29c8d9
- SHA1 12eb2e9d03ea621dec674ba3c6bfbfc80656dbeb
- SHA512 29d11aa4bdf62dd609b7753a91503d50d589ca6c12761ad4d033f55d746a0f27b582a0737c319f0f5cfc1e2a213084195f81776ca4e1c91546f1b73dfe1741e5
- TLSH T1B3D012F293403C1E89D906B5529C4545C86A4E1D9E3252626418B42C7A3698481F8762
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 164B
- SHA256 e2ee0ed4ccf6d0e468b02b83598f0487cc3167d508c6e08e6490b925d8305474
- MD5 84b1c5af5460f1468c4cd17bfb7d7ffc
- SHA1 a9c6259103be4cde24e9a85e5ebd7f663ba3db97
- SHA512 a7394e01336bee9993ee2603bd7abcd56d86e815e502fab58d52311e998ffa512d3dba9a99bfb9dc7cf935d67b779059ab1b1baf53a6c9ec63c4b05cbdd5ac82
- TLSH T16AC080E01EB7597BF3040177655AD130ADB6471459195614C1DD9D3D984910EC055513
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 101B
- SHA256 02530ad19a6a050f2813c5d801a9fe75c9b0fbf4508491c6abb1bbdb72b28734
- MD5 27d3ae547e7e8ff9c88e8ca58a201f25
- SHA1 17a828d4ec352b0ae8b6f9aa7623baaa4a920c74
- SHA512 3f55067d9369c367a0da811f61369ab11e05026258fd80a546365b7cac776869e0bf222b79b75fcc7b0deb881e340271e084bd675efb51dd1473a510cf288dff
- TLSH T139B012D793754C3CC33481228B1C8113CB56073CE019415306499C650AB1216C3D8786
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-up-icon-down-pressed.png
- Size 118B
- SHA256 7109a067ad00c3cdd31365c76ea8e24264910fe9b1350a292fc00dd7d2b97e5b
- MD5 199bb6520ab013968e74e85504c8544c
- SHA1 b1ebd8627cd955e44261b6f457f0229e17ab4579
- SHA512 543501c68c73ffb92379cf0eaf29e3c9cc9c950bf158a23afd49546df25ba55aa0a85abc4b6b822923bf69558badeb2ac822541530c40829faf7064f29e4eb3d
- TLSH T1F0B09BC16165793DCB16517E9605201485755B6821851768510BF4751417055D094745
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 210B
- SHA256 f85b2a74823a54b1d904d44b638204ae78301a91eabacfc1dc7f07508c384057
- MD5 a53be3f2aac6ceb758f6d7669f5d3c1f
- SHA1 86f8e6e4553dbebcc5048f5ec922da300ecb76a8
- SHA512 4b58e4c8465df0dec6e022a1f91ea481ec50ae97e9ab88deaef59fd1e42e6e0030bf80b597b2c86f2a6d53b7b7b27547a778fb9e53cc225dc3f54f5c97c0fd12
- TLSH T198D012B5B209ADBF869B0753426C8209CC014D280A461156A406722D963140E9096A86
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 150B
- SHA256 50e45c5bc1f41a265ccdb7106571d751b4a875577d19c5409009fcdd0e82cfc1
- MD5 48ca0e19d6ae84a966cf0a8dd4c1ff47
- SHA1 97cfdbdd03481d1b6ae8283a7bdbbdd70d2347f6
- SHA512 b60068add983d8a3e259feb0734a0d3060bace984d5693da01d3340c64949b7662956605cee90841cb0438e22bbadb9ee9aa5539d76314946e036fff22eb95c0
- TLSH T1A7C08CE26A8BB4A4A88A022660F64320D066842482D18089A954F1F841877495847A03
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\combobox-indicator-disabled.png
- Size 125B
- SHA256 0941ec5da06f1cafe91004c1b035997609ab1eef1f39a9ac5f0bb558dd8f93eb
- MD5 a189060065cfef46d1bc5a7150b390e5
- SHA1 73f7375aa440ceec13bb16ee7416f1033e6e4400
- SHA512 393cf37bbb82c5b3b5e91f989ef84bab4ca65c907d5bf4b242f0e75a056677fb5cdd55695881f70730d950adac90712e9b6074ba3824f9a42d0aca0a00840c0e
- TLSH T1F4B02BD22230287DCF4D0333490B80008D73323D454101018D05886F251DB0500DCD32
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 171B
- SHA256 840b43337d232f04aed0b3209a43a0b25bb5f4bb53920620c7e0bcc155743daa
- MD5 c5bf70b32da28a72b9907db3192fdc55
- SHA1 6fd954665a546c517567fc708645c02a33fd3f46
- SHA512 5d7c0924eee3f2b0be4f1cb71a118905131362f5871c2973bde24ba305739db51f541f491421f88beae78f586a3a1b4fee9fbd25c5e2527f6c159fc1b7c5ee35
- TLSH T176C08CE2A220AEE5C1CE003E4289210289EA8D1C3E274102F645D435AAE110E46C679F
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 184B
- SHA256 b74cf0894a7b42aae0630586e321e3cea282724a16e1ed40322cb39014c0041f
- MD5 908266ce67b93472e143907653199c82
- SHA1 bba4cf1937a44620899437018fd8b5d6409efd05
- SHA512 7e33945d29a4f6e717e22c5eb32ab8ff9ad7900842bb08112f5ae2212fe8f01be38964cf60e1d5fa643bf998c46d478038f88e1c62c62b64c1f8bfdbd994bd34
- TLSH T170C080C7F7208DF4D598D53DA51C710949161914D936026F15E5D81D4513270855D545
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\rangeslider-first-handle-disabled.png
- Size 343B
- SHA256 d0f2f23ce73f6559fa3a61f4e7c068875e321dc6aca3a0eb6a423ae94054b92a
- MD5 c193c11c9827a76d682c215d8fc81a2e
- SHA1 9f0b8a87122e7ff62cc3f62a713df9de12778cc5
- SHA512 ec4562cef1a338ed11a6cb9a214698515ff4c02d3ff7b0d7381c7480c63e52ddb50b21059b81fcf982134e210f4ce156306180506594648c5a7dc96726cd90fd
- TLSH T16CE07DB392463C1AC660AD7680185A60D329035A4CA5240F0231A99639F226B90D4D67
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 590B
- SHA256 5d2c7b18155db2f3583896fde0addccc481a816a9b36531b201bc5e31bbb35ab
- MD5 698ffb59b04034eb202468c06c4f0f2b
- SHA1 c4869724b5182e9df7da9712731d0cf83d2655fc
- SHA512 056e014b701556c9af02e53fb268b53a5a2867bbb27d02072ebdfc1424d3bda4df28432d35e9137245d79037788fbfd63eca76ccfa5723adf41fe2a07b12bfb7
- TLSH T144F0C0368B61EA28CE0904B15F148DA18E10945DDA09C23D0DA6EBC99906EBEC58217A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 1KB
- SHA256 34a47dc79f253f27a7757d747f3402559294fe080d1409890ffaeaad1a3d7b1e
- MD5 e9d1a856239067967890d74edd779f93
- SHA1 de390dcf922397ffdb8c1a0afb7ee915266fd404
- SHA512 f2ba5e6558516c3dcde9ae20c954b2ef46cc118934ddb07153924b9f0bf2fbb71aa2508ef300653806d35eb2a6a4a9179de8ca52808558466238f8fe1ca35a6d
- TLSH T1AE31C99982C89C62CC7D4DF30AE814EA1F73154ABD742D65499218D2093B2B95B94A44
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 780B
- SHA256 7afea33b4b6109fccad617fc05ba2ffc422bc60b02e805303e129ca9954953a1
- MD5 f0522340c01a7fe94c2774d6664674ad
- SHA1 95fc0e863573a37749d5c8c32461386d2f0e2b6b
- SHA512 d9bd3fe11d905090ea0088517b80f84cb78c608aff7366606dac0a7820d2a0945de1a219d2e94c1b959ea6131539e26096883e5f41579027dd033cd07cca7631
- TLSH T16E01E911C165A4B9CC7C007A5BD43C9075B33048D83BC129931A037431D32D28F411B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\slider-handle.png
- Size 513B
- SHA256 3bd1cba7b0517257de59ea097e188ebaa706b7bbfca338a29ddbec2d944c5567
- MD5 320ec974cd5352b0e0ece1548d6f658e
- SHA1 b19afe19067e1f976c34848ed9d760f68e16afbb
- SHA512 40dece1f2ec1640307a315eb6b761f2b01cd2b208c0c1a87c096778bf8d142e826d51f2cbe4351a0048603c875e364332254ef100cbe5b7b106db5a643f0b6ad
- TLSH T102F0758442C4ECB4CF87C5DD508C6924D83E5BDC8D8021A4CE504C126BC72F153E8CB3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 1KB
- SHA256 caf1dc9e14b96d649fbc00a5210fbd0e209fee56c724ba746ea7a22edf73d5ac
- MD5 c47a860f4d6d50af02b754ecb49956ba
- SHA1 091ff88d16d313ccdec4546372153ce9e4533cae
- SHA512 a69618d04414314b026d81b6d957991df794a1e1257ab54e5fae5ab872933df77163ae148e70baf15abc847d8dd91fe3803d1242b8ba7391d93d9fd13ea616d4
- TLSH T18711252F853B3DB5C1E2057B598E56449C3746ACFA610E51054FE96A9D353A110C3A94
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 992B
- SHA256 9b1916e06dd0605a1cb61052de50cda49723e08f280dfce484b8b06d54cb1a17
- MD5 1d1c5a016cfd3ea6e3a2057599da0380
- SHA1 80023655baecfc69242efd3dc53c680b681f14a9
- SHA512 7d7165b0ab589e51fac7828300a9731688d0b50e69fe9aa366f364a5e98c14d89e62418cb8a4e9be63271f95debcb09ff4b7e2781c7c8dc5bc7d90eb54f13957
- TLSH T11D1165BF74F974AFDDA49771109818711B66D609255E4C0B930908BCC0F10885554C6B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-background.png
- Size 438B
- SHA256 b690ff71125077a35907ee9df97bb986fbebb2ee82b1f443d86e25fd15738204
- MD5 59b236bbfcf80799730a41eb5db6e0d9
- SHA1 db0c6bac65a9cc0f8717447e06e16c92ca0408c6
- SHA512 14b8f4d94c53a23850d5f8414617e9cc6cab23a03f82d0d3f1f17c6e99c5f3a826cc3a4a4f3e448d7cc92a148dbde4eb659efe63d8121049f7d2f16b01938068
- TLSH T115F0FADCC450ACBCF15C743148D444782D760A9FC97941196107AC3C5C3530E0EDBD42
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 1KB
- SHA256 ac3911723fbc5dbd7831c4049036f4f9d5b290a52164143d9e4846fc3fa5ceb0
- MD5 9b74f84a472f3c247473daa320dc7e1a
- SHA1 e9a327d1850b175610700f50bcdba9eaf59d13e8
- SHA512 81b33dadb7213e8a3fb75e69b20e44b36432567aa6915cc4066b12b2ef4e9b094b50f994c48131534b1d416e1a04c9d040c23fac9f4aaab2a5692d98da920484
- TLSH T16731F6EA40215EEAE05F35F960DD08F8A851C03C93517012871FB8786D9A26C299315C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 180B
- SHA256 6fd283b8c8f1c96a7b0084a475dc0915cc7db16c938858b6c2fc42a2c286107a
- MD5 4cb9524e2fd47071b240da4bd839dbf0
- SHA1 6a2e10e02b4d5544159ad40a714c6b66508b7ffc
- SHA512 c093ed39741b06489928c7a3b60c812325403d6d5daf6aeba5dbb739e52d02607679293b41c8911bebb56c8949572373fb5862c8ce36a01b933af23d5d93467c
- TLSH T1D8C0C0F893C3F8F8C9C84531754B900CFF2E1150E300301560C4903C3ED1709214D382
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 215B
- SHA256 bfdd4f412de35ced17a26b6090b41befbf11e97578a244798a475c35f1b81685
- MD5 f5c20c701ba0afaef155867a3259978f
- SHA1 bd78c42b1fbf4f7ca6ec8415e20358b09b5913d1
- SHA512 a7f553839456af8dcb8dd17ee63011548c0c015756c186c6feba293588ebe7523b8a60a043ae08feb17547b84dd69e5d014c67b79de2b9afcd1a2336eb9fb183
- TLSH T150D080DBFFD47D28D50301F7C15841EDCCE2473D29076A52D1106C395D15A0E8BC2781
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-down-icon.png
- Size 138B
- SHA256 6291f9c78c77f1fb89dd0b43c51daa98c2ab6c98ca737c2ef1f61f1f201b4514
- MD5 432942b96cec036996b48617c5b38d4a
- SHA1 c783d444d450193cbba5de874ae323fc7395a29f
- SHA512 76d935f697e31f4521c0bfd281931bd9da0b7b1aae75806a3a5fb7c8f920bb80381fdfc988aebe2564c6cfbf07fb25a055ba69975003f79a0e72fe2999cfb9ff
- TLSH T118C02BC033D85DB48E02C37B535FB6815C2C71CC10AC204492087F726D71410E4C43C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-up-icon-down-pressed.png
- Size 131B
- SHA256 95bc4afbc55494f30ec3553ae051c73b535e9aad45426eb373cb788f25f88caa
- MD5 3340595b829e7ceebc4997ce038e90e9
- SHA1 921e0225ba2ed03be7257fa2b0ae0f958a4a1d5e
- SHA512 ef0b38ebe3b48a3e2808477c5947d44aceed6bfd238dc3cd72814c9ad664113e0b78bce8163bfa517eaaab631696b3c2844abadbb075af4aa1dad259a9e83d21
- TLSH T18DC02B83002CAC38CF4850B74342024CE6701AF011A8412F0013D0310B115ED8048709
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 206B
- SHA256 9bef876bbd6193e05e5e0ad50706ee454d1ea71da782a6f9e9bf8e5e71bb920d
- MD5 10dafc29a0983b6524f168083824daf8
- SHA1 2f5197f1e9f10ba3c9a1b4c7a1c0aec5e905bb96
- SHA512 5142031c3627f6fb4e99ec899f66e918e55b714dbeb0e4ba46be4926b0161541ce1b29153b26e98cc170875b34cb238d461b82158d50586b14e8d4eac2ca5097
- TLSH T1CED0C0C21314EF91D151443BB07E010A82203C18D44BCE0424A0A40F48F9D80EDC4692
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 164B
- SHA256 d5a68925a3626dabc5a773663cd0134ae03c908c0c8adb4381578078c3fc056e
- MD5 42fd9607554573669c87044ee3472156
- SHA1 ef6a403c0581dbc7ce08eda9f1f69152242433cc
- SHA512 4f974de0e694ed5761e318fe52f2b3112cc33b86562dd374c607047e47f31b9cccd1ed1cc743492c3042289cdb948ea0865c027cd8c77056f6232942931288df
- TLSH T176C02BEE329C7C34C314153311C59110C531A6DC6082C70B044980321DE204FC1C23D2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\qml\QtQuick\Controls\plugins.qmltypes
- Size 215B
- SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
- MD5 2006d4b7d0da455aa4c7414653c0018a
- SHA1 6685b8360b97799aa4d6b18789bf84a343e9e891
- SHA512 703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84
- TLSH T18ED02352CEECF6A313451C16C44C47E72E53D1544731AD10F05401ED714771C36ABBC5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\templates\02-Choral\03-SATB_+_Piano\audiosettings.json
- Size 3KB
- SHA256 a128d59f809327ae396f37c60888a6b93347603584f9246e39e33fc9478a5742
- MD5 31d84d097e1386f6cb76da3663149f19
- SHA1 588c66425a7ff583b059ae7adfd6f0aab1897482
- SHA512 5cb49691ce0b2a7e2445b45e6bea0085603f959f2f00d581d3cf2dc2f279462412674d6fc1d477100e926a8a613836ca0648538e202f6f2c5c08b3250c75fffc
- TLSH T14551682AC5A46CAFC5762379E9FA8302F914433F60110D47BDBC529C5F73532A085F9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\templates\02-Choral\04-SATB_Closed_Score\viewsettings.json
- Size 60B
- SHA256 17dc2f059786a40b21a4f3375d5a528ecb6b4d897a3d67b7242fec5e7a4d89f4
- MD5 4676645873ac45dddb7aa7fcad09e99c
- SHA1 20435d92a4e1f430926ede7ad9bb0617cae275ef
- SHA512 4e4bff01af5ad83bd731b6fde9f2b8633ae52250dc3e89fd7cf71bda478dcb58645611034e9723573b50e9c84393cdd040c63ce933157e38ceb52292a9039a51
- TLSH T173A00259C4150A82057A972579250500E833509318000250785D015C0F785322105E15
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\templates\02-Choral\11-Liturgical_Unmetrical_+_Organ\audiosettings.json
- Size 1KB
- SHA256 e2f263aefdfe1713eead1202090821273b6db29d546c452c83cef06c125e52a9
- MD5 6ccf513e4cd4cf25ce2c56379fb5d126
- SHA1 15125b430176e8ce8e16ba006888192cf31c2587
- SHA512 a3c30b08d36cb0e4da5110e4942f563badc9ade8c03312a4ca53beddbf6a20204ea9cd3d6f44af1f04717511e1e9f017276cfb5cb953fbe9510afeb1bc33b881
- TLSH T19221532AC5A42CAFC5762379E9FA8302FA14433F50110D47BEBC529C5F33532A085F8A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\templates\03-Chamber_Music\01-String_Quartet\audiosettings.json
- Size 2KB
- SHA256 5391d6d5bb47a683349bbc902539b2e323ff053a9214f184616d80145833c226
- MD5 32ee7f25a860404b6222436d7c2a86a9
- SHA1 3445deeb1a8f537b27bc128da31e9b5470c6e0c7
- SHA512 3a649d4716e9f5123bdec2e5d7b37d98c3c39f0cba8af8de5a85d190b820543ad990fbb3e830d955f471c446165a54d59af66c96d713b5bad119d0f9ab85cc16
- TLSH T16251672AC5A46CAFC5762379E9FA8302F914433F50110D47BEBC529C5F73532A085F9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\templates\03-Chamber_Music\06-Brass_Quintet\score_style.mss
- Size 62KB
- SHA256 bef0c30703a82a7927c74351686ecad40ed94377df18191fca833be2ac24a8cb
- MD5 308021525108e3fb7eb0561198ece205
- SHA1 6878113c7596ff4f993c3fb2348af2da590a0d71
- SHA512 c4eedad77490c1ae5340433324541ed64c1467e2e3305ece9eb4273195569f6939eb521c23f70b994a8f4c7487d81aab12d6116c30a2fb29a98e5cc988f0fc13
- SSDEEP 384:Y9Ju4cgmAluOgqQEvTKdrWlwi76w1EsT/ueeddwqFON:Y9JGgmmuzqQEvTKdrKV0ddwX
- TLSH T11753206866CB1D2B4337618859704AC9CEE340837957A4D8779BA63F4FB245A0EF37B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\MuseScore 4\templates\05-Jazz\01-Jazz_Lead_Sheet\audiosettings.json
- Size 765B
- SHA256 7bf977b380313f47adb200b660a5856703e513e6df482fdabb7a2fc082cf60d3
- MD5 d60e23b3c2573ca864a4ce70b43ce62d
- SHA1 e1b40f7f8128089097c875b6addb87a203292d79
- SHA512 720d76ace4601781e6268dfad8bf12b03a4a264698bc0a45885639e60d34b8e7cb788bce6c71b6fb4d8ea1cb10265653e798dce98ffcc7383bd4898f2c6b6b1c
- TLSH T11001F22AC5A41CAF86B62779E5F98303FA58533B50110D47BEBC529C5F33532A085F9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\MuseScore 4\templates\07-Band_and_Percussion\07-Large_Pit_Percussion\audiosettings.json
- Size 15KB
- SHA256 8582e311982601dbbd629a26b6365a5dfdae0926c36848bbeb5ae45a78046cc4
- MD5 8072ec2387199002038fdc94fb58a3a1
- SHA1 451f3dbf916d64f5dbf174e0a97f45d49367d78f
- SHA512 442c8161ffecbba0e264d51fdd83a4bbe97f4578e3f5b5051dfb52baf2c55942017beab20d5b94b156c98d3afb5711654142e18bbedd76ae8b0099b6a3062c9b
- SSDEEP 96:1kVMj1VMjoVMjTVMjeVMjhVMjEVMj/VMj6VMjtVMjgVMjuVMjwVMjKaVMjmVMj1m:u
- TLSH T142627A2AC5A86CAFC5762379E9FA8302F914433F60150D47BDBC529C1F73532A085F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1D3A6ADE28D2362383293C423AFF660E
- Size 751B
- SHA256 30d106e81493ae4e768b936bf2068b8518c1e29ecb4c3e182f224bfad4ec0a9b
- MD5 993169f637692cf181a5065bb621ca7e
- SHA1 5f9140a2ebb7895ca9e9114fd15c96f96961b177
- SHA512 b039cd7eb1857052f53d1195f9f73fb4206518191e3b596ae7b63f8071998ab2d9b17837c070b8fff6bfd7d7f4bee92e81901f36af65acadcaf49a2489ea2efe
- TLSH T13401654AAE548383E78455CB55C0DD666C34A8B5A6C310AE3432C08B1663FACFF6E06D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3AA0DCD5A74331FBD6F344550EC48B87_77FF0447562981375BDA784891C6A42C
- Size 638B
- SHA256 b6f3bb5380fd97ee47622793d96bfee333848d45f7ee5b271b225d76ea6b47c1
- MD5 01ab8f126cf12ec4b5852c0e9bad4d4f
- SHA1 c3c04f3df3c82c7e18f4c286acfa363f543780dd
- SHA512 b8744f1c06994aafeed0b8bcba4307b9684ca8e020e28cd99b3e4c14f5908b27ac50fb8e938a407e09d8313633f66e877cbdf3345ce9984fb821a5bc29f5373d
- TLSH T10FF0620A9F342D802AA3448309D4702811D0B1DA2ED2E0231E1AD60B2EB6720F74FA1E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
- Size 1KB
- SHA256 6a3693404662b145d7ec75dcc6c9833a2a25e2812e0dd944fe12be66276096bb
- MD5 c6764df84a8d0b7193460a1b00950386
- SHA1 f58c73cd82c86c160258827d5e5925080f43ed0e
- SHA512 af10f320a4234c92524d67035aadf334dc677ceb564cb767662898876cda38eca48323f46b3d0c9eb393ec000b4439f931c7927d1ba16c6ced01e768889299d2
- TLSH T1D3311BE3BEE835116D058D44D8AC4B327C3074A0B5740D7934A581DB54A3FF4DC1580D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1D3A6ADE28D2362383293C423AFF660E
- Size 320B
- SHA256 7e30e846f9b16619b83dc6d3f8de9a28b5afb41fddfa7292bba0430bea0bda16
- MD5 c8d28e5f505f15a49bb3cb439ca6c97e
- SHA1 0c1dd986b6b61dabc6c7569e22c777c24b564a55
- SHA512 c3842ec4a733e3c4675b1c01ba6a88fa9c48e94d2c6287cb416aeddcd7497ed2915576e4c7b39cb2ec95fdee30d3fdbf1d6a2a276bdca267c74b13318b035dd6
- TLSH T130E02B106EEC2126F2E7067D4CA21040FD73BD857542C21E0A60190F8115F440E6070F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3AA0DCD5A74331FBD6F344550EC48B87_77FF0447562981375BDA784891C6A42C
- Size 476B
- SHA256 11fd460929f46110e5c13d7b885de251c4f4c1940f90de0aa451c9c0c835b355
- MD5 4b98e48581ef569f1fa3d894d5077833
- SHA1 096c1b97b7426ab03f4c10229f9783b4b0bb9966
- SHA512 e27f9b2bc6299dec2d4ccaeeb42b7e70d3c32d967b1eb4e9b008c44ce19b3ce0db61d6f74c2170aa4156feaaff80c3f0aa4ba8ffb986c8baee638ab3cfa3c8ea
- TLSH T122F0AB243EEF016EF571907B43EC83D35C29F27F14085B9B06A003069A07D46CD31D66
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
- Size 482B
- SHA256 a14b91efa4f1e1779f87e28b1402fc9f26823fbd0e73925b0a188d13dd7daedb
- MD5 b78241defe1b696b6bb161c935485c8d
- SHA1 93da20d494d0fc1b6d946f1d201f531ca96634b4
- SHA512 9b681029ddc80f50b9489b6fe92fafa5bf9f1b6f8c56a88009e251b203deec6c7f4d3ef3242d9610c4223593a925eed4cdaebb32bffc847381ca314b4917179f
- TLSH T1EBF0AB2C26B5911CE4328E74C7EAA6279C6EF322980811A756A20A07660BE835ED2536
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MSI2CFE.tmp
- Size 234KB
- SHA256 78860e15e474cc2af7ad6e499a8971b6b8197afb8e49a1b9eaaa392e4378f3a5
- MD5 8edc1557e9fc7f25f89ad384d01bcec4
- SHA1 98e64d7f92b8254fe3f258e3238b9e0f033b5a9c
- SHA512 d26c9dce3c3d17583ffb5dbcd3989f93b096a7f64a37a2701a474c1bf4b8c8b1e922c352d33f24e411f1c793e1b4af11a3aec1de489087d481b1b636df2050cd
- SSDEEP 3072:5XiqyhTO8W0iEa8LW0bEC9hvZpC01v+eUKflQnZl+T+J7g6EsNr7wyy/IP3:5qhy8VKU3hvZUy+ppHEsuB/
- TLSH T159348D217494547EEBFF0832953AD671AE3DF2380B90C96EC384581E6D618C1A7B7B27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MSI5DD6.tmp
- Size 132KB
- SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
- MD5 cfbb8568bd3711a97e6124c56fcfa8d9
- SHA1 d7a098ae58bdd5e93a3c1b04b3d69a14234d5e57
- SHA512 860cbf3286ac4915580cefaf56a9c3d48938eb08e3f31b7f024c4339c037d7c8bdf16e766d08106505ba535be4922a87dc46bd029aae99a64ea2fc02cf3aec04
- SSDEEP 3072:Kx2YbpcgwmiTPJDnCO+DATkURBnrskNwPj2:XXgwmY1CPx2XG2
- TLSH T1DBD39D02B5D0C473D9BE09390870DB229F7EB930DF909EDB636856699E702C19E35A37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
- Size 24.1MB
- SHA256 dfa2181d8597668815550b3510e8d30bbfdf77668d07dbc490fcfe7a67395746
- MD5 cc81a6cf93b91e797672967fff9a6413
- SHA1 73b26f9059722b0e85e4243779a1c438b3f74ff5
- SHA512 75a5c5cde229a415492c7a57d91dba5382023ece8d4a7d97303e5377a6f28ae336ac6d2e60eb04ae74a738e533c83ac7d7d098ed67e8c83a4d51317a42e1ede3
- SSDEEP 24576:Ju8m+1zRdoO/vvTLbWzuGWKHiakzLlzi/FW9R8iF7kaiu0qOIPlqr1YRG:T
- TLSH T1E447D42832F92210E7F79F3C68F0AA2749397D579C19DE8D45411F4E0921BB1E8B2F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\Volume{73216430-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{34bb6a9c-5ad4-40a5-b05c-0cd82e5b7e4f}_OnDiskSnapshotProp
- Size 6KB
- SHA256 a7d1fc352a129f36c7073c7792e82ca1ae92239ec4d0ed28da238a33cb25db32
- MD5 acad4ca0fc060a1f9731543c032ad8bf
- SHA1 b789a5c64336adcaac99bb70ca00ccf62ff73325
- SHA512 7fe497b3e02ce001ed33a73573de0cac7daee4844a39660dff899fee6dfb137a0fcbaf9e1c4007420f6c82bb68f214d8da9c088df5abe9cb4f981cd0b447705b
- SSDEEP 96:Fjobhd2yvc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:Bol4Ib++ZVm
- TLSH T163D188185AF54711E2B3AB3128F18557A877B811EF33CB8E0198238E6670910F975F5F
- MD5 SHA1 SHA512 SSDEEP TLSH