Analysis

  • user interaction
    yes
  • max time kernel
    156s
  • max time network
    167s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/08/2026, 01:14

General

  • Target
    Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.exe
  • Size 604.5MB
  • Sample260828-bly88abe37
  • SHA256 28b0cb7f5007c2cfad62da19040cd017f496ff6b3b48d4822aa11f4eaf35ed28
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.exe
    "C:\Users\Admin\AppData\Local\Temp\Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2576
    • C:\Users\Admin\AppData\Local\Temp\is-QDT45.tmp\Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-QDT45.tmp\Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.tmp" /SL5="$300A8,632630178,1187328,C:\Users\Admin\AppData\Local\Temp\Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:1484

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        is-QFU6T.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Alto Flute 3\.previews\is-QFU6T.tmp
        • Size 89KB
        • SHA256 caaff7d8583d02662182624229d5ef64fff7a5bfb7697fe61d887a271715e716
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-K7PML.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM English Horn 3\PAResources\dist_database\audio modeling\swam english horn 3\is-K7PML.tmp
        • Size 31B
        • SHA256 2c7c729cd0fd15e30053aee69c5d67f50027272a3c49a6c7d5e95630d78d5eea
        • MD5 SHA1 SHA512

        is-89HCO.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM English Horn 3\PAResources\image\audio modeling\swam english horn 3\is-89HCO.tmp
        • Size 18KB
        • SHA256 4f5aee317c0c68653eb94943ed993effdb62cb17367ff8cd3c1721c3fa2f6878
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-8SP4A.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM English Horn 3\PAResources\image\audio modeling\swam english horn 3\is-8SP4A.tmp
        • Size 14KB
        • SHA256 82287ae2a82ee83de459da1929dff767f55289d89da19b86ef376ba882bf69db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-EG82I.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM English Horn 3\PAResources\image\audio modeling\swam english horn 3\is-EG82I.tmp
        • Size 7KB
        • SHA256 a81a156d0878450f61363a534102589e9a3a2a512e1d82c8fe6d407177704203
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-58IP9.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Flute 3\PAResources\dist_database\audio modeling\swam flute 3\is-58IP9.tmp
        • Size 31B
        • SHA256 311a1959d251dfd6120f22ceb4b35699778db8ebbb16d46c8ef3d0d77384a79b
        • MD5 SHA1 SHA512

        is-BJ01U.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Flute 3\PAResources\image\audio modeling\swam flute 3\is-BJ01U.tmp
        • Size 6KB
        • SHA256 1e3a378944d0b108203a3eef31c867205fae964950bb8a9a1ada6e523d01a46b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-JCU1L.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Flute 3\PAResources\image\audio modeling\swam flute 3\is-JCU1L.tmp
        • Size 19KB
        • SHA256 eaf36519443ebe9df5e15221b1e2e8b4e5367949033c0b3dd6c2e88de4f21124
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-N67L5.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Flute 3\PAResources\image\audio modeling\swam flute 3\is-N67L5.tmp
        • Size 11KB
        • SHA256 33d12478c8462a616ba1bf45fd3eb1112dbb6331ff80177af9c3e7a0a5dadb4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-QITPB.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Soprano Sax 3\PAResources\dist_database\audio modeling\swam soprano sax 3\is-QITPB.tmp
        • Size 31B
        • SHA256 9a7f7f609ba142b6fc229e2bd00208f7c8ea75993e54eee25ce750ba2f985250
        • MD5 SHA1 SHA512

        is-IBK7O.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Soprano Sax 3\PAResources\image\audio modeling\swam soprano sax 3\is-IBK7O.tmp
        • Size 9KB
        • SHA256 6f86cdc285db733929750e2d29a28e61e30a8ad6152de69d05d15055f5731ad8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-KMUQV.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Soprano Sax 3\PAResources\image\audio modeling\swam soprano sax 3\is-KMUQV.tmp
        • Size 19KB
        • SHA256 a7160aac6ccf57c5c975a87f09870b47ed771e9b0081b522bafb4af7fa20a6d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LO5PC.tmp

        • Path C:\Program Files\Common Files\Audio Modeling\SWAM Soprano Sax 3\PAResources\image\audio modeling\swam soprano sax 3\is-LO5PC.tmp
        • Size 5KB
        • SHA256 9de9fffd5a3b3eaa0eea1e884c9739b56aeb54eff660e8f321e396e8a2c3a40c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-QDT45.tmp\Audio Modeling - Swam Solo Woodwinds Bundle v3.7.2.5169.tmp
        • Size 3.4MB
        • SHA256 63ddae24ef1230b869f5a78f2656e5bfad210f2c4142ee7726fa580876dd612c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9MJ0V.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\IRs\is-9MJ0V.tmp
        • Size 1024B
        • SHA256 543a1e64f6d2699c44c811cd5429bf00165de339b43a1c8bfdbc600dfa332fd6
        • MD5 SHA1 SHA512 TLSH

        is-J0AMR.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\IRs\is-J0AMR.tmp
        • Size 1024B
        • SHA256 824583c809683329705d5da70b03c2f0212aa4ff72c8c5a49e688b13f05a1cb8
        • MD5 SHA1 SHA512 TLSH

        is-J78RO.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\IRs\is-J78RO.tmp
        • Size 512B
        • SHA256 f085c8e6cf46bade913396f9c6d568d302087bc285b09241a77c73c576731cac
        • MD5 SHA1 SHA512 TLSH

        is-STS73.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\IRs\is-STS73.tmp
        • Size 1024B
        • SHA256 d95f28f343fcc0d6d43fbfe07a4758c22035f8f19414d824d0bf5a7a9b3afa64
        • MD5 SHA1 SHA512 TLSH

        Roland Aerophone Default.swamec

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\Roland Aerophone Default.swamec
        • Size 4KB
        • SHA256 fe19ebd96363910095b0224e59a9eff58ad22da38eff12bdb1396c40eebfb9d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Yamaha YDS-150 Default.swamec

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\Yamaha YDS-150 Default.swamec
        • Size 4KB
        • SHA256 a837841104eb0900df8d821585b8d54dec1101b31dc0b4bd9dc05ede5daac53e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-04MDP.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-04MDP.tmp
        • Size 1KB
        • SHA256 cc86f654fd426e728cbe792bb960b16bdf95dc1fbb5de233d31edd28622efd36
        • MD5 SHA1 SHA512 TLSH

        is-078UF.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-078UF.tmp
        • Size 4KB
        • SHA256 0365a2344deb0940622c38c4596773b70b990e9ae17aa1eac679cf67b6c3bdff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-1E5Q5.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-1E5Q5.tmp
        • Size 1KB
        • SHA256 13a5c051e4de10df7377d6356066d1485dda6765fe997eb0dd8b849dd707ddc8
        • MD5 SHA1 SHA512 TLSH

        is-2004R.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-2004R.tmp
        • Size 1KB
        • SHA256 ec521e4cda69353bb56ee0582fd6fef05fcd1ebbbb1d91fa548f297a92d6f778
        • MD5 SHA1 SHA512 TLSH

        is-4JLJ6.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-4JLJ6.tmp
        • Size 4KB
        • SHA256 abc065c822590e290beca2ed34db35186affe3ddb4e9f7140f38aea5914ff8b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-4VUGE.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-4VUGE.tmp
        • Size 1KB
        • SHA256 e2fb86241b86bb1bc91486698082f807f1ab9f2a1a16f6d5b1ac88de3eef9598
        • MD5 SHA1 SHA512 TLSH

        is-62PSO.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-62PSO.tmp
        • Size 1KB
        • SHA256 7e0062bcba67183a653fd63c1518adc711787d274c32e7574daba43467141275
        • MD5 SHA1 SHA512 TLSH

        is-666MM.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-666MM.tmp
        • Size 5KB
        • SHA256 f3cb5354a7c3b7a8f685f0db470febeb379a6c6f73b3ebd996cd4a44bfdee414
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-76L0L.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-76L0L.tmp
        • Size 4KB
        • SHA256 60c3c5089d14d5377b2f280f7bacadb8ea8f348b5b6f0a1fcc7812a5ec5339a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9E0KJ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-9E0KJ.tmp
        • Size 4KB
        • SHA256 4efbc4c3ce05efe6d52aed8af51e2a3973b8179ee572bcb866e290d343a21dd3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-AGUD6.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-AGUD6.tmp
        • Size 1KB
        • SHA256 e8370896c66c3dcb0e51c8d000aba194a00279137a408c3e689dc02c07733217
        • MD5 SHA1 SHA512 TLSH

        is-BTDMF.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-BTDMF.tmp
        • Size 4KB
        • SHA256 9bb5fb5088f9e2386050682d89f36e4eb6506257dc6b9660ca6562f68a30894e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-C9M3E.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-C9M3E.tmp
        • Size 1KB
        • SHA256 a2c293f8e70045289e2c39af30899e0fa362df14f709a78d3ab1f2bb4e58d1df
        • MD5 SHA1 SHA512 TLSH

        is-D7BNR.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-D7BNR.tmp
        • Size 4KB
        • SHA256 c0c7adf7242092954a77d5919f64b2a1984a8dccf1240f9e22782371329f5a09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-EHDQ3.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-EHDQ3.tmp
        • Size 1KB
        • SHA256 f6ae26c0f5bc7cd4a53c2869205fc2fe66e88bb46eb10add5601964142663e27
        • MD5 SHA1 SHA512 TLSH

        is-F44M1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-F44M1.tmp
        • Size 4KB
        • SHA256 550b608065a0ace13d418c76461a1fcdcea55b7ed691fcaf3027d8e3370e3c30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-INJIK.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-INJIK.tmp
        • Size 4KB
        • SHA256 da1ddd74c8b66860e1040eeae3f26e96495397d220377230383ca742b3caf883
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-JGMMH.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-JGMMH.tmp
        • Size 1KB
        • SHA256 3a2c85b74912a121c70b8072ef3e28b89da06300964db0e769116f00b417fe6d
        • MD5 SHA1 SHA512 TLSH

        is-L9AK9.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-L9AK9.tmp
        • Size 4KB
        • SHA256 603a2ab2680321ad4d008405d2fa8dfcb64381d9564b79309d27b94deb20fd1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LME8L.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-LME8L.tmp
        • Size 6KB
        • SHA256 38a74492270c7fc7d2eb295219b1740615ba5b32e3bfb52e5893e34135bbce0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-M2DOB.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-M2DOB.tmp
        • Size 1KB
        • SHA256 019d8e9b125e3c49fe876ea8557908e5369ace2d4294ceb770bffd4e44dcbe1b
        • MD5 SHA1 SHA512 TLSH

        is-N6LUT.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-N6LUT.tmp
        • Size 4KB
        • SHA256 aeaf1d07d0da8896d4488daef54f5cfc6e71fcfcfc02f908d87c709af3a18795
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NEQIB.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-NEQIB.tmp
        • Size 1KB
        • SHA256 8135653e817dcbc21ad7853d734f6f8921efec675a84eb47a77a5952c52fe195
        • MD5 SHA1 SHA512 TLSH

        is-OCC01.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-OCC01.tmp
        • Size 5KB
        • SHA256 39ca27b8a99c1fd3b24896993281e465d4d041d9ec554b80eefc9aa0bf18182c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PIUNJ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-PIUNJ.tmp
        • Size 23B
        • SHA256 081c7dee717cb728f1bb5bb3a0b9dae781d9afdd7f49e44e2a35c702d30153ab
        • MD5 SHA1 SHA512

        is-QIQUE.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-QIQUE.tmp
        • Size 5KB
        • SHA256 4eb245aa9a57b6a5d6f3801e5e200b7d45c2edcbe8b2abf9a1eeedde81b9955f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-S2ALN.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-S2ALN.tmp
        • Size 4KB
        • SHA256 579237124b522f965fc7ce54399bebe71a31cc648e0d47b2a528cf4259e3a997
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-TN7T3.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-TN7T3.tmp
        • Size 1KB
        • SHA256 0d9a7773b60937a2991c0074dcf4841619855f85c83c470eecd1e197553c1b2a
        • MD5 SHA1 SHA512 TLSH

        is-TUHA1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-TUHA1.tmp
        • Size 4KB
        • SHA256 dad3251d4bc56192526a7118992f768005a246f7f9af2f58ddc0ba148dc2c208
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-U12KH.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-U12KH.tmp
        • Size 1KB
        • SHA256 d7ece875abab23eb9bf50cb7d771761fa51521d6b5c5b01e6a10158e555d4d72
        • MD5 SHA1 SHA512 TLSH

        is-U5AE3.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-U5AE3.tmp
        • Size 4KB
        • SHA256 1b9e23941d6c348c59c60532b4810f341c217e472d9d1b31f30687a325b66e0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-U7D63.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-U7D63.tmp
        • Size 4KB
        • SHA256 178bd58210452b447a9ef264e730b16cae3e9aa2ce69fc670b688f52be40a472
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UDTK1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-UDTK1.tmp
        • Size 4KB
        • SHA256 f4c8b9bd89b83276b21ef4ac8cd8d85e13e9e9a3585bd2518acdce9ec64b49cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-V1K4E.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-V1K4E.tmp
        • Size 4KB
        • SHA256 a2c27895fe78f0de2ff9fbcbec232c9e8d14eeb1c001fad6cd4dbe71d8fa9978
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VO9JE.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-VO9JE.tmp
        • Size 1KB
        • SHA256 4df233b80772112b164eacdf5b26fe01b9a56e2472b507a5f51c771edc7db9ea
        • MD5 SHA1 SHA512 TLSH

        is-VUCVF.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Double Reeds\Bassoon\Resources\Presets\Factory\is-VUCVF.tmp
        • Size 4KB
        • SHA256 3df9983e749028d15befecbb55050b8fe0c9d46dc3b001c8e30a871e7a2e1373
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6EQ8N.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\AltoFlute\Resources\IRs\is-6EQ8N.tmp
        • Size 1020B
        • SHA256 9a4f8d521a999d1afb8840c23adc075ee48a0d34ecf71f5a67f69165b307fd52
        • MD5 SHA1 SHA512 TLSH

        is-BCKQO.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\AltoFlute\Resources\IRs\is-BCKQO.tmp
        • Size 508B
        • SHA256 66cf7e0a10410748d9d88d7ef3e03f2e06a2d73ca57feaef456f2a62e2a0c298
        • MD5 SHA1 SHA512 TLSH

        is-K1263.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\BassFlute\Resources\IRs\is-K1263.tmp
        • Size 512B
        • SHA256 db7389cb965922a47f98a26fda66cc4649b2c4666c8fdeabd6c83d8b4f7a47a3
        • MD5 SHA1 SHA512 TLSH

        c _1 @2# 0 Flute B.raw

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\IRs\c _1 @2# 0 Flute B.raw
        • Size 1024B
        • SHA256 74858e4c6b25182a859afa2ab6ba5fe75c2f9a5a274432319a3c2443e07a2e96
        • MD5 SHA1 SHA512 TLSH

        is-1A3MU.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-1A3MU.tmp
        • Size 4KB
        • SHA256 5eb08be45845cbb9049d14d637cd1deeb87af1531885f062661399aae5e38f72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-21EGO.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-21EGO.tmp
        • Size 4KB
        • SHA256 0ca4fca9a33e61c33eaea29aa83738b9f89f1f5a48dfddea86d38b584ef07fc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6EQEQ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-6EQEQ.tmp
        • Size 4KB
        • SHA256 7c76867ed7b056b2503d2e6ef7fd37074b88cb4fe8630f69ed20ae4a8aa836a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9FL1Q.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-9FL1Q.tmp
        • Size 4KB
        • SHA256 a11c6913290d83f76a6f93555b032d3529cbad818e4fa1a6c3af2d90e18a8199
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9MDVU.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-9MDVU.tmp
        • Size 4KB
        • SHA256 58efc2b7fe567e39f5824affe6bf23b1dfc77d328e964385259a667a6180aaaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-AQA6T.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-AQA6T.tmp
        • Size 4KB
        • SHA256 9b86d464cef450f569e48a941d8ac722f098bbf54c959509b251229416223ca0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-B7RR9.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-B7RR9.tmp
        • Size 5KB
        • SHA256 2c0113503e7a6126e27d151424686a37062d643dd5871008ca103201e7ee0d85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BUS8C.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-BUS8C.tmp
        • Size 4KB
        • SHA256 2c15c260218de5abbf7874f483db512ea7ea5ff0888bb6aef8f33a0a8175fd6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-CR6JT.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-CR6JT.tmp
        • Size 4KB
        • SHA256 edd2c5d9685012ab45db1ede48ce0211f474f07b7b223b87a08c528b58f20d00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DC1JG.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-DC1JG.tmp
        • Size 4KB
        • SHA256 26e956926cd52126a41b7c376ad667e405f9f9b7a7c196390225eb46e0c4b02d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DPEDK.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-DPEDK.tmp
        • Size 4KB
        • SHA256 379b0cc9f8523762101e5c94ca11217d5b6bb25bf05672ec9d8fad3f74d61c41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-EBR1L.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-EBR1L.tmp
        • Size 5KB
        • SHA256 8a316e279757824c17039c3fc9dfa5ea397f8114064c33563d8c40f070117af8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-FGG0J.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-FGG0J.tmp
        • Size 4KB
        • SHA256 1788089e3a2e1de29ca7b133d0905f1863e1f83e3a1b710eb2fb1967d66e0706
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GTPC1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-GTPC1.tmp
        • Size 4KB
        • SHA256 eb52a19755bac809bebac2daa11f94fc681e9ccbfa3b9b90638cb8e44f502a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-H6V2M.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-H6V2M.tmp
        • Size 4KB
        • SHA256 ca167c3ab8d29d6868176415be1140fbeea1e9eb458fbfcbd4acd07b9a793bbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HNV8K.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-HNV8K.tmp
        • Size 6KB
        • SHA256 3e8d54465e964b9aaffe33513e46ef6a6b0d7875143981242cd8c9fda14f684e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LR006.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-LR006.tmp
        • Size 4KB
        • SHA256 893690a740313b31acf5bdd92634ec4fac475027195053bfcf39ffe8a5c6b7a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-O73IB.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-O73IB.tmp
        • Size 4KB
        • SHA256 60623a4a58483756c3b31d32ad3991039887df6a3217db5daeda287d54c5e0d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PDJBS.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-PDJBS.tmp
        • Size 5KB
        • SHA256 43f63a227b5b6da2371936eb2fedd0074df711d3eead33d2a0f089d0441bafd1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PHVDA.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-PHVDA.tmp
        • Size 4KB
        • SHA256 092ab073a5f031db99d51468db4a0b377fc187c95c1d159b12150b819071791d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Q0HRN.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-Q0HRN.tmp
        • Size 6KB
        • SHA256 558da2905ed89dfb299fc28edc9498736c6cbc8dc423e3f46238f6115f9e36c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-QNMAB.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-QNMAB.tmp
        • Size 4KB
        • SHA256 cbb79a5de3ad5ea395d0d5c34cec4d59fc1df048675f79f6a32ba39fe7eebe51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-S68JS.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\Flute\Resources\Presets\Factory\is-S68JS.tmp
        • Size 4KB
        • SHA256 a6de74250e484c92b86229636cca1f125724661a8d9ec3e060dc22619151c95d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-1E24B.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\landscape\is-1E24B.tmp
        • Size 1.2MB
        • SHA256 a892ef71ddc1e5cf607b89f5b97ac8c79d883b54681bb14704c670e4d3636c3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-8PK5C.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\landscape\is-8PK5C.tmp
        • Size 317KB
        • SHA256 01ae0df722b14f455a8621111efb72967edc7ae20f6f65f1819d91a429d7b414
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-I5HDF.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\landscape\is-I5HDF.tmp
        • Size 2.6MB
        • SHA256 9552eaf109bec5c8dd5a46801c0710b8e0fb198e72b28753338ee040f1b8b7f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0IUIT.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\portrait-iphone\is-0IUIT.tmp
        • Size 140KB
        • SHA256 b14afe29f38f007d14341984bfa6bae57eb5195d38be47575c5a59f115d6381d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6PRSM.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\portrait-iphone\is-6PRSM.tmp
        • Size 1.0MB
        • SHA256 4e2351f15f51b53e8cc596d14ec024aca62fc7da3eea812277c5b6955662d82a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-QPBKG.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\portrait-iphone\is-QPBKG.tmp
        • Size 501KB
        • SHA256 894134cf38550535b3f83a194b0fd7699a2d1685e0dc62799422370e4b955ddb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-C13EV.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\portrait\is-C13EV.tmp
        • Size 941KB
        • SHA256 a55f21b07412fbbdc48060300b76b25e3cb4f338e7e3c01009ec67b69b3622b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-D7L2B.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\portrait\is-D7L2B.tmp
        • Size 297KB
        • SHA256 98e149481912dd0f7cd3c11dbddab0589e8f433b546f73c71143edad55b670a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VN038.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Flutes\SoloWoodwindsCommonResources\portrait\is-VN038.tmp
        • Size 1.8MB
        • SHA256 c44de2eb6912f4e77c73370febe13ba4575d08dff370eddef2a73e9775d4d64a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-FJ3DS.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Saxophones\AltoSax\Resources\IRs\is-FJ3DS.tmp
        • Size 1024B
        • SHA256 a6173aa1f8362eb609f96e1a2fd6aa832206e282763e9a173afa00f620ecd484
        • MD5 SHA1 SHA512 TLSH

        is-G6M4O.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Saxophones\AltoSax\Resources\IRs\is-G6M4O.tmp
        • Size 512B
        • SHA256 8617cb92f4ec6526198d5319d90eaaf02e13a8bc9f8d5c1d3c51c729d27bf249
        • MD5 SHA1 SHA512 TLSH

        is-9KV4Q.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Saxophones\SopranoSax\Resources\IRs\is-9KV4Q.tmp
        • Size 1024B
        • SHA256 7f980d2f92411b7c66eeb1007380896c264d4764bee7cadf9938966c698264c9
        • MD5 SHA1 SHA512 TLSH

        is-9LAP5.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Saxophones\SopranoSax\Resources\IRs\is-9LAP5.tmp
        • Size 1024B
        • SHA256 0f56728dda231e2bbfce21c5d1246d41ada5bc53a5ef877c3572c133c04c2d3e
        • MD5 SHA1 SHA512 TLSH

        is-D4M74.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Saxophones\SopranoSax\Resources\IRs\is-D4M74.tmp
        • Size 1024B
        • SHA256 7a21db0cfa0bc245abfea9be568f6526261587114e9fd8da6001f7bddd6b6a53
        • MD5 SHA1 SHA512 TLSH

        is-IFKLG.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Saxophones\SopranoSax\Resources\IRs\is-IFKLG.tmp
        • Size 1024B
        • SHA256 181bdd9addebff0470e21dd34b322b3334ccd1309ae011722a523921ab9f4979
        • MD5 SHA1 SHA512 TLSH

        is-MIKJA.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\SWAMv3\SoloWoodwinds\Saxophones\SopranoSax\Resources\IRs\is-MIKJA.tmp
        • Size 1024B
        • SHA256 a4232cf3e769cc62afac85cd0bcf22e4d1830c74e699e0c2fa44f9761968403a
        • MD5 SHA1 SHA512 TLSH

        memory/1484-14-0x0000000000400000-0x000000000076B000-memory.dmp

        memory/1484-6-0x00000000028E0000-0x00000000028E1000-memory.dmp

        memory/1484-10-0x00000000028E0000-0x00000000028E1000-memory.dmp

        memory/1484-1073-0x0000000000400000-0x000000000076B000-memory.dmp

        memory/1484-9-0x0000000000400000-0x000000000076B000-memory.dmp

        memory/1484-12-0x0000000000400000-0x000000000076B000-memory.dmp

        memory/1484-2433-0x0000000000400000-0x000000000076B000-memory.dmp

        memory/1484-2526-0x0000000000400000-0x000000000076B000-memory.dmp

        memory/2576-8-0x0000000000400000-0x000000000052F000-memory.dmp

        memory/2576-0-0x0000000000400000-0x000000000052F000-memory.dmp

        memory/2576-2527-0x0000000000400000-0x000000000052F000-memory.dmp