Analysis

  • user interaction
    yes
  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/09/2026, 04:13

General

  • Target
    Setup SWAM Solo Strings V3 v3.12.1.exe
  • Size 502.8MB
  • Sample260905-etjehsem3x
  • SHA256 93fd3b988526fec68479d4a9f035f209e77b0037b14cfb2a527c3fac4722bcb2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup SWAM Solo Strings V3 v3.12.1.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup SWAM Solo Strings V3 v3.12.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5536
    • C:\Users\Admin\AppData\Local\Temp\is-P3MY7MQG7B.tmp\Setup SWAM Solo Strings V3 v3.12.1.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-P3MY7MQG7B.tmp\Setup SWAM Solo Strings V3 v3.12.1.tmp" /SL5="$C0260,525650927,950272,C:\Users\Admin\AppData\Local\Temp\Setup SWAM Solo Strings V3 v3.12.1.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      PID:3576

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        R2RINNO6.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-F5ZL3OGF4U.tmp\R2RINNO6.dll
        • Size 7KB
        • SHA256 24b7bbbabbc68fe6fa5a7aa13ec0d2b32d47af05d215d37d670441f0089b65b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Setup SWAM Solo Strings V3 v3.12.1.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-P3MY7MQG7B.tmp\Setup SWAM Solo Strings V3 v3.12.1.tmp
        • Size 4.9MB
        • SHA256 090ee690d68fec876df5843d779aa9bbb1c877923207752b3bda4505b65ca34a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-1UAE5WBYPH.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\Icons\is-1UAE5WBYPH.tmp
        • Size 55KB
        • SHA256 75587b4bbe6762e5534aa057eecd01dbd07064b02a81b16cab0f86fdb7c0a1e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-TJABXL32OW.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\IRs\is-TJABXL32OW.tmp
        • Size 2KB
        • SHA256 a53a71bed1f380c6bc1058df7d9b81b1d41da4ac16afaa209bf130be1b5ad86d
        • MD5 SHA1 SHA512 TLSH

        is-0J2E2FQSM4.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-0J2E2FQSM4.tmp
        • Size 1KB
        • SHA256 70b59a9d097823b0c2ce216ec5a6d61b0eaebc12d0121892aeaa50b256644375
        • MD5 SHA1 SHA512 TLSH

        is-11IRHUSOBM.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-11IRHUSOBM.tmp
        • Size 1KB
        • SHA256 8349a8f5804502e2b08e12d07307f2e118168a78418e4deee415ed143be0fddb
        • MD5 SHA1 SHA512 TLSH

        is-1BZJJ30VMN.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-1BZJJ30VMN.tmp
        • Size 4KB
        • SHA256 d6055064ed0ca0a010f0b87c2c7117d8d08873272dfe2aeddf708f3e4a7b04d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-1HM6P95MY9.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-1HM6P95MY9.tmp
        • Size 4KB
        • SHA256 d72238e0db828d14117cc4da08757853880c84f7ffbb94b7a64e43acf3843251
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-29GBRJ4E8H.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-29GBRJ4E8H.tmp
        • Size 1KB
        • SHA256 c4f51c2811580770ff96bdf1b7c183a93cea3a6637d3fe0c252727371abdea8e
        • MD5 SHA1 SHA512 TLSH

        is-2QLCNGO6R1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-2QLCNGO6R1.tmp
        • Size 6KB
        • SHA256 f41156cced034a4b60c33638b694de9d2dce8195d35e90008adc5444128966dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-38JZ9BS39E.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-38JZ9BS39E.tmp
        • Size 4KB
        • SHA256 81c62b0eb77ca0f9750d1bffb48d11d61d07b23cbdf0d797fe977f2894940237
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-5EG8RTVB61.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-5EG8RTVB61.tmp
        • Size 6KB
        • SHA256 bbe1551a05e2f34ad7e3e2fd1c3b13c9149a500d398769b41ab53b6214dad94f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6O4EY080VD.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-6O4EY080VD.tmp
        • Size 4KB
        • SHA256 06df123bac9d334e6e241667a0245c39ea2f8e8b60ae7d6e4ae4a8a02764cc01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-7SZZVLKMGI.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-7SZZVLKMGI.tmp
        • Size 4KB
        • SHA256 e14efd72f61926e7e4f8f129f1d7e694d2360e50d896883bbd12cb487778a865
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-8I5HUB9O9T.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-8I5HUB9O9T.tmp
        • Size 4KB
        • SHA256 c257dc1d819a8e154c37f714852f3023d48926f0005e728112abe8fc8ccb5510
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-A64WJR2XD2.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-A64WJR2XD2.tmp
        • Size 1KB
        • SHA256 be970a131e7c2f72ab2c8ab49392983ae2334ad0a0a355c5cf717d669cc79307
        • MD5 SHA1 SHA512 TLSH

        is-AFZFGP478F.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-AFZFGP478F.tmp
        • Size 1KB
        • SHA256 0f3b6a673ae9508beefb2864b5d01aad02c3d66af76fe034055d21fb97ef7ad6
        • MD5 SHA1 SHA512 TLSH

        is-AKTGP40SP3.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-AKTGP40SP3.tmp
        • Size 5KB
        • SHA256 6771b87f0faf3d49ed4695a33400dfc45ea64c698332b5d1f4633af98c390ff1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BEGE0L2BWN.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-BEGE0L2BWN.tmp
        • Size 4KB
        • SHA256 8c1c9700cc7c059546f09bdffe2dd9e644cda89d109db1f6a6f7e9b807c20ab4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BIBIQH2L1M.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-BIBIQH2L1M.tmp
        • Size 1KB
        • SHA256 ef2f529ad1756f466f27842ef174c279b8f3f834ee5a15f910f6674cfd081dac
        • MD5 SHA1 SHA512 TLSH

        is-C8RB0PGNS1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-C8RB0PGNS1.tmp
        • Size 1KB
        • SHA256 c939c0c3c97afaf7ea8cd219b8d69360117aba8db6d25b9322905b57e748e783
        • MD5 SHA1 SHA512 TLSH

        is-CEWZJE9NXR.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-CEWZJE9NXR.tmp
        • Size 4KB
        • SHA256 29464ec2d94a5607dc8fb012684be3199819a4bf7b592330c175492c83f71cdb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DDGSJ73V37.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-DDGSJ73V37.tmp
        • Size 4KB
        • SHA256 417f500c99465e5ee6e20ae8301096adfaa5b52b61d127df16268d9232fe94db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DNE5VPQROA.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-DNE5VPQROA.tmp
        • Size 2KB
        • SHA256 74aa7105cdbee3c134b80c617d9913035b10340d83347788c946075a43449346
        • MD5 SHA1 SHA512 TLSH

        is-DO9AKFGHE9.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-DO9AKFGHE9.tmp
        • Size 5KB
        • SHA256 909973498203438b4ef5518ccb23a14b4b1262a64849f5eb34b765d76f3f438b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-EEAYC1FCZP.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-EEAYC1FCZP.tmp
        • Size 4KB
        • SHA256 b713b8445922ca8dec22b94f8339542aed548126cecf23d39b5c51880ab0922e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GFCYCR0MZJ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-GFCYCR0MZJ.tmp
        • Size 2KB
        • SHA256 e2d37c9c5646ea84647099bcdd1a297ac6f26a9614315298876cb42ba043185c
        • MD5 SHA1 SHA512 TLSH

        is-HHZZOGITE4.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-HHZZOGITE4.tmp
        • Size 4KB
        • SHA256 c1c171ad5e0d039b4b70c385f129d4da6b7ead3d6d99afe6e6a90d79f7fa30f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-I71DJIXOX0.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-I71DJIXOX0.tmp
        • Size 4KB
        • SHA256 16a7b5e92f87a23c92f600d85c173bab9d2f12f86b0c06ac246a3b5b0d6cba86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-IJ16AYVXKA.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-IJ16AYVXKA.tmp
        • Size 6KB
        • SHA256 90ded056db4087c3957425f81d7162f0c6f9611751f184f702f818c3f080a633
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-K99V5W3XC4.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-K99V5W3XC4.tmp
        • Size 5KB
        • SHA256 cd7555fc36cf0c164a2806a7262e5d4f8eebfaf997e2d4262d6a848ef3565914
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-KZ7WTK0MUP.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-KZ7WTK0MUP.tmp
        • Size 4KB
        • SHA256 c327fd45a2352008a7ba1e8e17a75ce1ac4268a39fc92f888e5f3e46f5f4dbd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LUHV3T20GI.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-LUHV3T20GI.tmp
        • Size 4KB
        • SHA256 1f89705cbd0c71c93707133ec44e8cd028926688264e9fce47f6132af937eaf9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MU15FU468W.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-MU15FU468W.tmp
        • Size 5KB
        • SHA256 858388052675bfb429e035cba415c69c208c873a90c4d71da6c7ac50b30272b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NSFSE643PL.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-NSFSE643PL.tmp
        • Size 1KB
        • SHA256 d77bc62b5dce02648d01be1087cc8496dd3642d6c29bccd651d0e005c8101a33
        • MD5 SHA1 SHA512 TLSH

        is-OG9NKIG1B5.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-OG9NKIG1B5.tmp
        • Size 4KB
        • SHA256 0d0fe4e097910007e6745be498f6491fedfe725648f1716a3cc241903072a3e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-P3NY661J91.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-P3NY661J91.tmp
        • Size 4KB
        • SHA256 37a16d4962030c2919341df8ff4c19c33fcbe12c2b52d0bcba7a4a3eede37cdd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Q9TO1X0PKY.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-Q9TO1X0PKY.tmp
        • Size 4KB
        • SHA256 da4318011971785aafe29d2bb4f9d1f7d9d7bd541fd05aa55dbb4d2880bc6b71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-QJBXIFUQOE.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-QJBXIFUQOE.tmp
        • Size 2KB
        • SHA256 79a1d17cabbbd1e2b372d11896b42916b1974071fffe4d91e349a4649d1f2608
        • MD5 SHA1 SHA512 TLSH

        is-R7QP41D2N4.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-R7QP41D2N4.tmp
        • Size 1KB
        • SHA256 1222ed46df8177a51eb50b5c2d30a5682436a50ecf901320044dfb461f0fe03b
        • MD5 SHA1 SHA512 TLSH

        is-RK6SH17YZL.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-RK6SH17YZL.tmp
        • Size 4KB
        • SHA256 2cc8ca1ce751b672b81eff0a4e3e04389f14144e99e698382c6d4f01aa571a12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-S9X112J8FU.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-S9X112J8FU.tmp
        • Size 4KB
        • SHA256 6fa3f6ccec6380f2d1fb69b111e69e1eb36071602ed95b07c08a743c0bdec2fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-SCN5DFMEZA.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-SCN5DFMEZA.tmp
        • Size 1KB
        • SHA256 ed9b077057a5cefe49514db2c561e6aad2466f5ba2a4a8f6881f8a411b8be3da
        • MD5 SHA1 SHA512 TLSH

        is-SJY4ZN3RKY.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-SJY4ZN3RKY.tmp
        • Size 6KB
        • SHA256 cd8091659864a2b3dcf21712b2d23e355e8bdc2fc9fd5a65c09d2a8a760aa18a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-SNZN8GL24T.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-SNZN8GL24T.tmp
        • Size 5KB
        • SHA256 8fcbe2b529b04abaffaad7cb223df9e13d24b7a2ce116d33baa72bf0589e2164
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-T7XT0EA0EV.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-T7XT0EA0EV.tmp
        • Size 1KB
        • SHA256 74a4f0ba06f37ac113b48150955551156afcf7946145011c52bcbc066aefe073
        • MD5 SHA1 SHA512 TLSH

        is-TGNO9Q4158.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-TGNO9Q4158.tmp
        • Size 4KB
        • SHA256 c947b3d8d24f3dea33477cc78ba86bdf3e8b003c85d47eedd056656b9eb03c13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UCJ5MWIEWF.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-UCJ5MWIEWF.tmp
        • Size 1KB
        • SHA256 d573eabf6baf144616149f72f5695387985acdfd49ce833797efabac49bc5547
        • MD5 SHA1 SHA512 TLSH

        is-UCYIHO3NHD.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-UCYIHO3NHD.tmp
        • Size 2KB
        • SHA256 0946830aed82ddfb344310e43d8aca5789f896137e7c64864e74e86ea3858ca1
        • MD5 SHA1 SHA512 TLSH

        is-UL9SH72GOO.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-UL9SH72GOO.tmp
        • Size 5KB
        • SHA256 bf94f3988a044de96877d74044b1689ff82f3e9a1f891eab7f9e1381291674ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-V63BQARKGO.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-V63BQARKGO.tmp
        • Size 1KB
        • SHA256 17555635aa8a5b25e4d8bfe624ab3975e2b61eda175ddc85073a16d8daa4e88f
        • MD5 SHA1 SHA512 TLSH

        is-WNWZUKGBMO.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-WNWZUKGBMO.tmp
        • Size 4KB
        • SHA256 7a29f9a7811cd1377a4315e1b7837fa5a84231d6e2f62d746feeb56f39286db5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-XNCW7BE7CZ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-XNCW7BE7CZ.tmp
        • Size 4KB
        • SHA256 32d7e47f1dfb6deba7a9a6c85bb2c3e3d31521c2148daf615d77f682ead411de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Y1JTB57WNT.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-Y1JTB57WNT.tmp
        • Size 5KB
        • SHA256 c8b2df0a0210208a5d5888802c319b01e17d325099cd714243a099da0fad0288
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Y2OLBKI6GN.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-Y2OLBKI6GN.tmp
        • Size 4KB
        • SHA256 ccdde40584142884b64de5230b7e20db5859f75b92086886b91ed8e0bc8af35b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Y9WAAA8G44.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-Y9WAAA8G44.tmp
        • Size 2KB
        • SHA256 c97220697f787b69ac2afb781947c97be0b236c6818a2c426142203af4e4f0bb
        • MD5 SHA1 SHA512 TLSH

        is-YEYLXVETR5.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-YEYLXVETR5.tmp
        • Size 2KB
        • SHA256 171c6a8d2ca283b188b6380e5695fa4504ec629c131f75747cf64603d60099f4
        • MD5 SHA1 SHA512 TLSH

        is-YZP9BSEIC1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-YZP9BSEIC1.tmp
        • Size 1KB
        • SHA256 acbb58b842a8fbf574f9641ce2e6d6c88409f4dc9c14e780b211a0aa197ff4ee
        • MD5 SHA1 SHA512 TLSH

        is-ZKO3ZCONTV.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\Resources\Presets\Factory\is-ZKO3ZCONTV.tmp
        • Size 4KB
        • SHA256 ddbb8030101c8825588f2accbbe96f4bed83ac4d5a3a58fab64bf9313d188e7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BQWR6TLSOQ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\landscape\is-BQWR6TLSOQ.tmp
        • Size 2.6MB
        • SHA256 c5f12661e91509b563dcf77c0fcb414e9b75b384d8b1503ab3a88138abb45dd3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MGEFJUH350.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\landscape\is-MGEFJUH350.tmp
        • Size 327KB
        • SHA256 723b41094d69c0976074f16e02e77eaed7f36420e17cffda3a34526d2f628704
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-F6VT7OCKL2.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\portrait-iphone\is-F6VT7OCKL2.tmp
        • Size 1.0MB
        • SHA256 50cfd0a744f37376b3ab5d568fbb1519f4283b90836e1bd7804e067db39a76c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-RVFDRSCE5O.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\portrait\is-RVFDRSCE5O.tmp
        • Size 1.8MB
        • SHA256 89d4a3fb67e7c6cd031a5864ee1eb95f36c783cd8c7cf3288d47211b0bc389c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0GOG3RID9L.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-0GOG3RID9L.tmp
        • Size 316KB
        • SHA256 20aaeae6adfeae6ed07b9dab2a79ac89986e186e8569c01bd905619b726ffb01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0QHY7AYY33.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-0QHY7AYY33.tmp
        • Size 194KB
        • SHA256 caae86d8bb8dbbe37f727e80f113fcb44c54301257b94db18726250a52d55afc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-2541MNKN7F.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-2541MNKN7F.tmp
        • Size 458KB
        • SHA256 6447ea359543a05b2db71db949f9863ba6576510b1481be1cf63fa526ca097cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-3GBH5QO3TV.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-3GBH5QO3TV.tmp
        • Size 375KB
        • SHA256 65b643eea8f2987965a7fa8468c4c829bde0a6ea4833c685d0f766526848ffa0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-4K9GLWMSP9.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-4K9GLWMSP9.tmp
        • Size 208KB
        • SHA256 82310342007fb272c5f307eda5088f7ebe40370eb029558ee503f0aa6838bcfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-7SOQ09XU63.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-7SOQ09XU63.tmp
        • Size 455KB
        • SHA256 eba25b24a1360972c8079477e14da0aac01a84ea2a3d2420210b8e4db3c9739c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-93WX4XKMRI.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-93WX4XKMRI.tmp
        • Size 335KB
        • SHA256 dae6181af0c15eb2264b33368e9a83920d63a1721d22049582062fc3f9dcd3a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-BO9RPLLXZI.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-BO9RPLLXZI.tmp
        • Size 387KB
        • SHA256 01db89ce5203488a2d4e5c52c35daa13673ee198f6dd83669d2a51cafaeaa42b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-CY2RGYNUOP.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-CY2RGYNUOP.tmp
        • Size 179KB
        • SHA256 035251c7aaf1a4d10c411df1539fe9c0e0c18c5e5f06fbf8d7e5b927f5898a3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-D6FVUMNH1S.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-D6FVUMNH1S.tmp
        • Size 202KB
        • SHA256 b6499c0e5a84ee53268c5880926a0c53274bea6baaf49b1c26d266f1b13fcb8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-E76MPY2U00.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-E76MPY2U00.tmp
        • Size 254KB
        • SHA256 60961dbd784e8ed4fa666122045118a80fdcf2dfcc8f7e953b459f477cfd311a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-G52JHK63SX.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-G52JHK63SX.tmp
        • Size 371KB
        • SHA256 4c3ee3b3e68e5acba64712d6f9b42238ee57604def0aa712148feb9aca06efd7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HG2UAKCZA4.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-HG2UAKCZA4.tmp
        • Size 423KB
        • SHA256 950bf4a853428731f47a3b8d28dfa86469155a18eff64bff18d002f627255cfe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HRAJX6YO8W.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-HRAJX6YO8W.tmp
        • Size 261KB
        • SHA256 a2ff439a03f7cd1be49679bf6aabd166a2597419307b261eb57215b3d2a3afbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-IFI07D40S9.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-IFI07D40S9.tmp
        • Size 263KB
        • SHA256 138a009dcab778bcc51526e79ebbbbdb0d18ae7b788d7deb4ad42b12ba3b9cfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-IU1CPO28SJ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-IU1CPO28SJ.tmp
        • Size 375KB
        • SHA256 0090fcbbd13c3baacb50a185141f15f319215ed50d302e183dc033f17c7a1b5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-JLZKEOJW2I.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-JLZKEOJW2I.tmp
        • Size 297KB
        • SHA256 2676cce8cc7a4ff7fe206837d9f4469b18509647070c2b375f0ec28a30d7228a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-JPT566S7PZ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-JPT566S7PZ.tmp
        • Size 182KB
        • SHA256 e6ec614ec92b14e2224af542ee678d23930a14091d075cf7c42e94f3216cfb77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-KWLFW7TAUS.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-KWLFW7TAUS.tmp
        • Size 168KB
        • SHA256 148f7f1e4bdf0ad62d7f577abd752c3218d35d269bdf0ad2dd8badc68b45b1b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-L3INAKKKJ5.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-L3INAKKKJ5.tmp
        • Size 1.4MB
        • SHA256 17362eb426204ac5bb3688023de32814520aaef133a8ecf9642fb3439980dd0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LAJIQ1OUAB.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-LAJIQ1OUAB.tmp
        • Size 305KB
        • SHA256 7358c32589568912f541902801bb2cfeb8228b6ebb60a5fd9922ae02239f3877
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LH0D28EBKS.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-LH0D28EBKS.tmp
        • Size 300KB
        • SHA256 cc94dfd1e42f751d7fa1bc0c9bb15b0008a45575f637fc1745700cc0153bd199
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LNCUUP81T1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-LNCUUP81T1.tmp
        • Size 287KB
        • SHA256 0dac9d6996686af27a56f923f68c573ee4bf51526f0fdaf4e50ae26d7734cc22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MJDB6LPF4V.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-MJDB6LPF4V.tmp
        • Size 305KB
        • SHA256 deec989c371bf355d1578368f192ce4750e23a43a2316749464b0a9aba25d41c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-MLNX50MSQC.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-MLNX50MSQC.tmp
        • Size 433KB
        • SHA256 2b696a6331827073b3dfdf621da90ee7e4949e9329b6c0c8e11fdfe351592d4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NC546X2KY2.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-NC546X2KY2.tmp
        • Size 368KB
        • SHA256 2cc003591e2ce6abf9119799610df76f39015eb58be8e5410b611c40a6ec501d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NFTEI09TX7.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-NFTEI09TX7.tmp
        • Size 516KB
        • SHA256 51eda077a49f4a49bdc2672339c913779f21d691c15eae0ab316064dd18df656
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NGIRUS7JIA.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-NGIRUS7JIA.tmp
        • Size 368KB
        • SHA256 84b7dfdeab3e126c2bc0655227290841b53b757d4c8d085f53be71ff4fbb4cbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-ONJ2JJQCT2.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-ONJ2JJQCT2.tmp
        • Size 505KB
        • SHA256 ab0521df7a1f06eb8c7b4f988e42e5e1471d5b7c1dc3198a16c8a97ef31a24a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-OZPW2465Z0.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-OZPW2465Z0.tmp
        • Size 406KB
        • SHA256 12b2ca4e7c0d697b0c16394e6b227041933b9e2ad7ee85ac9283babf7f1ed823
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Q7GPQYI8YS.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-Q7GPQYI8YS.tmp
        • Size 361KB
        • SHA256 19341dba6725bac0ef0ab9822383acd39729b7675cdd88d0ecbda9580e9d7f92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-RYS7253W3U.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-RYS7253W3U.tmp
        • Size 296KB
        • SHA256 ffce6d6b6876235bb7012082f9aa03fd9f01da3b814ba1f43837051025f3fea4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UF1U3GSXLJ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-UF1U3GSXLJ.tmp
        • Size 308KB
        • SHA256 4d5cac1714be158e489aaf507d7708e0d1056bafa5b57274ebaf53881ffa226e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UJ26ABQQLQ.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-UJ26ABQQLQ.tmp
        • Size 196KB
        • SHA256 3779ceb9b6c900ded92eb882bd7227948419a75b57cff75698777809b194f52c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-V1IKAFW6SH.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-V1IKAFW6SH.tmp
        • Size 562KB
        • SHA256 914a346dde8a8eb7c83b1b93393adddb4b39e2a765735ada70eebde5f4f16fc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VPSADGT24U.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-VPSADGT24U.tmp
        • Size 191KB
        • SHA256 9ff990d2128eb582b13d663379173e43fb9bdc68ccd950ce133a49ff33dcd338
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-W44PXIEHR1.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-W44PXIEHR1.tmp
        • Size 335KB
        • SHA256 e2bb7b05d42a57e0229a932f7101ec2a49ac8b8de67431fd2dd8354e5936fd41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-W9A3S7BL8X.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-W9A3S7BL8X.tmp
        • Size 311KB
        • SHA256 10ab88fde669679db767c5d16d518462de71b2cb0218cd6692d03ede32e8f844
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-X17BQ0ZHZD.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-X17BQ0ZHZD.tmp
        • Size 459KB
        • SHA256 7d49ea44574bebf2f1422f49ddb42d4b6f3aa6766d08eaf1306e6b937556e628
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-XDBP0OD21J.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\room\is-XDBP0OD21J.tmp
        • Size 220KB
        • SHA256 f95c97f701c7d8e4d04214657bfa323b439aaba04514caeb72d5f15eeca73fe7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-KAXFU9S0KV.tmp

        • Path C:\Users\Public\Documents\Audio Modeling\AMData\SoloStrings\Strings\Viola\SoloStringsCommonResources\webcomponents\is-KAXFU9S0KV.tmp
        • Size 6KB
        • SHA256 c896f93efb9d5399d027e0debca16370ec168a912e2c3306d28d177d8041ce95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3576-14-0x0000000002A80000-0x0000000002A81000-memory.dmp

        memory/3576-609-0x0000000000450000-0x0000000000960000-memory.dmp

        memory/3576-13-0x0000000000450000-0x0000000000960000-memory.dmp

        memory/3576-6-0x0000000002A80000-0x0000000002A81000-memory.dmp

        memory/3576-1088-0x0000000000450000-0x0000000000960000-memory.dmp

        memory/5536-12-0x0000000000920000-0x0000000000A16000-memory.dmp

        memory/5536-1-0x0000000000920000-0x0000000000A16000-memory.dmp

        memory/5536-1089-0x0000000000920000-0x0000000000A16000-memory.dmp