Overview

overview

10

Static

static

10

FL Studio 25.exe

windows10-2004-x64

10

FL Studio 25.exe

windows11-ltsc_2024-x64

10

Analysis

  • user interaction
    yes
  • max time kernel
    1049s
  • max time network
    527s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/10/2026, 01:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FL Studio 25.exe
  • Size 144KB
  • Sample261014-b245eaea85
  • SHA256 f6aaeb3d9ea91538739ed36f5b8f53eac68b0050562e3f14019ad4ab8a9a7d53
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

Malware Config

Extracted

Family

  • asyncrat

Version

  • 0.5.8

Botnet

  • Default

Mutex

  • CJjWFKOVKRYV

Attributes
  • delay

    3

  • install

    true

  • install_file

    FL Studio 25.exe

  • install_folder

    %AppData%

  • local_host

    127.0.0.1

aes.plain

Signatures

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat
  • Async RAT payload 1 IoCs
    rat
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Delays execution with timeout.exe 1 IoCs
    defense_evasion
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 4 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

    persistenceexecution
  • Suspicious behavior: EnumeratesProcesses 29 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 43 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FL Studio 25.exe
    "C:\Users\Admin\AppData\Local\Temp\FL Studio 25.exe"
    1⤵
    • Checks computer location settings
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "FL Studio 25" /tr '"C:\Users\Admin\AppData\Roaming\FL Studio 25.exe"' & exit
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:548
      • C:\Windows\SysWOW64\schtasks.exe
        schtasks /create /f /sc onlogon /rl highest /tn "FL Studio 25" /tr '"C:\Users\Admin\AppData\Roaming\FL Studio 25.exe"'
        3⤵
        • System Location Discovery: System Language Discovery
        • Scheduled Task/Job: Scheduled Task
        PID:4420
    • C:\Windows\SysWOW64\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\tmpB689.tmp.bat""
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2940
      • C:\Windows\SysWOW64\timeout.exe
        timeout 3
        3⤵
        • System Location Discovery: System Language Discovery
        • Delays execution with timeout.exe
        PID:216
      • C:\Users\Admin\AppData\Roaming\FL Studio 25.exe
        "C:\Users\Admin\AppData\Roaming\FL Studio 25.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1992
  • C:\Users\Admin\AppData\Roaming\FL Studio 25.exe
    "C:\Users\Admin\AppData\Roaming\FL Studio 25.exe"
    1⤵
    • Executes dropped EXE
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    PID:4388
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff96760c728,0x7ff96760c734,0x7ff96760c740
      2⤵
        PID:4300
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,14937449937350007636,17650841396579808219,262144 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1964 /prefetch:2
        2⤵
          PID:3084
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,3125751251094075924,10124406285852773627,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2292 /prefetch:3
          2⤵
          • System Time Discovery
          PID:1124
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,1608620757547426299,6679460169751359048,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2428 /prefetch:8
          2⤵
            PID:3828
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3224,i,4489187397615519659,3275097139174502454,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3236 /prefetch:1
            2⤵
              PID:684
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,9404612646940010317,3438023797936470974,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3296 /prefetch:1
              2⤵
                PID:2344
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4488,i,3395823888563741604,16769657344154273790,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4480 /prefetch:2
                2⤵
                  PID:2924
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,12560216400274390294,1699675942369080643,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4744 /prefetch:1
                  2⤵
                    PID:3604
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,911180033644264162,1623692383824228349,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5520 /prefetch:8
                    2⤵
                      PID:2816
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,8167195971050598758,9607374638629905771,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5820 /prefetch:8
                      2⤵
                        PID:980
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5836,i,12846374664466900691,15880834025221868105,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5908 /prefetch:8
                        2⤵
                          PID:3052
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5840,i,13895793381713393804,5009620694481582207,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5848 /prefetch:8
                          2⤵
                            PID:2512
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4924,i,3492272285815117157,5793546195496701115,262144 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6020 /prefetch:8
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:2804
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6136,i,14205602597125653963,11317734205350127957,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6120 /prefetch:8
                            2⤵
                              PID:4952
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5684,i,3368849143100380089,641719158787870922,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5820 /prefetch:1
                              2⤵
                                PID:1508
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4556,i,3353674022039912891,10705648660586285787,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4704 /prefetch:1
                                2⤵
                                  PID:1580
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3352,i,8015226209145246212,760353590648665034,524288 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5708 /prefetch:8
                                  2⤵
                                    PID:3320
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4500,i,17392481878409832141,10842083940070267988,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3388 /prefetch:1
                                    2⤵
                                      PID:1596
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4732,i,11194895124973974256,2221212884981697275,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4800 /prefetch:1
                                      2⤵
                                        PID:3048
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6260,i,11222445605524331375,6417005468524514716,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6280 /prefetch:1
                                        2⤵
                                          PID:872
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3392,i,13652828913476762740,9937699002790092000,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6080 /prefetch:1
                                          2⤵
                                            PID:3116
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6452,i,3553459552487513929,2731555795164164109,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6528 /prefetch:1
                                            2⤵
                                              PID:1668
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6560,i,13439003910653782647,3659605012881492714,2097152 --field-trial-handle=1968,i,7794032785690444662,7834961188013791118,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6548 /prefetch:1
                                              2⤵
                                                PID:3852
                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                              1⤵
                                                PID:3184
                                              • C:\Windows\system32\svchost.exe
                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                1⤵
                                                  PID:2296

                                                Network

                                                      MITRE ATT&CK Enterprise v16

                                                      Replay Monitor

                                                      Loading Replay Monitor...

                                                      Downloads

                                                      09dd3fb0-944b-4948-9196-ba952eecc5dc.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\09dd3fb0-944b-4948-9196-ba952eecc5dc.tmp
                                                      • Size 268KB
                                                      • SHA256 96657eef5af275a0ebaaa7195782381d4a51a5c825af7abc397238167719e41e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      25cc75eb-9fa4-4895-8e35-cf451fc86583.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\25cc75eb-9fa4-4895-8e35-cf451fc86583.tmp
                                                      • Size 130KB
                                                      • SHA256 1365ff4bad705e2e74b9571ebe4201727d5b591b979a12d185935d39557517bc
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      5364233b-9c63-4c42-9075-2ed7d4317902.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5364233b-9c63-4c42-9075-2ed7d4317902.tmp
                                                      • Size 267KB
                                                      • SHA256 00855ffa92f04714e2237409fcf725248a9f9e67ea6df07af804113673aa9810
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      7de4ca2e-9978-4967-bffe-128f425b286a.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7de4ca2e-9978-4967-bffe-128f425b286a.tmp
                                                      • Size 268KB
                                                      • SHA256 c3154b3aef4908ede7de811df5d3164361b6646d98abf987ecbfb2de7d8ffd80
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      7e096d29-b2d4-470f-8ebb-f9a02c7bbde3.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7e096d29-b2d4-470f-8ebb-f9a02c7bbde3.tmp
                                                      • Size 268KB
                                                      • SHA256 4f3bdc4776acde12fd219353867cd4ceac49e4ea108d6a8fce1086cbe2bacbb2
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      854bbb0c-6418-4591-87ad-9352107b0071.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\854bbb0c-6418-4591-87ad-9352107b0071.tmp
                                                      • Size 269KB
                                                      • SHA256 9cf55a7d8f020e09531b916ca12e6f5358e5edc95cffa3a375be1130f3b789b4
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      settings.dat
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                      • Size 40B
                                                      • SHA256 84e6fd027ea8e630687c4c70bb82f9993501345987298d008342ed16c054e189
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      0c61a262-2403-4679-a2a2-8c14e48e79c8.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0c61a262-2403-4679-a2a2-8c14e48e79c8.tmp
                                                      • Size 13KB
                                                      • SHA256 77ec20a30cd97fc4ba48a8eaf35a263831ad8aba4b11a6beb382f19b03ee9c80
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      1fe267f1-d07c-4012-8bc6-c0cda5bc3c8d.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1fe267f1-d07c-4012-8bc6-c0cda5bc3c8d.tmp
                                                      • Size 13KB
                                                      • SHA256 f1f02579ae4a04b7af84c6f4b8b816f1a17efee9ef13d437bef7ae359dc85e44
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      20dad4c2-1a11-4e80-8bb3-bd398a88265a.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\20dad4c2-1a11-4e80-8bb3-bd398a88265a.tmp
                                                      • Size 14KB
                                                      • SHA256 cd8c76b883043e803193d288e2b93452ae58a8f1f925341fd4e2706000a01e97
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      2f5607d6-1731-4242-beb7-b37895993b95.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2f5607d6-1731-4242-beb7-b37895993b95.tmp
                                                      • Size 13KB
                                                      • SHA256 c7e5d822a5561536c9ef2c2ed62d4bca639689e931ce85fc1829879a38b14a9f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      47a63c77-7479-4a91-a5bc-1bc3cebc2e42.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\47a63c77-7479-4a91-a5bc-1bc3cebc2e42.tmp
                                                      • Size 13KB
                                                      • SHA256 6626e2adb37fd2a269712865d3c73e852e7f9d2354c9914e29e12fecfbeb9608
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      48987b27-fa1e-4ff7-8457-b12795809320.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\48987b27-fa1e-4ff7-8457-b12795809320.tmp
                                                      • Size 13KB
                                                      • SHA256 810d62f85cd49566dca775f36989ed0bcfbc99a198ccb3dbb5eb0cbee4372be4
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      4940d3bc-2e49-4aa7-bdd7-4a18ba6c942a.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4940d3bc-2e49-4aa7-bdd7-4a18ba6c942a.tmp
                                                      • Size 13KB
                                                      • SHA256 4e4535464d4fc0c21a2ec40a46564d2ebc0418bb0efd9e72a9ec3249074d3127
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      4ea4605e-69e0-4929-8e56-ce0dd70e7a3c.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4ea4605e-69e0-4929-8e56-ce0dd70e7a3c.tmp
                                                      • Size 13KB
                                                      • SHA256 16242765241c8a493044b3d65b574a31193db0f7bbbbe4e77414ce0db9b94335
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      578c7b7b-9180-4c9e-abb8-1e4937348d46.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\578c7b7b-9180-4c9e-abb8-1e4937348d46.tmp
                                                      • Size 13KB
                                                      • SHA256 69062381d291b0c160ba3b607f5906bbb988091d92849a1648b229a9f65aa97c
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      7025b8c2-f3ea-4722-961b-5cc6f864f8f0.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7025b8c2-f3ea-4722-961b-5cc6f864f8f0.tmp
                                                      • Size 13KB
                                                      • SHA256 f3b4ac4adbce4608829bb8666d83251dafa420b7ff7e303300ad638abafa97ae
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      7b8ac6c2-6b4c-4dc0-9ff4-43db825d49d0.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7b8ac6c2-6b4c-4dc0-9ff4-43db825d49d0.tmp
                                                      • Size 13KB
                                                      • SHA256 d984172accbfc4923c577d726403f9cbcfca211ef357b1cbcf0df8fdea9ff166
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      873b65da-77de-4035-acc6-85c042ee25d2.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\873b65da-77de-4035-acc6-85c042ee25d2.tmp
                                                      • Size 13KB
                                                      • SHA256 f94fcf41ad296662fd7f171c7017135ba8cf2d3a7cbb38836f28d8581a5f9a1f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      9a53d245-5536-4681-b10c-bd5c0ec8a1e9.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9a53d245-5536-4681-b10c-bd5c0ec8a1e9.tmp
                                                      • Size 13KB
                                                      • SHA256 7db71ee0dd452f87de7a6b0f8c3272116e77e8e80e1fbc5b158a5acd738e92fd
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      9a76dd87-a5db-45d9-abd5-5d0c6f2d500d.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9a76dd87-a5db-45d9-abd5-5d0c6f2d500d.tmp
                                                      • Size 414B
                                                      • SHA256 48a1bf2da96573482d44b3427af5d742f63733e81bb406add2140fb011606513
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      9e551360-482a-4039-8048-ce43cb3b5f9a.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9e551360-482a-4039-8048-ce43cb3b5f9a.tmp
                                                      • Size 12KB
                                                      • SHA256 849d8b816aeee4e38bc784c7c7aea9d10fdb164b892c92971bb57f6cab38f121
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      f_000005
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
                                                      • Size 76KB
                                                      • SHA256 1cfed5d288f1e80c28b8266f0e42d8c04915c242d3aa22b7d7562460fc6f84ac
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      f_000006
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
                                                      • Size 20KB
                                                      • SHA256 cfde44d5f86bfd62622253fc8e1090162756b25ccd15fc3d881e1cbae5e374f1
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      f_000009
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                      • Size 26KB
                                                      • SHA256 5c8a554490b939a8c1274d4b42cb06276182cfc9b70ea6396869b1569bc5e9b4
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      f_00000a
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
                                                      • Size 17KB
                                                      • SHA256 e3353a5c76505dab79177ee2d2778523edaf012b508f3fca894a9d965206dbe0
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      f_00000e
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
                                                      • Size 346KB
                                                      • SHA256 a1ceb3df9fb44cafac57aa6814112f415b31d062f45029b84330a4c8b6ee2223
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      temp-index
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                      • Size 1KB
                                                      • SHA256 4da6cea1023dfcd5019cc230806dec6f47659791a1a3f112eb8cc8c98d62a04f
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      temp-index
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                      • Size 1KB
                                                      • SHA256 db0d94e3ac52b15d9350b2bec284e8d3fd206bb23a5fe113a46265b743b42f51
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      temp-index
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                      • Size 2KB
                                                      • SHA256 ea3a95a79c6c9a2faa97a26f397e58b3f4e17e2077584724a51c87db51722bb4
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      data_1
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
                                                      • Size 264KB
                                                      • SHA256 718bd31eacbd990558aefe9bbb5e4fa6f75d91985d1b50b10ef323e044a3b8d8
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      3cea7321-9a23-4764-bbe6-46325f5fad95.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3cea7321-9a23-4764-bbe6-46325f5fad95.tmp
                                                      • Size 3KB
                                                      • SHA256 1a8e453bc93999ead667592666b2513a10369a2d89a240f28565a1d0f0d65779
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      53b4556a-5c51-4b77-802a-dad638fb5a1c.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\53b4556a-5c51-4b77-802a-dad638fb5a1c.tmp
                                                      • Size 1KB
                                                      • SHA256 ec87f211d3462681fbb2630fd5d97fba5b159cf63997ca4d6a5a2c639ee0bb05
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      8bccc595-7dab-4bd7-aadf-a7eac140ea51.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8bccc595-7dab-4bd7-aadf-a7eac140ea51.tmp
                                                      • Size 4KB
                                                      • SHA256 1d908d63f783f81e77d27a57e1bb79522e9483cbad8488f42e6d6d36b5138869
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      90c9868e-014e-4b17-8930-bcd97f4883ba.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\90c9868e-014e-4b17-8930-bcd97f4883ba.tmp
                                                      • Size 2B
                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      c648916f-7e4b-4a6a-b72a-e247775239c1.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c648916f-7e4b-4a6a-b72a-e247775239c1.tmp
                                                      • Size 2KB
                                                      • SHA256 728b422494b446a17af72fcd96d0a00b44fa0c98dd25047142288aa3d5dd9bde
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      e4b1e1e6-34b6-4936-b095-8880ecf0fc73.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e4b1e1e6-34b6-4936-b095-8880ecf0fc73.tmp
                                                      • Size 7KB
                                                      • SHA256 3acb60a41882f6c1dc3e5d8f96b6dd7d20e5b3af910e4c2214815389f406e7f9
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      fbc9e84d-827c-4de9-ab34-4f0e3129ed38.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\fbc9e84d-827c-4de9-ab34-4f0e3129ed38.tmp
                                                      • Size 2KB
                                                      • SHA256 7c6fece162c3f0de47e221916daf1ae155c702fcdbf0bac192c7b2b421b9c5b3
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      temp-index
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                      • Size 120B
                                                      • SHA256 72ca9682b177a4d7995689092b7e23a8a82e19d6134bd25d39adac6e468bd398
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      the-real-index
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                      • Size 96B
                                                      • SHA256 60a4e2a68edaf697e380ecfb1e6e6b9f62c8d1592a936d214287150ab32b6e48
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      temp-index
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                      • Size 72B
                                                      • SHA256 5b5c7e6fa0acae1cdf35747c458f05ce034146b4280761beb679d02cbfbd017f
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      c8beebbe-c01c-4363-a5c9-369215296d4d.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c8beebbe-c01c-4363-a5c9-369215296d4d.tmp
                                                      • Size 12KB
                                                      • SHA256 916cc5287de2df7aabf26e1d1d1020a6ef92f601a846c51fec12898740a65483
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      cfcd5767-b2e9-4f42-8829-ff0289810495.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\cfcd5767-b2e9-4f42-8829-ff0289810495.tmp
                                                      • Size 13KB
                                                      • SHA256 64ae7d7c89011ca7ead9b2269741d6656b14b152be8e42894a6d18433d680dc5
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      d0ddffef-99e2-40a1-811e-13cbc27676ba.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d0ddffef-99e2-40a1-811e-13cbc27676ba.tmp
                                                      • Size 17KB
                                                      • SHA256 d6ef7be1fdf322a98e133d0f16a9689d7b7e779ed80b3b246f7f0abd127671a4
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      fa175323-832d-4db4-bf23-bbde2fd6ec57.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fa175323-832d-4db4-bf23-bbde2fd6ec57.tmp
                                                      • Size 6B
                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      aaa938ab-8e82-4a01-82b5-520c6638605f.tmp
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\aaa938ab-8e82-4a01-82b5-520c6638605f.tmp
                                                      • Size 267KB
                                                      • SHA256 657078c9b1f95caa0302cd1c3f735aee80b4283751924bc450705ff05094a0a9
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      FL Studio 25.exe.log
                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FL Studio 25.exe.log
                                                      • Size 614B
                                                      • SHA256 9ed5449a36700939987209c7a2974b9cc669b8b22c7c4e7936f35dda0a4dc359
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      tmpB689.tmp.bat
                                                      • Path C:\Users\Admin\AppData\Local\Temp\tmpB689.tmp.bat
                                                      • Size 156B
                                                      • SHA256 b0c9d73b8fce3cd0b46687f0d8513c8b7253eace09ccedf5418d5c399c82dcb3
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      FL Studio 25.exe
                                                      • Path C:\Users\Admin\AppData\Roaming\FL Studio 25.exe
                                                      • Size 144KB
                                                      • SHA256 f6aaeb3d9ea91538739ed36f5b8f53eac68b0050562e3f14019ad4ab8a9a7d53
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      43950121-6a78-4d2c-ae43-5b71278567c4.tmp
                                                      • Path C:\Users\Admin\Downloads\43950121-6a78-4d2c-ae43-5b71278567c4.tmp
                                                      • Size 4KB
                                                      • SHA256 54c34ef23af3aac90bf1e58375001cc9263cd639fa4ae75434e1a616fb397a14
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      memory/2232-3-0x0000000005DC0000-0x0000000005E5C000-memory.dmp
                                                      Download

                                                      memory/2232-2-0x0000000005970000-0x00000000059D6000-memory.dmp
                                                      Download

                                                      memory/2232-1-0x00000000058F0000-0x0000000005900000-memory.dmp
                                                      Download

                                                      memory/2232-0-0x0000000000F80000-0x0000000000FAA000-memory.dmp
                                                      Download