Analysis
- user interaction
yes - max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/11/2026, 22:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HRTFinator-1.0.1-windows-x64-setup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
HRTFinator-1.0.1-windows-x64-setup.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
General
- Target HRTFinator-1.0.1-windows-x64-setup.exe
- Size 20.2MB
- Sample261101-148caazz6p
- SHA256 bbb9c4f95f23d510d1c033936abb2b62e2e01571671604b29ff04110aa75aa43
- MD5 e072904115083c9e605da66fb4e654fb
- SHA1 d45329dfd9b9b5064d2d32f6ecd31b5b753a35d6
- SHA512 1419067e594cc7a6a4160ebbf851c9c28a5a5b4d07a2f3e183cb0291a551cf80537b19ba5c5f2014352d7e41674566ac16d2cb58d8997991b9553ecb16bdcb5a
- SSDEEP 393216:6I6O7PRkkrB4ApSgMWYeHt12nNtHH09/ud3MW3bcu0kRhrMs03ulCq1OE:6I6Opbr3pSgJZsNqd674urXMFelH/
- TLSH T1BD273327BE5186B9D4AB8EB88977471086663C010320ABDF2791725EDEF37D01EB27C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 4244 HRTFinator.exe - Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\O: msiexec.exe - Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files\EqualizerAPO\config\hrtfinator__0.0.0.00000000_._8a79f8a8-b090-4ff7-887f-3d90a0af83e3_.txt HRTFinator.exe - Drops file in Windows directory 8 IoCs
description ioc Process File created C:\Windows\Installer\e58ae1d.msi msiexec.exe File opened for modification C:\Windows\Installer\e58ae1d.msi msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe File opened for modification C:\Windows\Installer\MSIB3F9.tmp msiexec.exe File created C:\Windows\Installer\e58ae21.msi msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\Installer\SourceHash{C02D977E-CAB3-4E76-83E8-C8144FFC84B8} msiexec.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname HRTFinator.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain HRTFinator.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4028 msiexec.exe 4028 msiexec.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeIncreaseQuotaPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeSecurityPrivilege 4028 msiexec.exe Token: SeCreateTokenPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeAssignPrimaryTokenPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeLockMemoryPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeIncreaseQuotaPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeMachineAccountPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeTcbPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeSecurityPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeTakeOwnershipPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeLoadDriverPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeSystemProfilePrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeSystemtimePrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeProfSingleProcessPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeIncBasePriorityPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeCreatePagefilePrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeCreatePermanentPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeBackupPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeRestorePrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeShutdownPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeDebugPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeAuditPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeSystemEnvironmentPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeChangeNotifyPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeRemoteShutdownPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeUndockPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeSyncAgentPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeEnableDelegationPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeManageVolumePrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeImpersonatePrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeCreateGlobalPrivilege 5900 HRTFinator-1.0.1-windows-x64-setup.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe Token: SeRestorePrivilege 4028 msiexec.exe Token: SeTakeOwnershipPrivilege 4028 msiexec.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5900 wrote to memory of 4244 5900 HRTFinator-1.0.1-windows-x64-setup.exe 93
Processes
-
C:\Users\Admin\AppData\Local\Temp\HRTFinator-1.0.1-windows-x64-setup.exe"C:\Users\Admin\AppData\Local\Temp\HRTFinator-1.0.1-windows-x64-setup.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5900 -
C:\Users\Admin\AppData\Local\Apps\HRTFinator\HRTFinator.exe"C:\Users\Admin\AppData\Local\Apps\HRTFinator\HRTFinator.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Reads the TCP/IP host and domain name from the registry
PID:4244
-
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4028
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4632
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Program Files\EqualizerAPO\config\hrtfinator__0.0.0.00000000_._8a79f8a8-b090-4ff7-887f-3d90a0af83e3_.txt1⤵PID:4484
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e58ae20.rbs
- Size 14KB
- SHA256 b44858b2b311af32cc42daaa961aa2eebb2b1c1d8a011815015a687024ccae9c
- MD5 f28e25085a6131a613782f5a9332d1b8
- SHA1 b8b57852968a3f63ebad45c3e5cd97402a5cfd69
- SHA512 8f202bae8a7368b752648982e8c43fd78606d56bed920e65ece00fd9e86a9dae6b34914dc2a5bd58505c00b8805649230e496b41aa3ce1d302ab726aad26c3a9
- SSDEEP 384:o/UyJ479KNXE523Yq1Uoeg/sdG0KvdO/jXK/HO5HpMhDVhCsRRWa:o/te79KNXE523Yq1Uoh/sdG0KvdO/jXO
- TLSH T18B5272C192A6E6F3E018327B87530769276BD684FA46364F071EC9382EA11CCDF4E756
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\EqualizerAPO\config\hrtfinator__0.0.0.00000000_._8a79f8a8-b090-4ff7-887f-3d90a0af83e3_.txt
- Size 116B
- SHA256 5eff66e70c30c7e7470815eb4b79516378fa4841768d05c9218098f4c73b5d46
- MD5 0045303d31c0a0cac07b47bd0e5613f2
- SHA1 4c24c5528f4278d5294e898caaf5980fe63f920f
- SHA512 642eef2fc1ec391efc55f5e26c65757909358e7ee797bfeba1b4d74bc16e2f4d678f031e608725b4ed0504b698061d54b33f55527755e4873ea37d13e5aa760c
- TLSH T10BB0223F08888A2B0CA8000032828E300AA200080A2282382AAC800EE2A88E8C2A0823
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\HRTFinator.exe
- Size 18.5MB
- SHA256 d79737d541f8ea53da93f76a3d2f7a92d3e4dabfd815c0aa88ea88408c220c38
- MD5 4669204f71edc33f11b061ecf79e3321
- SHA1 550bbded2fde7f8b25a98f722fac3fb5d9b2e646
- SHA512 8780a0956a1c774076662b7bb231128e806c298fd02ebebe559e6c783b00eb7ab8277ceeee3ec5e1b0f8d110dd5f1beb025d8c9fe81ef3ad8de7a089c77628f1
- SSDEEP 196608:e2fOO/pcZJJYlQYWiij8B1j5iAnP9zSvyNNymoYzfo3APCzyQhSCDDCS2Bub:e2/ziO+w3QhBDDPKub
- TLSH T150175C5672F8028CF0F7917D8AAB9A07D67278194721C7DF0690425E1E27FD88D7AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\content\bootstrap.json
- Size 225KB
- SHA256 7bdb066b84549b155b7c0c55dc1956b7b9f342f5369332130451c8f811caef95
- MD5 d938c78b8bc70632df5dc1bfbf402929
- SHA1 10ce044c2d00f5049ed13dc27d932cceb9f88414
- SHA512 d8b16a98ea3a1f39ec755a0cb934338a19da60b2e4bc65491f7f8d47ff68cce7e40ce2055f6956f45ad9387825b399b3640827681b5ddb0d47730749f6aacef4
- SSDEEP 3072:JQxQLrsEZ+rm8x8+oOJrGrXaSFdbhVnhrX1OHm:rrsEZ+rm8x8+oOJrGrXaEdbhlhr1OHm
- TLSH T111344BD003D489F9F7AE539998A7188C3EA5207BB5C4788CC09BFD896447FD2572A84F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\convolution\k9's Magic Sauce 1.0.wav
- Size 748KB
- SHA256 0c08c38bcfdf976c15644fd2db02f9e892472197160b1306e289f491eb018aaa
- MD5 4c43624a410af803c21199d78b7d0333
- SHA1 8aba85bfbbee214c285074abbafa1eba361970ab
- SHA512 67959f52db0abbad2304c77e21562f6ed8e58b2d90d14e0c71d2d8364132e028d84f11203cedb7bd5fc1e7c9f99f30a361bc59c427ff250dfbd29882593fae84
- SSDEEP 12288:3l9I1axtzVf3IEo22lkggKtAo+QZ+x9rR2tUCWVnBxxvk55GA+UKwRE3X/JAqdc1:U1arzVf385lkFKtAEKZUtUCOnBxa55mc
- TLSH T1BFF423C641167B0760202C5979618AC5493605E151FE4E4A3A053EBECABEB6CFDCBCEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\fonts\CascadiaCode.ttf
- Size 378KB
- SHA256 cfb6a8d474018fe46d53a427e5fbee44b998822d0d3d8772914bd712cfc55ac4
- MD5 e7e887b42d96810e1ebbb4b62d187f7c
- SHA1 df54a2efe06807a210b995ee213df4fdf8da9007
- SHA512 d3a9994cbab8a6a5d65d2432057e946cfc5382d8164c391b0e9d1f7e85374aed2f26315e0e4353908c7b223f0b6bd0251464a13438cc7229c60e2bc1b08c81e7
- SSDEEP 6144:QmiXtbiHL5IdLeoGv0KvZyHjHq42S+Mz5gqb9oxg+7:QmiXt2og0bHjHaufb9oxl
- TLSH T1EB84958FF32BC9949C16557507551B3E4A3A332C9B3F1BAEADDE1E38D8463600C24BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\fonts\NotoSans-Black.ttf
- Size 615KB
- SHA256 18ee64cb5a5a842f036857f771e3a35ba9708a6d13b047d573ead088682083b9
- MD5 a45b4647b217a27f7eb0db1f4a4a2421
- SHA1 cff09f171df2fc77cec75ca8beb505c38637be4e
- SHA512 5f55cdd776baac60c600b70993bd3ba643eaf9bd33ed38014f5e5f7c944ef8380dc07d16e0ca1f353c1840f5c63fb3a6ddc7b9c049acc85f0345c56dbd7daa77
- SSDEEP 6144:sHsnp3A0PZd5Y6fo9U3JuN5XtHNtkBJcRhV/uZ52JY2P3i2FCKycAicHGOYG9NeK:sHvR6fGrMqRhV/uW7k8XSmK
- TLSH T1DED46D03EB6BDE8DE2021F785677D3A263B8BD716F5B830BE5416927F89F0C04951688
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\fonts\NotoSans-Bold.ttf
- Size 616KB
- SHA256 13a813c49624ae3ba3c5c6e72c5ebffc4b9e1e6ea32f421c04069b037c6ad431
- MD5 28c191ce33ca36e0f75106491846de68
- SHA1 bc7f5e39185c4912c013624fcf123fe213b14890
- SHA512 1bc0d51b8cc2d0c24fc467d93a668fa3f211dd617f134cb5647fb27eab70420f65ef8c1764c48884baad81d89af28881087603808338c65106a05d28e1bff034
- SSDEEP 6144:iHsm2jp3A0PZd5Y6fo92QqQD9SNTHzDGlrKF+99xAyu2PPmswfekV4SsRwC/x01G:iHs32R6fMPT+p7mqZzI01cP8m
- TLSH T1A8D46D03E76BDE4DE3021FB8567793A263B4BC74AFAF830BE5455967F89B0C04941688
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\fonts\NotoSans-SemiBold.ttf
- Size 616KB
- SHA256 e691fe27813ec6ed11d0a5be4c6c1f6739996ed682462eaa3244a6185217dd6c
- MD5 f5a1e1476234ba356911d9b4e287e30d
- SHA1 ab4e235f3ca95a23a141d9da371142939ba3c848
- SHA512 ca9b306dbf13117dbace7a0d87de20866f0da53ac5f78fad670273eaab4ea71dea46086b40bda34739effb605ada10ea82fe25d9149d889bb61780496e158e1b
- SSDEEP 6144:kHVMJ3cNyrdhp3A0PZd5Y6fo9HbKAkj0eM/zle91swpH4Ceo6tWUODYVEocZu6yf:kHVscNy2R6fDKe9ppH4nUZuVVR89Dbm
- TLSH T151D45C43EB2BDE59E2021F7856B393A263B4BC746F6F830FE4456967F89F0D04981588
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\fonts\NotoSans-VariableFont_wdth,wght.ttf
- Size 1.9MB
- SHA256 7b8cac46a1c86d2533a616b1fcf4e1926b8e39bda69034508b0df96791f56d97
- MD5 b72e420edb95cdf06e6e0a27bc0d964d
- SHA1 74b81677712cf4cae2f58c96229889f607de1dd4
- SHA512 bb61383b65abec7629f1e4ca7fc11848bdc3ca294a3f2e12534185048b60dc1f485c081e4bb23fabc8cf5645c58bd9b5a4335e6134c8d3e7b613a2cc2888b829
- SSDEEP 24576:GH7nxLLR1vk6doevguv7Q1d4fOU2FC4gAAQzRB6FV6zN52i4cPr6rIaM3Wurd+LE:GH7nN3BQ74fOUaC4gAAiRBC6zNZeluP
- TLSH T12495CF43E7C9CEC5E1052B7852B34391123BAAB8AF5B070B5F697935FDAB3C02E05586
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\sofa\LICENSE.txt
- Size 11KB
- SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
- MD5 d273d63619c9aeaf15cdaf76422c4f87
- SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
- SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272
- SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8SHfH2:kOu9b01DY/rGBt+dc+aclkT8SH+
- TLSH T1B832832BBA4903771AF20122AB4764CEF31EA03F37591525315CC1682F7B96583FB69E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\sofa\NOTICE.md
- Size 1KB
- SHA256 2bd6dc80c6b06d5f9670948950ecf82102868b0f3c189b7d76d156aa0c9cd4f5
- MD5 2461881d41b0fa408b87d30bf961fddb
- SHA1 0c5022f6629c1e02604c2b02154c9b24f4311713
- SHA512 a6a042b3173d5d26c2e07441cb71f7313f1c484c62aef662630f9d15ddb2e32606d1aa9a04fc5176936ce035a50cb291ca5a916c8aeed807998678e78da68b3c
- TLSH T1FC21679FBB058663060E65B23555A75FF31D311895DF4A8138C244CD1324A287BDB35E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\sofa\SADIE_KEMAR_DFC_256_order_fir_48000.sofa
- Size 11.9MB
- SHA256 6f4976384ca6ae42b77b305f42ad5669d6d2fe66ca5d7d752390bc34381ccd88
- MD5 3ca38b6a6e55c10a59f4b8013dbfcd76
- SHA1 80ed21072fbb73dd0b90d082d29f68b69a05bd20
- SHA512 6e6d040a6637e44372ce716919ef37651eff2d0a19d16d3e59c49f6c16d66c5568dec5742576e19c82c463f948e0b0ea91f0f3c10e0f2cd050b3a5533189bfc4
- SSDEEP 98304:Qxm/ewwN0skoWbwnEu2deTBX9ji2nqosg0VGAW/1vAwSdkgXI4Ch8:VtwZQbwndmKBXc2nqosZVNm1+x
- TLSH T1D6C6F0ACB1334E94FDC74976D2FE9A28CD0E0712A1E298B001F51EB5CDD9A167A1F48D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Apps\HRTFinator\assets\sofa\SADIE_KU100_DFC_256_order_fir_48000.sofa
- Size 11.9MB
- SHA256 6822b4318ce80ab6b8421a4b55b1edcedde1b276426aa5416526a57cccbe7e58
- MD5 ba86b033077fa0efd4add83b0af72262
- SHA1 c3f3e69dc9c11443c0987a90099ffea91d619e74
- SHA512 c03fc08a9d5d7e89c234ccbff6a96a420780b62a51987bb052a0e799fc18511adb43d1fc84b7ced78d2208809a4d40ee7b035c6080949dab9785b3513a7b942e
- SSDEEP 98304:NXTOVQIDuv/WC3ghixtTxhtMrc+Od7pwx+LZFR43ZlxuBy1/px9Ik:NaC/ngQHTxwriwAvR4330IF9V
- TLSH T144C6F0ACB27B5D68FDC341B5C6FA4AAACD0E074021D2A5B282F41DB0CDC4B66365F49D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\HRTFinator\logs\install.log
- Size 1KB
- SHA256 717927488e80e36b642af148e0a5f062423c814e01f4c99cb36dae535ce4eeed
- MD5 a1bafc5e95c9354a531133add9b458af
- SHA1 20395317e1290dfd1f295b1bdc8510a32860945b
- SHA512 f692dd3b4dfe8408f6f8ba2f6b2f82dcde67501d3505e1ad40c185e519fb4630c56b80cf917d928347ebe2354378b99318b94356cd11eee99608050e572291db
- TLSH T1B541B5591BE90804F1B79B479AF780570E73BCEBA834AF0C13848319066FD0969657AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\HRTFinator\storage-locations.json
- Size 240B
- SHA256 2741a639f95ecfea2ec09f0061eb7a1d99f044954270e8ae7b6b396bad0794ad
- MD5 d71e3a0d3fbc0d7f9be08d9493c4de95
- SHA1 88e9ab7210da914ca0cff89dca4b552d568aa6c6
- SHA512 ca885af9118aed1c4d0895cb5f0be397bd1cdae8e4698b7b0d37abd7cd289eb0c52c137e7cede1b27561ddcdcf72b34d36187225e3a8f11ee6afac5457a265d3
- TLSH T1BFD05B2094A3AE722984255A2271520BDC1148EA3CF43714B61E889C0A44D7C4576853
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\HRTFinator\updates\calibration-state.json.tmp
- Size 24B
- SHA256 f54234f455dfd1683099256a10fcbb6b56e4de44ddb12fc678f63fbdc3084909
- MD5 8474c3fc32cc3bd54684ca503087a535
- SHA1 55e6836d59857b353fcb45ee8bc3031e0df66c0b
- SHA512 860735d0c790d0726a6b24d2d5589c7a614366ead6e6817454ff91899e34b0609dad0e8d5eef9d2f98b777d25ef1c7529b8dccd06b93c619bf0053fab807b432
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\HRTFinator\updates\published-targets.json
- Size 54KB
- SHA256 8bcfd395ed779699217bb4a99221e1df59e7b96c27e732836bcc2e061ce05647
- MD5 663c83de37903f006b3074510fb17d61
- SHA1 86c143d52b964650975ed0483ee3d905c132c433
- SHA512 7e701355028082d178d4c430a44d9e49722ffc1b93921347015666d4d40b70fb53a940e2a841b74c6160134270f70fdf2405f314fadaf71b0764281dbd3fcd78
- SSDEEP 1536:GDb0FUX+BfiNmZVgf/Di9v97Db0FUX+BfUgi84CUL0SyC5tz:I2
- TLSH T1014319E0135189EAF7AC92B754E51C8D3ABA30BFB94564888187BEDD1877DD08A1CCD3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\HRTFinator-setup-5900\HRTFinator-1.0.1-x64.msi
- Size 19.9MB
- SHA256 d38fdfb21ad76de00349b08310d754f50a09b09f9972ae6fbb26b9f52c77c2e0
- MD5 cdc3f6c7e618a36c4bab681d3fed0056
- SHA1 388871f20f12da4002afc2ecb15908c314f0be73
- SHA512 82e4d8d8dbd5ff1c74bd646125eb0a8f6970110970af1aa1965322ba33ac5918e9975b26dc148f5ccbf47a1e0c8aa1abf99e2ae8efdde40a33da976bb50ceae0
- SSDEEP 393216:e6O7PRkkrB4ApSgMWYeHt12nNtHH09/ud3MW3bcu0kRhrMs03ulCq1OE:e6Opbr3pSgJZsNqd674urXMFelH/
- TLSH T16A2733277F12C732C8AE8EB145B75760064A1D455020AB6F2B42B29ECEF77D42BE15CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Documents\HRTFinator\Equalizer\General\snapshot.json
- Size 2KB
- SHA256 92ca1b876bcfb69f9897ab1d904a6990817d5ec1f8fe49af1baa5883976a56fc
- MD5 11f179b16240c0b0236de6751e19058d
- SHA1 ca1228a802d906cb65a90dadc6dfd9465364b765
- SHA512 b8b73b3b5eb3beeefa6ede322f4fbddd218606b1e05c164f8bbbd1fb6f7c1369659a43a7fe482f3878025dac1283b621867cb57516201d07070397ac6cc64f32
- TLSH T11B41FD0AC8780CF07001E836E87D114AAA31E96B8E977C24768C451D4F2F32EDB766F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\Equalizer\Settings\auto_eq.json
- Size 346B
- SHA256 a47bb7b9be92bd0fb07bb06540a6a2dfdd7d6285b2566842079ae855d636b087
- MD5 34722c60c3de9dba57e5d41f7d412aa1
- SHA1 123a8ebc9150867229edf41b073f91f92b1b0cdd
- SHA512 6225ac3322552e94cc73ea5a819c524f32259e3677fc130fd11968e99109612045f69e522a9aee4fcdf449abef2e23f148fbace7e71d99fec18ea8170a4bd2f7
- TLSH T103E02023011801B0B0C03D600EB8A9273BC1FC07F0D37C985677EA18695F747D1B514B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\Equalizer\Targets\targets.json
- Size 409B
- SHA256 c94b45ca7506d8b05396bcc299b3d0c1f8847404a84ca4a34b42421a4a48b53b
- MD5 c95d50b7184cdf94d17aa698d4caa97f
- SHA1 43ab76c1e71fe0b628e929af5d9cde960860f3de
- SHA512 3410b81406aa133d6b6c72356e03cc4550b37550102217495d494195ee44d084c7d11c9a253fbc8dc926192b7d07eeac1766765ea14de36e2d66ad989daa794a
- TLSH T113E0D8A2EA380C72127448A668B5830A3270E1038E163C1AF649DB1C9F1EA9F77B4824
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\Measurements\General\library.json
- Size 42B
- SHA256 7706aaeefbd9b1f8f5b4e9721ea81859b08413fbb9e646576f13bc68d786e0bb
- MD5 f5e3b7950116ed459a33b5eee91fe78d
- SHA1 dfb7ef54687f1c2d59626e9e76a4645bb81ca7e1
- SHA512 0597956e0251debd3c70fbf45e62d6f043e731d161643428cfe7faf6d296bd4794a3984caa4698627813ccabc09189f83d536d1360a5d3197a86066325a8f71b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\Documents\HRTFinator\Measurements\General\published-calibration.json
- Size 762KB
- SHA256 915e20941db085999aa469946c6ae3e383935bbd4051b3c76cc8c31f6bc7ba41
- MD5 7f4b570e752cd67bdec5de4d65a862c8
- SHA1 b24571c36d0dd5dfab3e2619d54ffdc09a35f73b
- SHA512 b39f4917a39a1a4f4e742a784207f328a25c91da7331e413ec1946138c2be1c8450a5e9d4e8c2337ca6807d079700e0a5a870f4ade8f7aee8035d43fd09585fc
- SSDEEP 6144:sEIhv1tHd+Whv1Ly8Bhv1H4+2hv15OOhv1XnG3hv1aTavhv1rdPhThv1Yhv1FhvG:KHj
- TLSH T14EF43AE443C489F4F6AE1399C8B7189D2B65207BB5C5788C809BFD886847FD2671E84F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Documents\HRTFinator\SOFA measurements\.bundled-sofa-receipts.json
- Size 97B
- SHA256 d1c8d5bae58aec33da7d3b0c4693915d4afbf449a570f7aae9e6a85a56821fec
- MD5 bbd960132c696ffddd6c281fee04f9ae
- SHA1 b9ff1f6201ad469851a1436cdd17f05211462f75
- SHA512 eea2c7fb0a7ef082db3c8fa952246ad7ee3258486a9364ea65012cabde90836e79ef6edf44f8d550fac658a4db8a522109bf74f25e2e2a5a8048af54e8b8a22d
- TLSH T12AB01248F9681C03C5CCA86320347C197942AB7522100CF9648A014C470D42465A4C41
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\Settings\app_settings.json
- Size 142B
- SHA256 b6198c053294e797b0e9cce6ec10bacc4847b53fcda77e4d4f00938f0efc222f
- MD5 b2a563c6a1ec3c7bee28130bf03093a5
- SHA1 d7909edc78ce0b2254bf7576fb5aeb1e968bff53
- SHA512 4fbe3c377778c9f5b0cf05c8fc347e75180ef96d12f53957e3332212f79760343b9b4c226ad5bbfe07b2655201cd1cf4190a5b7ec11d7ccbb46a0756d8a72ce6
- TLSH T1BDC08CB8A0586CB801F0212DC489C1036930DD001060A92804032808680A73037EA8D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\System EQ\Convolution responses\.bundled-convolution-receipts.json
- Size 81B
- SHA256 a082895960f6cbfdeabe5b0a3fbaffc20f51017f195620a4ee8edfcf582a7772
- MD5 515e55c0b997323f474d3e1c1a2b5158
- SHA1 ba42256be6d8191a9a915dcf234bb964cb432f86
- SHA512 5b700166bf1076094fe55ff6db5492f1a3a6e2ab7b3e729f1245cdac7e469ea993e5671e1dd7972992c854bfa28120b387ab5f892c6415b2093e78f6c42a0d22
- TLSH T16CA01200B0287C421CC48091103D481798015E7102201CBC308607884E15094027C841
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\System EQ\General\config.json
- Size 1KB
- SHA256 8281e504c6c481c0d4e92502f583073aba52aa09ea458ec528ecae5065a83e6b
- MD5 248f6cb9ed4d276511b548c725ee87ce
- SHA1 06ad5614bc55c94a4373097b20176ec2954de14e
- SHA512 3ee9cca91676c0fb161bf55724e2a3b8b7e5ee67f5792a573134f07bc8e0ec4112c4fdf6121b5145de8c387539d9fd5deb5df351e12d008e51de385bcb0efba3
- TLSH T10E218863C4240CBA31C45A395C6D4713227082171D173E19B892C22F2F4E53FE5BADE6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\Themes\.managed-defaults.json
- Size 112B
- SHA256 af446eb3b05199119c801f33e6a40d735a9b04647b187e2d967085619509128c
- MD5 1390436b9653fb61399029f5c5190e9f
- SHA1 89d1bca58912f211f15aba9162df61a3565c83d0
- SHA512 edeada005d91cbca6db6dd3df07509dc81fa81e04233a2af4e2cef851602c9b158f234e2b757d1c522cb177811b9bf0babd486f4b6dcc727a66a89b393191bbe
- TLSH T18BB012DC787A0E5148EC81FAEC7E0136F5914ECAE2B648FCA54F5108690B81872F0D9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\HRTFinator\Themes\Main_theme.json
- Size 7KB
- SHA256 a14e9ed7bead3ce7f9b24a5c51ff604988a7515e0e130527eee7749495388c2e
- MD5 389197d47484cf7e0261dbbd2d57d5bb
- SHA1 909be65282f640c64906ad1e56ecff244bdc2fbf
- SHA512 7dd61b8b873dae879bfd006ca3f480b62d7d583d8534b64feac1af60b1d146016734fa57281737212641d5916ed5f48592b83021695e943e8c65f5f696628e57
- SSDEEP 96:T+IMrCyTYkXkpyL/y/4v/FGvGzc9+wIrYX+7vvc7a5bE0vEPs0tqV7X0nZCA:T+IMrCyTYkXkpyL/y/4vNEOZbzvolCA
- TLSH T113F1455EC4710EE7BA45A47F283D0301631461470CEAFD18BD4C9A8D8F9F2AF61796D6
- MD5 SHA1 SHA512 SSDEEP TLSH