Overview

overview

8

Static

static

3

BetterSoun...up.exe

windows10-2004-x64

8

BetterSoun...up.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    03/05/2026, 23:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BetterSoundCloud.0.6.0.Setup.exe
  • Size 116.0MB
  • Sample260503-24gp1adv2p
  • SHA256 d7e594d72b44527056efc6e867ca0c0484c2c4e7c4091c108e9f5a1c1a20a630
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 19 IoCs
  • Loads dropped DLL 28 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Contacts third-party web service commonly abused for C2 1 TTPs 46 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops file in Windows directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 14 IoCs
  • Suspicious use of WriteProcessMemory 23 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BetterSoundCloud.0.6.0.Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\BetterSoundCloud.0.6.0.Setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4128
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2368
      • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\Squirrel.exe
        "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:6052
      • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
        "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --squirrel-install 0.6.0
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Windows directory
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:2036
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1760,i,8576487792396231868,2201528012702907213,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1752 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5600
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --field-trial-handle=2216,i,8576487792396231868,2201528012702907213,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:11
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5976
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --app-user-model-id=com.squirrel.bettersoundcloud.bettersoundcloud --app-path="C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2432,i,8576487792396231868,2201528012702907213,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3396
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --app-user-model-id=com.squirrel.bettersoundcloud.bettersoundcloud --app-path="C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3456,i,8576487792396231868,2201528012702907213,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3568
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --app-user-model-id=com.squirrel.bettersoundcloud.bettersoundcloud --app-path="C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3220,i,8576487792396231868,2201528012702907213,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5644
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --field-trial-handle=3196,i,8576487792396231868,2201528012702907213,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:12
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6036
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --field-trial-handle=3804,i,8576487792396231868,2201528012702907213,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:5476
      • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
        "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --squirrel-firstrun
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Windows directory
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:3712
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1668,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1660 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1508
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --field-trial-handle=2596,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:11
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5616
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --app-user-model-id=com.squirrel.bettersoundcloud.bettersoundcloud --app-path="C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2640,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3572
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --app-user-model-id=com.squirrel.bettersoundcloud.bettersoundcloud --app-path="C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2452,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2200
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --app-user-model-id=com.squirrel.bettersoundcloud.bettersoundcloud --app-path="C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2372,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6080
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --field-trial-handle=3732,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:12
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3380
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --field-trial-handle=3808,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:712
        • C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe
          "C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\bettersoundcloud.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\bettersoundcloud" --gpu-preferences=UAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1316,i,3819705272210468928,2801299597912084671,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:10
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:3576
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004B8
    1⤵
      PID:4788

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          RELEASES
          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
          • Size 87B
          • SHA256 b58da9b1afec02c568be727bd449038fc600c0a7ffd3663d61a5cf0eb1bed7b9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Update.exe
          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
          • Size 1.8MB
          • SHA256 76359cd4b0349a83337b941332ad042c90351c2bb0a4628307740324c97984cc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          background.gif
          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
          • Size 43KB
          • SHA256 ce636d201ef86ffbf4ee8c8762b4d9dc255be9d5f490d0a22e36fe0c938f7244
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          acce553b-c2ce-4239-9bbc-957b270f53b8.tmp.ico
          • Path C:\Users\Admin\AppData\Local\Temp\acce553b-c2ce-4239-9bbc-957b270f53b8.tmp.ico
          • Size 66KB
          • SHA256 7795e07a26e0405ad54e519c8e3df3c35eb09c46834d1cd899e9ca933da0b0a1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_100_percent.pak
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\chrome_100_percent.pak
          • Size 147KB
          • SHA256 14a6a393c60f62df9bc1036e98346cd557e0ae73e8c7552d163fa64da77804d7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_200_percent.pak
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\chrome_200_percent.pak
          • Size 222KB
          • SHA256 20c93f2cfd69f3249cdfd46f317b37a9432ecc0de73323d24ecf65ce0f3c1bb6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          d3dcompiler_47.dll
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\d3dcompiler_47.dll
          • Size 4.7MB
          • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ffmpeg.dll
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\ffmpeg.dll
          • Size 2.8MB
          • SHA256 cd0ccc24489532a6c6e977ea4d25250d9850a395b51c46f90b47ed21ef8044ba
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icudtl.dat
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\icudtl.dat
          • Size 10.0MB
          • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libEGL.dll
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\libEGL.dll
          • Size 473KB
          • SHA256 ad75ac7d0fe26ee9665c075e705d290233732feb897173597a18887b3d1cad7b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libGLESv2.dll
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\libGLESv2.dll
          • Size 8.0MB
          • SHA256 586a04652de1a392e8f0c4cc69ece9b7370be4953b9fa4019d09207578324e42
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-US.pak
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\locales\en-US.pak
          • Size 467KB
          • SHA256 55fd1b71a47b6d4a81240240fd24e12c3dd7b986924ecc11afd7d21e7717a49f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.pak
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources.pak
          • Size 5.4MB
          • SHA256 da22c6359eb8d7205d8401bb6a5cd2b2bf2ed9487953038232baa6ad8a5e9319
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          app.asar
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\resources\app.asar
          • Size 17.3MB
          • SHA256 84ddb28a62786fbb24e4e846e2e12376efafe7e6b37b124f10b953c31b62168b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          v8_context_snapshot.bin
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\v8_context_snapshot.bin
          • Size 650KB
          • SHA256 096fc3f5002f5032d5c350200d4948851647262fa44f0a7c3770477f9ce620ce
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader.dll
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\vk_swiftshader.dll
          • Size 5.2MB
          • SHA256 809f1914bee43aeb4bc45259893cbd50bdb4c2c54f4381e9ead2cffc048268f6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader_icd.json
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vulkan-1.dll
          • Path C:\Users\Admin\AppData\Local\bettersoundcloud\app-0.6.0\vulkan-1.dll
          • Size 874KB
          • SHA256 81f7ed468a8cb5d8847c111ffed008fea78a517c49e6753aae3ae3ab6f4d8127
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          default.dic
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512
          Submit Download

          data_0
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\data_0
          • Size 44KB
          • SHA256 a30dca9da2ef08c39ce0d63f315a9c6a5920325638b390755170aa78782851d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\data_1
          • Size 264KB
          • SHA256 a053801976f5a1f4ed0a18bbdb2f109eac392a43a4b7db660b6dd0f6635eb8f9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          data_2
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\data_2
          • Size 1.0MB
          • SHA256 6d0d947b6e163fdc6334cd3894562d01ab8064662ffa6201005f363ebe4969ff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          data_3
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\data_3
          • Size 4.0MB
          • SHA256 941524e207f50fcd55256242675edd20a2b2e155a2989775bf5456c5c9063acb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000001
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000001
          • Size 85KB
          • SHA256 286b988b39426823c203d38e076579f76be9e06b46a1a5e93eef02b415005c7b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000002
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000002
          • Size 33KB
          • SHA256 19e0298a40ce0acadf8bd062fdc08819eaec51033442089b94260cc496ff9461
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000003
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000003
          • Size 128KB
          • SHA256 43e89454b69212000b29038ccd9a76e588ae6dbbe6487ab02e11d5c27121a623
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000004
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000004
          • Size 18KB
          • SHA256 53eececfd80939f97bc81227485fe84a7610fe973f2d2fc4565dcba7a144ca98
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000005
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000005
          • Size 22KB
          • SHA256 1efc0f234cf2d70cfdbed82702cfdd47572b2ceb334898cfe59fde7a27791a2a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000006
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000006
          • Size 189KB
          • SHA256 f046068cd0084b8322ec053669ae4c9e929c136b9b41658e8642d0b9a62c3069
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000007
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000007
          • Size 38KB
          • SHA256 058f89b336e5bbd50df8d3143b511970b86b5ed5992433647e4c20fbd6c1c196
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000008
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000008
          • Size 193KB
          • SHA256 5f2f80d362fab1249db386856d29d6569b1e8223c6220b3ad951ae91936bc297
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_000009
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_000009
          • Size 222KB
          • SHA256 be66b657cd56727d26b15c5b98796eab356f0fe71d726d64434c1a9aa01f806d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_00000a
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_00000a
          • Size 97KB
          • SHA256 99c149cddf6e4f03a1ac1fe5de2929f74fd433b13f36f438705a8f0412090918
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_00000b
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_00000b
          • Size 193KB
          • SHA256 230800ec537d0b710cd54b719a1af6ce28266d41588a399027d6457945a091bb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_00000c
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_00000c
          • Size 800KB
          • SHA256 8a4e3fd1fe0b599b84beaacbbb393b876b54397b259f79fbeccba85575d3e79c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_00000d
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_00000d
          • Size 129KB
          • SHA256 04f96d77624b69f4cd7331a40fd6742001baf9d3542c97d1c3c10d492c0c794d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f_00000e
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Cache\Cache_Data\f_00000e
          • Size 29KB
          • SHA256 00690f3f892d278fa5ae025a11d8e330477a1e2233e977f6af19986a06000564
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          the-real-index
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Code Cache\js\index-dir\the-real-index
          • Size 744B
          • SHA256 ba5282c264c30f3369c62684b0e1f288a0433539e09c40f3526f7472f5216b64
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          the-real-index~RFe59119a.TMP
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Code Cache\js\index-dir\the-real-index~RFe59119a.TMP
          • Size 744B
          • SHA256 5d969780d718d713e60b6376610772aec03ab49746396ddd0197a1a23fefcb26
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\GPUCache\data_1
          • Size 264KB
          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Network Persistent State
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Network\Network Persistent State
          • Size 2KB
          • SHA256 6ede2849e492ae25f9174d4a26f07a9ab4b3553d5d06334d0b8024361563d6c1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          TransportSecurity
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Network\TransportSecurity
          • Size 1KB
          • SHA256 207b7fbd38399dcba5a823695a0cade8e9c54aba744d4762e6365a7028f036d1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          TransportSecurity
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Network\TransportSecurity
          • Size 1KB
          • SHA256 9f82512ea77ea9aa5b2a4dc3d74d44039ca01436eaf7cc4254f6827cebca3798
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          MANIFEST-000001
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Service Worker\Database\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512
          Submit Download

          the-real-index
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Service Worker\ScriptCache\index-dir\the-real-index
          • Size 48B
          • SHA256 7d342b21c12cea08f834ae75562356c08a829ca0e5b71ab76e47d3fbf03c974d
          • MD5 SHA1 SHA512
          Submit Download

          the-real-index~RFe58bdae.TMP
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bdae.TMP
          • Size 48B
          • SHA256 1318e58011a17c6cee38bb6a28fa809245dc6951dfedc37ec5a5c9e65a4c8cfc
          • MD5 SHA1 SHA512
          Submit Download

          CURRENT
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\Session Storage\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          f2a463e9-fb78-49c4-add6-4bf99cbd8504.tmp
          • Path C:\Users\Admin\AppData\Roaming\bettersoundcloud\f2a463e9-fb78-49c4-add6-4bf99cbd8504.tmp
          • Size 226B
          • SHA256 b9504658296aec05e734419aacc55939c8794532b7914483e1dcc1d45c815e10
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/2368-198-0x0000000020020000-0x000000002002E000-memory.dmp
          Download

          memory/2368-415-0x000000001C530000-0x000000001C542000-memory.dmp
          Download

          memory/2368-7-0x0000000000200000-0x00000000003D6000-memory.dmp
          Download

          memory/2368-352-0x000000002C0A0000-0x000000002C0C0000-memory.dmp
          Download

          memory/2368-197-0x0000000020050000-0x0000000020088000-memory.dmp
          Download

          memory/3576-538-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-537-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-536-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-542-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-548-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-547-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-546-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-545-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-544-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download

          memory/3576-543-0x0000026E838E0000-0x0000026E838E1000-memory.dmp
          Download