Overview

overview

8

Static

static

1

TC-Helicon...67.exe

windows10-ltsc_2021-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    114s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    17/05/2026, 09:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TC-Helicon_GoXLR_Driver_v4.67.exe
  • Size 2.2MB
  • Sample260517-ljr28set8x
  • SHA256 00c0653494f1f6e3c8755d5689a423af8fa48b0416e9112d56772dc1aba24a8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryspywaretrojanupx

Malware Config

Signatures

  • Manipulates Digital Signatures 1 TTPs 2 IoCs

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

  • ACProtect 1.3x - 1.4x DLL software 6 IoCs

    Detects file using ACProtect software.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file 12 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 23 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 17 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 32 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 17 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TC-Helicon_GoXLR_Driver_v4.67.exe
    "C:\Users\Admin\AppData\Local\Temp\TC-Helicon_GoXLR_Driver_v4.67.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4428
    • C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\setup.exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3840
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2368
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2808
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4928
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3708
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        PID:2872
      • C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\GoXLRAudioCplApp.exe
        "C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\GoXLRAudioCplApp.exe" -exitall
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        PID:2744
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Drops file in Windows directory
        • Executes dropped EXE
        PID:1064
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        PID:2148
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Checks SCSI registry key(s)
        PID:448
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Checks SCSI registry key(s)
        PID:3272
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Checks SCSI registry key(s)
        PID:4224
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        • Checks SCSI registry key(s)
        PID:1592
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Manipulates Digital Signatures
        • Executes dropped EXE
        • Modifies system certificate store
        PID:724
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\signcheck.exe
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\signcheck.exe" cci "C:\Program Files\TC-Helicon\GoXLR_Audio_Driver\W10_x64\goxlr_audio.sys"
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        PID:4308
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Manipulates Digital Signatures
        • Executes dropped EXE
        • Modifies system certificate store
        PID:2968
      • C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp"
        3⤵
        • Executes dropped EXE
        PID:3904

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        TUSBAudio_setup.log
        • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
        • Size 1KB
        • SHA256 79c22725432a6b23ce46baad31c4bd56ba86459abcbfcdc51470c08d5c277b15
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TUSBAudio_setup.log
        • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
        • Size 1KB
        • SHA256 0640528e78e17e981067426123361a95119a7cf9ad8d75a9e0f173cb14eaba54
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TUSBAudio_setup.log
        • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
        • Size 4KB
        • SHA256 5da8b0c538ceb83d13456d42619a8cc1c62af9ebd77cccbc962e134489e55bf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TUSBAudio_setup.log
        • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
        • Size 5KB
        • SHA256 d51fc93f957307d1da09c0a1e54edaa3690549af412fbbe39acf1aecdafb6388
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TUSBAudio_setup.log
        • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
        • Size 5KB
        • SHA256 78083f06e98697f6b94cb49bb6f816c520db84a675f2a25ca6f3f731c6932379
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallOptions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\InstallOptions.dll
        • Size 14KB
        • SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RealProgress.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\RealProgress.dll
        • Size 6KB
        • SHA256 e36cb3caabb806b27475080682837a7d379fbe903358aa189bd0e51511ef27f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\System.dll
        • Size 11KB
        • SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ioConfirmPageTUSBAUDIO_x64.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\ioConfirmPageTUSBAUDIO_x64.ini
        • Size 502B
        • SHA256 90df4e17cb0aadbea0260ff4bf01aab20bc36257608dd4e3b7b241a57e570162
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\ioSpecial.ini
        • Size 282B
        • SHA256 9609d8d1c9f5fabf2ab6a7635018fb52296a167bc1bd13d484efb94200218d77
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\ioSpecial.ini
        • Size 486B
        • SHA256 e4eabbfe630b8d9c1c0af7512b0c34498501688895bf3cbee68d085bc40daaba
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\ioSpecial.ini
        • Size 350B
        • SHA256 85c7e0a8eab62e313e17d724aafc0a91ba362f9facaccb0b86a196cd09986bc4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\ioSpecial.ini
        • Size 533B
        • SHA256 498ea5d837ed1bc96745a4f2153de1253d8e3c284fea24c0c27d789ad593f94c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\ioSpecial.ini
        • Size 824B
        • SHA256 414a08a06cd02bdf6cb072ee02b03a8e8d4085515a665a8d8d42db20c78a979f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioWelcomePage.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\ioWelcomePage.ini
        • Size 428B
        • SHA256 82f210913508def6946bdd22bbdfeacbeea96fcd0574f448f47cc75da650d18b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        md5dll.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\md5dll.dll
        • Size 6KB
        • SHA256 fbed2f1160469f42ce97c33ad558201b2b43e3020257f9b2259e3ce295317a70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\nsExec.dll
        • Size 6KB
        • SHA256 ff00f5f7b8d6ca6a79aebd08f9625a5579affcd09f3a25fdf728a7942527a824
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        registry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD92.tmp\registry.dll
        • Size 24KB
        • SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nssCDA3.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA3.tmp
        • Size 215KB
        • SHA256 dbcad94024177ce8df121a428fb6b9db8d3c992ebee57f01d57f30bdfd2c0b4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nssCDA4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp
        • Size 51B
        • SHA256 227d9d8417987f1db2cc5ff0cc4b1ec1b1205423a3ab1d29f8ea94fd869a3415
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nssCDA4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp
        • Size 125B
        • SHA256 747d80fed61e5bb5f27fc748d25ce9e629bbb0604a7d7b9cd6aaa791d3f68241
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nssCDA4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp
        • Size 40B
        • SHA256 b5235906b7e6aeed9fc7ecac40fc9bee33670bebc3a6a11203eabbe510557a09
        • MD5 SHA1 SHA512
        Submit Download

        nssCDA4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp
        • Size 69B
        • SHA256 b43d68a5a213623edd275b9182563d5e52b5a0f86a1cb332bc2ff3909c849734
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nssCDA4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp
        • Size 297B
        • SHA256 2e97ebf8adcdedcb5d0fcf2c94dd3cdbf6cff488078302c61f2c46080bfa8362
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nssCDA4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp
        • Size 35B
        • SHA256 f21ed17b37e926370c163b254c860a564c508b5de9f003c179e5a7cb1461536a
        • MD5 SHA1 SHA512
        Submit Download

        nssCDA4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA4.tmp
        • Size 51B
        • SHA256 ed2a37ee583d57d21234e86cde8c9b11a8941ad8fe9670e91af0e8ded8fb9f61
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nssCDA5.cfg
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA5.cfg
        • Size 1KB
        • SHA256 1e309f62f9cb9dcf12053ef5f1b0b2e2fad40b7f97656a3ae2dc088a48471ddb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nssCDA5.cfg
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA5.cfg
        • Size 1KB
        • SHA256 e8d86e5ced96cbbd2bca7bb54a2aaa10069e28d6e8a31cb5f36fc0bdae8d39fa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nssCDA5.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsdCD93.tmp\nssCDA5.tmp
        • Size 391KB
        • SHA256 d947b7ed40dd037e0a12967bfc03e28cd8fbd3468a579c335512585dbbfe14f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GoXLRAudioCplApp.exe
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\GoXLRAudioCplApp.exe
        • Size 526KB
        • SHA256 c6c825ec6f337cb2593cea9cd9464abe5edc7f35923837a26ae8c2645ae99374
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audio.cat
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audio.cat
        • Size 10KB
        • SHA256 c7b284b5bf3aafbf119428957470e8d61f0dcf410508d88e249f13fabc02e177
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audio.inf
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audio.inf
        • Size 97KB
        • SHA256 a2f2e7a162837e7326b1f2426c55aacd17d81b2fa7cfa1ae5bc829b811fa3831
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audio.sys
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audio.sys
        • Size 365KB
        • SHA256 7481bd26db028a1c1a8bf6b375327e640c1e0fa38a9f192a12455bf8090edb20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audioapi.dll
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audioapi.dll
        • Size 244KB
        • SHA256 4f320e026f2f54e733a17a7a02de2bcb8422ad55eb984ae6ead3955fa74ba204
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audioapi_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audioapi_x64.dll
        • Size 287KB
        • SHA256 84e21114aba9689f325fb02583fb31c0a26fcc31d86549ad0a66d2a00e77402a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audioasio.dll
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audioasio.dll
        • Size 210KB
        • SHA256 92fec8ef08df55478972eef356bfdaf9bc1d0a47fec3e26205fa2b62d049f66c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audioasio_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audioasio_x64.dll
        • Size 246KB
        • SHA256 7ccccf5ae1e44a5cf54556986edf6fe878d6fea4cc2c66e1291629022b6fa754
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audioks.cat
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audioks.cat
        • Size 10KB
        • SHA256 594cf75576f72847e0a1872c88e09e05e2ce94aa184ea183aeb0616d5ad525fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audioks.inf
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audioks.inf
        • Size 5KB
        • SHA256 0e77f72cc999e9baf43942d307057cb716fea022ce420661378a45bc03253f59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        goxlr_audioks.sys
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W10_x64\goxlr_audioks.sys
        • Size 52KB
        • SHA256 75457e1efd07f6f0d84e550def9a7fb50e9879cadc90aaee0b59c139f1dfa9eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.txt
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W7W8_x64\GoXLRAudioCplApp.strings\de.txt
        • Size 27KB
        • SHA256 55464d7f8d0ce0857cfef59e775e9a3f75ed2dc6518ff242bfa0cdb97657f246
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en.txt
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W7W8_x64\GoXLRAudioCplApp.strings\en.txt
        • Size 27KB
        • SHA256 7420a9696806933c817ffb5192ae714dff144d6996c98824f0e9e92f54912ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GoXLRAudioCplApp.xml
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W7W8_x64\GoXLRAudioCplApp.xml
        • Size 3KB
        • SHA256 73d40d8f9dc72bab617f12838141ab086d5513efece53affd8036a4b9500c702
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        custom.ini
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\W7W8_x64\custom.ini
        • Size 258B
        • SHA256 ceb9abc0a2b407cd5546c4e4a99724bdbe631179d1354ddf4d80f1eaab86b06b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        goxlr_32x32.ico
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\goxlr_32x32.ico
        • Size 3KB
        • SHA256 5554faab53fc4ea18360474561f9bb5368800d74f882e78dad6c4308a43ee5a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        setup.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\setup.bmp
        • Size 150KB
        • SHA256 e52e4906fa796f8faf19579585715d0e64782411d7d7a18aa93abf9149653b53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\setup.exe
        • Size 1.6MB
        • SHA256 637563daf92e141673828631def9d98f9732b6b0e2f7c2d7f96eafefc2d7bc9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.ini
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\setup.ini
        • Size 3KB
        • SHA256 29e0b989621d98878346bfe5625f1cfe1e9c09c9d07ee1e2de0549f97c10e75e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vendor.cer
        • Path C:\Users\Admin\AppData\Local\Temp\tlsfxC41AC0C7\TC-Helicon_GoXLR_v4.67.0_2019-06-28\vendor.cer
        • Size 1KB
        • SHA256 91832ccfa6869de39033978f6157d530589f2ce3dafbdc72a464253d94cf16d3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/3840-425-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1097-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-432-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-431-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-430-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-429-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-428-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-427-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-438-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-437-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-436-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-426-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-434-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-424-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-423-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-435-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-308-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-314-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-534-0x0000000000400000-0x000000000074A000-memory.dmp
        Download

        memory/3840-1099-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1098-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-433-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1096-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1095-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1105-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1104-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1103-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1102-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1101-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1100-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1094-0x0000000000400000-0x000000000074A000-memory.dmp
        Download

        memory/3840-1106-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-1107-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-316-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-135-0x0000000000400000-0x000000000074A000-memory.dmp
        Download

        memory/3840-1203-0x0000000000400000-0x000000000074A000-memory.dmp
        Download

        memory/3840-317-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-318-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-326-0x0000000003BD0000-0x0000000003BD9000-memory.dmp
        Download

        memory/3840-289-0x0000000003B70000-0x0000000003BC9000-memory.dmp
        Download

        memory/3840-1323-0x0000000000400000-0x000000000074A000-memory.dmp
        Download