hxxps://soundcloud-desktop[.]fun/download

Analysis

user interaction
yes
max time kernel
92s
max time network
92s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 00:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://soundcloud-desktop.fun/download
Sample260705-axe42sfx2w

Score

8^/10

defense_evasion discovery trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
75	4384	msedge.exe

Executes dropped EXE 3 IoCs

pid	Process
4752	soundcloud-desktop_8.4.2_x64-setup.exe
2072	soundcloud-desktop.exe
5544	soundcloud-desktop.exe

Loads dropped DLL 6 IoCs

pid	Process
4752	soundcloud-desktop_8.4.2_x64-setup.exe
4752	soundcloud-desktop_8.4.2_x64-setup.exe
4752	soundcloud-desktop_8.4.2_x64-setup.exe
4752	soundcloud-desktop_8.4.2_x64-setup.exe
4752	soundcloud-desktop_8.4.2_x64-setup.exe
4752	soundcloud-desktop_8.4.2_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	soundcloud-desktop.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	soundcloud-desktop.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	soundcloud-desktop_8.4.2_x64-setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4384	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276853263167997"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{32FA33BA-3726-4EFB-90CD-E1AD1CA9AB19}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4752	soundcloud-desktop_8.4.2_x64-setup.exe
4752	soundcloud-desktop_8.4.2_x64-setup.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
3780	msedgewebview2.exe
5604	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 49 IoCs

pid	Process
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
2072	soundcloud-desktop.exe
5544	soundcloud-desktop.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe

Suspicious use of WriteProcessMemory 61 IoCs

description	pid	Process	procid_target
PID 5052 wrote to memory of 1128	5052	msedge.exe	85
PID 5052 wrote to memory of 4384	5052	msedge.exe	86
PID 5052 wrote to memory of 5104	5052	msedge.exe	87
PID 5052 wrote to memory of 5104	5052	msedge.exe	87
PID 5052 wrote to memory of 5104	5052	msedge.exe	87
PID 5052 wrote to memory of 952	5052	msedge.exe	88
PID 5052 wrote to memory of 952	5052	msedge.exe	88
PID 5052 wrote to memory of 2304	5052	msedge.exe	89
PID 5052 wrote to memory of 2304	5052	msedge.exe	89
PID 5052 wrote to memory of 2304	5052	msedge.exe	89
PID 5052 wrote to memory of 2912	5052	msedge.exe	90
PID 5052 wrote to memory of 2912	5052	msedge.exe	90
PID 5052 wrote to memory of 2912	5052	msedge.exe	90
PID 5052 wrote to memory of 4784	5052	msedge.exe	92
PID 5052 wrote to memory of 1924	5052	msedge.exe	93
PID 5052 wrote to memory of 4784	5052	msedge.exe	92
PID 5052 wrote to memory of 4784	5052	msedge.exe	92
PID 5052 wrote to memory of 1924	5052	msedge.exe	93
PID 5052 wrote to memory of 1924	5052	msedge.exe	93
PID 5052 wrote to memory of 4296	5052	msedge.exe	97
PID 5052 wrote to memory of 1692	5052	msedge.exe	98
PID 5052 wrote to memory of 4296	5052	msedge.exe	97
PID 5052 wrote to memory of 1692	5052	msedge.exe	98
PID 5052 wrote to memory of 2856	5052	msedge.exe	103
PID 5052 wrote to memory of 364	5052	msedge.exe	106
PID 5052 wrote to memory of 364	5052	msedge.exe	106
PID 5052 wrote to memory of 364	5052	msedge.exe	106
PID 5052 wrote to memory of 3228	5052	msedge.exe	107
PID 5052 wrote to memory of 3252	5052	msedge.exe	108
PID 5052 wrote to memory of 3228	5052	msedge.exe	107
PID 5052 wrote to memory of 3252	5052	msedge.exe	108
PID 5052 wrote to memory of 3252	5052	msedge.exe	108
PID 5052 wrote to memory of 2520	5052	msedge.exe	112
PID 5052 wrote to memory of 852	5052	msedge.exe	115
PID 5052 wrote to memory of 628	5052	msedge.exe	116
PID 5052 wrote to memory of 2296	5052	msedge.exe	117
PID 5052 wrote to memory of 4752	5052	msedge.exe	119
PID 5052 wrote to memory of 4080	5052	msedge.exe	121
PID 5052 wrote to memory of 4080	5052	msedge.exe	121
PID 2072 wrote to memory of 3780	2072	soundcloud-desktop.exe	125
PID 3780 wrote to memory of 3180	3780	msedgewebview2.exe	126
PID 3780 wrote to memory of 1804	3780	msedgewebview2.exe	127
PID 3780 wrote to memory of 1804	3780	msedgewebview2.exe	127
PID 3780 wrote to memory of 1804	3780	msedgewebview2.exe	127
PID 3780 wrote to memory of 3808	3780	msedgewebview2.exe	128
PID 3780 wrote to memory of 4372	3780	msedgewebview2.exe	129
PID 3780 wrote to memory of 4372	3780	msedgewebview2.exe	129
PID 3780 wrote to memory of 5612	3780	msedgewebview2.exe	130
PID 3780 wrote to memory of 5612	3780	msedgewebview2.exe	130
PID 3780 wrote to memory of 5612	3780	msedgewebview2.exe	130
PID 5544 wrote to memory of 5604	5544	soundcloud-desktop.exe	132
PID 5604 wrote to memory of 5656	5604	msedgewebview2.exe	133
PID 5604 wrote to memory of 5804	5604	msedgewebview2.exe	134
PID 5604 wrote to memory of 5804	5604	msedgewebview2.exe	134
PID 5604 wrote to memory of 5804	5604	msedgewebview2.exe	134
PID 5604 wrote to memory of 5952	5604	msedgewebview2.exe	135
PID 5604 wrote to memory of 5932	5604	msedgewebview2.exe	136
PID 5604 wrote to memory of 5932	5604	msedgewebview2.exe	136
PID 5604 wrote to memory of 5184	5604	msedgewebview2.exe	137
PID 5604 wrote to memory of 5184	5604	msedgewebview2.exe	137
PID 5604 wrote to memory of 5184	5604	msedgewebview2.exe	137

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://soundcloud-desktop.fun/download
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff84b0dc188,0x7ff84b0dc194,0x7ff84b0dc1a0
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,12498053300445430915,13237247627399446933,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,15471130793175762772,7272034558645503945,262144 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,10158778521152581240,9427283562817732058,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,7112935681832458568,11432761011559927412,2097152 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,10849182249820731014,7863265647421443666,2097152 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4100,i,2109322731372443242,8141786882578963502,2097152 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4116,i,7501935548512853260,11924337101130729246,2097152 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:2
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,9512435966618308755,17250129375630292257,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,8574798805323231960,6558061425044255014,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,4782975213887222701,14160628764297168612,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,4782975213887222701,14160628764297168612,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6024,i,9146073107663954967,6747330514047846724,2097152 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,8853007494645966438,3555479647787732682,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6364,i,4648226456676986234,10942267494728629186,2097152 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,2977882713728511120,2636051278688919399,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,290351519278638301,13473075581420104719,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,14641724654081642599,13676969107864031594,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10477220088685639801,2480593130026743668,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
  2⤵
  PID:2296
- C:\Users\Admin\Downloads\soundcloud-desktop_8.4.2_x64-setup.exe
  "C:\Users\Admin\Downloads\soundcloud-desktop_8.4.2_x64-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2964,i,13273927658145488531,15225005560950002487,524288 --field-trial-handle=2032,i,6097010928840919348,11621596176187968920,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3688

C:\Users\Admin\AppData\Local\soundcloud-desktop\soundcloud-desktop.exe
"C:\Users\Admin\AppData\Local\soundcloud-desktop\soundcloud-desktop.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2072
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2072.3832.10455811470005713069
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3780
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x180,0x184,0x188,0x15c,0x10c,0x7ff83be4b078,0x7ff83be4b084,0x7ff83be4b090
    3⤵
    PID:3180
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1772,i,2819574178591603720,12229450196303071947,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1764 /prefetch:2
    3⤵
    PID:1804
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2080,i,2819574178591603720,12229450196303071947,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3
    3⤵
    PID:3808
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2416,i,2819574178591603720,12229450196303071947,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:8
    3⤵
    PID:4372
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3672,i,2819574178591603720,12229450196303071947,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:5612

C:\Users\Admin\AppData\Local\soundcloud-desktop\soundcloud-desktop.exe
"C:\Users\Admin\AppData\Local\soundcloud-desktop\soundcloud-desktop.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5544
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5544.5588.2761833120562254701
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5604
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ff83be4b078,0x7ff83be4b084,0x7ff83be4b090
    3⤵
    PID:5656
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1788,i,1313076542350733722,10397375606029876832,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1784 /prefetch:2
    3⤵
    PID:5804
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2044,i,1313076542350733722,10397375606029876832,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:3
    3⤵
    PID:5952
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2208,i,1313076542350733722,10397375606029876832,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:8
    3⤵
    PID:5932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView" --webview-exe-name=soundcloud-desktop.exe --webview-exe-version=8.4.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3460,i,1313076542350733722,10397375606029876832,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
    3⤵
    PID:5184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8479bb5e9c48f2bf7c587990f8b1345a5179c5a93ec2f191a7a806848025aa5a
MD5 a08eb8c95d71ef966322bbe5c7c87d89
SHA1 77803305fbfdd0a856e2cebf1cc721ddc393ff3d
SHA512 08394ff9d538334428f82fe90ef5e600565dc5adc24cc71f6bc01b0aa33e3e3b6e97c4accb9ecdf0673e1a42f4d5a4ba4415dada449e069a475f9ed99866993d
TLSH
T12B6192380DDE66F6D721C0F298D20345307BC9E6F9335D4EF290DCBA2A867F14118126
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c0b3f5d8e9075e2669e025f6e6148e00a322d75acd310231b36f97855837bc3d
MD5 118e1de77bf447180845052c50e0e0f4
SHA1 b51ca1b29cfa8624f037a03e14b110cd4de2dde9
SHA512 65860ccfae0c91293e73cfbe10ad92b06409ad683b2cb1c3b89f8330f898c41eec43a34f081184b56881637e3e8c81e1431c242e7f42628286269ad23339ef18
TLSH
T19351ACB782E5822DD9216AF0EF246F17DE1E0B62535C3C19D5E0AF0797E28B2D105B4B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3b37781b96725cd4af504f29d2605f27ff0725842ab6eaaf1db8a76e67d2fdab
MD5 09903c6abbf59720a3de2716eda2f76e
SHA1 15bf385dfe351f1aab2d3695711c76ddb6f6264b
SHA512 de83b764570fd164dce1175e45bebe0afbe0d5f082b2ef4253e9c7e0a0156d0000d589914221e676eba2611d04d72a415bb9a4f3eeed984f8448aeaffee3083d
SSDEEP 192:sxZ3RDyM/jK1Ml8M9PW/ftstSBpIdpFeHW6+WNqZ3/YCB7r5CIgU6J:sxZ3z1PW/ftstki4Hbo/ZIU2
TLSH
T14252E9126A385977CCCBD209FA55BF53D6F94572A3900D44AAFC8A1C05F7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5d47b3d5276feca1e2f74d5dd6c14b32b3725588930109a3e287153a7f40172e
MD5 ed3b9a9598376bd594b516ce978ea318
SHA1 50069fedfea643e5f66277ff751c196cf2eb3aa7
SHA512 5797a31d752c530dc5bd552bd482f633cb2d5a1aee75c7189e84fa28b2b22ba99c1c18eb4c90247a602d031c197cdbb46ad65e9673bac8d6e544899d9b39409a
SSDEEP 192:sxZ3RDyM/jK1Ml8MjPW/ftsxS6pIdpDeHW6+WNq9iXYCRvr5CIg5V6J:sxZ3zbPW/ftsxLiSHbhXVIr2
TLSH
T18C52E912AA385977CCCBD209FA45BF53D6F95472A2900E44AAFC8A1C01F7BDD225381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d38bfcd9bec38ddd016f3646d984de158954959e65edab2ea10a679922b4b5b0
MD5 b09f790ac4efb64a89e8647e1fec4cdd
SHA1 b1a4635bfd219fd1a4e3e5b2f9e4743036d4a52b
SHA512 134dabab858d5094b98462e9d8dc3f8056a2de4a5beb59e42476361b7276cda2219c2ada4f5d993fa23d4d53532b91d29653d3318ce39bd79f15edc96f5e64de
SSDEEP 768:s98bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVbro08:s98bqn+WvSCt6u1jaCZLbWVo08
TLSH
T199D2FA3B280CCB7E4F845E5DEC266F966ED801CB67988D4447FA884C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59ef58.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59ef58.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7b8e7de56887b1b13da933321d9e45a66eb1e13d0b26592087d4bb66b10ce00f
MD5 6c607823d7f32332693d2ba25956d91a
SHA1 33c5ac7eac0cf932be586fed02aee0ba0af67c13
SHA512 f7b07a23e8a15b8bb811738376208a7bdf253a12dd98caccfbd0465eb26545b0845f270b2ae60bdc1d262d0fbab0f58a8476be8bdea768b40e38666f870a674b
SSDEEP 384:LiFjtNn/s3n9ShGsN38TUNTUlIluCyayIEa++d5lOOObjI9G6w7X:mFjj+9Pqwgn+La73lO29MX
TLSH
T1A9C219F258DB4936C99E8747F73E2D168EBCC0A7B5856A44B3885A0CCDD62BFD305811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 dd235f7f83595fd5cdc37233709ae5889f858d287a51c4dcf32b1e0eaf34dcd8
MD5 dc2b21940103d3ddcca93589d302788d
SHA1 a965fe0934a722eac7e2a6e1ddf397cec2b63a02
SHA512 5a06ad9a9d8eb849642d1f9cfda25fa81a19f6ae2611c1b3868a86c1efa762f172cabd5d2964a1e71990f70e34329a3ec3c40f77cdfa4c148c3e6acd3364f8bd
SSDEEP 384:KtNn/s3n9SfsNtrCyQbIEa++d5NOOObjI9G6w7X:Kj+9UFNLa73NO29MX
TLSH
T1A4929D326C385D774D929558F44B3A179FF880BB97CA2F88D5DCAF0C01DB6AC6316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 66f8628bd982890139502c27858fe225a338ba805e6b0a7f274dc0bcecb6e1cf
MD5 198459421de2e035b09b8b9d990a05d1
SHA1 866f292cd54fba4762edb29df33d5a1fae19afd5
SHA512 6be2926aa2589d4fabe4810d31f252dee46866b081657b0bf0caeba13b8e9b890767ca82ee422b4c3de176adee428ee6c71bcb5af868c3ed88935c5f1f91c120
SSDEEP 384:LiFAtNn/s3n9ShnsN38TUNTUlIluCy4yIEa++d5MOOObjI9G6w7X:mFAj+9Cqwgn4La73MO29MX
TLSH
T16DC218F258DB8936C99E8747F73E2D168EBCC0A7B5852A44B3885A0CCDD62BFD205815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cabcaa80f509a0adde2c6df5f56f90212e2d0202e3cc40dfcc2b0ac860e01d2b
MD5 f887a73a0211ece72ec7d8d4f924a535
SHA1 832ab22379e363e6bd9264684d8709f315a9f497
SHA512 2f4b887a6699d3075db147f5fe88c4592fff77a6128466ef214a3cf46c15c22f76c695cd7b5558648552f1cd3156a65ed4b1c989f6acd62a4373338573a3f6fb
SSDEEP 192:vONR6Db6QmiUyueHBa+j1+FdCKHRgQDxU6:vONR6u+HBa++d5GcU6
TLSH
T17202E83568786CB79AF26E49F48737279FD4107BAA962B94DAD84F0C00D764C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 52e466e42c0bcd974f9de1c5e43f34d960ced1cb48e90479c8e503bcd0e790d9
MD5 48262968a722e3ab2ba4744b70f121e5
SHA1 5c87a24ee571f16b3a05d701148bc4bd1f765e0b
SHA512 4071712ac29b4f6bed1aa037d4d21f348ff86d719c8e85a1093b3cc94974fe52ed39deb527d53ebb06838f5fc1d27056b782c419478497a6ce68da01c84b1592
SSDEEP 384:UtNn/s3n9SfsNtKCyQbIEa++d5NOOObjI9G6w7X:Uj+9UkNLa73NO29MX
TLSH
T1CD929D326C385D774D929558F40B3A179FF880BB97CA2F88D5EC9F0C01DB6AC6316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 35ba634994d576edc9db56f95644ba910f4c0ac429b769330d353cc6c9c78a16
MD5 8328d067ea860cb6d533e0850f5eefdd
SHA1 04b76a332bac553a5befa1acce75ad1f30139217
SHA512 2c83d886b205fbebc95f912f375ca565d346113059f38c6e5f53910d61080954b6267fcde85eb87e7aeea882db8fbaf285dce58f83977c8e0b7690a649f804bc
SSDEEP 192:oONGV6Db7QmiUyZe4Ba+j1+FdCK2hNzQxq2U6:oONY6FL4Ba++d5oOU6
TLSH
T108122B32687C5C6B5DD2A984F48736139EF49167EB8A7B90D5DC5F0C00EB69C234B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8ce2648c4a30498765bea2a173966f91c4d620efbd7666244dae37cd3bf6a635
MD5 7c9928ac868bfde87103e6c339ae3759
SHA1 5ac7951ebf8248198a45f6c9459a28b269753213
SHA512 a1164253698598d5ae1f4accbcaa3577754d314fa298d9ee81a42c8d7250724c2fc33c0477864f6f6f4c7fb6796f631b1180d4902ac573a6926d964b92bee232
SSDEEP 384:btNn/s3n9SzsNtuCy4bIEa++d5NOOObjI9G6w7X:bj+9QkZLa73NO29MX
TLSH
T1E2928C326C785D7749A29558F40B3A179FF880BB97CA2F84D5EC9F0C01DB7AC6316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82e1750e-d727-4dd3-be28-b707a14843fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\82e1750e-d727-4dd3-be28-b707a14843fc.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8d3ebbc78b274d5b50707553e5e310d81f9928d928f77b275cbd3939bb425e8c
MD5 6dab3e976030fcdb0961e7ee9ae3f4ae
SHA1 760bff8eb523db2cd250f0a2869a062bc4fa7f05
SHA512 06b8b9dc0bf5455e2f1c601071c7f40f7165a4df86d2e8ac113e20cc4cd46c705b30006b49dd3e56dd606043ff6531a86386643f8ec63398d8c693fb80ed607d
TLSH
T1D941D858BAEA1148B3B36F569BF7A96D887FBD672E06C45D00150D4F4622A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsqA90A.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsqA90A.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsqA90A.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsqA90A.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0a11c0a29092813dae7366de705e54e0b24e175d28bbafb715578e1dad3e021d
MD5 2f1e82c110d2da967cbdee734b8914f8
SHA1 4fefb50b1774bf677e42cb320ae3953e4a8c65c2
SHA512 01b3b5acdb0b5d359ec9f8bd648c721e7b3b2e5e56ba1066f8f2d8963b6b0b4909aca5486de0f28339832c87451e6243e6aec1b823fd5f5a9cf9338d7b4ab5e0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d45e15f8f93462aea6526d5f47e8006112441caa9ea0a4daf24126f5c375b416
MD5 76e218df69dc569ea7b02eaa19330338
SHA1 d3d5d2557c35aa5b73dcca2d4a1e822efcc591f7
SHA512 69794990b437415051cf05700ecd9f69b2631a85cb1c750cd579f5acb506b7e978e4f998cc04ec063b7b86799625e60d91bca309c80ba8f9e1ce7feadb393e3e
TLSH
T1EAD012133611423CC41035330413A2880501D50F450B4041E4288D3D1B140505903481
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 6fdf86edc1e0b49f3e1100afd937c8632ba99555ad621a81bd749da67512a196
MD5 9916f9691b9d0a7aa4ef8ebd5bfbc905
SHA1 9d8da20d3f7502f4f9b197eb3ddc3ed311ec6240
SHA512 4a5d4102100bf8c475b70dbec092a231f7be0593270dd6c6304dbba9e42773d351a7cd71aeb55e70f27903de96afe86473f7d2bdb7647d2018fec5b008aaf838
TLSH
T12AD012133A11523CC41036330413A2880601D40E460B4141E4288D3D1F150509903481
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 468456974fd86b33647942820dce7284879acfab9e9e6eca008e1fdcf9006fb5
MD5 d1f604157b0745a40453afb93a6caa42
SHA1 3d5d77429b03674ebb0ba34d925ba1b09310df5e
SHA512 0644ce93724a57dedd8aec208e5a038e323a1b9871d5046d58a87c60479626693e6c8f25b7c7f7b60fd35aac133d2e660ecbd8f8d579ad1fc6703ae117a485a0
SSDEEP 3:MsFl/ll+l:/FE
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 0ff81bfe8be0518d8f0d6ac60e1782d0c04745701c9ec549404fddf3e0604f8f
MD5 42f45fe60d4fc7b74fca481a35dfb6dc
SHA1 cc94dbd2fc84990d3ca849deedbe78d37331c735
SHA512 c8855091db9b73ca924a8d3c8c84edba9bc5cc4766816872561d7f2b0d09874636247db6f82815f3d8dfd7a2202e8d664f7b8668925af166cb3e4b01163a2bf9
SSDEEP 3:MsEllllkEthXllkl2zEklslMlZll:/M/xT02znEk
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 698c0f2a5c866d0512acc33526da264545b43428b729e25910579d48860a6b12
MD5 291c20f57b9c4c32fa98d28cab861127
SHA1 383277c3f4bd17537446faa94584416b2e64b040
SHA512 970e8f277b8a974a95a6b1fa7270d5394fade83dc80e1a4561ab8c8a99b3b3e045f86f51d9434ab03cdfcd19eae2791c1d121568b289d09bc6d8566a60e94eda
SSDEEP 3:LstlNllkll/l:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Network\Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Preferences
Size 5KB
SHA256 dc0b00578e3a29778c0864e8d884f12ad771d8e8476e010198071338c8c04554
MD5 47d451bee6c1a5920cf7babde334602a
SHA1 e33812e181e3d0bae03d0f1462581b75f838ee84
SHA512 8797d0ae503100771fbe9ae05358dbece0d9860c73f3e1813171b15eb1cc8bc40a59b14eb590e9626f221a5e456bb43c5db76a19676cba2ddd125ff5d47d6a8a
SSDEEP 96:stH05NDUEb98RffMdZ8i0oEfklm/7qx+WVHMSm+uecadQjA+gYwKEB:stH0TORfKZ8pF1/S+Wi8ddWwK8
TLSH
T10DC198035E28A9774DC7E61CBE36BB02D2FA102276D54E98E7FC861C09E65CC124B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 55e56df8f064d585ecb6d99f1dd0475e6cf252a612a05ebe63ac0fed6116a369
MD5 505cb5707ed2daec4c183469f1a53b62
SHA1 1cba15d09f423f4b10a0b496c4c187a782c19fae
SHA512 e88a5fdca1025fbeb8cc23322f8b6e1593a40f90ea849a76c959a1eb87f6f563974a42a54b2bcb9164de0c90fa04670421d084d27128bc962fb9185cf61107af
SSDEEP 96:stH05NDU8bD8RffMdZ8i0oE0klm/7qx+WVHMSm+uecadQjA+gYEKEB:stH0TARfKZ8pFm/S+Wi8ddWEK8
TLSH
T120D1A8035E28A9774DC7E61DBE36BB42D2FA102376D64E48E7FC861C09D65CC124790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 950cfa98652f27746e44cdbcdd912cd072656870a126b9019ca2e9290399ed5e
MD5 9eb3f5879dcf2a5a17aeb8614aa33fa8
SHA1 443bc88395c8e1af31265865bb3df25a7116a3f8
SHA512 781ab863aea2868dc08fb47ba96b8148da011fbe8fcc2e3ab4b6079929824bbd3e32e13558b1eaf5c8c641e77dafd1e82aae9ca153ab28529ca6f1e8b2c199e9
SSDEEP 96:Hl3ilPlf/ROoKOpkF5d13io7sMaTEv9V5h5pg5+eewDx6MmEVl36Ydo:HglWGjs9lLQ6Yi
TLSH
T11CD1D9A70669C438AF44ABEBDC2D7ECB89B641DFD8D64C0A96E1C54C07C2EFC20D9495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 de175caaaa77998c712831d72e8da76271cce2cde87ded98f85ed545c92e426e
MD5 9c117869e84608075d42c6d48a9d9632
SHA1 1c72ac2d728858b6b6030f27ebf944e0f99d3984
SHA512 7ba788998c364b27c57efe18d58d5f5f370b400c14d8505899dabd2757f8e9c8a0b81c7790926892c5a502ab9e426294271c3230cc0c3fae2ed479883cfa7f26
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Site Characteristics Database\LOG
Size 323B
SHA256 7d8c4cdc1771814335df14bd856440d74fc535ed21191589cd955ad5d45955b8
MD5 c6e735231c06027534fa7e08d1e4a94c
SHA1 5dfad7c477b85d548973e67c8a024f7566ba0d6b
SHA512 3abcb9868d6ff3b4b58b323aeeb245f8b0fbb46eaa14cb35d801446b52c733ce50f08865877593b90b397ab9528d48a61caf9ae9a55fbbfd81c08a755fe16111
TLSH
T157E0263129CAC77B614604FB8A73E349C7B67D21E5C932114F69FA04A54744C7616F80
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Sync Data\LevelDB\LOG
Size 299B
SHA256 42eec95657445cccbf5a23a796185945466b8f9f1b5852afc01f57e33ccfd161
MD5 d648542a20b7aace81a628cd6355caa6
SHA1 5044785ec062e51cf39c7a01d15d18cceea7173b
SHA512 9c4c605bda417a67f179227dc242686ac574a48eee69d4e91787b13713ac6402e42be014bbfce92aa3e98a427a460cf6678b92ab5e64b3879c90b794a4ac51a9
TLSH
T1B2E07DB158C6C336244184E78AB1D34AC7F47D51A3C937040F09B904AC0301DB328EC1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State
Size 2KB
SHA256 69d9787255dd3989ec76b7a0555fca7b73842052939cc88f39bb0bec77af5e6e
MD5 bd4247a856decdc571b9555566352594
SHA1 814b009e5b4abd2d2c25581a5bcb84b4bae3fa46
SHA512 3f60b71271ec60582125c882c78422e0f24c06b0333b6203763890e7b91bfcf00fa91eba8a441bb2eb0f788f7820c17b24e741443819dd9c097927e5ef9ef461
TLSH
T1EF51B6B3B808A67787D39708BE492F23AA715152E6175F50AADD1B0C02DB6DC2342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State
Size 1KB
SHA256 1c0747d0b5940cada4b76618ea439791fc11ca9a0e7769f701bad86b65130773
MD5 8c1a0fced95723a4da40701990cd4949
SHA1 55eb01dc5aed40d211746070f0dd1c8d57020d6f
SHA512 763abbd8e8ce803925c4f7efaeda4b9e84bf35cd6ea808ccf129a3f027a2710accf6f957580383cb96fc75c9565d9b491a11f1b02c2218b789b72d355bdf9a08
TLSH
T1B73162B3E4947B729BC697497B05AEA72E601157D1068F04A2DE8B0C12E7ACC526AD33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State
Size 3KB
SHA256 3cf1214e74075bc9499fba8e3f0b56d5372bf485f7e5d1ccfa086cff2f2eee5a
MD5 6f176204a538d58d5ec21fd661806532
SHA1 68a75312195a811d627c30fa47c92349a090ed45
SHA512 1b148b2845c5fec54686283941a1fc9cfa23a566d066a3316887e275408106309f3daa17adba3e92143e6ad5346b21d6dbc140f8a89cfa833bbcc6f944e0c239
TLSH
T18B718473A864A5278FE3DA04BD852B16B6A11123E5967F94DAED0F0C02DB7CC1382C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State
Size 4KB
SHA256 85314219765235006f2c00a7b64af49a082782be03d78606ff44a8bee7c4cd98
MD5 93a97a781152f29dd360dffdd5ad3845
SHA1 46a9e15f908ff3e491b5f534f73c1f8063f42e35
SHA512 464e4bc22990860f1cca2ac48d4e002f75e82555eacb589059975636670bc8f588c18c490cf147eb5a3045c093d35103521f4850da4b8e14850336b82e19155b
SSDEEP 96:zuUF3NkCEwf1bAbTts8Frh/cInURoDotoN5+uDgBGZcF86wAZjzTd6Fa:zTF3NbVbAb5ooDUatEGZevR
TLSH
T1A8919462A464A9378EE2DA09BD452F07B6A15123E5966F98D9EC0F0C02DB6CD1382D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State
Size 4KB
SHA256 e90b659d7479450526e6ffd4280b2c79e57a5ce2570dafc472394bbb4e136b0c
MD5 14e2f8d3afd841e30129d6b46548e448
SHA1 39d2e0e1d745e6547845f5bf9cb318112cde828b
SHA512 3c00e926e309b5aa96c956bdfe2dccb1ace136b92a6086209bfba73b2d2ee0de45bc3379db1b3620723e4deb7da807b904dbfc41d93c1d928527b58f5ac91cf8
SSDEEP 96:zuUF3NkCEwf1bAbTts8Frh/cInURoDotoN5+uDgBGZcF86wAZjzTT6Fa:zTF3NbVbAb5ooDUatEGZevn
TLSH
T1E1919462A864A9378EF2DA09BD452F03B6A15123E5966F98D9EC0F0C02DB6CD1382D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State
Size 4KB
SHA256 a00d2ed731e78b0607a35af7264dfd7fcba173a304b26f548b1b8ae979fdb4dd
MD5 bc3669c1326e466645f897bfdf8a3b61
SHA1 d3ecacbf51cbcef520abf36e1bcdd0b096bd2c93
SHA512 155d73818d51f454953da151a56e37c1ad58f8e91513a77d628a83eff99970f172e860d447c554df981844ad2dcbcef86b580b71514491a8f84ffd3ce4b10460
SSDEEP 96:zuUF3NkCEwf1bAbTts8Frh/cInURLl8DotoN5+3DgBGZcF86wAZjziT6Fa:zTF3NbVbAb5oiDUaWEGZeOn
TLSH
T1D791B662A464A9374EF3DA09BD453F07B6A15023E5966F98DAEC0F0C02D77DD0382C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State
Size 4KB
SHA256 c87467d075400f83cacc9bfbae92ec93098477c840979f6def46d4f32aa65efd
MD5 270e546c8d860af645ce95bd3782a576
SHA1 c8e7d1ff8598106d3ac77f8d56b63207a85cbde6
SHA512 0c5cf43ed0c95b31a7ce8821f6dafd7beacd1fb06105b2b365ddbc0f626a4256d8b2ad5d547a8dedbb016bed03f945b5f657435ca6a82ff2178e7c586d453999
SSDEEP 96:zuUcNkCEEf1bAbTtZ8Frh/cInURLl8DotoN5+LDeBGZcF86wAZjzi1rlFa:zTcNbjbAbcoiDUaieGZeO1y
TLSH
T1D391A562A864A9378EF3D609BD452F07B6A15123E5966F98DAEC0F0C02D77DD1382C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5a3db6.TMP

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Local State~RFe5a3db6.TMP
Size 1KB
SHA256 56cd8bd3c7bbafd6ce06e8b499d9f3415eeb8695709862c4855a4f25ea1cacc5
MD5 cf7f7252151301c324854b03f38c6d10
SHA1 085b42b02719d2fdb9263cf7fb2f4c7c0e95530a
SHA512 ffc18296bcf5d05107769935c2d8e069f286c19f3e85f065dcb7a285e486efa855c3c414bcecbf9a0ac64943ce8a07f88e5c7abcad99c6f0c9d375366f5ff2e0
TLSH
T1242142B3E4D8767297C68648BB01AA972E50115391068F08A2DD9B0C12E79DC5266D33
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\ShaderCache\index
Size 256KB
SHA256 513bdb1e52803a53f88f554441be90ca8e1481390d2f3e8e2e8e68cf9b4b9410
MD5 78074d7244e981dd59a45753bc64c6ef
SHA1 76190cad8f1debd0bb7b89a99f150317bb526b57
SHA512 dae32a774f3303b578c6c05991263ac3c5069580187fbf133c030a8df0f3d2dad7da66e01c0202a7ded058d834fd2b4f2bcbeb735d97da4fe91c0e2f7054c2a0
SSDEEP 3:LsOllllklkXlRNM:LsUlPRN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.soundcloud.desktop\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

soundcloud-desktop.exe

Path C:\Users\Admin\AppData\Local\soundcloud-desktop\soundcloud-desktop.exe
Size 28.5MB
SHA256 902bb1af8d172380a8921ccd6344fd97fc1e557c560faba932a53e9dd1715778
MD5 63f9f0b0d7da62c01d9b1d189654f6ad
SHA1 d7718b940c8e140f39229307fa6599326c6467e7
SHA512 80621fce14844c4f01c47f5177270fc8e93a1f6633489b0745dc501e70a999d025fe292832f69c722137da793cca3d3de35d63bb76095e1725ff91071c21b5a5
SSDEEP 196608:yRmDa4KDNZ/1wDHBBYp+YaTwcpLBGvr2J+VOoYHQLwHRTBbYuiD:yca44z6DhBYp+Y3klGvr2ckoYwLydY/
TLSH
T161672A117A5B996CD09BC87083478A674E2130DF1A36B9BF45C496393F7EBF06B28319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1804-406-0x00007FF858950000-0x00007FF858951000-memory.dmp

Download

memory/1804-679-0x000001F561780000-0x000001F561921000-memory.dmp

Download

memory/4372-456-0x00007FF858B00000-0x00007FF858B01000-memory.dmp

Download

memory/4372-457-0x00007FF858B10000-0x00007FF858B11000-memory.dmp

Download

memory/5612-527-0x00007FF858950000-0x00007FF858951000-memory.dmp

Download

memory/5804-817-0x000002BD11580000-0x000002BD11721000-memory.dmp

Download