Overview

overview

8

Static

static

1

GoXLR App ...er.exe

windows10-2004-x64

8

GoXLR App ...er.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    39s
  • max time network
    67s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 10:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    GoXLR App V1.6.4.014 Installer.exe
  • Size 40.1MB
  • Sample261027-mkfk9sds7m
  • SHA256 cf7ec4f7af9fcc2169caf7786e7afba6615a28eb93afa55459a30bb4c3c436fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryinstallerspywaretrojanupx

Malware Config

Signatures

  • Manipulates Digital Signatures 1 TTPs 1 IoCs

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

  • ACProtect 1.3x - 1.4x DLL software 8 IoCs

    Detects file using ACProtect software.

  • UPX packed file 12 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 11 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 16 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 32 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies system certificate store 2 TTPs 2 IoCs
    defense_evasionspywaretrojan
  • Suspicious use of WriteProcessMemory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GoXLR App V1.6.4.014 Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\GoXLR App V1.6.4.014 Installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3100
    • C:\Users\Admin\AppData\Local\Temp\is-2L61T.tmp\GoXLR App V1.6.4.014 Installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-2L61T.tmp\GoXLR App V1.6.4.014 Installer.tmp" /SL5="$400A0,41103467,845824,C:\Users\Admin\AppData\Local\Temp\GoXLR App V1.6.4.014 Installer.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2060
      • C:\Users\Admin\AppData\Local\Temp\is-VDRIV.tmp\TC-Helicon_GoXLR_Driver.exe
        "C:\Users\Admin\AppData\Local\Temp\is-VDRIV.tmp\TC-Helicon_GoXLR_Driver.exe" /S
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2192
        • C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\setup.exe" /S
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:1852
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2276
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5152
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:6028
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3828
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4292
          • C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\GoXLRAudioCplApp.exe
            "C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\GoXLRAudioCplApp.exe" -exitall
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:4604
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Drops file in Windows directory
            • Executes dropped EXE
            PID:4312
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            PID:5988
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Checks SCSI registry key(s)
            PID:2840
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Checks SCSI registry key(s)
            PID:5616
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Checks SCSI registry key(s)
            PID:912
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Executes dropped EXE
            • Checks SCSI registry key(s)
            PID:292
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
            5⤵
            • Manipulates Digital Signatures
            • Executes dropped EXE
            • Reads the TCP/IP host and domain name from the registry
            • Modifies system certificate store
            PID:2748
          • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\signcheck.exe
            "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\signcheck.exe" cci "C:\Program Files\TC-HELICON\GoXLR_Audio_Driver\W10_x64\goxlr_audio.sys"
            5⤵
              PID:5228
            • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
              "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
              5⤵
                PID:4280
              • C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
                "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp" "C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp"
                5⤵
                  PID:5528

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              TUSBAudio_setup.log
              • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
              • Size 985B
              • SHA256 928b9bbe7d69911b871bab2d598f7162774e5a03ec623ed9d49dddf00dd89a2b
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TUSBAudio_setup.log
              • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
              • Size 1KB
              • SHA256 5130c7d729119bc26cf8d8e2ad2716e83e4cfe5762934111abc7b5ae08af8d08
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TUSBAudio_setup.log
              • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
              • Size 1KB
              • SHA256 ab33439c11995e934e605b75d54bd6ab705d750edae4fc7a18aaae3cb9a27a79
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TUSBAudio_setup.log
              • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
              • Size 4KB
              • SHA256 b3f4b1ef155a089eeb462941f3a94e702ab4ec1d4f10dfa254b40f13538c7db6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TUSBAudio_setup.log
              • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
              • Size 4KB
              • SHA256 3035916e3a75c781cfb89539db3674ed03aa97c4a808abeaddb1a96412d0f172
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TUSBAudio_setup.log
              • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
              • Size 5KB
              • SHA256 652283d638bfdf96477462df53caf48b8eccd26519015327017c8fae97cbcba4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TUSBAudio_setup.log
              • Path C:\Users\Admin\AppData\Local\Temp\TUSBAudio_setup.log
              • Size 5KB
              • SHA256 a9045058038e9baece5ab467b605f2f8ff246a72f44ad07c2e26ddaaa9a05c6a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              GoXLR App V1.6.4.014 Installer.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\is-2L61T.tmp\GoXLR App V1.6.4.014 Installer.tmp
              • Size 3.2MB
              • SHA256 21dc6e7d2c600192c1d92a97c0683aeaf12ea5ed59f186778b78f9939ec1474f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TC-Helicon_GoXLR_Driver.exe
              • Path C:\Users\Admin\AppData\Local\Temp\is-VDRIV.tmp\TC-Helicon_GoXLR_Driver.exe
              • Size 2.3MB
              • SHA256 fe568e5d2ac70c2f395fca2624f12c57035d39af79ed1529d9b7d24b3fcc58ba
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nscFAF3.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF3.tmp
              • Size 215KB
              • SHA256 dbcad94024177ce8df121a428fb6b9db8d3c992ebee57f01d57f30bdfd2c0b4c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 306B
              • SHA256 032846c05bac348f205127090bfde7313e606ded5a0b3d7e29766ab602fe8fc4
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 309B
              • SHA256 b94d902e0f92967294edc616b1870b3e6ef9364be64a29b57baabfbd21a8c56f
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 327B
              • SHA256 2aa3012df7616d8b0db3a3bf9deedd7e4aba4877b5fdd73ee586891da532db35
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 325B
              • SHA256 72f1eda0c12311f47211de4d4285ba3e785b75ef38ac56d7fbae766bd60443b7
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 51B
              • SHA256 227d9d8417987f1db2cc5ff0cc4b1ec1b1205423a3ab1d29f8ea94fd869a3415
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 40B
              • SHA256 b5235906b7e6aeed9fc7ecac40fc9bee33670bebc3a6a11203eabbe510557a09
              • MD5 SHA1 SHA512
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 170B
              • SHA256 7b50b39f6a118ef2418176bf3d589cc84329f7a5dac8a22624d8cb5e89009d91
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 69B
              • SHA256 b43d68a5a213623edd275b9182563d5e52b5a0f86a1cb332bc2ff3909c849734
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 297B
              • SHA256 34015ea98a665f7093b8e8a374bd62f0c29ea79b4ea2d5314d53546dc9563063
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 35B
              • SHA256 f21ed17b37e926370c163b254c860a564c508b5de9f003c179e5a7cb1461536a
              • MD5 SHA1 SHA512
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 51B
              • SHA256 ed2a37ee583d57d21234e86cde8c9b11a8941ad8fe9670e91af0e8ded8fb9f61
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF4.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF4.tmp
              • Size 320B
              • SHA256 6c98bcd15631a18368c8dc8bed984cc2e52ce6fcc6e34a174ce951a89aed5415
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF5.cfg
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF5.cfg
              • Size 1KB
              • SHA256 1e309f62f9cb9dcf12053ef5f1b0b2e2fad40b7f97656a3ae2dc088a48471ddb
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF5.cfg
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF5.cfg
              • Size 1KB
              • SHA256 e8d86e5ced96cbbd2bca7bb54a2aaa10069e28d6e8a31cb5f36fc0bdae8d39fa
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nscFAF5.tmp
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\nscFAF5.tmp
              • Size 391KB
              • SHA256 d947b7ed40dd037e0a12967bfc03e28cd8fbd3468a579c335512585dbbfe14f9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              signcheck.exe
              • Path C:\Users\Admin\AppData\Local\Temp\nsnFAE3.tmp\signcheck.exe
              • Size 670KB
              • SHA256 708b214bd325984c9becaa87179be8e931c851bb92cc1421a7694ea38d57739b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsxFAD2.tmp\System.dll
              • Size 11KB
              • SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              md5dll.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsxFAD2.tmp\md5dll.dll
              • Size 6KB
              • SHA256 fbed2f1160469f42ce97c33ad558201b2b43e3020257f9b2259e3ce295317a70
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nsExec.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsxFAD2.tmp\nsExec.dll
              • Size 6KB
              • SHA256 ff00f5f7b8d6ca6a79aebd08f9625a5579affcd09f3a25fdf728a7942527a824
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              registry.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsxFAD2.tmp\registry.dll
              • Size 24KB
              • SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              GoXLRAudioCplApp.exe
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\GoXLRAudioCplApp.exe
              • Size 541KB
              • SHA256 c18eea6c14574922125d438561930fd6e73e9199199aacef69591ea2370c5e37
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audio.cat
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audio.cat
              • Size 10KB
              • SHA256 6211fe5016bdb845a5c7760a736a181b9292cc2b21cd703f5420bbafc32b0aaa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audio.sys
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audio.sys
              • Size 395KB
              • SHA256 c8c5e4976cf420c3c7f40e48c3056d621ac238ca538ca37347886da1e6b5f7e9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioapi.dll
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audioapi.dll
              • Size 248KB
              • SHA256 47ee381151e162a0fb6b1e30d1f687955a9d06b99005b9a461c3c07352439388
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioapi_x64.dll
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audioapi_x64.dll
              • Size 287KB
              • SHA256 05fdee4c64f3ac52ce5e7d6b5c94cdc65752d3a3ad78521dd7f138a5fef7d4aa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioasio.dll
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audioasio.dll
              • Size 208KB
              • SHA256 638d7ca39690b939a8fec65c4592e84d4ddc71e3aa74b3b4030f81caed7b2b14
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioasio_x64.dll
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audioasio_x64.dll
              • Size 246KB
              • SHA256 4fb923db7194f0ba03eba7b1a5355df682aa08b4927abf559b5064bcaf7cf9e1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioks.cat
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audioks.cat
              • Size 11KB
              • SHA256 26214840e4bb5f79391b80e689956f2e7d9a9bc01c85d27bd06f4d54b19730f8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioks.sys
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x64\goxlr_audioks.sys
              • Size 52KB
              • SHA256 93babdb3c2ce6f71a29767309888cb6a376bd610cef299816d92c5b802efa768
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              de.txt
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x86\GoXLRAudioCplApp.strings\de.txt
              • Size 29KB
              • SHA256 0297417794275fcb14c031df5f31bbdf1a01804cb9d58e7d1d0ca1742ac50f83
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              en.txt
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x86\GoXLRAudioCplApp.strings\en.txt
              • Size 28KB
              • SHA256 6aa45d032bb4858a305a34dd42a06d340696d58a93c62188bf15e8a3751adb06
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              GoXLRAudioCplApp.xml
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x86\GoXLRAudioCplApp.xml
              • Size 4KB
              • SHA256 4c327b68a428710aebaab2d149813a531fd71b33e46f50125e748be67aa9bbf4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              custom.ini
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W10_x86\custom.ini
              • Size 258B
              • SHA256 50fa9eaf7e36f86ba039f793cb2c7d6e5d90c47bab0a4ec0f107137861d6cb0d
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              goxlr_audio.inf
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W7W8_x64\goxlr_audio.inf
              • Size 97KB
              • SHA256 a592786586eaa6a5923be8173116fcc0c1d1671873f4108a8b91720009e53980
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioks.inf
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W7W8_x64\goxlr_audioks.inf
              • Size 5KB
              • SHA256 06b549b947c86e301de6215dc6673f45069f12ff13942676624f2f8eac127b98
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audio.inf
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W7W8_x86\goxlr_audio.inf
              • Size 97KB
              • SHA256 c03b8e7e0e384ca263007f720e3c0f7b0060dba5987d7bdbeff76d83bbef06c9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_audioks.inf
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\W7W8_x86\goxlr_audioks.inf
              • Size 5KB
              • SHA256 ebbbf1340d513a0d319d7b25362d3e4f7da0cf17b40c89a79f418cab896c8cd8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              goxlr_32x32.ico
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\goxlr_32x32.ico
              • Size 3KB
              • SHA256 5554faab53fc4ea18360474561f9bb5368800d74f882e78dad6c4308a43ee5a0
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              setup.exe
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\setup.exe
              • Size 1.6MB
              • SHA256 9cac8d66db8a28a28c033d11cba282be159f4d06131358c5557774c38fed10c6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              setup.ini
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\setup.ini
              • Size 3KB
              • SHA256 f541be7ce8aae0bb951cb130d2632297a485b4e02fffe827766b540d8264d77c
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              vendor.cer
              • Path C:\Users\Admin\AppData\Local\Temp\tlsfx098940B9\TC-HELICON_GoXLR_v5.12.0_2021-06-28\vendor.cer
              • Size 1KB
              • SHA256 91832ccfa6869de39033978f6157d530589f2ce3dafbdc72a464253d94cf16d3
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              memory/1852-398-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-434-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-299-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-387-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-386-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-385-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-1169-0x0000000000400000-0x000000000074A000-memory.dmp
              Download

              memory/1852-397-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-382-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-381-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-379-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-378-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-376-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-374-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-373-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-372-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-415-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-436-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-435-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-287-0x0000000002C40000-0x0000000002C99000-memory.dmp
              Download

              memory/1852-433-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-432-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-431-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-430-0x0000000000400000-0x000000000074A000-memory.dmp
              Download

              memory/1852-150-0x0000000000400000-0x000000000074A000-memory.dmp
              Download

              memory/1852-714-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-713-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-840-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-985-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/1852-986-0x0000000002CA0000-0x0000000002CA9000-memory.dmp
              Download

              memory/2060-12-0x0000000000990000-0x0000000000CD3000-memory.dmp
              Download

              memory/2060-9-0x0000000000990000-0x0000000000CD3000-memory.dmp
              Download

              memory/2060-10-0x0000000002D30000-0x0000000002D31000-memory.dmp
              Download

              memory/2060-6-0x0000000002D30000-0x0000000002D31000-memory.dmp
              Download

              memory/2060-148-0x0000000000990000-0x0000000000CD3000-memory.dmp
              Download

              memory/2060-1180-0x0000000000990000-0x0000000000CD3000-memory.dmp
              Download

              memory/2060-1182-0x0000000000990000-0x0000000000CD3000-memory.dmp
              Download

              memory/2060-1184-0x0000000000990000-0x0000000000CD3000-memory.dmp
              Download

              memory/3100-8-0x00000000001B0000-0x000000000028C000-memory.dmp
              Download

              memory/3100-0-0x00000000001B0000-0x000000000028C000-memory.dmp
              Download