File name:

downloadsound.cloud-Setup-0.0.17.exe

Full analysis: https://app.any.run/tasks/2a3573c6-fdf1-4c53-972e-6060ce89eaca
Verdict: Malicious activity
Analysis date: April 19, 2025, 18:25:48
OS: Windows 10 Professional (build: 19044, 64 bit)
Tags:
electron-js
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
MD5:

A3C4F869048328DB963ADF06D06CEA11

SHA1:

52EBD08B2FA44AE1ED7AD7E068EDD920376C0A12

SHA256:

937780F6A34E62CDFFFA5FB8347B06CA5BC1546238C99937DB2706FC776638F6

SSDEEP:

786432:dt3+jsZhtHuNt0su2ofgswy9tKr15IlUeiotIODXGAZm:dt3ssZhtun0p2of5wy9Q5EUjotIuXGAE

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • The process creates files with name similar to system file names

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Malware-specific behavior (creating "System.dll" in Temp)

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Executable content was dropped or overwritten

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)

    • Reads security settings of Internet Explorer

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • There is functionality for taking screenshot (YARA)

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Application launched itself

      • downloadsound.cloud.exe (PID: 6700)

    • Process drops legitimate windows executable

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Drops 7-zip archiver for unpacking

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Creates a software uninstall entry

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

  • INFO

    • Checks supported languages

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 1188)
      • downloadsound.cloud.exe (PID: 6540)
      • downloadsound.cloud.exe (PID: 1180)
      • downloadsound.cloud.exe (PID: 6700)

    • The sample compiled with english language support

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Create files in a temporary directory

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)

    • Manual execution by a user

      • downloadsound.cloud.exe (PID: 6700)

    • Reads the computer name

      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1188)
      • downloadsound.cloud.exe (PID: 6540)
      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Creates files or folders in the user directory

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 6540)

    • Reads product name

      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1180)

    • Reads Environment values

      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1180)

    • ELECTRON JS mutex has been found

      • downloadsound.cloud.exe (PID: 6700)

    • Checks proxy server information

      • downloadsound.cloud.exe (PID: 6700)
      • slui.exe (PID: 4152)

    • Process checks computer location settings

      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1180)

    • Reads the machine GUID from the registry

      • downloadsound.cloud.exe (PID: 6540)

    • Reads the software policy settings

      • downloadsound.cloud.exe (PID: 6540)
      • slui.exe (PID: 4152)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable MS Visual C++ (generic) (67.4)
.dll | Win32 Dynamic Link Library (generic) (14.2)
.exe | Win32 Executable (generic) (9.7)
.exe | Generic Win/DOS Executable (4.3)
.exe | DOS Executable Generic (4.3)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2018:12:15 22:26:14+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 26624
InitializedDataSize: 473088
UninitializedDataSize: 16384
EntryPoint: 0x338f
OSVersion: 4
ImageVersion: 6
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 0.0.17.0
ProductVersionNumber: 0.0.17.0
FileFlagsMask: 0x0000
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: downloadsound.cloud
FileDescription: Electron application boilerplate based on React, React Router, Webpack, React Hot Loader for rapid application development
FileVersion: 0.0.17
LegalCopyright: Copyright © 2021 downloadsound.cloud
ProductName: downloadsound.cloud
ProductVersion: 0.0.17
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
136
Monitored processes
7
Malicious processes
1
Suspicious processes
1

Behavior graph

Click at the process to see the details
start downloadsound.cloud-setup-0.0.17.exe downloadsound.cloud.exe downloadsound.cloud.exe no specs downloadsound.cloud.exe downloadsound.cloud.exe no specs comppkgsrv.exe no specs slui.exe

Process information

PID
CMD
Path
Indicators
Parent process
1180"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" --type=renderer --field-trial-handle=1584,15067022751152923441,17623896491048528138,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\resources\app.asar" --node-integration --node-integration-in-worker --no-sandbox --no-zygote --native-window-open --enable-remote-module --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2372 /prefetch:1C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe—downloadsound.cloud.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
1188"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" --type=gpu-process --field-trial-handle=1584,15067022751152923441,17623896491048528138,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1612 /prefetch:2C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe—downloadsound.cloud.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
LOW
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
4152C:\WINDOWS\System32\slui.exe -EmbeddingC:\Windows\System32\slui.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Activation Client
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
4188C:\Windows\System32\CompPkgSrv.exe -EmbeddingC:\Windows\System32\CompPkgSrv.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Component Package Support Server
Exit code:
0
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\comppkgsrv.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\bcryptprimitives.dll
6540"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1584,15067022751152923441,17623896491048528138,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=2008 /prefetch:8C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe
downloadsound.cloud.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6584"C:\Users\admin\AppData\Local\Temp\downloadsound.cloud-Setup-0.0.17.exe" C:\Users\admin\AppData\Local\Temp\downloadsound.cloud-Setup-0.0.17.exe
explorer.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
Electron application boilerplate based on React, React Router, Webpack, React Hot Loader for rapid application development
Exit code:
0
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\temp\downloadsound.cloud-setup-0.0.17.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\user32.dll
6700"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe
explorer.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\uiautomationcore.dll
c:\windows\system32\rpcrt4.dll
Total events
5 239
Read events
5 207
Write events
14
Delete events
18

Modification events

(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:InstallLocation
Value:
C:\Users\admin\AppData\Local\Programs\downloadsoundcloud
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:KeepShortcuts
Value:
true
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:ShortcutName
Value:
downloadsound.cloud
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:DisplayName
Value:
downloadsound.cloud 0.0.17
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:UninstallString
Value:
"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\Uninstall downloadsound.cloud.exe" /currentuser
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:QuietUninstallString
Value:
"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\Uninstall downloadsound.cloud.exe" /currentuser /S
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:DisplayVersion
Value:
0.0.17
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:DisplayIcon
Value:
C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe,0
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:Publisher
Value:
downloadsound.cloud
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:NoModify
Value:
1
Executable files
18
Suspicious files
98
Text files
15
Unknown types
0

Dropped files

PID
Process
Filename
Type
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\app-64.7z —
MD5:—
SHA256:—
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\LICENSES.chromium.html —
MD5:—
SHA256:—
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\icudtl.dat —
MD5:—
SHA256:—
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\System.dllexecutable
MD5:0D7AD4F45DC6F5AA87F606D0331C6901
SHA256:3EB38AE99653A7DBC724132EE240F6E5C4AF4BFE7C01D31D23FAF373F9F2EACA
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\locales\am.pakbinary
MD5:E1B02B36CE38A843A12867D2700A1BEE
SHA256:E9C78C2410D5C81E0CD5D122462E852143EEA15CA69CD01B85322CEDE1E10806
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\nsis7z.dllexecutable
MD5:80E44CE4895304C6A3A831310FBF8CD0
SHA256:B393F05E8FF919EF071181050E1873C9A776E1A0AE8329AEFFF7007D0CADF592
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\locales\da.pakbinary
MD5:55A82964B36308B838D627E7CE708078
SHA256:1D1A3E38DDF282969BCA2A5D893B3DB4A0AED10B53EAB37BB2DAD7D2D18C94DE
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\locales\ca.pakbinary
MD5:D92F01E66DBEFBE28D9DDC0A0B318258
SHA256:14E99F4D94868A454F40EE8E0F62D056E0ABB303CAF6E184A9A61BDEC18AC271
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\locales\ar.pakbinary
MD5:985EFAD36A2C07C95FC304319D6CD1F1
SHA256:1CDEF40BA8343E7F826C2020906915EFAAC5E56F543CD2ED6EBF704882525D8C
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\LICENSE.electron.txttext
MD5:45574510C534A8195F53B30E3810239E
SHA256:C44607A865E7A6DB05552BAA0EF71F9887D96ACD00D123854B44996BC27C0E33
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
24
DNS requests
17
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
23.216.77.16:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
5964
SIHClient.exe
GET
200
23.215.121.133:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
5964
SIHClient.exe
GET
200
23.215.121.133:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
2.17.190.73:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
5352
RUXIMICS.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
2104
svchost.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
—
—
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5496
MoUsoCoreWorker.exe
23.216.77.16:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
—
—
172.211.123.250:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
FR
whitelisted
6544
svchost.exe
20.190.159.4:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
2.17.190.73:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
6540
downloadsound.cloud.exe
172.217.18.10:443
fonts.googleapis.com
GOOGLE
US
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 172.217.18.14
whitelisted
crl.microsoft.com
  • 23.216.77.16
  • 23.216.77.19
  • 23.216.77.18
  • 23.216.77.25
  • 23.216.77.17
  • 23.216.77.12
  • 23.216.77.23
  • 23.216.77.26
  • 23.216.77.21
whitelisted
client.wns.windows.com
  • 172.211.123.250
whitelisted
login.live.com
  • 20.190.159.4
  • 40.126.31.71
  • 20.190.159.2
  • 40.126.31.1
  • 20.190.159.64
  • 40.126.31.129
  • 40.126.31.0
  • 20.190.159.68
whitelisted
ocsp.digicert.com
  • 2.17.190.73
whitelisted
settings-win.data.microsoft.com
  • 51.104.136.2
whitelisted
fonts.googleapis.com
  • 172.217.18.10
whitelisted
ph-files.imgix.net
  • 151.101.2.208
  • 151.101.130.208
  • 151.101.66.208
  • 151.101.194.208
whitelisted
fonts.gstatic.com
  • 172.217.18.99
whitelisted
www.googleapis.com
  • 172.217.16.138
  • 142.250.185.234
  • 142.250.185.202
  • 142.250.184.202
  • 142.250.184.234
  • 172.217.18.10
  • 172.217.18.106
  • 216.58.206.74
  • 142.250.185.74
  • 142.250.185.138
  • 142.250.185.106
  • 172.217.16.202
  • 172.217.23.106
  • 142.250.185.170
  • 216.58.206.42
  • 142.250.181.234
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
downloadsound.cloud-Setup-0.0.17.exe