379067681134fd0f1283f6e08245da707df68105c832de8e6d21be7e3c8ef747

Analysis

max time kernel
111s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
18/10/2022, 07:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
allavsoft.exe
Size 45.9MB
Sample221018-jkkcnsfaa5
SHA256 379067681134fd0f1283f6e08245da707df68105c832de8e6d21be7e3c8ef747
MD5 f24ffa820e0d0bfa951dc92099f021aa
SHA1 80581bb2dd0b36ea9c41acfaa4ae822cd259972b
SHA512 881e8693a578c81c3a0c05a4a50406fb25da060266d5c5ab8187f15b71f0b2c39a4612d2cc38b52a13a44ddd4ff9b6c50e565922887b6aa84d6758a3a832f434
SSDEEP 786432:yHIskC/Q+uPnj9qIHv29e8dgW2mdh8NiuLj560ZcQRpc6zbS7HEy:Clu9qIHv2w8iWh84uLl60O4i6zbcHEy
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
3360	allavsoft.tmp
3584	videodownloader.exe
4336	videodownloader.exe

Loads dropped DLL 64 IoCs

pid	Process
4612	regsvr32.exe
3884	regsvr32.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
3584	videodownloader.exe
4256	regsvr32.exe
4256	regsvr32.exe
3632	regsvr32.exe
3632	regsvr32.exe
3632	regsvr32.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-UINKO.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-3F206.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\is-TJQ07.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-STAFQ.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-N1IVU.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-GMF2I.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-AS040.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-BRA5T.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record_help.chm	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\sqldrivers\is-N4EAR.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-4S2CK.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-A0LQ6.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-GS0R7.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\rtmpdump.exe	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-V7K8B.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\BVDFirefoxExt\META-INF\is-H8CF9.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-8J33Q.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\SDL.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\libeay32.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\avfilter-7.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtWebKit4.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtXml4.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\imageformats\qgif4.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtScript4.dll	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\BVDFirefoxExt\components\is-I6TRH.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-CIQKB.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\is-0NPML.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtCore4.dll	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\BVDFirefoxExt\META-INF\is-IFI7D.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-08SHS.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\swscale-5.dll	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\is-952K6.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-SAE7V.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\help.chm	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-AMOHP.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\ffmpeg.exe	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\BVDFirefoxExt\chrome\is-QE2M9.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\youtube-dl.exe	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-0S21M.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\imageformats\is-SEI51.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-MTV6T.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\xvidcore.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\avcodec-58.dll	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-0EIBE.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-MQNPC.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-JEQ6B.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\msvcr100.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\metaflac.exe	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\is-MIC7L.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\pthreadGC2.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\sqldrivers\qsqlite4.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtXmlPatterns4.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\BVDDownloadButton.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videorecord.exe	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-2ORUK.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\msvcr71.dll	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtGui4.dll	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-S9IG7.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-MJ81Q.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\is-V2EGR.tmp	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\is-5LSLM.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcp71.dll	allavsoft.tmp
File created	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\is-P4UPA.tmp	allavsoft.tmp
File opened for modification	C:\Program Files (x86)\Allavsoft\Video Downloader Converter\yt-dlp_x86.exe	allavsoft.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Modifies registry class 51 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{860BB310-5D01-11D0-BD3B-00A0C911CE86}\Instance\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E14549B-DB61-4309-AFA1-3578E927E935}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E14549B-DB61-4309-AFA1-3578E927E935}\InprocServer32\ = "C:\\Program Files (x86)\\Allavsoft\\Video Downloader Converter\\record\\audio_sniffer.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{33D9A762-90C8-11D0-BD43-00A0C911CE86}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\ProxyStubClsid32\ = "{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}\InprocServer32\ThreadingModel = "Both"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\Instance\{8E14549B-DB61-4309-AFA1-3578E927E935}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2521CC4C-EDE6-43ea-B273-E135848F8413}\ = "Allavsoft Video Downloader"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2521CC4C-EDE6-43ea-B273-E135848F8413}\InProcServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}\ = "screen-capture-recorder"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}\InprocServer32\ = "C:\\Program Files (x86)\\Allavsoft\\Video Downloader Converter\\record\\screen-capture-recorder.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{860BB310-5D01-11d0-BD3B-00A0C911CE86}\Instance\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}\FriendlyName = "screen-capture-recorder"	regsvr32.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{860BB310-5D01-11d0-BD3B-00A0C911CE86}\Instance\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}\FilterData = 02000000000020000100000000000000307069330800000000000000010000000000000000000000307479330000000038000000480000007669647300001000800000aa00389b7100000000000000000000000000000000	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\NumMethods	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2521CC4C-EDE6-43ea-B273-E135848F8413}\InProcServer32\ThreadingModel = "Apartment"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{33D9A762-90C8-11d0-BD43-00A0C911CE86}\Instance\{8E14549B-DB61-4309-AFA1-3578E927E935}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{33D9A762-90C8-11d0-BD43-00A0C911CE86}\Instance\{8E14549B-DB61-4309-AFA1-3578E927E935}\CLSID = "{8E14549B-DB61-4309-AFA1-3578E927E935}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	videodownloader.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{33D9A762-90C8-11d0-BD43-00A0C911CE86}\Instance\{8E14549B-DB61-4309-AFA1-3578E927E935}\FilterData = 02000000000020000100000000000000307069330800000000000000010000000000000000000000307479330000000038000000480000006175647300001000800000aa00389b7100000000000000000000000000000000	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000_Classes\WOW6432Node\CLSID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\InProcServer32\ = "C:\\Program Files (x86)\\Allavsoft\\Video Downloader Converter\\extensions\\3.25.0.8302\\VDProxy.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\InProcServer32\ThreadingModel = "Both"	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000_Classes\WOW6432Node\Interface	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{860BB310-5D01-11d0-BD3B-00A0C911CE86}\Instance\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E14549B-DB61-4309-AFA1-3578E927E935}\ = "virtual-audio-capturer"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{33D9A762-90C8-11d0-BD43-00A0C911CE86}\Instance	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\ = "IVideoDownloader"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2521CC4C-EDE6-43ea-B273-E135848F8413}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A87FAFBF-582F-4d90-9386-743232C1A9E5}\LocalServer32	videodownloader.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\ = "PSFactoryBuffer"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2521CC4C-EDE6-43ea-B273-E135848F8413}\InProcServer32\ = "C:\\Program Files (x86)\\Allavsoft\\Video Downloader Converter\\extensions\\3.25.0.8302\\BVDDownloadButton.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{860BB310-5D01-11d0-BD3B-00A0C911CE86}\Instance	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{860BB310-5D01-11d0-BD3B-00A0C911CE86}\Instance\{4EA6930A-2C8A-4AE6-A561-56E4B5044439}\CLSID = "{4EA6930A-2C8A-4AE6-A561-56E4B5044439}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E14549B-DB61-4309-AFA1-3578E927E935}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	videodownloader.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A87FAFBF-582F-4d90-9386-743232C1A9E5}	videodownloader.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A87FAFBF-582F-4d90-9386-743232C1A9E5}\LocalServer32\ = "C:\\Program Files (x86)\\Allavsoft\\Video Downloader Converter\\videodownloader.exe"	videodownloader.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{860BB310-5D01-11D0-BD3B-00A0C911CE86}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E14549B-DB61-4309-AFA1-3578E927E935}\InprocServer32\ThreadingModel = "Both"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{33D9A762-90C8-11d0-BD43-00A0C911CE86}\Instance\{8E14549B-DB61-4309-AFA1-3578E927E935}\FriendlyName = "virtual-audio-capturer"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\NumMethods\ = "5"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6EBED4D8-13D9-4270-8D44-B57DDB7A787C}\InProcServer32	regsvr32.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3360	allavsoft.tmp
3360	allavsoft.tmp
4336	videodownloader.exe
4336	videodownloader.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3360	allavsoft.tmp

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3584	videodownloader.exe
4336	videodownloader.exe
4336	videodownloader.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1004 wrote to memory of 3360	1004	allavsoft.exe	84
PID 1004 wrote to memory of 3360	1004	allavsoft.exe	84
PID 1004 wrote to memory of 3360	1004	allavsoft.exe	84
PID 3360 wrote to memory of 4612	3360	allavsoft.tmp	93
PID 3360 wrote to memory of 4612	3360	allavsoft.tmp	93
PID 3360 wrote to memory of 4612	3360	allavsoft.tmp	93
PID 3360 wrote to memory of 3884	3360	allavsoft.tmp	94
PID 3360 wrote to memory of 3884	3360	allavsoft.tmp	94
PID 3360 wrote to memory of 3884	3360	allavsoft.tmp	94
PID 3360 wrote to memory of 3584	3360	allavsoft.tmp	95
PID 3360 wrote to memory of 3584	3360	allavsoft.tmp	95
PID 3360 wrote to memory of 3584	3360	allavsoft.tmp	95
PID 3584 wrote to memory of 4256	3584	videodownloader.exe	97
PID 3584 wrote to memory of 4256	3584	videodownloader.exe	97
PID 3584 wrote to memory of 4256	3584	videodownloader.exe	97
PID 3584 wrote to memory of 3632	3584	videodownloader.exe	98
PID 3584 wrote to memory of 3632	3584	videodownloader.exe	98
PID 3584 wrote to memory of 3632	3584	videodownloader.exe	98
PID 3360 wrote to memory of 4336	3360	allavsoft.tmp	99
PID 3360 wrote to memory of 4336	3360	allavsoft.tmp	99
PID 3360 wrote to memory of 4336	3360	allavsoft.tmp	99

C:\Users\Admin\AppData\Local\Temp\allavsoft.exe
"C:\Users\Admin\AppData\Local\Temp\allavsoft.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1004
- C:\Users\Admin\AppData\Local\Temp\is-B797L.tmp\allavsoft.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-B797L.tmp\allavsoft.tmp" /SL5="$A01C4,47550104,119296,C:\Users\Admin\AppData\Local\Temp\allavsoft.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3360
- - C:\Windows\SysWOW64\regsvr32.exe
    "regsvr32" /s screen-capture-recorder.dll
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4612
- - C:\Windows\SysWOW64\regsvr32.exe
    "regsvr32" /s audio_sniffer.dll
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:3884
- - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videodownloader.exe
    "C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videodownloader.exe" /install-plugins
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3584
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32.exe /s "C:/Program Files (x86)/Allavsoft/Video Downloader Converter/extensions/3.25.0.8302/VDProxy.dll"
      4⤵
      Loads dropped DLL
      Modifies registry class
      PID:4256
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32.exe /s "C:/Program Files (x86)/Allavsoft/Video Downloader Converter/extensions/3.25.0.8302/BVDDownloadButton.dll"
      4⤵
      Loads dropped DLL
      Modifies registry class
      PID:3632
- - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videodownloader.exe
    "C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videodownloader.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of SetWindowsHookEx
    PID:4336

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

MSVCP71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\MSVCP71.dll
Size 488KB
SHA256 df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b
MD5 561fa2abb31dfa8fab762145f81667c2
SHA1 c8ccb04eedac821a13fae314a2435192860c72b8
SHA512 7d960aa8e3cce22d63a6723d7f00c195de7de83b877eca126e339e2d8cc9859e813e05c5c0a5671a75bb717243e9295fd13e5e17d8c6660eb59f5baee63a7c43
SSDEEP 12288:fJzxYPVsBnxO/R7krZhUgiW6QR7t5k3Ooc8iHkC2eq:fZxvBnxOJ7ki3Ooc8iHkC2e
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSVCR71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\MSVCR71.dll
Size 340KB
SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
MD5 86f1895ae8c5e8b17d99ece768a70732
SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtCore4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtCore4.dll
Size 2.1MB
SHA256 c1947d2ca7cec892caa496ecbd6890ac38553e549f9eec3fd65e63d283b6bedf
MD5 984f9ead83e152cdda1f6ead8785c307
SHA1 b4661163e7dcdfd744a3ed93ec9e9c8ad8f49492
SHA512 762ffd0ae7a511275529e103d0fb1c29dff0fd2c599940ff44a27701b6b34c6e734b329577d4ceb4773a4eba877dc156520e70003df926f4e6b4867c005b907f
SSDEEP 24576:xd470borev/CLZY6NTDXAcx2VXDGGTPWbiFu3jviDKFdu9pVMTuGa6Nhb3nuN:I0eLFXVEGKmf3jv6KFdu9gTo6aN
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtCore4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtCore4.dll
Size 2.1MB
SHA256 c1947d2ca7cec892caa496ecbd6890ac38553e549f9eec3fd65e63d283b6bedf
MD5 984f9ead83e152cdda1f6ead8785c307
SHA1 b4661163e7dcdfd744a3ed93ec9e9c8ad8f49492
SHA512 762ffd0ae7a511275529e103d0fb1c29dff0fd2c599940ff44a27701b6b34c6e734b329577d4ceb4773a4eba877dc156520e70003df926f4e6b4867c005b907f
SSDEEP 24576:xd470borev/CLZY6NTDXAcx2VXDGGTPWbiFu3jviDKFdu9pVMTuGa6Nhb3nuN:I0eLFXVEGKmf3jv6KFdu9gTo6aN
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtGui4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtGui4.dll
Size 7.7MB
SHA256 5f2bfef07b74035f97f535d06755cb4522b1108bd410a3c3b2cab0d016c6eef1
MD5 5304b2c45f7b2a02085ceb71b22a39a7
SHA1 37900af9b5cd8b28812165c6b519aea76c521dad
SHA512 807e43935bc40dd5fda09f203bd2b32b050ebba98b17edf696819c343c5a044a6ccfbf23853ebee172ce59216d0e21361ef8d3d63a6dbf0186f63593884c2466
SSDEEP 98304:8FBUI3TJe/WmxB3RRAL40zH3iZaeHTn6mDdUnHMbtO5cQ:qBUIw/b1PAL4geZP
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtGui4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtGui4.dll
Size 7.7MB
SHA256 5f2bfef07b74035f97f535d06755cb4522b1108bd410a3c3b2cab0d016c6eef1
MD5 5304b2c45f7b2a02085ceb71b22a39a7
SHA1 37900af9b5cd8b28812165c6b519aea76c521dad
SHA512 807e43935bc40dd5fda09f203bd2b32b050ebba98b17edf696819c343c5a044a6ccfbf23853ebee172ce59216d0e21361ef8d3d63a6dbf0186f63593884c2466
SSDEEP 98304:8FBUI3TJe/WmxB3RRAL40zH3iZaeHTn6mDdUnHMbtO5cQ:qBUIw/b1PAL4geZP
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtNetwork4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtNetwork4.dll
Size 916KB
SHA256 0eb6b7c111adb9b39f7e9553fd05df8c18bfabd325876b1d9b0ffc7d70a734c8
MD5 affd4f76c3f5ec3ff321d29528b0010d
SHA1 d763e09047f218f62648c50f49d6654c00183f36
SHA512 8fae57bbbefd98710260f6e2d58d8ab9def415eacf66f55c71d1c13447d5463e09fcbc0e3490c60bae38f9f950d0ca34a384a74e7dccd49c34730ca3e7f097f4
SSDEEP 12288:F/Jf7/F2I3h77oF9R7+A/m5eNuG9/nJSdCCEckUnWOM/v0pQRGHsDOwhnk4x:F/J5f3h77oFjvNuG9QCCthN0EsDOE
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtNetwork4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtNetwork4.dll
Size 916KB
SHA256 0eb6b7c111adb9b39f7e9553fd05df8c18bfabd325876b1d9b0ffc7d70a734c8
MD5 affd4f76c3f5ec3ff321d29528b0010d
SHA1 d763e09047f218f62648c50f49d6654c00183f36
SHA512 8fae57bbbefd98710260f6e2d58d8ab9def415eacf66f55c71d1c13447d5463e09fcbc0e3490c60bae38f9f950d0ca34a384a74e7dccd49c34730ca3e7f097f4
SSDEEP 12288:F/Jf7/F2I3h77oF9R7+A/m5eNuG9/nJSdCCEckUnWOM/v0pQRGHsDOwhnk4x:F/J5f3h77oFjvNuG9QCCthN0EsDOE
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtScript4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtScript4.dll
Size 1.1MB
SHA256 c06cc331ec1d7271be14a5b92254d47cdc6489f366ef0d75dbf3e692a814fb5c
MD5 1f2beafe15d88f5efe02612555bf3e43
SHA1 5ded06c26fe9d6b38be02a839991905ef3b26612
SHA512 ab6f54747aebc1bb94334ca1c2704d130ef976a44072644e41c946652f9bfb932d1ece095897df834ec415263332746ae09e2e942a3fc48dfafe8885b00824de
SSDEEP 12288:4KcHEsanfMPMP4FuerkiR8XiVctgkVIWp5l4oLjzyNaR40YQFW5U0+MAas33a7X:4HEs7PMP4SyVdkVIWp5l4eyYJbFoqM
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtScript4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtScript4.dll
Size 1.1MB
SHA256 c06cc331ec1d7271be14a5b92254d47cdc6489f366ef0d75dbf3e692a814fb5c
MD5 1f2beafe15d88f5efe02612555bf3e43
SHA1 5ded06c26fe9d6b38be02a839991905ef3b26612
SHA512 ab6f54747aebc1bb94334ca1c2704d130ef976a44072644e41c946652f9bfb932d1ece095897df834ec415263332746ae09e2e942a3fc48dfafe8885b00824de
SSDEEP 12288:4KcHEsanfMPMP4FuerkiR8XiVctgkVIWp5l4oLjzyNaR40YQFW5U0+MAas33a7X:4HEs7PMP4SyVdkVIWp5l4eyYJbFoqM
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtScript4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtScript4.dll
Size 1.1MB
SHA256 c06cc331ec1d7271be14a5b92254d47cdc6489f366ef0d75dbf3e692a814fb5c
MD5 1f2beafe15d88f5efe02612555bf3e43
SHA1 5ded06c26fe9d6b38be02a839991905ef3b26612
SHA512 ab6f54747aebc1bb94334ca1c2704d130ef976a44072644e41c946652f9bfb932d1ece095897df834ec415263332746ae09e2e942a3fc48dfafe8885b00824de
SSDEEP 12288:4KcHEsanfMPMP4FuerkiR8XiVctgkVIWp5l4oLjzyNaR40YQFW5U0+MAas33a7X:4HEs7PMP4SyVdkVIWp5l4eyYJbFoqM
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtSql4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtSql4.dll
Size 192KB
SHA256 6725111f42304f724a7569fc7fa1e3051fc2fc39583966920e11f6f64ac043ce
MD5 2ee7ca2ad349cf3da6536ebff5745a0f
SHA1 6c24042e83652b2d512a96e55acdf7ca9d312df8
SHA512 71bca3bdd4e4362790d47c9bbc5451d296f4e1529a1880654df4593271ad66f8d71668c853ae96f1b80d0bd2161a9c52da98e42f2cab61f4623a85f8af203c29
SSDEEP 3072:3ABBiK+iR8RVIiOw25dNB7zOjFleedNZtLGFzGshIAs+B:3SBOiGRVI7x7KF9DLGUshIOB
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtSql4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtSql4.dll
Size 192KB
SHA256 6725111f42304f724a7569fc7fa1e3051fc2fc39583966920e11f6f64ac043ce
MD5 2ee7ca2ad349cf3da6536ebff5745a0f
SHA1 6c24042e83652b2d512a96e55acdf7ca9d312df8
SHA512 71bca3bdd4e4362790d47c9bbc5451d296f4e1529a1880654df4593271ad66f8d71668c853ae96f1b80d0bd2161a9c52da98e42f2cab61f4623a85f8af203c29
SSDEEP 3072:3ABBiK+iR8RVIiOw25dNB7zOjFleedNZtLGFzGshIAs+B:3SBOiGRVI7x7KF9DLGUshIOB
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtXml4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtXml4.dll
Size 340KB
SHA256 8e04917117769fc0a17c2b55e49b7d78fc7c8af377da66393edc4ef523c8de58
MD5 36a84da70a67a54e6764430c75bbdb8b
SHA1 2c323db56424ad703a556155d2918be6a850aabb
SHA512 dc40d9068a3a1c05ede3d4ba846968c5e2a749ca47842e39503b6c1a44ca1c2ef4ddab91a35ec0172e4b6ac8990ea199dcacef7037fd9e377c6ae96e05a0e7cf
SSDEEP 6144:DkvuTibmozxTh6m6kF4bElPU9QMbSxmTgfPld1MkPWGdP92i5zz/:4GTibmQxN6m6kF4bElc9QMbSxCoPPigv
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtXml4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtXml4.dll
Size 340KB
SHA256 8e04917117769fc0a17c2b55e49b7d78fc7c8af377da66393edc4ef523c8de58
MD5 36a84da70a67a54e6764430c75bbdb8b
SHA1 2c323db56424ad703a556155d2918be6a850aabb
SHA512 dc40d9068a3a1c05ede3d4ba846968c5e2a749ca47842e39503b6c1a44ca1c2ef4ddab91a35ec0172e4b6ac8990ea199dcacef7037fd9e377c6ae96e05a0e7cf
SSDEEP 6144:DkvuTibmozxTh6m6kF4bElPU9QMbSxmTgfPld1MkPWGdP92i5zz/:4GTibmQxN6m6kF4bElc9QMbSxCoPPigv
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtXmlPatterns4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtXmlPatterns4.dll
Size 2.6MB
SHA256 ed6135200401cfe0a406e788cdb46aa3394265daa9685df14f03dcbf180ef016
MD5 7d6c942878ea7f03d2ef859753b0ed6d
SHA1 a51a1dfab79aad049eed241c3fd861777d613ebc
SHA512 aec8c1ab039028d4430e4eb4170734441df1498a67d1465d7662faf265cb5faee566e42d7296a2c64cbceabad88123eba5be9e30c3ba80600c439ea7f1f20732
SSDEEP 49152:hSB6YZmZQSVvUJCzJiBggiWtUSpTM4Fl:s0YZ0eJCliBgg
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtXmlPatterns4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtXmlPatterns4.dll
Size 2.6MB
SHA256 ed6135200401cfe0a406e788cdb46aa3394265daa9685df14f03dcbf180ef016
MD5 7d6c942878ea7f03d2ef859753b0ed6d
SHA1 a51a1dfab79aad049eed241c3fd861777d613ebc
SHA512 aec8c1ab039028d4430e4eb4170734441df1498a67d1465d7662faf265cb5faee566e42d7296a2c64cbceabad88123eba5be9e30c3ba80600c439ea7f1f20732
SSDEEP 49152:hSB6YZmZQSVvUJCzJiBggiWtUSpTM4Fl:s0YZ0eJCliBgg
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtXmlPatterns4.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\QtXmlPatterns4.dll
Size 2.6MB
SHA256 ed6135200401cfe0a406e788cdb46aa3394265daa9685df14f03dcbf180ef016
MD5 7d6c942878ea7f03d2ef859753b0ed6d
SHA1 a51a1dfab79aad049eed241c3fd861777d613ebc
SHA512 aec8c1ab039028d4430e4eb4170734441df1498a67d1465d7662faf265cb5faee566e42d7296a2c64cbceabad88123eba5be9e30c3ba80600c439ea7f1f20732
SSDEEP 49152:hSB6YZmZQSVvUJCzJiBggiWtUSpTM4Fl:s0YZ0eJCliBgg
MD5 SHA1 SHA512 SSDEEP

Submit Download

SDL.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\SDL.dll
Size 252KB
SHA256 742ada35aa32d4aa3280b85ad3f21e5d0eeb90593d24c3d2219af2b977247598
MD5 2fb844820639958fe93423d43475547a
SHA1 cc2d5a4e0ebb4a937aa554e1317c0bc30a18b251
SHA512 03089c67f1fe3cce62359efec8d8928e48778cb10d8bd27a40509dedf0860f819ac637ae638d49eb418740547dd35e073ca890f26a40da7415038fefce8e54dd
SSDEEP 6144:wuFMTcxgyylBrEtsRKrZojL1uQ6i6NaxjyXZmMgk2rEGvIeftJ/:wuFMTcxgyylREyM0Z/6i6Nax2g1rE
MD5 SHA1 SHA512 SSDEEP

Submit Download

SDL.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\SDL.dll
Size 252KB
SHA256 742ada35aa32d4aa3280b85ad3f21e5d0eeb90593d24c3d2219af2b977247598
MD5 2fb844820639958fe93423d43475547a
SHA1 cc2d5a4e0ebb4a937aa554e1317c0bc30a18b251
SHA512 03089c67f1fe3cce62359efec8d8928e48778cb10d8bd27a40509dedf0860f819ac637ae638d49eb418740547dd35e073ca890f26a40da7415038fefce8e54dd
SSDEEP 6144:wuFMTcxgyylBrEtsRKrZojL1uQ6i6NaxjyXZmMgk2rEGvIeftJ/:wuFMTcxgyylREyM0Z/6i6Nax2g1rE
MD5 SHA1 SHA512 SSDEEP

Submit Download

SDL.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\SDL.dll
Size 252KB
SHA256 742ada35aa32d4aa3280b85ad3f21e5d0eeb90593d24c3d2219af2b977247598
MD5 2fb844820639958fe93423d43475547a
SHA1 cc2d5a4e0ebb4a937aa554e1317c0bc30a18b251
SHA512 03089c67f1fe3cce62359efec8d8928e48778cb10d8bd27a40509dedf0860f819ac637ae638d49eb418740547dd35e073ca890f26a40da7415038fefce8e54dd
SSDEEP 6144:wuFMTcxgyylBrEtsRKrZojL1uQ6i6NaxjyXZmMgk2rEGvIeftJ/:wuFMTcxgyylREyM0Z/6i6Nax2g1rE
MD5 SHA1 SHA512 SSDEEP

Submit Download

avcodec-56.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avcodec-56.dll
Size 14.8MB
SHA256 3b1ff6fab87363da666c07d7c78b798135086b856e91290dc767ce8f32da926b
MD5 cffc9f5eb3eb9295cb2963e5a452d390
SHA1 617d3d9bbc4143f06c7ad7e5361b4b13241b0c34
SHA512 724e911eaf97736c93055363f59aa2f19abda75ec7fc888294976c576fab3b972715fea7c241f9561dbe992d1d0edb4fc384ea9a1e2bda1afbf5b2ccc91bbfc3
SSDEEP 196608:pTxJc64/LT6PoDa5OKisF4aVC+VC+WvvB+rZtxhJ3Qd3QOUgoOMOhf7ciqCoJgNM:lhWyHJgth9ZrhLCSpwIA
MD5 SHA1 SHA512 SSDEEP

Submit Download

avcodec-56.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avcodec-56.dll
Size 14.8MB
SHA256 3b1ff6fab87363da666c07d7c78b798135086b856e91290dc767ce8f32da926b
MD5 cffc9f5eb3eb9295cb2963e5a452d390
SHA1 617d3d9bbc4143f06c7ad7e5361b4b13241b0c34
SHA512 724e911eaf97736c93055363f59aa2f19abda75ec7fc888294976c576fab3b972715fea7c241f9561dbe992d1d0edb4fc384ea9a1e2bda1afbf5b2ccc91bbfc3
SSDEEP 196608:pTxJc64/LT6PoDa5OKisF4aVC+VC+WvvB+rZtxhJ3Qd3QOUgoOMOhf7ciqCoJgNM:lhWyHJgth9ZrhLCSpwIA
MD5 SHA1 SHA512 SSDEEP

Submit Download

avdevice-56.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avdevice-56.dll
Size 33KB
SHA256 2dbdfff969be8bac62da46b88be57e3b0d2434838b9eba8efd45f170fce7fdb0
MD5 2411f4d67b9361f073249ee632e06c5b
SHA1 fd9a57cd1c1b2e15e9e1e48199fccdba9a81da19
SHA512 145cf55c4e843504a8b06b5aedeed1c0957aaf6ac37b041454ea0016ab7a22774534a698acb7938f99d75f4e58461b49e2ccad4715c2b1506c4df7d4a25ea2cb
SSDEEP 384:KD5Q/L0XotI33UXsLbxc4vOLQse+8FGIH5GdVk8wWFsDZwJE/760YGsocKeRviS1:W4LJIxCLObGBdVk8j6lJWoMCZg6Mx
MD5 SHA1 SHA512 SSDEEP

Submit Download

avdevice-56.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avdevice-56.dll
Size 33KB
SHA256 2dbdfff969be8bac62da46b88be57e3b0d2434838b9eba8efd45f170fce7fdb0
MD5 2411f4d67b9361f073249ee632e06c5b
SHA1 fd9a57cd1c1b2e15e9e1e48199fccdba9a81da19
SHA512 145cf55c4e843504a8b06b5aedeed1c0957aaf6ac37b041454ea0016ab7a22774534a698acb7938f99d75f4e58461b49e2ccad4715c2b1506c4df7d4a25ea2cb
SSDEEP 384:KD5Q/L0XotI33UXsLbxc4vOLQse+8FGIH5GdVk8wWFsDZwJE/760YGsocKeRviS1:W4LJIxCLObGBdVk8j6lJWoMCZg6Mx
MD5 SHA1 SHA512 SSDEEP

Submit Download

avfilter-5.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avfilter-5.dll
Size 2.3MB
SHA256 9e0678652eef4e2f5c258b5ebf9720ad759cbfc7d765e19a15d235b03a563016
MD5 aab7d763e5dc696f853c6ac49e9631bb
SHA1 ba50b85d4299901c7639e2a70aa4bcecd0df045f
SHA512 47f7939d9f4de5a67130194024156a88aa1c9740e87bab5bb6af9e53d4abdb84ee78fe371424e13a99d9cbcf8c0b3a956ffa6aa337ac4afae0b22c9a422d158b
SSDEEP 49152:MXC4294OoYb0+NeA9jyYHvSfCujJxEzSO2rstT3b:MXZ29lOGvmCgmb
MD5 SHA1 SHA512 SSDEEP

Submit Download

avfilter-5.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avfilter-5.dll
Size 2.3MB
SHA256 9e0678652eef4e2f5c258b5ebf9720ad759cbfc7d765e19a15d235b03a563016
MD5 aab7d763e5dc696f853c6ac49e9631bb
SHA1 ba50b85d4299901c7639e2a70aa4bcecd0df045f
SHA512 47f7939d9f4de5a67130194024156a88aa1c9740e87bab5bb6af9e53d4abdb84ee78fe371424e13a99d9cbcf8c0b3a956ffa6aa337ac4afae0b22c9a422d158b
SSDEEP 49152:MXC4294OoYb0+NeA9jyYHvSfCujJxEzSO2rstT3b:MXZ29lOGvmCgmb
MD5 SHA1 SHA512 SSDEEP

Submit Download

avformat-56.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avformat-56.dll
Size 3.1MB
SHA256 f61130e67cf2055081e02fadedf7a4ee889d1a3e634b9220c6a230a2d2574e84
MD5 f2f7c1014ada223f2bf43db7365cb107
SHA1 9aa46c8cbca050f9b2708c08887701a20fc4907a
SHA512 371d0d4a95406bcc58d86a1a1ba7800016ff254d55b9eecaba32e03b2a5d9d64f3262aa8d1553a15ce24969b571cbb35dbed1606c3030e8cf2c31073efd92a5c
SSDEEP 98304:bX/sIiqp5uc98NQO+4VDaqegWKsACEPPazgLq0hytN:jkIiqp5uc9P4VDaqnWKsACEXazgLDhyT
MD5 SHA1 SHA512 SSDEEP

Submit Download

avformat-56.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avformat-56.dll
Size 3.1MB
SHA256 f61130e67cf2055081e02fadedf7a4ee889d1a3e634b9220c6a230a2d2574e84
MD5 f2f7c1014ada223f2bf43db7365cb107
SHA1 9aa46c8cbca050f9b2708c08887701a20fc4907a
SHA512 371d0d4a95406bcc58d86a1a1ba7800016ff254d55b9eecaba32e03b2a5d9d64f3262aa8d1553a15ce24969b571cbb35dbed1606c3030e8cf2c31073efd92a5c
SSDEEP 98304:bX/sIiqp5uc98NQO+4VDaqegWKsACEPPazgLq0hytN:jkIiqp5uc9P4VDaqnWKsACEXazgLDhyT
MD5 SHA1 SHA512 SSDEEP

Submit Download

avutil-54.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avutil-54.dll
Size 227KB
SHA256 ef97278d0764c176bf5d51ab6095d37035cb167c1066f155aa7233d683d8c741
MD5 6a400e13bf06f1daa2c78bb81438247e
SHA1 190de05c41d64727f568d24dc0ac3f435d9a9e2f
SHA512 bb7d52044830570fa56966ce2965799d42cf1fc12e1a1f1a57f757f6caad3b644b6911930e14c9211f466d3a77e2c1891c9b7ff8d39d66c1cb9fa3c9897c89fb
SSDEEP 6144:2Qa0Kk0Yq5p9jDfFLax2EfXs99jdtVwHB5qdGIZ7x1XTymiZLSf:2Qa0KkYjDIxNO/dRriZGf
MD5 SHA1 SHA512 SSDEEP

Submit Download

avutil-54.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\avutil-54.dll
Size 227KB
SHA256 ef97278d0764c176bf5d51ab6095d37035cb167c1066f155aa7233d683d8c741
MD5 6a400e13bf06f1daa2c78bb81438247e
SHA1 190de05c41d64727f568d24dc0ac3f435d9a9e2f
SHA512 bb7d52044830570fa56966ce2965799d42cf1fc12e1a1f1a57f757f6caad3b644b6911930e14c9211f466d3a77e2c1891c9b7ff8d39d66c1cb9fa3c9897c89fb
SSDEEP 6144:2Qa0Kk0Yq5p9jDfFLax2EfXs99jdtVwHB5qdGIZ7x1XTymiZLSf:2Qa0KkYjDIxNO/dRriZGf
MD5 SHA1 SHA512 SSDEEP

Submit Download

config.ini

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\config.ini
Size 220B
SHA256 9f11d29a0862e593c4085ada907ed279c1b30f0887891538c0645cb6b9662d8a
MD5 8f23d14452910cfa8cc8cc578ab63dfc
SHA1 eb143240e21c6f67577733b0ef5797b9966b1173
SHA512 178e8f22a0b5c9391a6b765483c8f277f6bccc2c6c7494dc7c7a288f41ae6e75a5f7a5997fcdc901dc2398f936bfe149cb5ed1fa448ae21bc45105ce28ab0609
MD5 SHA1 SHA512

Submit Download

BVDDownloadButton.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\BVDDownloadButton.dll
Size 80KB
SHA256 a215580cec03329d82a81a6febd0b12bba928ef8bdbd7e76016faa6b79ebf63b
MD5 4b42571e7d77bed04b41eac2858abb86
SHA1 43b4ef6998a99aafab3c6d3a7caba582f7d0fc42
SHA512 e659aebc14b74206abeced147facac17fbf4dc97225d1b08ab4b9824ba940f805180abb98672539b4a703f1ad6c797c3e12660fa03b4b75425653530c08828dc
SSDEEP 768:DQYIsOIF7zobywFpk4jKuoGvqbxEsZ6eaYUxTUUUTxUTxGxrTwF1mIS5X2ut:cs74bBzX3SbxIeEF1mISZ2
MD5 SHA1 SHA512 SSDEEP

Submit Download

BVDDownloadButton.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\BVDDownloadButton.dll
Size 80KB
SHA256 a215580cec03329d82a81a6febd0b12bba928ef8bdbd7e76016faa6b79ebf63b
MD5 4b42571e7d77bed04b41eac2858abb86
SHA1 43b4ef6998a99aafab3c6d3a7caba582f7d0fc42
SHA512 e659aebc14b74206abeced147facac17fbf4dc97225d1b08ab4b9824ba940f805180abb98672539b4a703f1ad6c797c3e12660fa03b4b75425653530c08828dc
SSDEEP 768:DQYIsOIF7zobywFpk4jKuoGvqbxEsZ6eaYUxTUUUTxUTxGxrTwF1mIS5X2ut:cs74bBzX3SbxIeEF1mISZ2
MD5 SHA1 SHA512 SSDEEP

Submit Download

VDProxy.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\VDProxy.dll
Size 7KB
SHA256 2243755901dd2193c580015b2e18f8fa53f0f08115cc62667a27670893efb47b
MD5 95a3666af02f494901d05843a39f52f7
SHA1 075e73e14eadacf6dfcb9d7cb39e43a6f1f9b599
SHA512 530786dc466953776fa3f79c47f236ae512504d989750986fb958487f506a5de6f2858b8b703943ab4edaec7fa14d1a814bf5013370aebe6fa54ce5d5a161656
SSDEEP 96:C+EQJ/BSHblxt0XG7L1+guVTz+z+9bwNZAexu3ni8hnpSm:C+Ea/Qlxe27cguozkbwNZAKQ1hkm
MD5 SHA1 SHA512 SSDEEP

Submit Download

VDProxy.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.25.0.8302\VDProxy.dll
Size 7KB
SHA256 2243755901dd2193c580015b2e18f8fa53f0f08115cc62667a27670893efb47b
MD5 95a3666af02f494901d05843a39f52f7
SHA1 075e73e14eadacf6dfcb9d7cb39e43a6f1f9b599
SHA512 530786dc466953776fa3f79c47f236ae512504d989750986fb958487f506a5de6f2858b8b703943ab4edaec7fa14d1a814bf5013370aebe6fa54ce5d5a161656
SSDEEP 96:C+EQJ/BSHblxt0XG7L1+guVTz+z+9bwNZAexu3ni8hnpSm:C+Ea/Qlxe27cguozkbwNZAKQ1hkm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffplay_dll.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\ffplay_dll.dll
Size 232KB
SHA256 e669b4b1d338bc3a1619198c7acb85b8cf05f667100d8106236ef705dd9e2c18
MD5 1c72a1cd5cb2943cf34c45cdca2c208b
SHA1 8c1dd96438f51e7c97fc478706f2fd641a7059e0
SHA512 67319693f992b02daa6f6719f18eff87c5b4f7b6b32cfed830c329048cbc37efbc3d89f2ccb719d086f08cc7839187c8fb874f777e4b4e9dd0c6be10f968c4fc
SSDEEP 6144:Q8/bN38m4AuDUBiNSCfhbdPzXLx6Jh0Nx:Q8jl84uOidfhbBpo2
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffplay_dll.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\ffplay_dll.dll
Size 232KB
SHA256 e669b4b1d338bc3a1619198c7acb85b8cf05f667100d8106236ef705dd9e2c18
MD5 1c72a1cd5cb2943cf34c45cdca2c208b
SHA1 8c1dd96438f51e7c97fc478706f2fd641a7059e0
SHA512 67319693f992b02daa6f6719f18eff87c5b4f7b6b32cfed830c329048cbc37efbc3d89f2ccb719d086f08cc7839187c8fb874f777e4b4e9dd0c6be10f968c4fc
SSDEEP 6144:Q8/bN38m4AuDUBiNSCfhbdPzXLx6Jh0Nx:Q8jl84uOidfhbBpo2
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcp71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcp71.dll
Size 488KB
SHA256 df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b
MD5 561fa2abb31dfa8fab762145f81667c2
SHA1 c8ccb04eedac821a13fae314a2435192860c72b8
SHA512 7d960aa8e3cce22d63a6723d7f00c195de7de83b877eca126e339e2d8cc9859e813e05c5c0a5671a75bb717243e9295fd13e5e17d8c6660eb59f5baee63a7c43
SSDEEP 12288:fJzxYPVsBnxO/R7krZhUgiW6QR7t5k3Ooc8iHkC2eq:fZxvBnxOJ7ki3Ooc8iHkC2e
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcp71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcp71.dll
Size 488KB
SHA256 df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b
MD5 561fa2abb31dfa8fab762145f81667c2
SHA1 c8ccb04eedac821a13fae314a2435192860c72b8
SHA512 7d960aa8e3cce22d63a6723d7f00c195de7de83b877eca126e339e2d8cc9859e813e05c5c0a5671a75bb717243e9295fd13e5e17d8c6660eb59f5baee63a7c43
SSDEEP 12288:fJzxYPVsBnxO/R7krZhUgiW6QR7t5k3Ooc8iHkC2eq:fZxvBnxOJ7ki3Ooc8iHkC2e
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcr71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcr71.dll
Size 340KB
SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
MD5 86f1895ae8c5e8b17d99ece768a70732
SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcr71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcr71.dll
Size 340KB
SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
MD5 86f1895ae8c5e8b17d99ece768a70732
SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcr71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcr71.dll
Size 340KB
SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
MD5 86f1895ae8c5e8b17d99ece768a70732
SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcr71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcr71.dll
Size 340KB
SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
MD5 86f1895ae8c5e8b17d99ece768a70732
SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcr71.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\msvcr71.dll
Size 340KB
SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
MD5 86f1895ae8c5e8b17d99ece768a70732
SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
MD5 SHA1 SHA512 SSDEEP

Submit Download

postproc-53.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\postproc-53.dll
Size 86KB
SHA256 0cc0e8819e0b461e38745352520060ea1b77156f73dcdbb224b0aeaa4601a7a3
MD5 e94cfb885e56813f1a2245f92c779b15
SHA1 a7a2a314ff314c47e335fd073b60a49996e31c44
SHA512 51755243762f8f751884cd760d3594e9541ff9611ea8e2ee40bf35577f2f7ae5baa386d788fc25150b91bdc208241c9b471ddd8abf2cfc29bbfafcf1321892f7
SSDEEP 1536:RZxxxxRxRw6oAXyHxxxxRxRw6Purm2FFTambqFWkMmTo3nrSQ4mHb3nxSgmN7j3H:RZxxxxRxRw6gHxxxxRxRw6Pu2j48r8OL
MD5 SHA1 SHA512 SSDEEP

Submit Download

postproc-53.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\postproc-53.dll
Size 86KB
SHA256 0cc0e8819e0b461e38745352520060ea1b77156f73dcdbb224b0aeaa4601a7a3
MD5 e94cfb885e56813f1a2245f92c779b15
SHA1 a7a2a314ff314c47e335fd073b60a49996e31c44
SHA512 51755243762f8f751884cd760d3594e9541ff9611ea8e2ee40bf35577f2f7ae5baa386d788fc25150b91bdc208241c9b471ddd8abf2cfc29bbfafcf1321892f7
SSDEEP 1536:RZxxxxRxRw6oAXyHxxxxRxRw6Purm2FFTambqFWkMmTo3nrSQ4mHb3nxSgmN7j3H:RZxxxxRxRw6gHxxxxRxRw6Pu2j48r8OL
MD5 SHA1 SHA512 SSDEEP

Submit Download

pthreadGC2.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\pthreadGC2.dll
Size 92KB
SHA256 c271f42da9f1483de15869914d216a8ef44ca80c0d5907789b6e9873e3aa245f
MD5 ac05fbba61f939cd90133032f2595c69
SHA1 ce3d3811457176dbefb06f5a395505eef8b2a641
SHA512 86992775393bf03a13058246c780cb20ea505f6bfdc3baec57574bae076369ef0d2c154bb14fcac947e96e11a93baa3d88b4b49d3fdedd2da2a5c36caab85288
SSDEEP 1536:oeHa2+yL/iA1P91IBfiH/p/DKIMds0RweKZw:oe6oLiA1rIBfiH/p/DKIMds0Rwel
MD5 SHA1 SHA512 SSDEEP

Submit Download

pthreadGC2.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\pthreadGC2.dll
Size 92KB
SHA256 c271f42da9f1483de15869914d216a8ef44ca80c0d5907789b6e9873e3aa245f
MD5 ac05fbba61f939cd90133032f2595c69
SHA1 ce3d3811457176dbefb06f5a395505eef8b2a641
SHA512 86992775393bf03a13058246c780cb20ea505f6bfdc3baec57574bae076369ef0d2c154bb14fcac947e96e11a93baa3d88b4b49d3fdedd2da2a5c36caab85288
SSDEEP 1536:oeHa2+yL/iA1P91IBfiH/p/DKIMds0RweKZw:oe6oLiA1rIBfiH/p/DKIMds0Rwel
MD5 SHA1 SHA512 SSDEEP

Submit Download

audio_sniffer.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\audio_sniffer.dll
Size 51KB
SHA256 77c7e535c78e48e712046eec513c1091e04186e42b26e0bc1098153befb508c3
MD5 3e10ef553e8ffc427fd7684f88772223
SHA1 8172c718b02497d84c0c7d0d1ac087288ffafda0
SHA512 dc58167c7007a440e6f82c46b6bce3705795a3f907a1a18f4d34e89b96400bb404a41313bc8a9cbab8ae86bc1996b53096929bc9865842851875c31eb182523a
SSDEEP 1536:u0H3eDIPZZCh+tVTJC3Mid0tBJ62OZwjBdSU:SDIHCcTg3MimJ62OZCdSU
MD5 SHA1 SHA512 SSDEEP

Submit Download

audio_sniffer.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\audio_sniffer.dll
Size 51KB
SHA256 77c7e535c78e48e712046eec513c1091e04186e42b26e0bc1098153befb508c3
MD5 3e10ef553e8ffc427fd7684f88772223
SHA1 8172c718b02497d84c0c7d0d1ac087288ffafda0
SHA512 dc58167c7007a440e6f82c46b6bce3705795a3f907a1a18f4d34e89b96400bb404a41313bc8a9cbab8ae86bc1996b53096929bc9865842851875c31eb182523a
SSDEEP 1536:u0H3eDIPZZCh+tVTJC3Mid0tBJ62OZwjBdSU:SDIHCcTg3MimJ62OZCdSU
MD5 SHA1 SHA512 SSDEEP

Submit Download

screen-capture-recorder.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\screen-capture-recorder.dll
Size 53KB
SHA256 de33199c944d200803057bf8a9a121fdd267af67b195b96e8544438404523581
MD5 b4669a4f8fa94904ab1b3ae2356dcdd6
SHA1 53ee054f197be1c70a828b28a2ce02060606978c
SHA512 d56f5330dc2660be8a31823a40aea67fc988d5d11b6e3fd5df4b673a224ed0e076d10629dd21f997e20d588f3847f10756d773e2fda673c608f2fdfa787a9539
SSDEEP 768:R9f8q+c7O6ZfC8VohyVH8iMnYvDKFyF3rbh+vj75oaB7mSykcotGQOZ33CzY57LG:o2OIC6ocaiMc7bIl3+kcuOZH57Lpq6M
MD5 SHA1 SHA512 SSDEEP

Submit Download

screen-capture-recorder.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\record\screen-capture-recorder.dll
Size 53KB
SHA256 de33199c944d200803057bf8a9a121fdd267af67b195b96e8544438404523581
MD5 b4669a4f8fa94904ab1b3ae2356dcdd6
SHA1 53ee054f197be1c70a828b28a2ce02060606978c
SHA512 d56f5330dc2660be8a31823a40aea67fc988d5d11b6e3fd5df4b673a224ed0e076d10629dd21f997e20d588f3847f10756d773e2fda673c608f2fdfa787a9539
SSDEEP 768:R9f8q+c7O6ZfC8VohyVH8iMnYvDKFyF3rbh+vj75oaB7mSykcotGQOZ33CzY57LG:o2OIC6ocaiMc7bIl3+kcuOZH57Lpq6M
MD5 SHA1 SHA512 SSDEEP

Submit Download

swresample-1.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\swresample-1.dll
Size 93KB
SHA256 818c44a83b196753e82198dec30f042b215bdefe6e2ff69ac870c7eed6209293
MD5 86701b0f80ffafd0689ec810ba16c728
SHA1 5ba5881b6de7263d6933a80810b82c99ddf987c0
SHA512 73b852c9d63659defd03d230a49ac32de32f8c8d3d1b2922d4341cb04c32a5d14b5ce687cee4fab5a78e6ac9840f316be33d27c6db58326d378889b5812f9756
SSDEEP 1536:lN1WUgK+sUbxkaeNDuriFs8ewmAMQgY4MfcuL5V0QQu5zEasNinvYnkv:lN1WUgK+sUbasCgY4MkuL50u57sNBq
MD5 SHA1 SHA512 SSDEEP

Submit Download

swresample-1.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\swresample-1.dll
Size 93KB
SHA256 818c44a83b196753e82198dec30f042b215bdefe6e2ff69ac870c7eed6209293
MD5 86701b0f80ffafd0689ec810ba16c728
SHA1 5ba5881b6de7263d6933a80810b82c99ddf987c0
SHA512 73b852c9d63659defd03d230a49ac32de32f8c8d3d1b2922d4341cb04c32a5d14b5ce687cee4fab5a78e6ac9840f316be33d27c6db58326d378889b5812f9756
SSDEEP 1536:lN1WUgK+sUbxkaeNDuriFs8ewmAMQgY4MfcuL5V0QQu5zEasNinvYnkv:lN1WUgK+sUbasCgY4MkuL50u57sNBq
MD5 SHA1 SHA512 SSDEEP

Submit Download

swscale-3.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\swscale-3.dll
Size 429KB
SHA256 4bec20d5e1e262a7fef50be74bbefb8892cab8722481ede06d96e37a5f75d9ae
MD5 15bca4673795e1fc95a460db93832ca5
SHA1 b3d4c2ea4a1e058d027394aa626a9a8d96e9eff4
SHA512 e321e45de3786a7c065bcfc053f4f0edaf9d4d9f834ec4573d025d8cc8e91560caa06df101f423de18ce2609a2530e8bdc56053a601565489c1518d422b75539
SSDEEP 6144:ZF3j6AgDGeZQyu4XrYsBB2yKkz05KJNZRtl5cLjM5d33AV:jj6AgDGeqyu4XrxB2yK+05KWnV
MD5 SHA1 SHA512 SSDEEP

Submit Download

swscale-3.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\swscale-3.dll
Size 429KB
SHA256 4bec20d5e1e262a7fef50be74bbefb8892cab8722481ede06d96e37a5f75d9ae
MD5 15bca4673795e1fc95a460db93832ca5
SHA1 b3d4c2ea4a1e058d027394aa626a9a8d96e9eff4
SHA512 e321e45de3786a7c065bcfc053f4f0edaf9d4d9f834ec4573d025d8cc8e91560caa06df101f423de18ce2609a2530e8bdc56053a601565489c1518d422b75539
SSDEEP 6144:ZF3j6AgDGeZQyu4XrYsBB2yKkz05KJNZRtl5cLjM5d33AV:jj6AgDGeqyu4XrxB2yK+05KWnV
MD5 SHA1 SHA512 SSDEEP

Submit Download

videodownloader.exe

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videodownloader.exe
Size 9.3MB
SHA256 5bc7e3e9942cb6307f1f3702b16b7c2dc473c10955df9ec2514228a59f78b712
MD5 ccc18c49da0297bd5d97dc3d06334690
SHA1 e597ce91dda1028e2d107143501b371694a0651d
SHA512 f2726540fa3264ec4df34bd6a7b7a7479b195e11351976fea07087871d9b15ab7dbb204545f4e70687ba56898a3545806bb9f45186737c3b694b2918f9b0e67f
SSDEEP 98304:U8jafehsfiSL/vUMfCFmNUpo6qRTpvhHO8c4pI7rZXF16RyLS:Jja0jS6Sw8zkFXF1J
MD5 SHA1 SHA512 SSDEEP

Submit Download

videodownloader.exe

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videodownloader.exe
Size 9.3MB
SHA256 5bc7e3e9942cb6307f1f3702b16b7c2dc473c10955df9ec2514228a59f78b712
MD5 ccc18c49da0297bd5d97dc3d06334690
SHA1 e597ce91dda1028e2d107143501b371694a0651d
SHA512 f2726540fa3264ec4df34bd6a7b7a7479b195e11351976fea07087871d9b15ab7dbb204545f4e70687ba56898a3545806bb9f45186737c3b694b2918f9b0e67f
SSDEEP 98304:U8jafehsfiSL/vUMfCFmNUpo6qRTpvhHO8c4pI7rZXF16RyLS:Jja0jS6Sw8zkFXF1J
MD5 SHA1 SHA512 SSDEEP

Submit Download

videodownloader.exe

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\videodownloader.exe
Size 9.3MB
SHA256 5bc7e3e9942cb6307f1f3702b16b7c2dc473c10955df9ec2514228a59f78b712
MD5 ccc18c49da0297bd5d97dc3d06334690
SHA1 e597ce91dda1028e2d107143501b371694a0651d
SHA512 f2726540fa3264ec4df34bd6a7b7a7479b195e11351976fea07087871d9b15ab7dbb204545f4e70687ba56898a3545806bb9f45186737c3b694b2918f9b0e67f
SSDEEP 98304:U8jafehsfiSL/vUMfCFmNUpo6qRTpvhHO8c4pI7rZXF16RyLS:Jja0jS6Sw8zkFXF1J
MD5 SHA1 SHA512 SSDEEP

Submit Download

xvidcore.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\xvidcore.dll
Size 780KB
SHA256 c44f13270bf8c3fabb7a7001b40fe1581c4e32809edfed9e707eff75da7ab72d
MD5 340ab0310a2ccb9dea883767f94d71f6
SHA1 06c638a14dd9fa2c674c47e11c245026f8e97e11
SHA512 32b92c69080548c3fcf2b92150ca8f58ccc00adc30117a9c05410cd4ec75e81a45e1b17d467a09d49d3d602a1cfff900b1ed8cee461dda1b946b47183ccadf7f
SSDEEP 24576:Ij/vxf8eCqfuaYbJ2XZSMEDmFn9wv97/XFpXmjr5OeYn:yhjScen
MD5 SHA1 SHA512 SSDEEP

Submit Download

xvidcore.dll

Path C:\Program Files (x86)\Allavsoft\Video Downloader Converter\xvidcore.dll
Size 780KB
SHA256 c44f13270bf8c3fabb7a7001b40fe1581c4e32809edfed9e707eff75da7ab72d
MD5 340ab0310a2ccb9dea883767f94d71f6
SHA1 06c638a14dd9fa2c674c47e11c245026f8e97e11
SHA512 32b92c69080548c3fcf2b92150ca8f58ccc00adc30117a9c05410cd4ec75e81a45e1b17d467a09d49d3d602a1cfff900b1ed8cee461dda1b946b47183ccadf7f
SSDEEP 24576:Ij/vxf8eCqfuaYbJ2XZSMEDmFn9wv97/XFpXmjr5OeYn:yhjScen
MD5 SHA1 SHA512 SSDEEP

Submit Download

allavsoft.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-B797L.tmp\allavsoft.tmp
Size 1.1MB
SHA256 e11132ca9fb98307830147446f5f731e19e308949e1a473d177d5a9f7ddf9c7e
MD5 e4a2856522e6a817e3f0edd2677fa647
SHA1 7cffea7ad238e4d2a64238139ab64802dbaf1185
SHA512 25df15be9123496ed7f798ef892da334cc347016fcede7a6d4d580871926b2396923d71db9fdf8773dbca7a33e03bf33774c4bf2c9837918d1411eead573d964
SSDEEP 24576:44VN4kkKF3hDXq8xeidJLvktRskkkkJBcTgoALoyo52ZEdB+geBvxyx:dT90D3D2wB4
MD5 SHA1 SHA512 SSDEEP

Submit Download

allavsoft.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-B797L.tmp\allavsoft.tmp
Size 1.1MB
SHA256 e11132ca9fb98307830147446f5f731e19e308949e1a473d177d5a9f7ddf9c7e
MD5 e4a2856522e6a817e3f0edd2677fa647
SHA1 7cffea7ad238e4d2a64238139ab64802dbaf1185
SHA512 25df15be9123496ed7f798ef892da334cc347016fcede7a6d4d580871926b2396923d71db9fdf8773dbca7a33e03bf33774c4bf2c9837918d1411eead573d964
SSDEEP 24576:44VN4kkKF3hDXq8xeidJLvktRskkkkJBcTgoALoyo52ZEdB+geBvxyx:dT90D3D2wB4
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1004-137-0x0000000000400000-0x0000000000428000-memory.dmp

Download

memory/1004-263-0x0000000000400000-0x0000000000428000-memory.dmp

Download

memory/1004-132-0x0000000000400000-0x0000000000428000-memory.dmp

Download

memory/3584-208-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-197-0x0000000001410000-0x00000000016AB000-memory.dmp

Download

memory/3584-204-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-205-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-206-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-207-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-202-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-209-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-210-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-211-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-212-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-213-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-214-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-215-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-217-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-216-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-219-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-220-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-221-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-223-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-224-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-226-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-228-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-229-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-230-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-231-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-232-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-233-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-234-0x00000000715F0000-0x0000000071847000-memory.dmp

Download

memory/3584-235-0x00000000715F0000-0x0000000071847000-memory.dmp

Download

memory/3584-236-0x00000000715F0000-0x0000000071847000-memory.dmp

Download

memory/3584-237-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/3584-238-0x00000000715F0000-0x0000000071847000-memory.dmp

Download

memory/3584-201-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-251-0x00000000715F0000-0x0000000071847000-memory.dmp

Download

memory/3584-200-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-199-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-198-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-250-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-196-0x00000000016B0000-0x00000000016F7000-memory.dmp

Download

memory/3584-194-0x0000000001411000-0x00000000015E1000-memory.dmp

Download

memory/3584-203-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/3584-249-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-269-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-279-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-255-0x0000000001220000-0x000000000132F000-memory.dmp

Download

memory/4336-254-0x0000000000EC0000-0x0000000000F15000-memory.dmp

Download

memory/4336-258-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-259-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-260-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-261-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-262-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-310-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-264-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-265-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-266-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-267-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-268-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-272-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download

memory/4336-256-0x0000000001330000-0x0000000001377000-memory.dmp

Download

memory/4336-289-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-271-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-274-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-275-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-276-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-278-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-277-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-270-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-280-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-287-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-273-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-291-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-293-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-295-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-297-0x0000000071910000-0x0000000071C2E000-memory.dmp

Download

memory/4336-304-0x00000000715F0000-0x0000000071847000-memory.dmp

Download

memory/4336-309-0x0000000071C30000-0x00000000731BF000-memory.dmp

Download