Overview

overview

7

Static

static

7

hd-video-c...ro.exe

windows7-x64

7

hd-video-c...ro.exe

windows10-2004-x64

4

$APPDATA/W...dl.exe

windows7-x64

7

$APPDATA/W...dl.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Data/DRead.dll

windows7-x64

3

Data/DRead.dll

windows10-2004-x64

3

Data/SDL2.dll

windows7-x64

1

Data/SDL2.dll

windows10-2004-x64

1

Data/SoundTouch.dll

windows7-x64

1

Data/SoundTouch.dll

windows10-2004-x64

3

Data/avcodec-58.dll

windows7-x64

1

Data/avcodec-58.dll

windows10-2004-x64

3

Data/avdevice-58.dll

windows7-x64

3

Data/avdevice-58.dll

windows10-2004-x64

3

Data/avfilter-7.dll

windows7-x64

1

Data/avfilter-7.dll

windows10-2004-x64

1

Data/avformat-58.dll

windows7-x64

3

Data/avformat-58.dll

windows10-2004-x64

3

Data/avutil-56.dll

windows7-x64

3

Data/avutil-56.dll

windows10-2004-x64

1

Data/dvddec.dll

windows7-x64

1

Data/dvddec.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    181s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 04:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    hd-video-converter-pro.exe
  • Size 131.6MB
  • Sample240605-eql18sdg3z
  • SHA256 fd458a3b3bd8eb56e2af627e877e11b8fb9d0d4a731e262ea0ce44f0b9586de6
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryupx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 26 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
    adwarespyware
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 37 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hd-video-converter-pro.exe
    "C:\Users\Admin\AppData\Local\Temp\hd-video-converter-pro.exe"
    1⤵
    • Drops file in Program Files directory
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2056
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe" "C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\VideoConverterFactoryPro.exe"
      2⤵
        PID:1760
      • C:\Users\Admin\AppData\Local\Temp\nso3F91.tmp\nsAC19.tmp
        "C:\Users\Admin\AppData\Local\Temp\nso3F91.tmp\nsAC19.tmp" cmd /c "C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data0.exe"
        2⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2268
        • C:\Windows\SysWOW64\cmd.exe
          cmd /c "C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data0.exe"
          3⤵
          • Loads dropped DLL
          • Suspicious use of WriteProcessMemory
          PID:2028
          • C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data0.exe
            "C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data0.exe"
            4⤵
            • Executes dropped EXE
            • Suspicious use of WriteProcessMemory
            PID:548
            • C:\Windows\SysWOW64\Wbem\wmic.exe
              wmic path win32_computersystem get username
              5⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:2316
      • C:\Program Files\Internet Explorer\iexplore.exe
        "C:\Program Files\Internet Explorer\iexplore.exe" https://www.videoconverterfactory.com/hd-video-converter/install.html?v27.5
        2⤵
        • Modifies Internet Explorer settings
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2264
        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:2
          3⤵
          • Modifies Internet Explorer settings
          • Suspicious use of SetWindowsHookEx
          PID:2280
    • C:\Windows\explorer.exe
      C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:1084
      • C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\VideoConverterFactoryPro.exe
        "C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\VideoConverterFactoryPro.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1692
        • C:\Program Files\Internet Explorer\iexplore.exe
          "C:\Program Files\Internet Explorer\iexplore.exe" https://www.videoconverterfactory.com/hd-video-converter/buy.html?put-reg-buy
          3⤵
          • Modifies Internet Explorer settings
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:2624
          • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
            "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2624 CREDAT:275457 /prefetch:2
            4⤵
            • Modifies Internet Explorer settings
            • Suspicious use of SetWindowsHookEx
            PID:1516
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1628
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6659758,0x7fef6659768,0x7fef6659778
        2⤵
          PID:884
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1164 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:2
          2⤵
            PID:2388
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1480 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:8
            2⤵
              PID:2544
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1596 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:8
              2⤵
                PID:2496
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2188 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:1
                2⤵
                  PID:2120
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2192 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:1
                  2⤵
                    PID:2972
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1464 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:2
                    2⤵
                      PID:1548
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3324 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:1
                      2⤵
                        PID:1704
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3428 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:8
                        2⤵
                          PID:2028
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3540 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:8
                          2⤵
                            PID:1328
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3512 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:1
                            2⤵
                              PID:2904
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3184 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:8
                              2⤵
                                PID:1860
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3572 --field-trial-handle=1160,i,11164029696517687936,7222007756625641862,131072 /prefetch:1
                                2⤵
                                  PID:776
                              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                1⤵
                                  PID:2800

                                Network

                                      MITRE ATT&CK Enterprise v15

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      Data0.exe
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data0.exe
                                      • Size 554KB
                                      • SHA256 bde06be2cf312087044b5d03a542244838c1ebd9b3a316ef9484322f869d8efa
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      avcodec-58.dll
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\avcodec-58.dll
                                      • Size 30.5MB
                                      • SHA256 671b24f5d32e97246cbddd524b798efd81bd17e27922e83c13db974c976184e2
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      avfilter-7.dll
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\avfilter-7.dll
                                      • Size 9.0MB
                                      • SHA256 1b0abbbb895fa1564fc09ce55ea1d5d9af784ddb131cc36e3bdba79ee13c7dbf
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      avutil-56.dll
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\avutil-56.dll
                                      • Size 1012KB
                                      • SHA256 b5403471304237e2486a1d5934149ea493eac3859d9d423d5630226dfb10fb44
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      mp4.png
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Format\mp4.png
                                      • Size 26KB
                                      • SHA256 74867e31e21f3d6ccdc22a87cb4fe9fc2fb06066959d1f9368da5dd3a297cddb
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      Lanen.dll
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Lanen.dll
                                      • Size 228KB
                                      • SHA256 26fef23de0e72acc7b435c1828ffadab2ad607a3f8ab4c1cf3d31550ff91e043
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      RJL.vid
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\RJL.vid
                                      • Size 228KB
                                      • SHA256 deb23da9543a75476ee1600f568b04b8c92fdf96bfb59b115123ec02b1f31a0e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      oldfilm.dat
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\data\oldfilm.dat
                                      • Size 645KB
                                      • SHA256 11cab46b61ef6f28816443a1e571309aa743ee9a28dd0e66953a04088122acdb
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      formaten.dat
                                      • Path C:\Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\formaten.dat
                                      • Size 740KB
                                      • SHA256 72323dd780187ad41b8cb8ae284348a9b9c35c3d25d20d89c0aea20c70c16647
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
                                      • Size 70KB
                                      • SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 2c795dbb208b2f058691091fb9d51524fc698c2c16d08fd54c8c7bb974eab7cd
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 aa014bf8430d34b99651c84f3e8ec4a455335dca2f4bcfd10c99e7abc8b8737b
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 f71ed95dd9f118493ec8b4087e21be09a2a879201c48ca65b07e5134c86fabf5
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 be914d90cf0d0324f048779e042d4d7c0525528d5861caedf82451c4424ae7c4
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 74a70807fb525d7828cc6753afcb91e4bb2795284bb29f440780af05f543a129
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 6c52c13de98c3e5e3e779ec3e7fc45bc7abd47a3f071658c498d2fa7984de5ec
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 552385cafd95578cbd173a9c01be0ad53e91b5f4fdc73e9e929447d84874616a
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 552920084e4927644303545143d77b6c324b3024acf135c1ef27910f7e258bda
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 28e9ee99a324352bf5e8f9f7098af6e5b172f42fa3896204e8fe8f0d9805ed9b
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 6d6a49ad0773852cb4699cf4298f5dd8f6336f8ca4820d1371b5355a55520bd9
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 df0c96bdfcfb1ce858bc88c4016ac321de7082c60bfc4ce4f2733eef096acf40
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 dadb40017c00193aa7048a63f53721511b19487d8d82be0a514bc33dbe7a816d
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 d7d4c156f10e78c8805666156f983c792f336dffe69488d9b584f1a0a54c05ca
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 d1e4a2d362bfd7c9637c6aa77e8bb075dfad5802167d232381d2af85c4a198e0
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 73da5674deeca46f429497dc10468d9a2b583b3d7976de6ec8b72ad68f7b7f97
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 4b41f0c8d5c11ae54034feb17d758f8c9c83052d6e647e495f038b76c3990395
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 2608de6c8ff3c744701778f6307e6c332163c852e642d0ff6a0f801f20627b0d
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 056a4cf4ed9886712cc3eb9b64e2e57553a543143ec8790db72f7d7d3d35b1f2
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      94308059B57B3142E455B38A6EB92015
                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                      • Size 342B
                                      • SHA256 43c8671c68004a314ea2132d72f7167478d7b51c9af42af11cb187e3af4330ed
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      4e82246e-dbe4-455f-bf6d-b3924e0c20a0.tmp
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4e82246e-dbe4-455f-bf6d-b3924e0c20a0.tmp
                                      • Size 282KB
                                      • SHA256 6f5ff5a10fa70cb63ca54784bed67e5fe7acffdf220918c342de58b6bd40137e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
                                      • Size 264KB
                                      • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                      • Size 526B
                                      • SHA256 34b196218608c9f936fdb5e304509316daf2540ea41fccb5b5636d598eb53548
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                      • Size 6KB
                                      • SHA256 f13e377378813c3dcb3b825d55cb49e244c71941b6f0dc902b71899f932924a1
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                      • Size 5KB
                                      • SHA256 042e1932c4398c8386b3cd1893ebb25e3b320576b38cf1ef6f9687d0d8fa3c94
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                      • Size 5KB
                                      • SHA256 0b8f0d338d6686202093bef09eb09629dc1f9c024f788187b2f30eee1da55eb3
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      000007.dbtmp
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp
                                      • Size 16B
                                      • SHA256 8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                      • Size 282KB
                                      • SHA256 fbb9476cf88677b1ef5e80abe97935325a910ce7853a61cd6d7fe5e4f5e0282a
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      RecoveryStore.{5ABC42A1-22F2-11EF-9A38-7A58A1FDD547}.dat
                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{5ABC42A1-22F2-11EF-9A38-7A58A1FDD547}.dat
                                      • Size 5KB
                                      • SHA256 7a520be8c164a1f3747cff7fc5b4a935ef83c014abc37be04f8abae37c5ec747
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      RecoveryStore.{C46DBA60-0D46-11EF-A0B5-5ABA25856535}.dat
                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{C46DBA60-0D46-11EF-A0B5-5ABA25856535}.dat
                                      • Size 5KB
                                      • SHA256 cb46564b5da6d73fcf39bc56c0df6aef62c01336cad8a198dab4d6368533f7f5
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      {5ABC42A4-22F2-11EF-9A38-7A58A1FDD547}.dat
                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\{5ABC42A4-22F2-11EF-9A38-7A58A1FDD547}.dat
                                      • Size 4KB
                                      • SHA256 1fb1fbd6970fa405e96952f6da8011308d67aafede900fcdd800c1c3495733d9
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      CabD4FE.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\CabD4FE.tmp
                                      • Size 68KB
                                      • SHA256 1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      TarD67B.tmp
                                      • Path C:\Users\Admin\AppData\Local\Temp\TarD67B.tmp
                                      • Size 181KB
                                      • SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      ioSpecial.ini
                                      • Path C:\Users\Admin\AppData\Local\Temp\nso3F91.tmp\ioSpecial.ini
                                      • Size 1KB
                                      • SHA256 e6c8a70c3cf6e634165876e162f490057a49baee4c6c89b7a53256cd0d6b5f1c
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      ioSpecial.ini
                                      • Path C:\Users\Admin\AppData\Local\Temp\nso3F91.tmp\ioSpecial.ini
                                      • Size 1KB
                                      • SHA256 bb5dea571156158b8e6b26aaf2a2397ce16065c16a7f2a96e490cb5fc6eaf5a7
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      ioSpecial.ini
                                      • Path C:\Users\Admin\AppData\Local\Temp\nso3F91.tmp\ioSpecial.ini
                                      • Size 1KB
                                      • SHA256 320c4897855db0a57ee14b3c184697e2d101b9300f8204157da1819e9319a997
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      ~DF3E080E6924F5D381.TMP
                                      • Path C:\Users\Admin\AppData\Local\Temp\~DF3E080E6924F5D381.TMP
                                      • Size 20KB
                                      • SHA256 3da4736505ec5101ebfe06aceef5ed8854bff21f27c5bffcef48faca59c1a6b7
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      config.ini
                                      • Path C:\Users\Admin\AppData\Roaming\WonderFox Soft\HD Video Converter Factory Pro\config.ini
                                      • Size 72B
                                      • SHA256 51aa550add94ecfedf332c6c716a00c9d2fe22c1b519c1e16bfc5cd243b2fee6
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      config.ini
                                      • Path C:\Users\Admin\AppData\Roaming\WonderFox Soft\HD Video Converter Factory Pro\config.ini
                                      • Size 140B
                                      • SHA256 2abbe9950aab906eb1a052b5110751cc9d894e75a760e92a470a43294e1610c6
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      SDL2.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\SDL2.dll
                                      • Size 1.2MB
                                      • SHA256 f70051e79801f33793090ee0e99d8d57cb392121064dbe0a6b66b375e3f9b6ea
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      SoundTouch.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\SoundTouch.dll
                                      • Size 749KB
                                      • SHA256 628cd66e83ce643ed7fc9ee6f54da30a9f95121e9fe93d17db3339627446fa46
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      avdevice-58.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\avdevice-58.dll
                                      • Size 1.2MB
                                      • SHA256 8c7497c4670fad30b2ca4607d7168f47b1cbc8ba55a3de77051b1bc8e5680ffe
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      avformat-58.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\avformat-58.dll
                                      • Size 9.2MB
                                      • SHA256 8dd4d545d5ca0d4922ae10d780d5debfd98c782d498273df30663a54bd570439
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      libmfx-0.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\libmfx-0.dll
                                      • Size 795KB
                                      • SHA256 b9505df0d094acb9a1a149a5e4e59c977ab25d515574b0b43d207468039e7644
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      libmfxsw32.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\libmfxsw32.dll
                                      • Size 17.9MB
                                      • SHA256 1fc30f68e319deb529f1d6849275168296754cff6a172cf7b3f2ad1849ed5df1
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      swresample-3.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\swresample-3.dll
                                      • Size 287KB
                                      • SHA256 3f1395c38c3866734db7e05f7648dc643bce1fd9364bedfe7d20d5927ac586fa
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      swscale-5.dll
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\Data\swscale-5.dll
                                      • Size 520KB
                                      • SHA256 ca1da11676feb5714eb726045886ebfb3e3166cc2eaba68a48bf685f815167a9
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      VideoConverterFactoryPro.exe
                                      • Path \Program Files (x86)\WonderFox Soft\HD Video Converter Factory Pro\VideoConverterFactoryPro.exe
                                      • Size 9.5MB
                                      • SHA256 7a1131e664f2fbad4783d58fc1b2de5277e59fd219f47f04622d72769f5f30e8
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      FindProcDLL.dll
                                      • Path \Users\Admin\AppData\Local\Temp\nso3F91.tmp\FindProcDLL.dll
                                      • Size 27KB
                                      • SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      InstallOptions.dll
                                      • Path \Users\Admin\AppData\Local\Temp\nso3F91.tmp\InstallOptions.dll
                                      • Size 15KB
                                      • SHA256 efb07b38b205f4dcde166887df43c089cfecff627099922cc0c88fce27075063
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      LangDLL.dll
                                      • Path \Users\Admin\AppData\Local\Temp\nso3F91.tmp\LangDLL.dll
                                      • Size 4KB
                                      • SHA256 e80cfa37169aecfee7d91508d1025706294d47b2950debf2c31e6ba52f3b8cf9
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      UserInfo.dll
                                      • Path \Users\Admin\AppData\Local\Temp\nso3F91.tmp\UserInfo.dll
                                      • Size 4KB
                                      • SHA256 e09e0cea3d7624a438fe4e02df230e995dcddcd9909080d883b107a7137b471e
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      nsAC19.tmp
                                      • Path \Users\Admin\AppData\Local\Temp\nso3F91.tmp\nsAC19.tmp
                                      • Size 6KB
                                      • SHA256 86802e393ea55d2441eeb522ef8265b7ae1576d1cc901356561ffef40cd65b4f
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      nsExec.dll
                                      • Path \Users\Admin\AppData\Local\Temp\nso3F91.tmp\nsExec.dll
                                      • Size 6KB
                                      • SHA256 6d5654fcf23d3d717147d64941d61edcb8374202dfb63852cca629dca117f03e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      memory/548-1039-0x0000000000400000-0x000000000062A000-memory.dmp
                                      Download

                                      memory/1692-1126-0x00000000172F0000-0x00000000174B3000-memory.dmp
                                      Download

                                      memory/1692-1183-0x000000006E720000-0x000000006F035000-memory.dmp
                                      Download

                                      memory/1692-1206-0x000000000D4C0000-0x000000000D568000-memory.dmp
                                      Download

                                      memory/1692-1207-0x000000006E490000-0x000000006E5D9000-memory.dmp
                                      Download

                                      memory/1692-1209-0x00000000172F0000-0x00000000174B3000-memory.dmp
                                      Download

                                      memory/1692-1481-0x00000000172F0000-0x00000000184DC000-memory.dmp
                                      Download

                                      memory/1692-1208-0x0000000063A80000-0x0000000063B43000-memory.dmp
                                      Download

                                      memory/1692-1129-0x000000006FA00000-0x0000000072289000-memory.dmp
                                      Download

                                      memory/1692-1637-0x0000000072290000-0x00000000725A4000-memory.dmp
                                      Download

                                      memory/1692-1641-0x000000006F040000-0x000000006F9FB000-memory.dmp
                                      Download

                                      memory/1692-1636-0x0000000000400000-0x0000000001400000-memory.dmp
                                      Download

                                      memory/1692-1640-0x000000006FA00000-0x0000000072289000-memory.dmp
                                      Download

                                      memory/1692-1179-0x000000006F040000-0x000000006F9FB000-memory.dmp
                                      Download

                                      memory/1692-1205-0x000000006E5E0000-0x000000006E71B000-memory.dmp
                                      Download

                                      memory/1692-1181-0x00000000172F0000-0x00000000184DC000-memory.dmp
                                      Download

                                      memory/1692-1125-0x0000000072290000-0x00000000725A4000-memory.dmp
                                      Download

                                      memory/1692-1127-0x0000000074920000-0x00000000749B2000-memory.dmp
                                      Download

                                      memory/1692-1151-0x00000000172F0000-0x000000001733C000-memory.dmp
                                      Download

                                      memory/1692-1123-0x0000000000400000-0x0000000001400000-memory.dmp
                                      Download

                                      memory/1692-1128-0x0000000074740000-0x00000000747C4000-memory.dmp
                                      Download

                                      memory/1692-1124-0x00000000172F0000-0x00000000174B3000-memory.dmp
                                      Download

                                      memory/1692-1103-0x0000000015FD0000-0x000000001600A000-memory.dmp
                                      Download

                                      memory/1692-1102-0x0000000015F90000-0x0000000015FC8000-memory.dmp
                                      Download

                                      memory/1692-1101-0x0000000015CF0000-0x0000000015D02000-memory.dmp
                                      Download

                                      memory/1692-1100-0x0000000015680000-0x00000000156DA000-memory.dmp
                                      Download

                                      memory/1692-1099-0x0000000015730000-0x0000000015854000-memory.dmp
                                      Download

                                      memory/1692-1097-0x0000000015140000-0x000000001517C000-memory.dmp
                                      Download

                                      memory/1692-1096-0x00000000151E0000-0x000000001522F000-memory.dmp
                                      Download

                                      memory/1692-1095-0x0000000015100000-0x0000000015158000-memory.dmp
                                      Download

                                      memory/1692-1085-0x0000000012240000-0x000000001224B000-memory.dmp
                                      Download

                                      memory/1692-1072-0x000000000D4C0000-0x000000000D568000-memory.dmp
                                      Download

                                      memory/2028-1028-0x0000000002290000-0x00000000024BA000-memory.dmp
                                      Download

                                      memory/2028-1030-0x0000000002290000-0x00000000024BA000-memory.dmp
                                      Download

                                      memory/2056-1032-0x0000000001EB0000-0x0000000001EC0000-memory.dmp
                                      Download

                                      memory/2056-111-0x0000000001EB0000-0x0000000001EC0000-memory.dmp
                                      Download

                                      memory/2056-105-0x0000000001EB0000-0x0000000001EC0000-memory.dmp
                                      Download