Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6402	Feb. 18, 2025, 5:25 p.m.	Feb. 18, 2025, 5:29 p.m.

Size	76.8MB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`fce58eddcf4fc7ea19691e27dff9b1d0`
SHA256	`d7cda9ef3ceca910f2207f3e9d14564485218cd46c5af8e0220554396bb60261`
CRC32	`1C9AF2FC`
ssdeep	`1572864:GSOluxEsSRh8auYkP8EfoyXgPVrur65tyEe+QIv2H3CqD715O:DOllYbD0E1crVyEeTG2HyqDp5O`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature ftp_command - ftp command anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check mzp_file_format - MZP(Delphi) file format UPX_Zero - UPX packed file

YouTubeToMP3-x64.exe "C:\Users\test22\AppData\Local\Temp\YouTubeToMP3-x64.exe"
2144
- YouTubeToMP3-x64.tmp "C:\Users\test22\AppData\Local\Temp\is-MPG2E.tmp\YouTubeToMP3-x64.tmp" /SL5="$2016C,79569756,832512,C:\Users\test22\AppData\Local\Temp\YouTubeToMP3-x64.exe"
  2196
  - YouTubeToMp3.exe "C:\Program Files\MediaHuman\YouTube to MP3 Converter\YouTubeToMp3.exe"
    2784
explorer.exe C:\Windows\Explorer.EXE
1236

Name	Response	Post-Analysis Lookup
www.google-analytics.com	A 172.217.161.78 A 142.251.222.46	172.217.25.174

IP Address	Status	Action
142.251.222.46	Active	Moloch
164.124.101.2	Active	Moloch
172.217.161.78	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Queries for the computername (3 events)

Time & API	Arguments	Status	Return
GetComputerNameW Feb. 13, 2025, 12:08 a.m.	computer_name: TEST22-PC	1	1
GetComputerNameW Feb. 13, 2025, 12:09 a.m.	computer_name: TEST22-PC	1	1
GetComputerNameW Feb. 13, 2025, 12:09 a.m.	computer_name: TEST22-PC	1	1

Checks if process is being debugged by a debugger (1 event)

Time & API	Arguments	Status	Return	Repeated
IsDebuggerPresent Feb. 13, 2025, 12:07 a.m.			0	0

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Feb. 13, 2025, 12:09 a.m.		1	1	0

The executable contains unknown PE section names indicative of a packer (could be a false positive) (2 events)

section	.itext
section	.didata

HTTP traffic contains suspicious features which may be indicative of malware related traffic (1 event)

suspicious_features

POST method with no referer header

suspicious_request

POST http://www.google-analytics.com/collect

Performs some HTTP requests (1 event)

request

POST http://www.google-analytics.com/collect

Sends data using the HTTP POST Method (1 event)

request

POST http://www.google-analytics.com/collect

Allocates read-write-execute memory (usually to unpack itself) (10 events)

Time & API	Arguments	Status
NtProtectVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2144 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00400000 process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2144 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 745472 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00401000 process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2144 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x004c4000 process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2144 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 73728 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x004c6000 process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2144 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x74002000 process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2196 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x74002000 process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2196 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00870000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 13, 2025, 12:07 a.m.	process_identifier: 2196 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73ad3000 process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 13, 2025, 12:09 a.m.	process_identifier: 2784 region_size: 65536 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0000000002170000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0xffffffffffffffff	1
NtProtectVirtualMemory Feb. 13, 2025, 12:09 a.m.	process_identifier: 2784 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x000007fefa1b7000 process_handle: 0xffffffffffffffff	1

Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation (5 events)

Time & API	Arguments	Status	Return
GetDiskFreeSpaceExW Feb. 13, 2025, 12:07 a.m.	total_number_of_free_bytes: 0 free_bytes_available: 0 root_path: C:\Program Files\MediaHuman\YouTube to MP3 Converter\ total_number_of_bytes: 70696834920		0
GetDiskFreeSpaceExW Feb. 13, 2025, 12:07 a.m.	total_number_of_free_bytes: 0 free_bytes_available: 0 root_path: C:\Program Files\MediaHuman\ total_number_of_bytes: 70696834920		0
GetDiskFreeSpaceExW Feb. 13, 2025, 12:07 a.m.	total_number_of_free_bytes: 0 free_bytes_available: 9037119488 root_path: C:\Program Files\ total_number_of_bytes: 34252779520	1	1
GetDiskFreeSpaceExW Feb. 13, 2025, 12:09 a.m.	total_number_of_free_bytes: 0 free_bytes_available: 8787861504 root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Explorer total_number_of_bytes: 0	1	1
GetDiskFreeSpaceExW Feb. 13, 2025, 12:09 a.m.	total_number_of_free_bytes: 0 free_bytes_available: 8787861504 root_path: C:\Users\test22\AppData\Local\Microsoft\Windows\Explorer total_number_of_bytes: 0	1	1

Creates executable files on the filesystem (2 events)

file	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaHuman\YouTube to MP3 Converter\MediaHuman YouTube to MP3 Converter.lnk
file	C:\Users\test22\Desktop\MediaHuman YouTube to MP3 Converter.lnk

Creates a shortcut to an executable file (4 events)

file	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaHuman\YouTube to MP3 Converter\Website.lnk
file	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaHuman\YouTube to MP3 Converter\MediaHuman YouTube to MP3 Converter.lnk
file	C:\Users\test22\Desktop\MediaHuman YouTube to MP3 Converter.lnk
file	C:\Users\test22\Desktop\Visit MediaHuman Website.lnk

Drops an executable to the user AppData folder (1 event)

file	C:\Users\test22\AppData\Local\Temp\is-MPG2E.tmp\YouTubeToMP3-x64.tmp

Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory Feb. 13, 2025, 12:09 a.m.	process_identifier: 2784 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 32 (PAGE_EXECUTE_READ) base_address: 0x00000000037c0000 process_handle: 0xffffffffffffffff	1	0	0

Queries for potentially installed applications (5 events)

Time & API	Arguments	Return
RegOpenKeyExW Feb. 13, 2025, 12:07 a.m.	regkey_r: Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1 base_handle: 0x80000002 key_handle: 0x00000000 options: 0 access: 0x00000001 regkey: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1	2
RegOpenKeyExW Feb. 13, 2025, 12:07 a.m.	regkey_r: Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1 base_handle: 0x80000002 key_handle: 0x00000000 options: 0 access: 0x00000001 regkey: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1	2
RegOpenKeyExW Feb. 13, 2025, 12:09 a.m.	regkey_r: Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1 base_handle: 0x80000002 key_handle: 0x00000000 options: 0 access: 0x00000001 regkey: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1	2
RegOpenKeyExW Feb. 13, 2025, 12:09 a.m.	regkey_r: Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1 base_handle: 0x80000001 key_handle: 0x00000000 options: 0 access: 0x00000001 regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1	2
RegOpenKeyExW Feb. 13, 2025, 12:09 a.m.	regkey_r: Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1 base_handle: 0x80000002 key_handle: 0x00000000 options: 0 access: 0x00000101 regkey: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MediaHuman YouTube to MP3 Converter_is1	2

Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config (1 event)

Time & API	Arguments	Status	Return	Repeated
RegSetValueExW Feb. 13, 2025, 12:08 a.m.	key_handle: 0x000002c0 regkey_r: RegFiles0000 reg_type: 7 (REG_MULTI_SZ) value: C:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-core-file-l1-2-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-core-file-l2-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-core-localization-l1-2-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-core-processthreads-l1-1-1.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-core-synch-l1-2-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-core-timezone-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-convert-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-environment-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-filesystem-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-heap-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-locale-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-math-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-runtime-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-stdio-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-string-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-time-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\api-ms-win-crt-utility-l1-1-0.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\concrt140.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\d3dcompiler_47.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\libcrypto-1_1-x64.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\libEGL.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\libGLESv2.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\libssl-1_1-x64.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\msvcp140.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\msvcp140_1.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\msvcr100.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\opengl32sw.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Core.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Gui.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Multimedia.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Network.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Positioning.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5PrintSupport.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Qml.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5QmlModels.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5QmlWorkerScript.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Quick.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5QuickWidgets.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5RemoteObjects.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5SerialPort.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Svg.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5WebChannel.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5WebEngineCore.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5WebEngineWidgets.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5Widgets.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\Qt5WinExtras.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtWebEngineProcess.exeC:\Program Files\MediaHuman\YouTube to MP3 Converter\tag.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\ucrtbase.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\vcruntime140.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\vcruntime140_1.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\YouTubeToMP3.exeC:\Program Files\MediaHuman\YouTube to MP3 Converter\audio\qtaudio_wasapi.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\audio\qtaudio_windows.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\ffmpeg\ffmpeg.exeC:\Program Files\MediaHuman\YouTube to MP3 Converter\ffmpeg\libbz2-1.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\ffmpeg\libiconv-2.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\ffmpeg\liblzma-5.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\ffmpeg\libwinpthread-1.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\iconengines\qsvgicon.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qgif.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qicns.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qico.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qjpeg.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qsvg.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qtga.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qtiff.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qwbmp.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\imageformats\qwebp.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\mediaservice\dsengine.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\mediaservice\qtmedia_audioengine.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\mediaservice\wmfengine.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\platforms\qwindows.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\playlistformats\qtmultimedia_m3u.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\position\qtposition_positionpoll.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\position\qtposition_serialnmea.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\position\qtposition_winrt.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\printsupport\windowsprintersupport.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_debugger.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_inspector.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_local.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_messages.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_native.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_nativedebugger.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_preview.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_profiler.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_quickprofiler.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_server.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\qmltooling\qmldbg_tcp.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtGraphicalEffects\qtgraphicaleffectsplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQml\qmlplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQml\Models.2\modelsplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQml\RemoteObjects\qtqmlremoteobjects.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQml\StateMachine\qtqmlstatemachine.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQml\WorkerScript.2\workerscriptplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQuick\Controls\qtquickcontrolsplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQuick\Controls\Styles\Flat\qtquickextrasflatplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQuick\Extras\qtquickextrasplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQuick\Layouts\qquicklayoutsplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQuick\Window.2\windowplugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\QtQuick.2\qtquick2plugin.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\scenegraph\qsgd3d12backend.dllC:\Program Files\MediaHuman\YouTube to MP3 Converter\styles\qwindowsvistastyle.dll regkey: HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000\RegFiles0000	1	0	0

Deletes executed files from disk (1 event)

file	C:\Users\test22\AppData\Local\Temp\is-MPG2E.tmp\YouTubeToMP3-x64.tmp

Drops 193 unknown file mime types indicative of ransomware writing encrypted files back to disk (50 out of 193 events)

file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\piemenu.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\busyindicator.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\base\handlestylehelper.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\desktop\checkboxstyle.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\style.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\delaybutton.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\base\calendarstyle.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\private\circularbuttonstylehelper.qmlc
file	c:\users\test22\appdata\local\mediahuman\youtube to mp3\cache\qmlcache\28f9224333be3cb19daa6ddfe56f59872de8726e.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\tumblercolumn.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\stackview.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\desktop\menustyle.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\private\circulartickmarklabel.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\tableviewcolumn.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\base\groupboxstyle.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtgraphicaleffects\private\gaussianmaskedblur.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\calendarheadermodel.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\systempalettesingleton.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\basictableview.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\statusindicator.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\desktop\menubarstyle.qmlc
file	C:\Program Files\MediaHuman\YouTube to MP3 Converter\unins000.dat
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\menu.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\textinputwithhandles.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\base\tableviewstyle.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\menubar.qmlc
file	c:\users\test22\appdata\local\mediahuman\youtube to mp3\cache\qmlcache\9436ddffd207b07be0bca22ab4efcb394188ca64.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\stackviewdelegate.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtgraphicaleffects\private\dropshadowbase.qmlc
file	c:\users\test22\appdata\local\mediahuman\youtube to mp3\cache\qmlcache\3006393fae82a25f9f2b9817e15b07f8766671cd.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\abstractcheckable.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\spinbox.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\private\piemenuicon.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\base\statusbarstyle.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\desktop\spinboxstyle.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtgraphicaleffects\private\gaussianglow.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\combobox.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\progressbar.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\toolbutton.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\dial.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\tabview.qmlc
file	c:\users\test22\appdata\local\mediahuman\youtube to mp3\cache\qmlcache\e2e1672a8df9436c578871d3c76e85e6bf7a18f8.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\extras\gauge.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\stackview.jsc
file	c:\users\test22\appdata\local\mediahuman\youtube to mp3\cache\qmlcache\18d73031e917cdc688b0fe69fed44e46581ea5ca.qmlc
file	c:\users\test22\appdata\local\mediahuman\youtube to mp3\cache\qmlcache\1250639d6005aba5d42f6bbc048f8cc1e81d2c5c.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\private\menucontentitem.qmlc
file	c:\users\test22\appdata\local\mediahuman\youtube to mp3\cache\qmlcache\5fe7b44e618b1531d25c0865bb035fde5ccbbf3a.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\textarea.qmlc
file	c:\program files\mediahuman\youtube to mp3 converter\qtquick\controls\styles\base\toolbuttonstyle.qmlc

YouTubeToMP3-x64.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All