Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    159s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2023, 15:31

General

  • Target

    WebTorrentSetup-v0.24.0.exe

  • Size

    81.8MB

  • MD5

    e3921e5c2119b846307a791b7e72add2

  • SHA1

    bff9ecd3a1cffcc0565958cdff1ce64acf025387

  • SHA256

    08b97a6a4b5999bd0f0c2f0eb368eb938a16c373999b672db24ea89664d35714

  • SHA512

    a0c49d4b8789ed7d0332b067837cbd7e854e59376992b8c5400ad8e0784ba83645c7456df2890354bb3bd714b0637fe15d060bd203a35bea127fb4e01f7c49b1

  • SSDEEP

    1572864:Lgn5zqiy1C/y49mULaZ+4tpFiJixKnSJEmVA1rKZufzpyZttgpUVT:LgtyYy4kUOltiJVmVAFKZEzpyvYUVT

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 19 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 23 IoCs
  • Suspicious use of SendNotifyMessage 40 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WebTorrentSetup-v0.24.0.exe
    "C:\Users\Admin\AppData\Local\Temp\WebTorrentSetup-v0.24.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1240
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:556
      • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\Squirrel.exe
        "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:1496
      • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
        "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe" --squirrel-install 0.24.0
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:924
      • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
        "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe" --squirrel-firstrun
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:568
        • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
          C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\WebTorrent /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\WebTorrent\Crashpad --url=https://webtorrent.io/desktop/crash-report --annotation=_companyName=WebTorrent --annotation=_productName=WebTorrent --annotation=_version=0.24.0 --annotation=prod=Electron --annotation=ver=10.1.0 --initial-client-data=0x34c,0x350,0x354,0x320,0x358,0x146ea4e70,0x146ea4e80,0x146ea4e90
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:700
        • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
          "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe" --type=gpu-process --field-trial-handle=1148,8549472845115427373,13923238442886562535,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1152 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1864
        • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
          "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1148,8549472845115427373,13923238442886562535,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1572 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1992
        • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
          "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe" --type=renderer --autoplay-policy=no-user-gesture-required --field-trial-handle=1148,8549472845115427373,13923238442886562535,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --app-user-model-id=com.squirrel.WebTorrent.WebTorrent --app-path="C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\resources\app.asar" --node-integration --no-sandbox --no-zygote --enable-remote-module --background-color=#1E1E1E --enable-blink-features=AudioVideoTracks --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1548 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1936
        • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
          "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe" --type=renderer --autoplay-policy=no-user-gesture-required --field-trial-handle=1148,8549472845115427373,13923238442886562535,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --app-user-model-id=com.squirrel.WebTorrent.WebTorrent --app-path="C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\resources\app.asar" --node-integration --no-sandbox --no-zygote --enable-remote-module --background-color=#282828 --enable-blink-features=AudioVideoTracks --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1516 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:1016
        • C:\Users\Admin\AppData\Local\WebTorrent\Update.exe
          C:\Users\Admin\AppData\Local\WebTorrent\Update.exe --checkForUpdate https://webtorrent.io/desktop/update?version=0.24.0&platform=win32&sysarch=x64
          4⤵
          • Executes dropped EXE
          PID:1756
        • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe
          "C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe" --type=gpu-process --field-trial-handle=1148,8549472845115427373,13923238442886562535,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1152 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2180

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

    Filesize

    81B

    MD5

    15f690bda5e8ddb1d852c6973c50cf9b

    SHA1

    507d72466acec771722df7053d3faac3fe8b3294

    SHA256

    ce11ecca5e20484f4ae2cb24b814f2d3b918b05f09658c25ba254b9bcdf4ce05

    SHA512

    cb06738df1c24f305ff278cf639cb9d876bdaf7b285de0999652233715d6d58aaee9434bec14da2fc53aa46bd43063b9316880309596d3e594b25daf7404ca3f

  • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

    Filesize

    1.8MB

    MD5

    7734b59f31071dfac24120942dc61bd2

    SHA1

    bc8adededb87259d97f6d38b957d8320baed9b7d

    SHA256

    c15a2264547e9b81aaaf1b89813a464679a05280db31c030a94dfd0f82f3eb8a

    SHA512

    17a7b25daed4ae47c68c0614ac9c5f8ac74affa9a27fac0405b151d9d716716fa3c6a802def5870523bf9a2937fd0050cbbe5444ffaff68dd599335544304478

  • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

    Filesize

    1.8MB

    MD5

    7734b59f31071dfac24120942dc61bd2

    SHA1

    bc8adededb87259d97f6d38b957d8320baed9b7d

    SHA256

    c15a2264547e9b81aaaf1b89813a464679a05280db31c030a94dfd0f82f3eb8a

    SHA512

    17a7b25daed4ae47c68c0614ac9c5f8ac74affa9a27fac0405b151d9d716716fa3c6a802def5870523bf9a2937fd0050cbbe5444ffaff68dd599335544304478

  • C:\Users\Admin\AppData\Local\SquirrelTemp\WebTorrent-0.24.0-full.nupkg

    Filesize

    80.6MB

    MD5

    ff829b43f8e5b8bbbf55c9326ef2c58d

    SHA1

    ed355659379e484cde0b87772910bb090b8671a2

    SHA256

    66e72ca23173ee1d7f3b3ceab71adbdfa0c69d418282af45265524cc3a054a8a

    SHA512

    3c4a09de1775e41e9d642cd7ed7fef7724128e324c70bff49ad1c46edc23910164cb63650237ec4a7c90b8981ca6bccbf308af867104a4b9f872d9ab68a8d894

  • C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif

    Filesize

    29KB

    MD5

    bd41c427764ffcd9984f74646a9c1629

    SHA1

    3faab820052adc00b5fb9c660496b5f42305ec3f

    SHA256

    4945da1692f4633101ce0e3615ac05bebcf707e70ac6970f6110461dfbdf93e7

    SHA512

    5c0060e2c9016880790f4849a031705a815c89710c7504765a11d4fff69a5ad6f70759cded20dddaa68fcdf009904cb1f41bb3f38d4b28ad5d42f827361454db

  • C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico

    Filesize

    361KB

    MD5

    dde28365bc0ff9133f3209655fd0930c

    SHA1

    50d0001ece48668892d723eab6068e5a7124b2ad

    SHA256

    b35b62d3b34048064d41b9b1a5e5eb37655786e8fc54a350cd099158f592549f

    SHA512

    8e01cf74403c372b58615c548b1f35c79139dfdd4ea5b98c30a86a067bf8b328cb06f1ee34a0e11632d234b919689fe46547af25e579d8b16f2a78d7ce37c3ea

  • C:\Users\Admin\AppData\Local\WebTorrent\Update.exe

    Filesize

    1.8MB

    MD5

    7734b59f31071dfac24120942dc61bd2

    SHA1

    bc8adededb87259d97f6d38b957d8320baed9b7d

    SHA256

    c15a2264547e9b81aaaf1b89813a464679a05280db31c030a94dfd0f82f3eb8a

    SHA512

    17a7b25daed4ae47c68c0614ac9c5f8ac74affa9a27fac0405b151d9d716716fa3c6a802def5870523bf9a2937fd0050cbbe5444ffaff68dd599335544304478

  • C:\Users\Admin\AppData\Local\WebTorrent\Update.exe

    Filesize

    2.1MB

    MD5

    ec8a1b742fe533c94f3870275676c65e

    SHA1

    e040cde358cc41115b8509bcbc0074dfe903c171

    SHA256

    33514e501f06e109b3d9ef28b3c10cc00f5dc52fe31c9820fefce314cca2afbb

    SHA512

    4b123f28a9ab9315f1583dc0422f057e5426b8c3f4ab1a7af2ee77983d17ee3a74483ef49104b4a4548be65348c788ecfa3d8653d3df7fb1abcbe15b6af1e238

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\D3DCompiler_47.dll

    Filesize

    4.3MB

    MD5

    7641e39b7da4077084d2afe7c31032e0

    SHA1

    2256644f69435ff2fee76deb04d918083960d1eb

    SHA256

    44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

    SHA512

    8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\Squirrel.exe

    Filesize

    2.1MB

    MD5

    ec8a1b742fe533c94f3870275676c65e

    SHA1

    e040cde358cc41115b8509bcbc0074dfe903c171

    SHA256

    33514e501f06e109b3d9ef28b3c10cc00f5dc52fe31c9820fefce314cca2afbb

    SHA512

    4b123f28a9ab9315f1583dc0422f057e5426b8c3f4ab1a7af2ee77983d17ee3a74483ef49104b4a4548be65348c788ecfa3d8653d3df7fb1abcbe15b6af1e238

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\chrome_100_percent.pak

    Filesize

    176KB

    MD5

    d5719b1f791ac999c3cfda2e4405bdce

    SHA1

    c5d94054bcb271dee08714c313476abd67be28ca

    SHA256

    7cb9d93a16e5621ab765e3f3b459f4698ae496035e283f2c0c390b188a487741

    SHA512

    ce75bde78ddf6bc394662c5d0ce107ba375b13bf75a31ba1888dffa74900fa86babd65ce222c38db73a11c8d54b3c6f6046b8f71ce80281eec884fd7f0cd1583

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\chrome_200_percent.pak

    Filesize

    313KB

    MD5

    0649df49260e18326c9a54545131aaec

    SHA1

    76de40e3b828cb42cb8b9beb31808ea2145eda56

    SHA256

    070a6cb68318a032ec17cd7b07f8af8bd6983f16997f50a231d232396a2f570f

    SHA512

    c196726564ea218c1e58121f43ab6f138a676a47cd53ad9099daec4cc3a491cf7f9127c56f31f8ec460080ba5f2f56eb2f6c7d37e286e05c4dbd9592552185d4

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\icudtl.dat

    Filesize

    10.0MB

    MD5

    9732e28c054db1e042cd306a7bc9227a

    SHA1

    6bab2e77925515888808c1ef729c5bb1323100dd

    SHA256

    27993e2079711d5f0f04a72f48fee88b269604c8e3fbdf50a7f7bb3f5bfc8d8e

    SHA512

    3eb67ab896a56dab4a2d6eea98f251affd6864c5f5b24f22b61b6acc1df4460d86f0a448f1983aac019e79ff930286c3510891be9d48ef07a93ff975a0e55335

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\libegl.dll

    Filesize

    438KB

    MD5

    cf2e3f479814c5554685bf97713de097

    SHA1

    3c11b97c5d9af6fe3baf6e70e464b9c5a1f56ece

    SHA256

    909b0cedcce5d457399760ef22decb59ea933cd4e6888c150edf2fb114ce9c51

    SHA512

    1878089036cec05387d43ed4f3c4a174f76b07ef32cc32091d2318a2487f586f50973cf88fb73713553e2c48e97964e0a1e635ba32e9ccc63de917e205a877f3

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\libglesv2.dll

    Filesize

    9.2MB

    MD5

    1d259f08537d66c068350b6e4ae7c6d3

    SHA1

    f0d73ea9922bf1fbd682ac9a8a1b157964ede186

    SHA256

    bc42bcaa0e1ad5089b5284de21e7242a553e63f527425ac38d6d8d4c0a57c3d6

    SHA512

    e26a2a15249d21dd24e1da6ddc604d756ba8fe9cec8282c249212cc01587f666430d82995ee393cdff7840cd8658654ab849640b64923604b8d71388b1c32822

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\locales\en-US.pak

    Filesize

    80KB

    MD5

    69d7c5168de6b4311a36c39ca7ca60f0

    SHA1

    40ff72437b51677065d68a6486e3b03e0a27102d

    SHA256

    fdeb2723f423dfe7ee4c19cc052398cbe796bfce7d432d0abe4ea40e6c6e3dab

    SHA512

    4e1fd01bd7d5f65f8aa2f0b2f4845106df916a53dd4898d0cec7fc538c2908d22f4ffd3dacf023c7854f4854534468a9bc93763be21075661501c6ceca2ca0e7

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\resources.pak

    Filesize

    4.1MB

    MD5

    58823db649a8186b058bbb1bafce5f5b

    SHA1

    572e1b7e3a1fbf2622d4d8adf80fdf25f2e5e0fc

    SHA256

    2867fde143284d6d3c920dd95289d821d9db265724a03e2e855c5fd15249b1a0

    SHA512

    d5dcc74e104b22f5a9044da691a1550460125ac7fe9ece9166ce009599998368c510aa0a6497c8a0402cd91e7dd507c2cff1302fd51849ed96db94e3b5b2aac2

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\resources\app.asar

    Filesize

    34.2MB

    MD5

    bed7ad815ef76d933b87df6634c2e061

    SHA1

    918d6411eb9b23b0f2d5f2b5599ac359b7dedd39

    SHA256

    c02cce999ebb3c9bdf8c28bb188376bf4d48aeaa41d31dbd4aab38b18a38282c

    SHA512

    48fd569c9889a5cf8df79154837828d50045ff2c3906d2412f8378669a20c3a53f5603e7fee744d798a42012f06f97f83e28f8126ee246da9170e816dfd3308f

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\resources\app.asar.unpacked\static\WebTorrent.ico

    Filesize

    361KB

    MD5

    dde28365bc0ff9133f3209655fd0930c

    SHA1

    50d0001ece48668892d723eab6068e5a7124b2ad

    SHA256

    b35b62d3b34048064d41b9b1a5e5eb37655786e8fc54a350cd099158f592549f

    SHA512

    8e01cf74403c372b58615c548b1f35c79139dfdd4ea5b98c30a86a067bf8b328cb06f1ee34a0e11632d234b919689fe46547af25e579d8b16f2a78d7ce37c3ea

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\squirrel.exe

    Filesize

    2.1MB

    MD5

    ec8a1b742fe533c94f3870275676c65e

    SHA1

    e040cde358cc41115b8509bcbc0074dfe903c171

    SHA256

    33514e501f06e109b3d9ef28b3c10cc00f5dc52fe31c9820fefce314cca2afbb

    SHA512

    4b123f28a9ab9315f1583dc0422f057e5426b8c3f4ab1a7af2ee77983d17ee3a74483ef49104b4a4548be65348c788ecfa3d8653d3df7fb1abcbe15b6af1e238

  • C:\Users\Admin\AppData\Local\WebTorrent\app-0.24.0\v8_context_snapshot.bin

    Filesize

    167KB

    MD5

    c69de3099cb3fc8013943371370119c9

    SHA1

    cd4e11264b1def189c59035b5be20b4759dee28c

    SHA256

    fdd9dc6768e78a38e9b0004e59819a3f339bae20045554353dc8d3ea30fb0e08

    SHA512

    71cf48f3b083aca80e6cf98acde80184a67d0edbe3f3485948ee5712f825eba538683c37076e84e09ac1b48b44ba3f4ab0f31ba3c9563637b7ffda17a9471a7a

  • C:\Users\Admin\AppData\Local\WebTorrent\app.ico

    Filesize

    361KB

    MD5

    dde28365bc0ff9133f3209655fd0930c

    SHA1

    50d0001ece48668892d723eab6068e5a7124b2ad

    SHA256

    b35b62d3b34048064d41b9b1a5e5eb37655786e8fc54a350cd099158f592549f

    SHA512

    8e01cf74403c372b58615c548b1f35c79139dfdd4ea5b98c30a86a067bf8b328cb06f1ee34a0e11632d234b919689fe46547af25e579d8b16f2a78d7ce37c3ea

  • C:\Users\Admin\AppData\Local\WebTorrent\packages\RELEASES

    Filesize

    81B

    MD5

    15f690bda5e8ddb1d852c6973c50cf9b

    SHA1

    507d72466acec771722df7053d3faac3fe8b3294

    SHA256

    ce11ecca5e20484f4ae2cb24b814f2d3b918b05f09658c25ba254b9bcdf4ce05

    SHA512

    cb06738df1c24f305ff278cf639cb9d876bdaf7b285de0999652233715d6d58aaee9434bec14da2fc53aa46bd43063b9316880309596d3e594b25daf7404ca3f

  • C:\Users\Admin\AppData\Local\WebTorrent\packages\WebTorrent-0.24.0-full.nupkg

    Filesize

    80.6MB

    MD5

    ff829b43f8e5b8bbbf55c9326ef2c58d

    SHA1

    ed355659379e484cde0b87772910bb090b8671a2

    SHA256

    66e72ca23173ee1d7f3b3ceab71adbdfa0c69d418282af45265524cc3a054a8a

    SHA512

    3c4a09de1775e41e9d642cd7ed7fef7724128e324c70bff49ad1c46edc23910164cb63650237ec4a7c90b8981ca6bccbf308af867104a4b9f872d9ab68a8d894

  • C:\Users\Admin\AppData\Local\WebTorrent\update.exe

    Filesize

    1.8MB

    MD5

    7734b59f31071dfac24120942dc61bd2

    SHA1

    bc8adededb87259d97f6d38b957d8320baed9b7d

    SHA256

    c15a2264547e9b81aaaf1b89813a464679a05280db31c030a94dfd0f82f3eb8a

    SHA512

    17a7b25daed4ae47c68c0614ac9c5f8ac74affa9a27fac0405b151d9d716716fa3c6a802def5870523bf9a2937fd0050cbbe5444ffaff68dd599335544304478

  • C:\Users\Admin\AppData\Roaming\WebTorrent\Crashpad\settings.dat

    Filesize

    40B

    MD5

    8badc8525685fc31355f9a66c7b5675d

    SHA1

    197493ed366620b5fc5943755b0b63aa6a60c677

    SHA256

    97dddcb988c4e2639325682b3a4a14c66dc03a5d13fbea3c93fac037e31dcdeb

    SHA512

    eb3c9aa33b59068286aca20976b7a18635f2ca7c2bfbf47dd1161dfdec4ccb44e4eae7c38fadea2448aa4d513c75b5e79b4a96fe32182801e4581fdf7913fb4d

  • \Users\Admin\AppData\Local\SquirrelTemp\Update.exe

    Filesize

    1.8MB

    MD5

    7734b59f31071dfac24120942dc61bd2

    SHA1

    bc8adededb87259d97f6d38b957d8320baed9b7d

    SHA256

    c15a2264547e9b81aaaf1b89813a464679a05280db31c030a94dfd0f82f3eb8a

    SHA512

    17a7b25daed4ae47c68c0614ac9c5f8ac74affa9a27fac0405b151d9d716716fa3c6a802def5870523bf9a2937fd0050cbbe5444ffaff68dd599335544304478

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\WebTorrent.exe

    Filesize

    118.0MB

    MD5

    5a5c4843dcc9fb8643f6a80d33e76228

    SHA1

    80efa28c0d2c92c717f19132e616392443190b71

    SHA256

    9d08f1f0215b0f7e18ca62a54d69c5ce32bf348561a65bd6caf1b10c537cbb02

    SHA512

    cfa7de0cd22d230cee148038f56f5048b37fcb5a2f7c68d48b546b1ef0efb6ccaf105b22c0153c1b8db302fe7aa89a3194f8b14500de27999c6f346777fe59c1

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\d3dcompiler_47.dll

    Filesize

    4.3MB

    MD5

    7641e39b7da4077084d2afe7c31032e0

    SHA1

    2256644f69435ff2fee76deb04d918083960d1eb

    SHA256

    44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

    SHA512

    8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\d3dcompiler_47.dll

    Filesize

    4.3MB

    MD5

    7641e39b7da4077084d2afe7c31032e0

    SHA1

    2256644f69435ff2fee76deb04d918083960d1eb

    SHA256

    44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

    SHA512

    8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    ffd64763441db110930eed6704b87067

    SHA1

    037d05d675c82bd4e1fb8f4f58a7e739df55992b

    SHA256

    f79e7c646c6ec58d306ba4898a27cda6f99fd8c33b0c103a044c77e327a93d53

    SHA512

    45d2e041f1f63626ece0c19cce8f45a150abc68b3b672b8dc5239a40dbd1544f50c3792c109bcb72f2b6b490e5c849379a028c97c216faea0e6b8ae9cf022f72

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\libEGL.dll

    Filesize

    438KB

    MD5

    cf2e3f479814c5554685bf97713de097

    SHA1

    3c11b97c5d9af6fe3baf6e70e464b9c5a1f56ece

    SHA256

    909b0cedcce5d457399760ef22decb59ea933cd4e6888c150edf2fb114ce9c51

    SHA512

    1878089036cec05387d43ed4f3c4a174f76b07ef32cc32091d2318a2487f586f50973cf88fb73713553e2c48e97964e0a1e635ba32e9ccc63de917e205a877f3

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\libGLESv2.dll

    Filesize

    9.2MB

    MD5

    1d259f08537d66c068350b6e4ae7c6d3

    SHA1

    f0d73ea9922bf1fbd682ac9a8a1b157964ede186

    SHA256

    bc42bcaa0e1ad5089b5284de21e7242a553e63f527425ac38d6d8d4c0a57c3d6

    SHA512

    e26a2a15249d21dd24e1da6ddc604d756ba8fe9cec8282c249212cc01587f666430d82995ee393cdff7840cd8658654ab849640b64923604b8d71388b1c32822

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\squirrel.exe

    Filesize

    2.1MB

    MD5

    ec8a1b742fe533c94f3870275676c65e

    SHA1

    e040cde358cc41115b8509bcbc0074dfe903c171

    SHA256

    33514e501f06e109b3d9ef28b3c10cc00f5dc52fe31c9820fefce314cca2afbb

    SHA512

    4b123f28a9ab9315f1583dc0422f057e5426b8c3f4ab1a7af2ee77983d17ee3a74483ef49104b4a4548be65348c788ecfa3d8653d3df7fb1abcbe15b6af1e238

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\squirrel.exe

    Filesize

    2.1MB

    MD5

    ec8a1b742fe533c94f3870275676c65e

    SHA1

    e040cde358cc41115b8509bcbc0074dfe903c171

    SHA256

    33514e501f06e109b3d9ef28b3c10cc00f5dc52fe31c9820fefce314cca2afbb

    SHA512

    4b123f28a9ab9315f1583dc0422f057e5426b8c3f4ab1a7af2ee77983d17ee3a74483ef49104b4a4548be65348c788ecfa3d8653d3df7fb1abcbe15b6af1e238

  • \Users\Admin\AppData\Local\WebTorrent\app-0.24.0\squirrel.exe

    Filesize

    2.1MB

    MD5

    ec8a1b742fe533c94f3870275676c65e

    SHA1

    e040cde358cc41115b8509bcbc0074dfe903c171

    SHA256

    33514e501f06e109b3d9ef28b3c10cc00f5dc52fe31c9820fefce314cca2afbb

    SHA512

    4b123f28a9ab9315f1583dc0422f057e5426b8c3f4ab1a7af2ee77983d17ee3a74483ef49104b4a4548be65348c788ecfa3d8653d3df7fb1abcbe15b6af1e238

  • memory/556-163-0x0000000000A90000-0x0000000000A9A000-memory.dmp

    Filesize

    40KB

  • memory/556-64-0x0000000000F40000-0x0000000001104000-memory.dmp

    Filesize

    1.8MB

  • memory/556-65-0x0000000000E90000-0x0000000000ED0000-memory.dmp

    Filesize

    256KB

  • memory/556-174-0x0000000000E90000-0x0000000000ED0000-memory.dmp

    Filesize

    256KB

  • memory/556-182-0x0000000000A90000-0x0000000000A9A000-memory.dmp

    Filesize

    40KB

  • memory/568-272-0x0000000001D30000-0x0000000001D31000-memory.dmp

    Filesize

    4KB

  • memory/1496-183-0x0000000004EF0000-0x0000000004F30000-memory.dmp

    Filesize

    256KB

  • memory/1496-164-0x0000000004EF0000-0x0000000004F30000-memory.dmp

    Filesize

    256KB

  • memory/1496-159-0x00000000003D0000-0x00000000005EE000-memory.dmp

    Filesize

    2.1MB

  • memory/1756-297-0x00000000011D0000-0x0000000001394000-memory.dmp

    Filesize

    1.8MB

  • memory/1864-274-0x00000000779C0000-0x00000000779C1000-memory.dmp

    Filesize

    4KB

  • memory/1864-231-0x0000000000060000-0x0000000000061000-memory.dmp

    Filesize

    4KB