Overview

overview

8

Static

static

1

URLScan

urlscan

1

http://google.com

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    405s
  • max time network
    407s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/07/2026, 22:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    http://google.com
  • Sample260702-2s8pcaf16v
Score
8/10
adwaredefense_evasiondiscoveryinstallerpersistenceransomwarespywaretrojanupx

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Executes dropped EXE 11 IoCs
  • Identifies Wine through registry keys 2 TTPs 6 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    defense_evasion
  • Loads dropped DLL 5 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks for any installed AV software in registry 1 TTPs 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 4 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • UPX packed file 39 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 33 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 4 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 10 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 24 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 28 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 56 IoCs
  • Suspicious use of SendNotifyMessage 22 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
    1⤵
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:6032
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ff8b9a8c188,0x7ff8b9a8c194,0x7ff8b9a8c1a0
      2⤵
        PID:5732
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,5389760325394607647,10530113367599746996,262144 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
        2⤵
          PID:2520
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,17148946711953779451,9472479053929859048,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:5288
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,11828664707082255292,6599871889091111875,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=2876 /prefetch:13
          2⤵
            PID:2892
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,9168806876479062027,10948282692335701101,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
            2⤵
              PID:5436
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,12500570459562115700,13988506484745000158,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
              2⤵
                PID:5292
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,1540341218485477023,17289528076048656812,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:1
                2⤵
                  PID:5420
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,8150503867999336500,1817841278394281067,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:9
                  2⤵
                    PID:5776
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5444,i,17420078613479465396,374641942529750342,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:1
                    2⤵
                      PID:4684
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,16537728550842418467,3771445565106852938,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:14
                      2⤵
                        PID:1852
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,8366772494445130922,13419763510001719562,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=3876 /prefetch:14
                        2⤵
                          PID:4980
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,8365796121586016087,623513431119388769,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
                          2⤵
                            PID:4092
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,8365796121586016087,623513431119388769,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
                            2⤵
                              PID:2160
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6208,i,8833590779375777878,9055636690826250901,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:1
                              2⤵
                                PID:6112
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,13184127129215480905,698668017584039483,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:14
                                2⤵
                                  PID:2488
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5404,i,7233320737188587558,12938372226371025877,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:1
                                  2⤵
                                    PID:2052
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6848,i,11628206246777107730,7499350175999515840,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:14
                                    2⤵
                                      PID:5792
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6692,i,12979658929910863126,15644312738827324028,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:14
                                      2⤵
                                        PID:3260
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,14890041651300423428,15887273286051326600,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:14
                                        2⤵
                                          PID:5184
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6860,i,8850370700107965506,7040900281308974371,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
                                          2⤵
                                            PID:4812
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6932,i,13301405550377823199,13754061232173981222,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:1
                                            2⤵
                                              PID:1856
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7152,i,13998992133649451737,8742167359236807392,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:1
                                              2⤵
                                                PID:1668
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3640,i,15527483098162255903,12793991675445900854,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:1
                                                2⤵
                                                  PID:2688
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3172,i,7717495721449848569,13444206210952944666,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7204 /prefetch:14
                                                  2⤵
                                                    PID:2252
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7112,i,8127394732171287210,13132455503735522707,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
                                                    2⤵
                                                      PID:5400
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6916,i,2797964487941137021,10546677544407925161,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:14
                                                      2⤵
                                                        PID:684
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7496,i,17351110222177578731,11737735414773482302,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:14
                                                        2⤵
                                                          PID:1212
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6644,i,3059632697067884876,8174054405978714273,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:1
                                                          2⤵
                                                            PID:2912
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7664,i,8681330696989395055,5899742950388432387,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7760 /prefetch:1
                                                            2⤵
                                                              PID:3968
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7852,i,7703459807131767867,17499264948674804487,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:14
                                                              2⤵
                                                                PID:4692
                                                              • C:\Users\Admin\Downloads\utorrent_installer.exe
                                                                "C:\Users\Admin\Downloads\utorrent_installer.exe"
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • System Location Discovery: System Language Discovery
                                                                PID:4636
                                                                • C:\Users\Admin\AppData\Local\Temp\is-8BR4AS6VYF.tmp\utorrent_installer.tmp
                                                                  "C:\Users\Admin\AppData\Local\Temp\is-8BR4AS6VYF.tmp\utorrent_installer.tmp" /SL5="$A01E2,902162,877568,C:\Users\Admin\Downloads\utorrent_installer.exe"
                                                                  3⤵
                                                                  • Executes dropped EXE
                                                                  • Checks for any installed AV software in registry
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Checks processor information in registry
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of FindShellTrayWindow
                                                                  PID:1212
                                                                  • C:\Users\Admin\AppData\Local\Temp\is-3FIE4ZEB32.tmp\uTorrent.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\is-3FIE4ZEB32.tmp\uTorrent.exe" /S /FORCEINSTALL 1110010101111110
                                                                    4⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:4948
                                                                    • C:\Users\Admin\AppData\Local\Temp\nsd8DC.tmp\utorrent.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\nsd8DC.tmp\utorrent.exe" /S /FORCEINSTALL 1110010101111110
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Identifies Wine through registry keys
                                                                      • Adds Run key to start application
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Modifies registry class
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      PID:2164
                                                                  • C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
                                                                    "C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe"
                                                                    4⤵
                                                                    • Downloads MZ/PE file
                                                                    • Executes dropped EXE
                                                                    • Identifies Wine through registry keys
                                                                    • Adds Run key to start application
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Checks SCSI registry key(s)
                                                                    • Modifies Internet Explorer settings
                                                                    • Modifies system certificate store
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                    • Suspicious use of FindShellTrayWindow
                                                                    • Suspicious use of SendNotifyMessage
                                                                    PID:2872
                                                                    • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
                                                                      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_2872_04AAC8E8_489584670 µTorrent4823DF041B09 uTorrent ce unp
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Checks whether UAC is enabled
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:1852
                                                                    • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
                                                                      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_2872_04AAD020_1097485568 µTorrent4823DF041B09 uTorrent ce unp
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Checks whether UAC is enabled
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:2604
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2604.4816.18165097111527117265 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                        6⤵
                                                                        • Drops file in Windows directory
                                                                        • Enumerates system info in registry
                                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                        PID:2252
                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff8b66c5fd8,0x7ff8b66c5fe4,0x7ff8b66c5ff0
                                                                          7⤵
                                                                            PID:4768
                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1752 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:2 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                            7⤵
                                                                              PID:5876
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2316 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:3 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                              7⤵
                                                                                PID:4356
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2420 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                7⤵
                                                                                  PID:432
                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3488 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
                                                                                  7⤵
                                                                                    PID:6376
                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3772 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
                                                                                    7⤵
                                                                                      PID:6404
                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3916 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
                                                                                      7⤵
                                                                                        PID:6424
                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4312 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
                                                                                        7⤵
                                                                                          PID:7044
                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3784 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
                                                                                          7⤵
                                                                                            PID:1508
                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4780 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                            7⤵
                                                                                              PID:4916
                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=5100 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                              7⤵
                                                                                                PID:1192
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4772 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                                7⤵
                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                PID:1720
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4972 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                                7⤵
                                                                                                  PID:2184
                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4424 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                                  7⤵
                                                                                                    PID:120
                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4544 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                                    7⤵
                                                                                                      PID:2188
                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=5088 --field-trial-handle=1760,i,5103162785680196010,9079367571353290248,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                                      7⤵
                                                                                                        PID:980
                                                                                                  • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
                                                                                                    "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_2872_04AAD4F0_894170779 µTorrent4823DF041B09 uTorrent ce unp
                                                                                                    5⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Checks whether UAC is enabled
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:2116
                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2116.2084.3988406536997880913 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                                      6⤵
                                                                                                        PID:5344
                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x198,0x7ff8b66c5fd8,0x7ff8b66c5fe4,0x7ff8b66c5ff0
                                                                                                          7⤵
                                                                                                            PID:4468
                                                                                                      • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
                                                                                                        "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_2872_04AAD288_2018669766 µTorrent4823DF041B09 uTorrent ce unp
                                                                                                        5⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Checks whether UAC is enabled
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        PID:5608
                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5608.2688.6203312577455968617 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
                                                                                                          6⤵
                                                                                                            PID:3792
                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x198,0x7ff8b66c5fd8,0x7ff8b66c5fe4,0x7ff8b66c5ff0
                                                                                                              7⤵
                                                                                                                PID:3332
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://utorrent.com/prodnews?v=3%2e6%2e0%2e1%2e47254&pv=0.0.0.0.0
                                                                                                            5⤵
                                                                                                              PID:6672
                                                                                                            • C:\Users\Admin\AppData\Roaming\uTorrent\helper\helper.exe
                                                                                                              "C:\Users\Admin\AppData\Roaming\uTorrent\helper\helper.exe" 20441 --hval gVfa_t7Q3wwQpIpj -- -pid 2872 -version 47254
                                                                                                              5⤵
                                                                                                              • Executes dropped EXE
                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                              PID:2532
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7424,i,12551638716553575124,11262493219646012953,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:5636
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7072,i,1960702456362062877,8396717861142904529,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:6884
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5740,i,1816726925193208276,18261525888530813643,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:6240
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7668,i,12164934241580732736,1773799366169222276,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7740 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:6208
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7012,i,6325939468079762236,13922555654873919876,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7648 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:6808
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=3088,i,8399817871561122725,17552205743061365058,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7936 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:6212
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=3104,i,2331817658831757549,8695092128744098848,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:1760
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8284,i,6543516199332126617,3637191620529910744,262144 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:10
                                                                                                                      2⤵
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      PID:5144
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,3394548875245252335,16133483834500809029,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:14
                                                                                                                      2⤵
                                                                                                                        PID:6200
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8356,i,9288916475845987493,13537020520596652139,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=8308 /prefetch:14
                                                                                                                        2⤵
                                                                                                                          PID:6640
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8456,i,9371589835916821059,5460813459035568145,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:14
                                                                                                                          2⤵
                                                                                                                            PID:1956
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8348,i,4512559731742520931,8244673014956064371,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=8624 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:1564
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8440,i,2573745941441292803,8932562641020223378,2097152 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=8448 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:2352
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9000,i,1517980941152839076,347689143386700012,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=8988 /prefetch:12
                                                                                                                                2⤵
                                                                                                                                  PID:3216
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9176,i,7083166030807708148,18259113029541805606,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=9192 /prefetch:14
                                                                                                                                  2⤵
                                                                                                                                    PID:2356
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,15507517505491307228,11774972208338972382,524288 --field-trial-handle=2296,i,17030068640629173570,10749435687323711566,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:14
                                                                                                                                    2⤵
                                                                                                                                      PID:4776
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                    1⤵
                                                                                                                                      PID:3288
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                      1⤵
                                                                                                                                        PID:5712
                                                                                                                                      • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                        C:\Windows\SysWOW64\DllHost.exe /Processid:{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
                                                                                                                                        1⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:3700
                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                        1⤵
                                                                                                                                          PID:4852
                                                                                                                                        • C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
                                                                                                                                          "C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
                                                                                                                                          1⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • Identifies Wine through registry keys
                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                                                          PID:3572
                                                                                                                                        • C:\Windows\System32\oobe\UserOOBEBroker.exe
                                                                                                                                          C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
                                                                                                                                          1⤵
                                                                                                                                          • Drops file in Windows directory
                                                                                                                                          PID:4424
                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
                                                                                                                                          C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
                                                                                                                                          1⤵
                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                          PID:2356

                                                                                                                                        Network

                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                              Reconnaissance

                                                                                                                                              Resource Development

                                                                                                                                              Initial Access

                                                                                                                                              Execution

                                                                                                                                              Persistence

                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                              1
                                                                                                                                              T1547

                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                              1
                                                                                                                                              T1547.001

                                                                                                                                              Privilege Escalation

                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                              1
                                                                                                                                              T1547

                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                              1
                                                                                                                                              T1547.001

                                                                                                                                              Defense Evasion

                                                                                                                                              Modify Registry

                                                                                                                                              3
                                                                                                                                              T1112

                                                                                                                                              Subvert Trust Controls

                                                                                                                                              1
                                                                                                                                              T1553

                                                                                                                                              Install Root Certificate

                                                                                                                                              1
                                                                                                                                              T1553.004

                                                                                                                                              Virtualization/Sandbox Evasion

                                                                                                                                              1
                                                                                                                                              T1497

                                                                                                                                              Credential Access

                                                                                                                                              Discovery

                                                                                                                                              Browser Information Discovery

                                                                                                                                              1
                                                                                                                                              T1217

                                                                                                                                              Network Share Discovery

                                                                                                                                              1
                                                                                                                                              T1135

                                                                                                                                              Peripheral Device Discovery

                                                                                                                                              1
                                                                                                                                              T1120

                                                                                                                                              Query Registry

                                                                                                                                              6
                                                                                                                                              T1012

                                                                                                                                              Software Discovery

                                                                                                                                              1
                                                                                                                                              T1518

                                                                                                                                              Security Software Discovery

                                                                                                                                              1
                                                                                                                                              T1518.001

                                                                                                                                              System Information Discovery

                                                                                                                                              5
                                                                                                                                              T1082

                                                                                                                                              System Location Discovery

                                                                                                                                              1
                                                                                                                                              T1614

                                                                                                                                              System Language Discovery

                                                                                                                                              1
                                                                                                                                              T1614.001

                                                                                                                                              System Time Discovery

                                                                                                                                              1
                                                                                                                                              T1124

                                                                                                                                              Virtualization/Sandbox Evasion

                                                                                                                                              1
                                                                                                                                              T1497

                                                                                                                                              Lateral Movement

                                                                                                                                              Collection

                                                                                                                                              Command and Control

                                                                                                                                              Exfiltration

                                                                                                                                              Impact

                                                                                                                                              Replay Monitor

                                                                                                                                              Loading Replay Monitor...

                                                                                                                                              Downloads

                                                                                                                                              settings.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                              • Size 280B
                                                                                                                                              • SHA256 21f2a2173a6fe7787a4ee5ef5ac483d6a6a5c2760070a429237f47820412d709
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              settings.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                              • Size 280B
                                                                                                                                              • SHA256 2e1cba76e0567deb0ec72dea442166e9da1e26edb6a5ee9b137db8027d58a18d
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              throttle_store.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                              • Size 20B
                                                                                                                                              • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              72d817d7-4ea9-45d0-95e3-278b9641267d.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\72d817d7-4ea9-45d0-95e3-278b9641267d.tmp
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 445dd9e255eae7ce92d1e206ae3475cda462d4bf6d74f3a8493bd347e8364d38
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_00000c
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_00000c
                                                                                                                                              • Size 30KB
                                                                                                                                              • SHA256 72bf6a769c6b324884c59d711e515bebfd301e2d0872ed755f0b711829584c29
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_00000d
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_00000d
                                                                                                                                              • Size 34KB
                                                                                                                                              • SHA256 a27936bcbf1b768d2e7d623f808eebd7e03d7571605ed1262b93e2004ac5b0ae
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_00000e
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_00000e
                                                                                                                                              • Size 107KB
                                                                                                                                              • SHA256 df9e1fadc8bb34cc7e57753e7371f3f7902ae55bfcdc7543585d45e9d20ba202
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_00000f
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_00000f
                                                                                                                                              • Size 93KB
                                                                                                                                              • SHA256 4136dd65671b2d51cc4f5ff3a8bbc4f99516d8ae3c3e7dd12b2d53fc0aa10506
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_000010
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000010
                                                                                                                                              • Size 52KB
                                                                                                                                              • SHA256 ca03a3eb7a232b845392c889f9256da6628621f88aff293dd2f79fd7c5a2e58a
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              0f24325a899d91b1_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\0f24325a899d91b1_0
                                                                                                                                              • Size 158KB
                                                                                                                                              • SHA256 5cad7a8ead11168c61b29a574da8ce12023a17ce9c47fdf8878ff3d2efe5ce2e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              1ae68a737de6c3d8_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\1ae68a737de6c3d8_0
                                                                                                                                              • Size 253B
                                                                                                                                              • SHA256 e9374860eb98031c9335f28ea73d7a35dc37ec4c9e9541067d3cc5d17f864ac4
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              4f5e720b5a381a15_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\4f5e720b5a381a15_0
                                                                                                                                              • Size 558KB
                                                                                                                                              • SHA256 11778f0b3e7e86b17fb341817a81238c1a227c042ba0d7733f939103602de3a4
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              5e0e7bb595243cc4_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\5e0e7bb595243cc4_0
                                                                                                                                              • Size 316B
                                                                                                                                              • SHA256 6e995981571200418e45af73839ade734a3f356730c02289013203f011f678a9
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              6d82389515f48d3a_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\6d82389515f48d3a_0
                                                                                                                                              • Size 350B
                                                                                                                                              • SHA256 c24afa639b00dc45b9ea5ca1a707a65e7e8628a0381da6da3d68153c5b517e05
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              7c5863abd960f8f4_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\7c5863abd960f8f4_0
                                                                                                                                              • Size 17KB
                                                                                                                                              • SHA256 cccac0fb8ebcd4c4bb3f64502f12ac65541c0e99cdd9a4ce4d1a94ae00bb659a
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              801b20b785ddf47d_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\801b20b785ddf47d_0
                                                                                                                                              • Size 265B
                                                                                                                                              • SHA256 4ae8e209a6fe39fd10a335cf47bcc075d0515399a5c340da13671936e6e2e3c8
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              99f206ce9bda261a_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\99f206ce9bda261a_0
                                                                                                                                              • Size 268B
                                                                                                                                              • SHA256 7ed896755a3f1794854025a3c15b83d2a835b279181f5a996df4ffffe66db565
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              aa2407c1ea748bdd_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\aa2407c1ea748bdd_0
                                                                                                                                              • Size 49KB
                                                                                                                                              • SHA256 0da933a36b38e75847416b02f1a3e67cb720a12930db4486fe69e36d10c7c00c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ae450100cbf95a9a_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\ae450100cbf95a9a_0
                                                                                                                                              • Size 5KB
                                                                                                                                              • SHA256 158f554775caa12ef423f9233b7037682a1db9597f85208cce94691d629a1156
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              b3ea92c7f02caf36_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\b3ea92c7f02caf36_0
                                                                                                                                              • Size 340B
                                                                                                                                              • SHA256 6485fc86b3c6973afe149b5883cde4738f4d62597fad6a09a19e996b05697b7b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              b878f2ec0e1bbff5_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\b878f2ec0e1bbff5_0
                                                                                                                                              • Size 213KB
                                                                                                                                              • SHA256 a574ce8691630f1e48835855bd1df11b972de4c6c7ce5069f71d21ef51d98e8b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              b9a673c4801082e8_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\b9a673c4801082e8_0
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 addb76c94ad15b9c62a85fe2184b1a1279fd779826cad8b383fb4494d707b2ea
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              c40a0dd13a922046_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\c40a0dd13a922046_0
                                                                                                                                              • Size 263KB
                                                                                                                                              • SHA256 d0ef8dcd42a5e51b1afd32c240413df6e7e93f05f41161976c635cd1ace51235
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 840B
                                                                                                                                              • SHA256 a15cad01146d48bada513efc6e654290ecd59898ff884cab76a8e0223becf347
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 864B
                                                                                                                                              • SHA256 aaa8c90d5da045bb46ed2e89288aebc0ffef7c3b824bf91a151846fecc10d223
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 816B
                                                                                                                                              • SHA256 cb2e899a217976ad0e0f7e6195ea93d3864b1f17a1ba53d6e8b09b2bd3113533
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 864B
                                                                                                                                              • SHA256 70a266c452269d5c0d281ea5cea87e9d6d0b0febfd0bdfb4593fd711962c556a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 840B
                                                                                                                                              • SHA256 3e5a4ae764557a42ee3be1bd98c32990f219e6cb020711cf3122fbca82faa504
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 864B
                                                                                                                                              • SHA256 df12630c770d31c92813ca59ea7f8781d233a07a12cb6de68c459c48548dd5a5
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 864B
                                                                                                                                              • SHA256 51df6b86347b0af2d953c7b3aba722fa433fca763ce151257fae0b068d1c3129
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 864B
                                                                                                                                              • SHA256 d4442252ebfa3dfa2e4651dfd5c29532b7aec8f838ec4dc4a90237140f592aa8
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 864B
                                                                                                                                              • SHA256 6eebe7a887604e9304ae86cdb582e9afd28b8450553487ee555586972eb0659b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 864B
                                                                                                                                              • SHA256 d18095aff2d27a28c962d766eaa23e6a0c22d661d72f0d7529f65c50141f6f1f
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index~RFe5ab22b.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5ab22b.TMP
                                                                                                                                              • Size 48B
                                                                                                                                              • SHA256 f54d7701bfcae4d852a3de7a65f54e9aaae5e4439c54d7f8e696c0d6327de92d
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              Network Persistent State
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\Network Persistent State
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 d73aa15388d27baeb4a2ccb1b6906a9d005453c7a8afb8624042f732cc7f3fac
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Network Persistent State~RFe5b4d71.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\Network Persistent State~RFe5b4d71.TMP
                                                                                                                                              • Size 59B
                                                                                                                                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 c61bcc85027642dff2d36adc0266645d1f3c8f72059fdff45968da1af60165b2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 ab4d04308611807d0f4d286f55565ec02acd4c0a4f34b61cc64b7e67bc35f16c
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 34b40ce1533d113f0edcf08497dbb09c80e857bf34905adb221675ed132170db
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 da302bf4df8007a34db15f61a378b9948a5f8c4df83d9edcb89a4b550d31e91a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 86b28374d10f1f44bda421fe107cd966f7a4011cd9d7d7db4a1697c2e03685c9
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 ce7c584ad01f2fe02209b7d43228256fd25b0061920b0f7c532bebe915a79a4f
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 4856e5226369bc38f297542236fe0a6dd6cf26de2a9fd84c749f55749b016d64
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 9f86e426aaa724e2d47d15996ac7df52036dcde1ef65696f3aa67283d45c1f0b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 9bd1f9e7a2837563de2898d9444881cf003a2b8ea8908304b4ceddee627fe1ea
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 b8e3c3cb421a0578f503551b6ffc9a7422f878ba9bd49ad977b6ed5e136cf2a3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              TransportSecurity~RFe5a8cb1.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity~RFe5a8cb1.TMP
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 7ad066d69282aedc4f6bb30d9ec07d0283acde6134d61d0aa614333a88ab3711
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 07f08a37dd9db3ef327bf00d70ed7ad5ace227db44a1b144a6fe70003d1c1cb1
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 0296373dadeed4cf9a99fa633b3a35f9bd767b042b2a821c31d764f6488619e3
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 1c17dec14fad6cad76551c3316bb8f90894288656aa2ebcb28837ad8d3bd2995
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 46a3d8ed6302e5e1224b154d3a62240901cc421fa243e8a563f1b510138b049f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 58167c28d233cfb8755a3be17f55c54318f95878987f0890f46a5ee8cf11e48f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 6fd56efcdf0a1f21060bc8825bada3139daa20dae13c3354b27f83736b070846
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 ba460eb2989697729338b0a80ec11859908666e4e217ad7e5b5b6876383bcc93
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 e5c2c6ca38bac8ffee1c6a2b1a3494dea429e1518bb8fbb4b53905c3f1291b99
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 368980b43ad8f60191cb9865ac1ceb7273700be90a2f9eaebdb8a2b58048b789
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 75584bc7eabdcf911e3b1ed76ae6c0d555bd193d06cae7fe6d845c56dd7c4d4c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 bb3970e627e550f63845883761cc4ea9e980d4286543a4f68a1bcb51d84fb605
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 e8073ba2642b64064f437f3efb50a860852bd62a96871dc68ecaf5ea46c4465c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 c8735d787df6eeac62a9503cfa95e6328d256ea2498ec2f27cfb76b09dd4845d
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences~RFe5a86b6.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences~RFe5a86b6.TMP
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 2c70db7f10e4871e1bd51dceb983a181f7109e71cd4f91684a082e4152aa5a4f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              data_0
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_0
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                              Submit Download

                                                                                                                                              data_1
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_1
                                                                                                                                              • Size 264KB
                                                                                                                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                              Submit Download

                                                                                                                                              data_2
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_2
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                              Submit Download

                                                                                                                                              data_3
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_3
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 e4c89a6e150dd6d833f4fbee62533c080ff11a8c382b22a78360fa7c4cf2cbb7
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 998475400c90e39c7b62d94e7de0cbacf81ea686008b1fd907c33a9c069ab6f6
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 3f04226de7dafa78e96f97ffb8cb90a160199342cd48d0164f2d6ae4a180b026
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 a084181a9fee2166565c41c296ce205076856a50748200dbba5dbb818eb57869
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
                                                                                                                                              • Size 15KB
                                                                                                                                              • SHA256 58ca0b9f7fdb808e79391e2c077b780d95a7e59ed8e2140655fb5a50f88bd51b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State~RFe5a33b4.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State~RFe5a33b4.TMP
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 54cabf19ae7764cb1936bd96dff39bef676166c8352c06c73710e7112d21c4e4
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              blocklist
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                              • Size 105KB
                                                                                                                                              • SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              settings.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                              • Size 280B
                                                                                                                                              • SHA256 bea28d9638dac59990bdc6b9fece9f477f8d28c508c1a253fd1565bbc9fc4ae3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              settings.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                              • Size 280B
                                                                                                                                              • SHA256 27eeefdbc28c4562b0f7961dbf8ecc36dc6cdfdb8dba90b92fab4f8d38495733
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              LOG.old
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                              • Size 352B
                                                                                                                                              • SHA256 0dcc81a1a2cc8b467339b1368cbc80bbfe9cc7155cd16e5dfdd7c1b362cb3ddf
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              MANIFEST-000001
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                              • Size 158B
                                                                                                                                              • SHA256 9348d432e06f74d951db7f8e1614fd5c17a944bcfe3da81a90e03707060d50aa
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              BookmarkMergedSurfaceOrdering
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                              • Size 6B
                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              f_000073
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                                                                                                              • Size 162KB
                                                                                                                                              • SHA256 d619ec558f1cd9cb1d95561110befbd5218973bc034773e4e07fbaa1addaf20e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_00007d
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                                                                                                                              • Size 512KB
                                                                                                                                              • SHA256 2ce14807456d9567337ed7cef963905cb0267568af3a4435fcd075005da39eff
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_00007e
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                                                                              • Size 256KB
                                                                                                                                              • SHA256 e3e4268545e49178c95c3ce577f482d929b4d3d2529002d227e1e4a4a4179020
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_000080
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                                                                                              • Size 256KB
                                                                                                                                              • SHA256 69c3df0acfa9b94fad710cd600e6d092b54a3848415a3c7b9d178cf9600c58bf
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_000087
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                                                                                              • Size 29KB
                                                                                                                                              • SHA256 b6d5b7e26f44cf644ebe0ce7f9a291e4230bd3938f9c79834957b022a27667b1
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_00008d
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                                                                                              • Size 32KB
                                                                                                                                              • SHA256 fcf52c143ea58f07cad818d838499d4ddba40c2d71274938fa9020833b77009b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_000099
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                                                                              • Size 25KB
                                                                                                                                              • SHA256 b6e5f56e5c8aff60a1d53f760cd946be0d8c4f8e79d485cb94473956ebe06722
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000a3
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                                                                                              • Size 62KB
                                                                                                                                              • SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000a4
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                                                                                              • Size 68KB
                                                                                                                                              • SHA256 90e39936fa4a20f0fcdafc8ce17bd53e662b5ac7fe4c810b28ed5356b9da6d02
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000a5
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                                                                                              • Size 19KB
                                                                                                                                              • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000a6
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                                                                                                                              • Size 63KB
                                                                                                                                              • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000a8
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                                                                                              • Size 29KB
                                                                                                                                              • SHA256 2f2d5cfcfa90562924e3f961032f165955c49e5ac5ead08755b0f060f54bc213
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000ae
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                                                                                                                              • Size 97KB
                                                                                                                                              • SHA256 c342b1b7f7d19be1429fef29bf3af6d9e8c3e21aba846e082cdee1db8a530c83
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000af
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                                                                                                              • Size 104KB
                                                                                                                                              • SHA256 a4e1e7e6c1021f0f62e6f5878d260e7fd69171a110f92306257f1b01240caccd
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000b0
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                                                                                              • Size 99KB
                                                                                                                                              • SHA256 918c5cbe046c87930d06d4418e1607d9e2a44e6525b1e36ad62a2413cbb7c295
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000b1
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                                                                                              • Size 104KB
                                                                                                                                              • SHA256 2efd8e3c56059b3950afdbf4380633a3bf0c456a44e0e5b1f7a7ade7dcee022b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000b2
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                                                                                                                              • Size 103KB
                                                                                                                                              • SHA256 4c337585ca5ce82f0d354fe0934407c6e927c9f03cff0198a40963a41d02eea7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              f_0000c3
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                                                                                                                              • Size 20KB
                                                                                                                                              • SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 287300f68264e5222e2c03d163ab501b7fe547bc930fb0ab767120cf1adf351a
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 2b3d0f946ec4c849ab72df1d7179d11ca2b968b5f253b0bdf9c30732fe5717e8
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 0db3a8ad5fe27d93ab6c76498af4f5264c01cbe2bb010c909b0ed3a5a22c44dd
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              SiteList-Enterprise.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                              • Size 2B
                                                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              Edge Profile.ico
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                              • Size 70KB
                                                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              HubApps
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                              • Size 106KB
                                                                                                                                              • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              000003.log
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                                                                              • Size 28KB
                                                                                                                                              • SHA256 35e3da06b0c8cfa971b164eb50fdbf72ad3dccd5f2edb80fe921acd3b4b07a01
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              LOG
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                                                                                              • Size 345B
                                                                                                                                              • SHA256 866f88ea98b782383dde079767664edb4faf90688cb1cea0c885cec0c68d2645
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              MANIFEST-000001
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                              • Size 23B
                                                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              70e6ae43-9372-4132-bd23-b5414b4ee91a.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\70e6ae43-9372-4132-bd23-b5414b4ee91a.tmp
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 52141a9e6fb3a040f3f65e0bf0d744b12b7cc29fb20d6b9f1b0d19942feb49a0
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Network Persistent State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                              • Size 12KB
                                                                                                                                              • SHA256 ce1330c7e8dac55481971297ea9f9184e4f578c890c404757f507f7cc894e250
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Network Persistent State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 84a1a322efeef3a86fc63a44eccfcf5395f15c8e0ca149f5be86546217e36148
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              SCT Auditing Pending Reports
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                              • Size 2B
                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              Sdch Dictionaries
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                              • Size 40B
                                                                                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              Sdch Dictionaries
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                              • Size 211B
                                                                                                                                              • SHA256 c6a858f7f117cb5a1ca30e786e67441712074f287144a1676778766483cbdad7
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Sdch Dictionaries
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                              • Size 211B
                                                                                                                                              • SHA256 11ff279ee6e790061d5c61f07f0f17bf7899c51798dbec78e89a6d7c674469f0
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 16KB
                                                                                                                                              • SHA256 d55763d53a30c8900bc4509d6c5bc3afd4a6b32b903b31cf4126c30454b5427e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 18KB
                                                                                                                                              • SHA256 033652d2b13e88096caa5d1dd802e521230f2a6f22fc5365dc1d66e47214aaac
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 14KB
                                                                                                                                              • SHA256 d37884ebcacc9dc65aa75986a5d5c8dc5cf704b0755fb0a9be8967e8623fd7c2
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 19KB
                                                                                                                                              • SHA256 31975d2ac6957071fac4fddbd3f0602e6bf8f27e4edde1c342453f450e645a98
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 20KB
                                                                                                                                              • SHA256 f18145668983fa45010e3caaf8cb01d19d35777faf636a85616e2eeab8228387
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 20KB
                                                                                                                                              • SHA256 f8e9886cf7d01990c3009c143e9baf30bc9c78c924a549f1f0e5db7bfa15fe37
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 21KB
                                                                                                                                              • SHA256 d349e7849e6d569049652fe9bd187fb2d7d0dfbad4b04ffb3a9bec02349009d7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 36KB
                                                                                                                                              • SHA256 4fd1436185f90f491b70b0a1ea6eb66010ee00ae4967ecbb7faac86a4cab82ff
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                              • Size 20KB
                                                                                                                                              • SHA256 eb39e77090b975993984d6297aaeaf6428d7b969672dd4a41590a499ad1a189e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Secure Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                              • Size 27KB
                                                                                                                                              • SHA256 347708f1ec1bb6d4b8ac3cba9db98fbce6312beb9118078a78c9c890a26f9ab5
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\15eba787-09f5-458d-b7ce-873932178893\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 7035fb8519f66c11c2a05043970a3eee88867bf25d6ee777114fceefb104f13b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\15eba787-09f5-458d-b7ce-873932178893\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 6d820077b611aaf800749104234f3adb7b586172c152b7cf44c5eb1e5b3f0fdd
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index~RFe5a12fd.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\15eba787-09f5-458d-b7ce-873932178893\index-dir\the-real-index~RFe5a12fd.TMP
                                                                                                                                              • Size 48B
                                                                                                                                              • SHA256 f15bd0273571fa5ecd5928aa9f81bac622373396e949375186015848240576fd
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              4f2277ea2139c475_0
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7659fab9-0b93-4459-b225-f49e0804bcbb\4f2277ea2139c475_0
                                                                                                                                              • Size 61KB
                                                                                                                                              • SHA256 d4f358d8cbeee132bcc996adfa40d5d44ef2da62a67e90eb96c7828b78bb074d
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7659fab9-0b93-4459-b225-f49e0804bcbb\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 be1e62d6c50c6b74799231d1ea529f0041f5b6490cd8537c61c034b6704aa5eb
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7659fab9-0b93-4459-b225-f49e0804bcbb\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 6aa65f242fd226c3416f69a5a4fe3505f9f8c6a1d664db7bdd57458b9e973462
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              temp-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a871af8b-b609-4793-a5b9-68e715e88401\index-dir\temp-index
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 983757b06ed1da1f3a2958c202e22c0602f6fe9579d86b9f8ecf69e0236b79cd
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a871af8b-b609-4793-a5b9-68e715e88401\index-dir\the-real-index
                                                                                                                                              • Size 360B
                                                                                                                                              • SHA256 2227c8ea6bf1217a487041f8cd9dfeb0d92654b46a7c75e67e566813d036c260
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index~RFe594ada.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a871af8b-b609-4793-a5b9-68e715e88401\index-dir\the-real-index~RFe594ada.TMP
                                                                                                                                              • Size 360B
                                                                                                                                              • SHA256 2a40879fbba09bdcec558065fbb6fb1de667debb4daebdca1d38627a6ed4cde3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              623cd082b6202da0_0
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc67f7ac-abdd-4e85-bef9-28956de22e61\623cd082b6202da0_0
                                                                                                                                              • Size 61KB
                                                                                                                                              • SHA256 63d8d18de5a5cec5b5af8b433f2b529eecf92bb5dd39c6550532c15aa0353464
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc67f7ac-abdd-4e85-bef9-28956de22e61\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 e32fc97d7841d4f7aa128b593213afa7af5c13e01eff82fcf8d1f9c54c014ceb
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc67f7ac-abdd-4e85-bef9-28956de22e61\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 77588de14b84aa0c84f2425577807b5e666170c57d36a76f50c639b2236e6a5b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc67f7ac-abdd-4e85-bef9-28956de22e61\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 2213531b9a020fb0401f859c95b4f2941c46e435c6a9d6d98ba7a632fb237196
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              index.txt
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                              • Size 476B
                                                                                                                                              • SHA256 a217044d927a2939d52f5b21ec2252772f1625fac70d1704dafd647465acf91b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              index.txt
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                              • Size 476B
                                                                                                                                              • SHA256 079b4ec2ab6b57db7e26864c071d46f6cdb7688a50a479742d6d7591a7b8b428
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              index.txt
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                              • Size 481B
                                                                                                                                              • SHA256 a307878f9ecf637e4f89173e14f511dd32be57c046c0959a492156eea45bfece
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 b3b12ef3ea65ea0a852c47b7baaa50e267186d7be61a34c10cc90d8e2140b9a2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index~RFe59a629.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59a629.TMP
                                                                                                                                              • Size 48B
                                                                                                                                              • SHA256 25b5481e8c8b6d108391fcbbd46dd2c632d4013ec2b17b26f6383954fa3f0258
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              sync_diagnostic.log
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                              • Size 4KB
                                                                                                                                              • SHA256 529285ed4e88ee7742fa0a0f69db7d3dcdc7b424df64f3e15e72f193ab6d64b1
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              CURRENT
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                                                                                              • Size 16B
                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              MANIFEST-000001
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                                                                                              • Size 41B
                                                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              228845b5-a276-42d7-858f-923e0910e6f4.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\228845b5-a276-42d7-858f-923e0910e6f4.tmp
                                                                                                                                              • Size 22KB
                                                                                                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                              • Size 35KB
                                                                                                                                              • SHA256 cd1d886e3deab0a71549c1b2e2daad50cc88147833c463b0add2808faff8db98
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                              • Size 41KB
                                                                                                                                              • SHA256 ffb89d835eee4a6718b9df023707a97eb4a7509f74f82bea308c883f3e9df007
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                              • Size 43KB
                                                                                                                                              • SHA256 19e9f84b0dafc62c2d66ce3c86a697ccfaec74800ab19d42f77013d7471deffc
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                              • Size 43KB
                                                                                                                                              • SHA256 a1b79fff73234bdd95ac7e3d1aee4b3cbc8b185ce6bbd97be03189eff6d54996
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                              • Size 35KB
                                                                                                                                              • SHA256 59b43f798e8dfe8efb8acab3ee6b4ae29171a7994ba2d109e8f6983ec2451844
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                              • Size 43KB
                                                                                                                                              • SHA256 8155113891bad3f91464c6343259591675edd6a81623975e0c764c0ef3c0f0bf
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                              • Size 38KB
                                                                                                                                              • SHA256 3eec8e5d03887506ffab1e6518c86f2bfdc952f864c6230c444dd6c577428dba
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 97a45451bf7eaf4ea05285e1a19bde380b0d81b2029156bf26631fb4cfbac877
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 9075f0b64cfc8d279e5a10ff38fa0c33a04f3e760f9f4ea91ddb967c50eff6d5
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 f16ff48542a498bea16d61bb841a94e60badc8294ab0d85ea5d716562172cd9d
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 71a9cd4a7f0e525dc316dafa6cb551ad197e3e0e0305975c060c847ce91181e8
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 a5bb1417609c1f1db32542ddb5a76d247d809379ced8b0f699d54462c071caaf
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 dbc36ceee0272a086b27c3ac7dfc3b98c4ecf1295a8e733b665353537d360f19
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 b1cedbc802b0dbf1a85251fa794a4e42455bf00fe3d19d9e38ca940c9af6acf1
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              RevisitationBloomfilter~RFe599178.TMP
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe599178.TMP
                                                                                                                                              • Size 392B
                                                                                                                                              • SHA256 e41b2648f329c938a5a09dff2f368c0ca994f828d2c8c22a9c79301c05ed2e39
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              852d8c0b-8bef-4f7b-adfa-2f171024d3c5.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\852d8c0b-8bef-4f7b-adfa-2f171024d3c5.tmp
                                                                                                                                              • Size 13B
                                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              107.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-3FIE4ZEB32.tmp\107.png
                                                                                                                                              • Size 47KB
                                                                                                                                              • SHA256 0c430e56d69435d8ab31cbb5916a73a47d11ef65b37d289ee7d11130adf25856
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              108.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-3FIE4ZEB32.tmp\108.png
                                                                                                                                              • Size 42KB
                                                                                                                                              • SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              109.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-3FIE4ZEB32.tmp\109.png
                                                                                                                                              • Size 152KB
                                                                                                                                              • SHA256 2f116cdef55e05549d6f06913afe39a91b715b188e110188c7fbf7f5eb69b318
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              uTorrent.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-3FIE4ZEB32.tmp\uTorrent.exe
                                                                                                                                              • Size 3.7MB
                                                                                                                                              • SHA256 e2837e13d80e4602b0c2d711c6d6c17217f4a80c8ff0b33dd90df219f025f3b7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              utorrent_installer.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-8BR4AS6VYF.tmp\utorrent_installer.tmp
                                                                                                                                              • Size 4.2MB
                                                                                                                                              • SHA256 7531f248ce4ad03ace1bcfdfc347e4a4d9e5a07a4f6e49e565454b8e115f3262
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              INetC.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsd8DC.tmp\INetC.dll
                                                                                                                                              • Size 24KB
                                                                                                                                              • SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              System.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsd8DC.tmp\System.dll
                                                                                                                                              • Size 12KB
                                                                                                                                              • SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              nsisFirewall.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsd8DC.tmp\nsisFirewall.dll
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              utorrent.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nsd8DC.tmp\utorrent.exe
                                                                                                                                              • Size 3.5MB
                                                                                                                                              • SHA256 285127f8530fcdb0166cf37c97e60a13ecff7d57d3f0066e7cec0e89188e9ae2
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              1f91d2d17ea675d4c2c3192e241743f9_3eef7d10-9ff3-4fca-ab45-d6a1db3059d2
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2132828192-1552876075-2324613956-1000\1f91d2d17ea675d4c2c3192e241743f9_3eef7d10-9ff3-4fca-ab45-d6a1db3059d2
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 97528a335b129123e2c752dd566c44403be9d6f9c448a853e6945bb738a7f40c
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              settings.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\uTorrent\settings.dat
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 8aca7a8fd0e6285d808f6ac99a6f89d87b4a02eb75124259e0dda26da620b207
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              settings.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\uTorrent\settings.dat
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 d1340595456813e61006cdce71952f55654592a0cccf8aef6ac79c81327d0e8f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              helper.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\utorrent\helper\helper.exe
                                                                                                                                              • Size 8.5MB
                                                                                                                                              • SHA256 26f431428fc725af9c71fffd0eaed4ea1895329af8181d275d37ccb3457076f1
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              helper_web_ui.btinstall
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\utorrent\helper_web_ui.btinstall
                                                                                                                                              • Size 7.4MB
                                                                                                                                              • SHA256 4325244a7c1b300cd6006c6d4d8ee6335c4b04284b3677748de614d6acfae86d
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              resume.dat.new
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\utorrent\resume.dat.new
                                                                                                                                              • Size 77B
                                                                                                                                              • SHA256 8fa6b2a084c07a34d258341278a3a3aed01a35671deb796b9054640979afef87
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              utorrentie.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\utorrent\updates\3.6.0_47254\utorrentie.exe
                                                                                                                                              • Size 692KB
                                                                                                                                              • SHA256 1a23079b7a9d7aa8f77a2f957ed02486c925699587b177a07b56868e1d18e6e2
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              utorrent_installer.exe.crdownload
                                                                                                                                              • Path C:\Users\Admin\Downloads\utorrent_installer.exe.crdownload
                                                                                                                                              • Size 2.1MB
                                                                                                                                              • SHA256 9e1bf3ef69b1555c5a847ae06916e2b287c389be2da801c5d00e3d282128f7d5
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              memory/1212-1395-0x0000000000BF0000-0x000000000102F000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1212-1409-0x0000000004360000-0x00000000044A0000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1212-1399-0x0000000004360000-0x00000000044A0000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1212-1423-0x0000000000BF0000-0x000000000102F000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1212-1404-0x0000000004360000-0x00000000044A0000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1212-1538-0x0000000000BF0000-0x000000000102F000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3107-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3111-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3112-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3113-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3114-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3115-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3116-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1720-3105-0x0000019B451B0000-0x0000019B451B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2164-1461-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2164-1500-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2901-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2806-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3417-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3493-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-1537-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3293-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-4086-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3530-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3187-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3579-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3607-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3088-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3036-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3659-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3661-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2688-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2666-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2832-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-4032-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2626-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3699-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3431-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-4019-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2560-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3795-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2461-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3811-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-1945-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3848-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2033-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-2373-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3898-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3900-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3993-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2872-3923-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3572-1580-0x0000000000400000-0x0000000000D17000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4636-1151-0x0000000000780000-0x0000000000865000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4636-1394-0x0000000000780000-0x0000000000865000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4636-1539-0x0000000000780000-0x0000000000865000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4916-2795-0x00007FF8D9F70000-0x00007FF8D9F71000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4916-2794-0x00007FF8DBDC0000-0x00007FF8DBDC1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5876-2093-0x0000027B80BE0000-0x0000027B80C0A000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5876-1667-0x00007FF8D9F40000-0x00007FF8D9F41000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6376-1690-0x00007FF8D9F40000-0x00007FF8D9F41000-memory.dmp
                                                                                                                                              Download