7b39f9f9dff4ad05a22ac6cabec732d6ebe788ec809a4a53b0ab526d21b53f71

Analysis

user interaction
yes
max time kernel
68s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
utorrent_installer.exe
Size 2.1MB
Sample260815-ttpzmadr2t
SHA256 7b39f9f9dff4ad05a22ac6cabec732d6ebe788ec809a4a53b0ab526d21b53f71
MD5 519b6589817c710c65e8673868d4d9dd
SHA1 20ebffbbb473fb7874a24717da965f40b74b3d70
SHA512 a2a814d38b301eee873139c07dbb8ae8426a56851e907e77832900a924e91b100193dbc500d31f029956e28ae26a17be0a9b9b03bc32748c3ee4f8961c4ef35a
SSDEEP 24576:xXNrSLScusMmOvjjhzvLJyURyHxA1VeQ/+g0Fi4ETLRXuFU6zj8GXYL5GfrIwiC5:KuI2h8HW1l+g0Fi4cRXMsm4MfrIpCqq
TLSH
T19AA5CF3BB28B753EE06A5A3A7A76D210583F7E6165124C06D6E4D88CCF350B01E3E797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery installer persistence upx

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 3 IoCs

pid	Process
1880	utorrent_installer.tmp
2516	uTorrent.exe
2436	utorrent.exe

Identifies Wine through registry keys 2 TTPs 2 IoCs

Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Software\WOW6432Node\Wine	utorrent.exe
Key opened	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Wine	utorrent.exe

Loads dropped DLL 5 IoCs

pid	Process
2516	uTorrent.exe
2516	uTorrent.exe
2516	uTorrent.exe
2516	uTorrent.exe
2516	uTorrent.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Windows\CurrentVersion\Run\ut = "C:\\Users\\Admin\\AppData\\Roaming\\uTorrent\\uTorrent.exe /MINIMIZED"	utorrent.exe

Checks for any installed AV software in registry 1 TTPs 9 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast	utorrent_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast	utorrent_installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\SOFTWARE\AVAST Software\Avast	utorrent_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast	utorrent_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir	utorrent_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast	utorrent_installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\SOFTWARE\Avast Software\Avast	utorrent_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir	utorrent_installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\SOFTWARE\AVG\AV\Dir	utorrent_installer.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

UPX packed file 11 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x000d00000001c55a-74.dat	upx
behavioral2/memory/2436-78-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/2436-103-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/2436-104-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/2436-107-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/2436-108-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/2068-186-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/2068-198-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/1288-617-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/1288-619-0x0000000000400000-0x0000000000D17000-memory.dmp	upx
behavioral2/memory/1288-957-0x0000000000400000-0x0000000000D17000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3920	1880	WerFault.exe	90
5420	1880	WerFault.exe	90

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DllHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utorrent_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utorrent_installer.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	uTorrent.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utorrent.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4468	msedge.exe
6828	msedge.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/6076-0-0x0000000000C70000-0x0000000000D55000-memory.dmp	innosetup
behavioral2/memory/6076-17-0x0000000000C70000-0x0000000000D55000-memory.dmp	innosetup
behavioral2/memory/6076-653-0x0000000000C70000-0x0000000000D55000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	utorrent_installer.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	utorrent_installer.tmp

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent-app	utorrent.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btapp\ = "uTorrent"	utorrent.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent-key\Extension = ".btkey"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.torrent\Content Type = "application/x-bittorrent"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\uTorrent\Content Type	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\uTorrent\shell\open	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\ = "Magnet URI"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\shell\open\command	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\uTorrent\\uTorrent.exe\" \"%1\" /SHELLASSOC"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btinstall\Content Type = "application/x-bittorrent-appinst"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btsearch\OpenWithProgids	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\FalconBetaAccount	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\uTorrent\DefaultIcon	utorrent.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent\Extension = ".torrent"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent\Extension = ".torrent"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent\shell\open	utorrent.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent-app\Extension = ".btapp"	utorrent.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent-appinst	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\uTorrent\shell\open\command	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btsearch\Content Type = "application/x-bittorrentsearchdescription+xml"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Roaming\\uTorrent\\maindoc.ico"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent-app\Extension = ".btapp"	utorrent.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent-appinst\Extension = ".btinstall"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Applications\uTorrent.exe\shell\open\command	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription+xml	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\shell\ = "open"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent\DefaultIcon	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Roaming\\uTorrent\\maindoc.ico"	utorrent.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent-app	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btsearch\OpenWithProgids\uTorrent	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\uTorrent\Content Type\ = "application/x-bittorrent"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Applications\uTorrent.exe\shell\open	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btapp\Content Type = "application/x-bittorrent-app"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\uTorrent\shell\ = "open"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\uTorrent\\uTorrent.exe\" \"%1\" /SHELLASSOC"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent\shell\open\command	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btinstall	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent-appinst	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btkey	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\uTorrent\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\uTorrent\\uTorrent.exe\" \"%1\" /SHELLASSOC"	utorrent.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription+xml	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\DefaultIcon	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent-skin	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btinstall\ = "uTorrent"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent-key\Extension = ".btkey"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.torrent\OpenWithProgids\uTorrent	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btsearch\ = "uTorrent"	utorrent.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription+xml\Extension = ".btsearch"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent\URL Protocol	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btkey\ = "uTorrent"	utorrent.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-bittorrent-key	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription+xml\Extension = ".btsearch"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\URL Protocol	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Magnet\shell\open	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\bittorrent\ = "bittorrent URI"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.btskin	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent-skin\Extension = ".btskin"	utorrent.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\MIME\Database\Content Type\application/x-bittorrent-appinst\Extension = ".btinstall"	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Applications\uTorrent.exe\shell	utorrent.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\.torrent	utorrent.exe

Script User-Agent 3 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	4	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	5	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	6	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp
1880	utorrent_installer.tmp

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeManageVolumePrivilege	2436	utorrent.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1880	utorrent_installer.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 6076 wrote to memory of 1880	6076	utorrent_installer.exe	90
PID 1880 wrote to memory of 2516	1880	utorrent_installer.tmp	91
PID 2516 wrote to memory of 2436	2516	uTorrent.exe	93

C:\Users\Admin\AppData\Local\Temp\utorrent_installer.exe
"C:\Users\Admin\AppData\Local\Temp\utorrent_installer.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:6076
- C:\Users\Admin\AppData\Local\Temp\is-PNS9E79GS1.tmp\utorrent_installer.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-PNS9E79GS1.tmp\utorrent_installer.tmp" /SL5="$400AA,902674,878080,C:\Users\Admin\AppData\Local\Temp\utorrent_installer.exe"
  2⤵
  - Executes dropped EXE
  - Checks for any installed AV software in registry
  - System Location Discovery: System Language Discovery
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1880
- - C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\uTorrent.exe
    "C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\uTorrent.exe" /S /FORCEINSTALL 1110010101111110
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:2516
  - - C:\Users\Admin\AppData\Local\Temp\nsdBCFE.tmp\utorrent.exe
      "C:\Users\Admin\AppData\Local\Temp\nsdBCFE.tmp\utorrent.exe" /S /FORCEINSTALL 1110010101111110
      4⤵
      Executes dropped EXE
      Identifies Wine through registry keys
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious use of AdjustPrivilegeToken
      PID:2436
- - C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\component0_extract\saBSI.exe
    "C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\component0_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB InstallID=GnjW1deoX8j0YpGjcV5z7FBohrZykzbOB9oDFkpmhVtvYZ4v1xNecVM4IXXKnq2jNYwKExGrsoK7LYmvUCE
    3⤵
    PID:5512
  - - C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
      "C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe" /install /affid 91082 PaidDistribution=true InstallID=GnjW1deoX8j0YpGjcV5z7FBohrZykzbOB9oDFkpmhVtvYZ4v1xNecVM4IXXKnq2jNYwKExGrsoK7LYmvUCE saBsiVersion=4.1.1.865 CountryCode=GB /no_self_update
      4⤵
      PID:6472
    - - C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
        
        "C:\ProgramData\McAfee\WebAdvisor\saBSI\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
        5⤵
        
        PID:6328
      - C:\Program Files\McAfee\Temp2906705809\installer.exe
        
        "C:\Program Files\McAfee\Temp2906705809\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
        6⤵
        
        PID:5976
- - C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
    "C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe"
    3⤵
    PID:1288
  - - C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_1288_05D84CD8_883055525 µTorrent4823DF041B09 uTorrent ce unp
      4⤵
      PID:5380
  - - C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_1288_01074128_2030629475 µTorrent4823DF041B09 uTorrent ce unp
      4⤵
      PID:1252
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1252.2616.11005835145773689317 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        5⤵
        
        PID:5004
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffe69395fd8,0x7ffe69395fe4,0x7ffe69395ff0
        6⤵
        
        PID:3664
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1752 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:2 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        6⤵
        
        PID:972
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2064 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:3 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        6⤵
        
        PID:2096
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2392 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        6⤵
        
        PID:1312
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3456 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
        6⤵
        
        PID:1920
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3752 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
        6⤵
        
        PID:5144
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3500 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
        6⤵
        
        PID:2352
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4768 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
        6⤵
        
        PID:3760
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4904 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /prefetch:8 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        6⤵
        
        PID:4672
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4916 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
        6⤵
        
        PID:5832
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4908 --field-trial-handle=1756,i,4733620637267574158,12779295173489745997,262144 --enable-features=MojoIpcz --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec /prefetch:1
        6⤵
        
        PID:3520
  - - C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_1288_05D950C0_911371429 µTorrent4823DF041B09 uTorrent ce unp
      4⤵
      PID:5528
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5528.5832.8313816418941099860 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        5⤵
        
        PID:568
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1cc,0x7ffe69395fd8,0x7ffe69395fe4,0x7ffe69395ff0
        6⤵
        
        PID:5316
  - - C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_1288_05D9D5E8_725401917 µTorrent4823DF041B09 uTorrent ce unp
      4⤵
      PID:4756
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4756.1916.13470409045918307001 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        5⤵
        
        PID:2584
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffe69395fd8,0x7ffe69395fe4,0x7ffe69395ff0
        6⤵
        
        PID:2924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://utorrent.com/prodnews?v=3%2e6%2e0%2e1%2e47254&pv=0.0.0.0.0
      4⤵
      PID:2564
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x320,0x7ffe68f7c188,0x7ffe68f7c194,0x7ffe68f7c1a0
        5⤵
        
        PID:4528
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,14367308500112739507,11370208248104202518,524288 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:4468
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,12029806300780012414,8054146710153156676,262144 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
        5⤵
        
        PID:3884
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,17496014522098146209,8471808967925047808,524288 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:13
        5⤵
        
        PID:864
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,874353561982128078,11480434210960069472,2097152 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
        5⤵
        
        PID:2444
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,5464822701976614120,8046519764156838955,2097152 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
        5⤵
        
        PID:4268
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,10688793837221461614,7789134583200080917,2097152 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:1
        5⤵
        
        PID:1876
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,12162262645374913041,6217005699626207123,2097152 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:9
        5⤵
        
        PID:3064
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,10952003542682479448,3922736128723909881,524288 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
        5⤵
        
        PID:6184
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,10028982300674489682,4231390113158033155,524288 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
        5⤵
        
        PID:6404
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,14404940098508815365,14504194275297103496,524288 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
        5⤵
        
        PID:6412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5756,i,5103916334792898483,2819061028479699395,2097152 --field-trial-handle=2468,i,8532150469558969408,12071717473655249316,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:1
        5⤵
        
        PID:6420
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        
        PID:6348
  - - C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_1288_05D950C0_845346037 µTorrent4823DF041B09 uTorrent ce unp
      4⤵
      PID:3564
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=3564.2044.3229983806336022090 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        5⤵
        
        PID:3284
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x9c,0x198,0x7ffe69395fd8,0x7ffe69395fe4,0x7ffe69395ff0
        6⤵
        
        PID:5372
  - - C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47254\utorrentie.exe" uTorrent_1288_05DA9EE8_1635667887 µTorrent4823DF041B09 uTorrent ce unp
      4⤵
      PID:952
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=952.5936.9765078879395964479 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec
        5⤵
        
        PID:5164
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 /pfhostedapp:efd94085da125003555392817ca6e6f791c85eec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffe69395fd8,0x7ffe69395fe4,0x7ffe69395ff0
        6⤵
        
        PID:6384
  - - C:\Users\Admin\AppData\Roaming\uTorrent\helper\helper.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent\helper\helper.exe" 2710 --hval ba8dQAtuv4oPs4A3 -- -pid 1288 -version 47254
      4⤵
      PID:6460
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1880 -s 2060
    3⤵
    - Program crash
    PID:3920
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1880 -s 1064
    3⤵
    - Program crash
    PID:5420

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
1⤵
- System Location Discovery: System Language Discovery
PID:5432

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5928

C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
"C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
1⤵
PID:2068

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1880 -ip 1880
1⤵
PID:2704

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 1880 -ip 1880
1⤵
PID:7108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x32c,0x7ffe68f7c188,0x7ffe68f7c194,0x7ffe68f7c1a0
  2⤵
  PID:6316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,16869727355795754181,13170884880839060500,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,13394722220566318677,8968913382216859415,262144 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:6840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,3232565181694445673,15505699003116693671,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:13
  2⤵
  PID:6696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,15143731521958783162,1426494220963431660,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:14
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,10535212096630842186,3658330137584244555,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,10535212096630842186,3658330137584244555,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,3593815309141174124,14425061482000204224,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:14
  2⤵
  PID:6780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,9580393244139428085,1957384696513545088,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:14
  2⤵
  PID:6912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1236,i,13435509886801285739,12770017081608731674,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=1240 /prefetch:14
  2⤵
  PID:6184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1380,i,4605616813377293629,18446554029818531367,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=1344 /prefetch:14
  2⤵
  PID:6528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1388,i,8394402983418615878,12880629104954505269,524288 --field-trial-handle=2340,i,15382058966589453139,11348798160553522239,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
  2⤵
  PID:6388

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6768

C:\Program Files\McAfee\WebAdvisor\servicehost.exe
"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
1⤵
PID:4452

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe
"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
1⤵
PID:1408
- C:\Program Files\McAfee\WebAdvisor\UIHost.exe
  "C:\Program Files\McAfee\WebAdvisor\UIHost.exe"
  2⤵
  PID:7128
- C:\Program Files\McAfee\WebAdvisor\updater.exe
  "C:\Program Files\McAfee\WebAdvisor\updater.exe"
  2⤵
  PID:2024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

dataConfig.cab

Path C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab
Size 80KB
SHA256 df6264cea287986b7a56e39b2d061d25a3f46002749fcc662d0f9bf391ce5516
MD5 cb58593f57800f970cfa678d01853667
SHA1 ab4346486fa4794c1cf03fa146656ead956043fd
SHA512 cca4b023794dc2d6cc887e5caec8a15ff3a0dca23b15077b6b1bdaf3f82dddcc65dc72cf5b47f03d4fafd9725772f95cae6f5e4027b52f5015a5eb2a4172e094
SSDEEP 1536:8B0JuV337mAFFZdF4BDVYRc6ASUIVsuES5pbzkP5MQ/pzio6XaEuFaU:8B0YbbHWyC6Ao15pbz2pzioyaEu4U
TLSH
T1178301D54F48512B6F42DE5831C02E374DB96B429CB8C4B2F4AEC32CA7153856FCAA5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt
Size 1KB
SHA256 19199e6e915d72cc47149d525cca26a2806ce6f774ed6f29bd968b109bace10f
MD5 e4ef355605fca04efd5a19d5bc9cc190
SHA1 e7b3ef8fcefe06a450d135666202bffc96005d31
SHA512 1a9652b1b247a1f0bf6c25c4b9b8e4eeb112175cd682246eff8671edc395976e22fdad835e010a97ab7ffefe3cc16d80be0eaca9e321fa41d18a3a219800a161
TLSH
T13031D2A3338B655E7013C272F2E0C3B432B1E0B4276E2DB5962C0978C258F7471ABE80
MD5 SHA1 SHA512 TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
Size 508B
SHA256 180cdd261294c683f1eb2a63ec77f570c57eece03e4f6e2f3eef0e2d45e68503
MD5 2e835bddd03dd57c3d6e570c6cc4bbb8
SHA1 a71b3d812ce83061c7fd5a5a687fca6601f93a6f
SHA512 14c2c7e03d9536ebf92ddf73cf95d9416ebc7839c54c140301c0b4d2a8b8acf6995ff6b8b94807579600d584651eee0ca2210206f4c339cb0949f6c0a71bf374
TLSH
T1F7F0E24A79BE0B7EB5C0CC71DAD1487816210730ACFBAF64B8FC5291851A6ECE0257E0
MD5 SHA1 SHA512 TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
Size 3KB
SHA256 9aa6477bb6114e75034adc2da570671b84c2f219193473813a71136dc43b147f
MD5 494a6491d9d73313719c9cdf6d38c4af
SHA1 ba83a4b4f667c2d2fb24b6be954ac712fa3820ad
SHA512 4a01920f956cd3e769b6266c3ad0b20721caa4f9c7a48d8f33c9add0c618f5a4b5edd69867b2f913171f7ee36f93b283f68bba4cefb7b9f07a39390ae3fde520
TLSH
T19E61F74A799E0B7EB5C0CC71EAD1487C26214730ACFBAF64B8FC529081566ECE5367E4
MD5 SHA1 SHA512 TLSH

Submit Download

log_00200057003F001D0006.txt

Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
Size 4KB
SHA256 77e5759c0de233303541a392269a954f387e9d33a2e8fa9f4c80fd4a8cc0a8c6
MD5 937baac2db8a499af8619a67d5f75618
SHA1 67b8693bdc95a60dd10c12e9adf5d401f8dc4ab2
SHA512 b0e294dec3c0269337cbdb992e3d2a0f703febbed8fec68373a24fc6a3130fd65b96cfb4740b59e8efbe989ca38b6a73b4d80f4715b862a03cb055374dcda7da
SSDEEP 24:wFHSFvFsV+gXFKFmSFFV78SFNFLXFwVw/0YF+FbFJV7RXFLFtFs2zVh/uF3SF8FR:sxFjGXL
TLSH
T10391184A799E0B7EB5D0CC71EAD1487C26610730ACFBAF64B8FC51D081566ECE42A7E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer.exe

Path C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
Size 34.2MB
SHA256 3fcd471148d3e4b34cd1ef1f5481f9b6b704f872eadf265261a20fe88d3b95de
MD5 6a6b0adcb16f1f4142ae732b28e6b36b
SHA1 38957d358fc3b87080dcbfd5e0557656bd8d8e0e
SHA512 cb14034a73b0f9fef2b3267eae4d6f8d423cd0ad28eaeb4624d0921672cf61852bfd079a78bed7ff8960242d4e4345b357d94853b6010b7719a2d6122bbc8365
SSDEEP 786432:+1dGRsEHx7j1YA4oOkOQp3IQca67adB5Zi+KvOVunrn:tsEHZjRxOkKLT7Y58LUIrn
TLSH
T15E77332FB0A5C6EBC4198C357E58520DD770FC3A12928FCFB69452AB6E77BC119A5E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

saBSI.exe

Path C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
Size 1.5MB
SHA256 5ec42b168f2541dbb413d6f87aa5569470a2b0c6c574c3e655242461a4524763
MD5 7a1b6316d5d64a740b847d8261ea3e83
SHA1 e130deed179693218679e09f0eef6fb33c369146
SHA512 355f190eb5c83b14ea7ca19c901ff9124962a25f78ff03f1bc9f09387751f8def203e47f017ac0bd295c70ace8efbdc5f193d92d67207329aa1db4dbd0cc7183
SSDEEP 24576:8Vxe28BXUGuG2bjI+O5IRumwloSRB0nPUa6xDuC4d+bk+2miTwX/yQw01:8Vxeyk+tWoS/0PUa6xDv40bk+BiTwXF5
TLSH
T142757C133283C031EC6211B08969DFAB86ADB4345B6148DB67D06E6ED8F22D15E35B7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f5fb1e6826fe90964941ac14c5514f46c2287fab75074e5e2e017c4809cc2313
MD5 4a22ff5c83745a7ec40780afb79f7b0e
SHA1 5214f36f3237088609279272381ce7e174895f81
SHA512 68069e5f26ac375f685f967e33d5a297751bc0c7916d2110571844986f1a992b69be4926d0ce9d29fdf90598b8774473e961c8c441dd51667946059978ba8e4d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 dcaf631c73beea7a3e05e52965da1224057012bcd916b7dab31c5bb0b7f7735d
MD5 df9d36b4d2d800c1315bf0d5964ff80a
SHA1 24598c10d3e2d345c1fd7d5633f2cbaec47f27d8
SHA512 c77eac7abc2d090bb2dbae14d9d2506b02ecd8ad5c628b547e08940f66f12b5bcc72afe7bba51c4ec68a8116ad6cf00833fd534b8985bc3786ac12b9ee15bd8b
TLSH
T187D0121276110234C0202033420262883D01C90B42168005582C855D2E0486C4D42452
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 dbde99c9c16445be78c1171d7524b9770fc54632f298d709d8326653ecd43834
MD5 d9ba54b0b3fd45e6be7b581cd439670f
SHA1 d88d3fad962b2f32be6349a81175de0160ba8158
SHA512 d59f4c097e72d75cb8b87a606583c36292de5678768b39be78373389367efd0ffbe5b3bf3fde3dbf9eb34d3b300000332ef7221914ae9b4c3e1d51368d5bcb74
TLSH
T188D02B6222290631C2203133C281E2C87901C91F020784041F39F95C1E408F90CC1842
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

f_000013

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000013
Size 92KB
SHA256 b98bd7bf22bd59d586418d2cb8068ebd0298b9ab5571300091cd4987be0673e5
MD5 8d95f4bbc3326f309ab33b70126a534f
SHA1 729a0d05ea1fb579374b73f544ec816bf053165f
SHA512 c0169ceb21bb31e34737906c3e2f5a69d103730e7f033577bd8e3bfe907b69394ae969843c81d02932cc837a8961ac36cab79ec4ea50f118986fd0aa4c9f7854
SSDEEP 1536:rhqmjJN0a4bc/vje8cDW2h4wenvo6ZHjO2MNnGepNrJmEsQAd7bygqAfXgqc:l75J/aRsnwaHjO258rgBQAyCwqc
TLSH
T1489312B7E567F715A2EB6CAE9C30765ECC16050600C04DE851C35E64AC2E2F3E996EBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000014
Size 52KB
SHA256 f90a5c882376b0a7d361b0ba46d80bf8fe180e16c9e9d47ba1bdc326b2f7d9d3
MD5 44a7fdaf4f1332946ac7703c2022601f
SHA1 381f5745b2a5660a4c6659f1f755456b03c45482
SHA512 b75b76512cb1f33ac3b62c1015feb381872799b39f79ed754531ef27a0c01ff308006478b874a702e995a5ef3cc5cffa7bf4737ef05659b41cd43dd8b474679a
SSDEEP 1536:hOCoZBK1lsOxM7fv0DKUVj+slo9IfCwkH6zKS8:hbo8lsOxAfUKe74wkH6y
TLSH
T18333021A7CCC6CF71867F5E71B8932259567002C4CF7623A67B906F4796AEACE463300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000015
Size 16KB
SHA256 b7a5fc7ee10aa7f5434e737c7d53e4b5460c9871d12b8ed3c22a8b7fd31314b1
MD5 e9165d97b67737c665566c864a176a88
SHA1 1fd8916ff059ac5ecdb480817244aa182e7d89f6
SHA512 a3a233c61f04a76b501ce2b63ca8d222f38d5942b88a789138b57829a9beceb80e359ce38bd92062bde51d3dbcf295ee0ac21e4ca6c713da551688d7d549f2d9
SSDEEP 384:wDfRheOh8Yu/rp2CZMQpIgayWkL7KYpjrcJWG5Vycsvu:wDfa68f2AMQpI69L7KAj48Ghs2
TLSH
T11472D0160C1CCC92ADD299029B469A95C7DD74978EF77FCD98582A34422F8BDCEE20C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000016
Size 16KB
SHA256 d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
MD5 49295de6ccd23cf80b6418a2d209868f
SHA1 42a955b4560bb22cb9b5b39577f7a691ea345018
SHA512 2954ab185fd84a08933bb6e79d91e301021fce4e632b477e765c172cacf72913561e101ed2f7e66bfbdc5946b35f2b63eb2b6f878e0afc9d26ffe71ee112a1c0
SSDEEP 384:ptsKvz/u5wCI/0oMp5nh+b3fa4WKpZ5peChZBmNKduP:o6z/u5PhpNsb35Z5peCo
TLSH
T18472D17262FD7B51988958EE9F4F6ABFCDE14D753A5B942027E5010CA4470393FE0439
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000017
Size 279KB
SHA256 2848d1bb53ce2261a0fdd5a87f19f57cc08659efd4e665f16c84cb45caa5d88c
MD5 a6a87d11e1a885cfc71eb48bc8f41695
SHA1 2e3d9d30c152c532e73f318ce8f2f7ed22b99676
SHA512 3fdc72a77c66713d50baf4c23e4c7c229d14bbd94126ce7b7bb02ffbf3d4b0278bfa0ecaf04ea17011fdba83df4476cdd8e4a0a142366622eae47f101900f752
SSDEEP 6144:z6nO9wSCmKjRvpilXfnAipUq/FrAJdX6H2ftz/Dd:z6nOBC7xOfn5t+rX6Hyd
TLSH
T19554227DDB89DC232D1C20502E909BDC97BC32F86B0C669C96EA56DE4BEE8D1590CC74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_00001e
Size 31KB
SHA256 04077e091c791e096ed3f8ce8b2c81240d465a47b35ab00678a9493a7ae13942
MD5 b50964603a8d057f2aff5abe332b3278
SHA1 1dcbf2bad108beb16a591976148631e09b16b96e
SHA512 c353ae72b7ddd6fafe9907513f1b95c6d1085745f433d19d8a5c09286b8a9d8d810c0bcbd34ecfacde7343b159a3b694ca40dcb7724fba214d204a5b446c7b59
SSDEEP 768:W7vyx6dfNe4daPeYy/Vrb40w0AnCwpTo8GtMCYOqcTkKWHYf:Wj06S92kPloLm1OhTWS
TLSH
T17FE2F1DA1FA979DD8012AD73C0D83A05139DDCD667B1F8414E2773896661CABA30F83A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_00001f
Size 107KB
SHA256 8a635d3cb6a947179d1421661f0b84d3ea2a3599decc80845129839a79dec237
MD5 62a541969d09d23dc86b39fd3318fbde
SHA1 3a4b75a9b351db8a3cd92bcf3ced43652f338065
SHA512 736d239bb133530d342f5446a792701af6053073eb41d9063a64af6b92c4e51ef8efe77885001e5b696197f8336b7badea67fc7c84c132d9c80e9048155c8d2c
SSDEEP 3072:0ZAqHcDiJF4WpXYTsxzX8XcJpa/YiAXis:0yq2E4WOSX8s2MB
TLSH
T123B31262F1D98077D84887664BC600ACC87ADB3DE6D5BC2EDB726EF26239F976140D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a20f9cc52645918_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\3a20f9cc52645918_0
Size 537KB
SHA256 251b082f92a9b7390b760192c0d0d1ffa026d6a53e43a2cd005eba3401b1fbbf
MD5 9f8d9cf57904d722832773690d937dd5
SHA1 2209d9cf56d5757a8e3dd2b3de0604ce5380fc17
SHA512 05c6c5500499dfff57ad9e5ffd0cce1b19ee9a417a503825285cc1132e7c9f0b5a994e8266aa595ac204a59cc1fa7e958fc2f001e3c83defbeabfd2f8c43334e
SSDEEP 6144:FIureYnCNrIAMDT1AME6hp2slOLKItwtPFTIGiaMDgOcunkWKl2U5:yureYnqrIAKrrrvItwtOPlgZuZJ
TLSH
T1D5C42B618305BF2BDE6D06B2CB67412E7178E6C4AE8BC35717A18739840EAC5DF50B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40a80277da7e7924_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\40a80277da7e7924_0
Size 340B
SHA256 786182d90fbab1090b36ac3dc2c7536d62cc3b19cc5f65d4105b2886b6b2c8e5
MD5 e192bfd896a3814226a3f16a93e2ba4c
SHA1 9cf3ab379626f5f65125d4b2a514411ff0fdb007
SHA512 e001b47b78a2915a432ca5c81fff78ba84d4fec0a90cd599b37aec7649bafd01576ee42fef8103fa639094d094798f42c4c246cc0768ec64906c3762087f5b6c
TLSH
T1FDE0266754302885D03E5770DFF6666BC2DB909A097CC1E88471A8DB5CCC6245E507AD
MD5 SHA1 SHA512 TLSH

Submit Download

5239ed7ba4f1f312_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\5239ed7ba4f1f312_0
Size 217KB
SHA256 e51a9c95dc4aa7594da492508d3d647e28ca7c66f4f9b838900ec5aee2ea3c19
MD5 e4f629acf5698316719d772604b38222
SHA1 646ba7e3ab1afa93c094d87d7025372a776e452c
SHA512 9fd12086e6a3d4d31d950462c97801d6b7905b4e3ea3de3b9f698064ac45e5f09c0b5a70541067d1b98a537ffe121d55b094b4f43ccf5a261fa79507253e48ec
SSDEEP 6144:Uxps0hxHFZ82KcJZS6y81pjKx7tBdkb/nfEJ+LvSq3guqbQes3q/TFJLLpweyZ/O:L0hxHFZ82KcJZS6y81pjKx7tBdkb/nfs
TLSH
T1DB246936AF742B33C8AAA73ACDD7C41472FC130BAF87264B6349F41950463297F66646
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e0e7bb595243cc4_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\5e0e7bb595243cc4_0
Size 316B
SHA256 a0f42e72f629793fdb5057c5bb1738e2817f1174a84dbda0575c8c2456e84126
MD5 5c1c9ad038bc3eb68e34adc2b3784645
SHA1 8c963ea0c3d32cfb2dabd6ddcfd40b3a786ece89
SHA512 f1d3c847ed83feeb3cb083aa6dcd54198b127285b487201f94eb3dbbbd0563728d1dc489352024cfad718e4fea80742614526d064f11535158085150aa6693fd
TLSH
T12CE07D5B5423340EC15844F4DFF6E10482D3D5714C9E875140029517A8675625A4C3CC
MD5 SHA1 SHA512 TLSH

Submit Download

7bc069e0d59c2e0d_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\7bc069e0d59c2e0d_0
Size 49KB
SHA256 a793034910b2f110eee653abe65090da6343d9d1a674a24b8a64bad14dde8ba2
MD5 8e8daf91cceaa82eb213954bf09c3e1c
SHA1 e4eab05e205752fdeeadac99e22a8c48bde4ec1b
SHA512 1929076aa8812734b1e0a348380ffb44ac1905d2c57b1ec642da1fb847d6064aa12419c68795b1d489c4b76de5d287d4b42529189695b3c9acfefd7d7a33b100
SSDEEP 768:/zWS48m+fX6TjlYozYQB5FZYeqQDClQFfwCKb+2Vx4yOq1Si6s0rBdrXjZFga7:rWS/6Tj7YaZPDCe49xJOKb6sop8a
TLSH
T1E2333B51C704FF63D93D12B247934427B738A9846846470B07785E36AC8BAAD9EADF0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7dfa28adb3a65a1d_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\7dfa28adb3a65a1d_0
Size 17KB
SHA256 5049e82e46c5aa5956774b2485f408550994bc1bc52e7c7e367419ba4cf7f31a
MD5 3e47410b8ee5ad9d2e42a616402bde54
SHA1 eda29b387b52cfb691cb63461d1c3bc72b617859
SHA512 d86cc2bcf12d67754e6436bc017d6b2eea8e4aab4d41a459edaf6d779fa011ea20412527496b700af79a9695e9ce32e5415743a1674b9a79e925d5d8127c8d58
SSDEEP 384:/8J3J4Qv8n/rR/ayTGt/5ByNAWgx1CFFxjE6McrKrLX:/yZ44ildKbIaR1CFFNrwLX
TLSH
T181820956E742BFA4DE3910B2CB6B95737638A3847D0F43230B751325942E8C7DE46A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

801b20b785ddf47d_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\801b20b785ddf47d_0
Size 265B
SHA256 d327ddc8a68dc05d4e60a707292abb4e31d92f93d230ddcb37ac5441098825c0
MD5 373f641890cd7977eafba44f03add126
SHA1 fe91c95d45dc10a2dbc0a0110db781576da59332
SHA512 9bd5738b9390ebb2c4131d4817ffe08c2890c5ea1d3199b7013345d3a59c5eee63ba3a2adcb2bcc25c493632ef54300a29b1a8caa792742cb69b2feecb399feb
TLSH
T1B1D0972F18303848DD1AA8F9C7AEF285420373620C6EC268844B64EB3878DF3D23090D
MD5 SHA1 SHA512 TLSH

Submit Download

8f8479d2ec448c20_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\8f8479d2ec448c20_0
Size 5KB
SHA256 e152740078638f378a72610aae8e8a7e04e14923e216dd5f5646274501a854d7
MD5 7f6658cd78ff3b37ed47bb29d63c2f68
SHA1 c4f51fd4a79c8259424f54e095c38b2048acddf9
SHA512 9b7921d8c115f3633757ccee4b5b25338d9fef90cf90050b84c84c949c6892a84bfbb2e8c488aec5f7056406ed6c67705f4bf5a416b21ee2599ed7ea1ebc1212
SSDEEP 96:VdATbVi7VAvdw4Gemns6hMDcBibOv9LjcpdCwAX+1qR5d8UzWSCt:IPcVAJ8xMAiU9/czh1qp9zWbt
TLSH
T14FC1F9C1C308BF56DF191AB3DEA340191936F9D5DD4FC1269A32532B8C49175DE0AB4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99f206ce9bda261a_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\99f206ce9bda261a_0
Size 268B
SHA256 d2082a50c20cdda3676799cd87aa70e57963f29d9690e8f290d5a75c86f086fc
MD5 8c4e297a91ad67be1b41c1014ee91e96
SHA1 01cfde620e2acadc85a8326398bb8ae0a25cab0e
SHA512 ec12b7eca0e675ba0307a8b09842322249e5b84f2c832f60d5fab154db845708f3758aa0dfe74860dd19d79ba4746b21b0caf956fa378bab7a81c6ef5538ee10
TLSH
T171D0957BC0113C2DC635FEF187FA7918971571A00C35D2561002942F7EB5C72951844D
MD5 SHA1 SHA512 TLSH

Submit Download

f08adf9985c1d08c_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\f08adf9985c1d08c_0
Size 8KB
SHA256 6254ae208c86611c316c6b80e7bfa149aa393cf0959133d5da5300195aab80ab
MD5 b9cc4b41fdd607ec440c1e3fa9665934
SHA1 45e27abda76b9a24b0f4716ca7c07691fa2a398a
SHA512 739c3b9ce8a5067c02721708de365c6549e68786cec2707a535e7665d1ca42b87dd6dc59a4d8eb2f9f3c03b757f20cc887e65eadf34fabfc56c3e2d0d882773c
SSDEEP 192:mtbA3FDtfmbs9RtuAhiObtNOUszbtwuWAw3UpJ:mk7H9RtuRObtImt7kpJ
TLSH
T18602B651DB01FFA0DD6914B2CB6384366734C3C09A4B533F4BB8833A9C168D9DE84A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 a312b8ec2abf2e57edeb9f6bd982ad3595f8ed1d5ac08479424dc87affef718c
MD5 4cd86141817af79bd19d20ef63033501
SHA1 affa9f80942e686940b3dee7adce4a6471cca225
SHA512 e85c7040316cc4f53d102a8388abcd71a237588c6f29715c5812e353bc63ce304a2cb9939c6534f285fe281e24dbc99ac6b987a5f5af9559c50b3f18807b644d
TLSH
T1CD313DD7857EE4A724794C6F0F557C0519BFA8350281ACF8EB61C17CF098DB78613465
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 59aee970dd06a5b39d194e4dcc3c4a00975d3c079314ac2632c2553a916ac18c
MD5 28218201b8173b624e201cc90caa2c63
SHA1 23e5e6b423349b7468bc141d8229e44b075390c7
SHA512 4fd77c2e1305a9f22f0f3566c0b05db9116f34c50e3072e9a875192973a2c55cea87b02f5e18da45e1d5a08b5390e3a51a26a5f7519e0384a12787ad26c4ceb2
TLSH
T1B4315DD7867EE4A724794C6F0F557C0519BFA8350281ACF8EB61C07CF0989B74613465
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 f51dcfc1884dfdb90674d47d0245bf42b35f22463bc7d214303515663290e8cc
MD5 470ef091fb2fe31943b1e85b7cf40c32
SHA1 b88ad1c73b899cf8adb8179ef0d0e260cddf8847
SHA512 cf9d564812be1cffd97e2e49e351d1caab6d28b9c03b193e2fa895b91b7fe14f4abf1f2d8867065f0c207403f047264f1fc500ba3cbe09a18f46ad0ab3e7a83d
TLSH
T1B9315DD7857EE4A724394C6F0F557C0519BFA8350281ACF8EB61C17CF098DB79613465
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5b2056.TMP

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity~RFe5b2056.TMP
Size 1KB
SHA256 b90501d5dd88a75e45777ca8c48ca92342110196d7e5e6b877166ac395eb16be
MD5 25505e0fc44c74c941f2dae915afe271
SHA1 98d637758779d26181de5eb0149f79f63e02a37f
SHA512 8ca9b2e5271ee60d4888ad931712118a5f9be848394e6e65d23ed3d52bfec8f2d4e9d485114f137c666b404662d0b7a076a4b252f5a2ebf42c7cd0cc30b00f2f
TLSH
T1F8316CD7863EE4A724794C6F0E557806197FA8350281ACF8EB62C07CB0D89B78613425
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 f59f11a3a925c406f9dd32013bc30e4c53460a3d037cda6f81b415b3e9980fdd
MD5 b4c7319facae5cff762de26caf2d5b2b
SHA1 b0dd9fc00fa011b2cdfec0b585d1c4d36bb2dd72
SHA512 06b98f6974e2132abf69a9583b8d7de8a244d5b909e85381b34595ba5d8fa9dd7840d125bb83f4ca882877044c728ff4962e76661daab5a3de425586c0c641e3
SSDEEP 192:stqgzFoOxjxqksV+F/brxZ7dIBSbW7A2jSWRxG6K:stqgz5sGHYi2FK
TLSH
T136E1C7026D64B97B4CC6F109BA38F757E3FA513264D11E48EBFD862C04D66DC620781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 2dfffda0c3219a975c2d848cc0be7e0f34f50d48f79eb2a3136b15636cf66943
MD5 dfd07553a6f0ebf56f90453f24d39a16
SHA1 aad91b76ea4bcfc1d1d070648a2919b6696c18e7
SHA512 65df8fdb8414f8ff404baf3af5583fd37e3195c09a33a0a8c8654d2e42eac21a9ad342108ab33810742f013f0c2190d703de17ef69d2526f3785671df3383aa0
SSDEEP 192:stqvzioOxjx8ksV+F/brxZ7dIBSbWzx4jSW5xG6K:stqvz2sGHYb4BK
TLSH
T1A5E1C7426D64BD7B4CC6F019BA35B756F3F9602264D11E88EBFD8A2C05DA6DC630380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 75e110f056c61817ce8bd16b838cd45621a5fdca91ccc69e278662ca3d00d8c5
MD5 f9c7ed1fe6fa6c3cc34686cefb4ce371
SHA1 d6e25e7a037b2be3233489c893eb072aec076fb1
SHA512 7598528b23e862bd9377228d74d5303c90befd7ee20f79c17f7559842d2c2d543f4053fb0aa224d1aeb292085da07b633ced8441afdf8bb91698fdbbfbbfca03
SSDEEP 192:stqvzioOxjxKksV+F/brxZ7dIBSbWGsmjSWmxG6K:stqvzUsGHYjmiK
TLSH
T117E1D8426E64BD7B4CC6F019BA38B756E3F5512224D11E88EBFD8A2C05DA6DC630380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5b02fa.TMP

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences~RFe5b02fa.TMP
Size 6KB
SHA256 6b51038ed9318654965b2be1b53079f930f4d5ed753d3f9f95d09616710ed47e
MD5 9047045a3048f9d7a7306c3182021f8a
SHA1 2f3a6ecd5e39baef460abe0588dcc552325d045a
SHA512 9cb8242bd2421ac143587211d6c26f85557e4a2a5c59f9f950a291b90daccbcf4ff11dd9bc63f6b2785243f4fa1870ad5052095cc234c69726659f4631a656ba
SSDEEP 192:stqozgoHxnksV+F1dIBSbWLg2jSWfVG6K:stqozasGC62vK
TLSH
T10FD1C7025E64B97B4CC6F109BA39BB47E3F5602264D51E48EBF8462C04D76DC630781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
Size 2KB
SHA256 a9cb81d94524524669ea165aed4f0e2384656621ca0f88ea5736ba2db678fb2a
MD5 047a158dafcba6dc41d1c3bfc973f26e
SHA1 25f1fdcff3bbd8425904ec77e90304c6b728a3a4
SHA512 53f16f6e905ffd293a7d00f0132de3e732edcc0dc6629a1de52841458c60e50d5e70028dbc21a1364a5bb3651813b7a535f1abeea3616c8a9117f1f4f1ddee8a
TLSH
T1F05177B3BC24AB7789E35609794E3B53DB3952669A922F5099DC0B1C01E76DC1303C77
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
Size 3KB
SHA256 c79a01b8620839a8d50e5e8cdf7fbca4a45ce37d7a920717a9415385e7b212a7
MD5 0fae33f825a9fefe3831b2e18af13db4
SHA1 c17be3279121b591a232e0a025a7f87626bf0ab3
SHA512 03b9eea11593662139ebd17a0781a7d1d386fbd5e67577da7f051af5a0c61121f65d72a797b3fd1bec28ead69126e8bcf942d16d2af027cea63e9c3d0dc708f3
TLSH
T1D8618477A974AA774DE39A09B88A3706B7655127E5C13F95C9EC0F1C02E72C81342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
Size 15KB
SHA256 013a7ed30e6d016f791e5b81a76e20ea753d01f6dd4180e07661b77d198aa757
MD5 2279bbc568bdc7216eba22f5b7d9128c
SHA1 3d183b4fb334c63c745d803d3805b030d0343f5c
SHA512 7e2a52a57ca412a1465495bbad6e1d30aeb1d8f94102f1503a71b77a898d443f8e71da9d379f8a36a8d6c11720c9e747bef2bf8391779aaf1f12a82987408614
SSDEEP 384:N+aQikB+z/xvxjg/qhEwNAWGKnfh5AVdpXT9zm:Y/UxvxjgC+a55UjFm
TLSH
T11A72AE2B98797E27A5F3FA05795D178BDBB884B290C16EA84EED4F0D06C73D41302C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
Size 15KB
SHA256 baff676d17168e83f869b0e3351426f24f8fc6c78ccced1a4d492b7d665f816e
MD5 e73621aae7e6108fda8075a4b0149c5f
SHA1 c91a59dfc8377c715bb2abf01e146e896d0b57e4
SHA512 55d4a20b365d7b9c23b336ce58682bebe2684e181245b372d55eeb5f18e4ae304be43ce770435a0b1aadc01c9156daf1b3294d06e6109f984da1dcf3cad612c8
SSDEEP 384:/+aQikB+z/xvxjg/qhEJNyWG+8Jh5AVdpXT9zm:O/UxvxjgC+8n5UjFm
TLSH
T1C1729E2B99797E37A5F3F605795D178BCBB884B290C16EA84EE94F0D06C73D41302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
Size 3KB
SHA256 161587c16daafbf44cd69239700a6a73668620c067831b0d81a585abaa3961dc
MD5 099ca4146a1c4819f637af12c80cf3bb
SHA1 3910bb7528d128785273fc4e29841559a1ef7091
SHA512 291385c34ae48d3acf2454fd520a03fd692a825be660c200cec127e1928c7ea3f2180207e9a569e38535590222bc7711fcb8c14a34e25668f5beef7868aa7366
TLSH
T187618377A974AA378DE39A09B88A3706B7655127E5823F95C9EC0F1C02E73C81342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
Size 3KB
SHA256 36d91cba061777aca270e2489194018f721f30cc915ebf3dd6916049b88a1eef
MD5 00f1061844624ad2359981678213649b
SHA1 9bcf5f61112c24d6917a118669e971fdf4eaeb84
SHA512 68d1d82caab2fe730af355bc7f9896fdecfac534e3f047b761d0d8d7e79d3245b06edc857f8591248f34383e0fb0123a53dfb7187217809887b94bf341e21417
TLSH
T1A2718566A974AA774DF3D609B84A3B13B7655127D5C17F99C9EC0F0C02D72C81342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5ab1cd.TMP

Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State~RFe5ab1cd.TMP
Size 1KB
SHA256 8262f2d3cc4766bb7725d9e9edc27fd160bafd232d7436020127412e4d3c2c60
MD5 ea29fc0affcbae36eae79df2ab144d71
SHA1 b2c9599855cd8ddfbb73954df2bd931686cf2f2c
SHA512 2b99d586c21c7ecc75254bb28351c798ae696daacd8a70c11c3ad728e0adf40e45cbbcef8cbbb4b104ce73e549b902925fa5287f2a351a5025081d09c21e8d2c
TLSH
T1792165F2E8745B73ACC2624A71477787AF21116B82824F44A5DD471C02B65CC5627D32
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b73d1269710263f89147c3df740b27dd3688500b4f89702088f2f5c5d7dc1204
MD5 5c816483e5559cb5228e88d336becbe3
SHA1 7a17ded2bda3b923dc276750c1681ea347208c58
SHA512 45993b5f4012d33839ff4c5800d7c41ae9d6bfbec17aa5a850cb8d67f6d95968858d1a5575b3f7dfcde33c9d1c510d3ee911797754f16af36423dca1441372ca
TLSH
T1C1D023703AA5F995D644213596900310A1555D736967530E6200D41DDE3D1C357DF4EF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1a35fcf0b052fbe4ff3c251c9c88823c7178b9d113f40be25c3e4fcb7dcec7f2
MD5 aff4482fbcfa07b0c217b0510b16eb7e
SHA1 20544e8b8cbb2e1591b03d2df9abed9f7b80b71e
SHA512 df0ac7f8227c4bb64a9751e03fb0a891bd1bab297f869bea0d9e44ea6483582a0b8adcdaaf7ded8de81045a5ef7578263324f583736c2f342f224f637b8f022c
TLSH
T164510A41036E18C6CB6497B953E117DAFAF078490D7B7F0148A1EC70F093F69A1E15A3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 9a5f3fff78ef7b5e9ef83dbfe0275f04b091c389d3d0a6de32b67816098a5ae4
MD5 78994190d8a5e2216478001d74760d0c
SHA1 b42fb6d9b037442e32c387590082fe2c3b4383bf
SHA512 23b89686aa9f345b26c2666edf60aa4800a6bcf0078504e327f3a42b5e7cbc4e2a331b45d7aed57f8d2ed070f22e5375c3d528ac30ac04b9598a68df99eda577
TLSH
T114E086E444CAC62ED85C79E382B9730C97D139D7A6887952278E8880E105645F7D7384
MD5 SHA1 SHA512 TLSH

Submit Download

346c0f4e-cf93-4959-9861-323338b7578f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\346c0f4e-cf93-4959-9861-323338b7578f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 968B
SHA256 8bd15ff7da74cbf2af56e0bacdccf644d05ff8f1fc15fb05f5314e022a224059
MD5 013fea9dc244b0a7e6f75a07f45cd756
SHA1 a11b1a23fbc1de94ff1348ba8aff2a33dbb394af
SHA512 ed096abe4a51d88d032ee050aca7d233fd1fa85499a51bd547925f7cb8e2ffec9b4dcf4b96222236d95a41670133b2887fb44ab6e158b8aebf9de3eaa07f4882
TLSH
T1F911BDF387B4C82E9D1196F0A6185E2BCF6D0621532C7C6AC5E0AE2793E3470E101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1018B
SHA256 72a0834e07ae6f5728081f66e3b949cd7aea1e929a660cb817e2ac4f0f451456
MD5 3fbc0a2afcd20dd9a8f37eec8548cac3
SHA1 572bc3329a41b537600d76653ef5d8d40addcac9
SHA512 01692bfea95d2e2ff3f84a2fd23cc38e19bdfb59083674e7cb1d907179144cd9e5404a9aeeae18dbdcf27e48d8ba81f60f13b61975aa44e1e6923382a8039330
TLSH
T19711C2F387B4982D9E1156F066185E2BCE7D0521531C7C6AC5E4BF2793E3070E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d7e1fe8fe86cd992cb0b458f7bac283e740bb840cf46f6f43eab20b6156bf002
MD5 3601eaa1b13fd72d1d1ae85ffc07813d
SHA1 09493902ad4337bb736ae53bf5b6fa8967ecc84e
SHA512 313b74b7c81568cfb0f163c9f178da00ab155fc7436b716011bbc553e8ef07e3a5caa21f2c1b2f513210c07fad6ffee1ecba288b4f1e28b5cd04396e4b000bbc
SSDEEP 192:sxR6RPYCM/fKsLWpVTXDZEczoA8pi/g6+WNIYorZYmXGG9IgV9J:sxR6dfM/fKsLWvTXtGi/5IFZHhp
TLSH
T19042C7156D28A93B8CC7D21DFB5ABF53D3F91032A1D16E48AAFC8A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ec88ac8d0f81d2ca547b5c01a3d0648f6265f648c0cc9c56eea6c10b68864018
MD5 d1fa6af421ef0e0126948984a0276c4a
SHA1 a87f20e22edcadd46b38144c3793fdd6d0d9c4cb
SHA512 e330b595838c2cb0f4bbb929ec575e6a165aac8217f81d7fcf0841b96428c267516209e68624a9d1dfb4de873dc29133cb1e53771833050be1e95d9085d6df04
SSDEEP 192:sxR6RPYCM/fKs4cWpVT1TwGtzoA8pi/g6+WNIYorCYmrgG9IgVVJ:sxR6dfM/fKshWvT1Tpgi/5I+ZNh9
TLSH
T16642A6156928A93B8CC7E21DFB65BF53D2F91033A1D52A48A6FC861C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fd552b730a500bf1de1626ad9462f4feae6025e563a9bad319eb89e62c269502
MD5 fc2a1f81a86272d39f23474b74890694
SHA1 a5b7f125a28d0f4ea0f4a4b45baa4e704be42506
SHA512 531e7603ef468c65caf619e651e50212461d1dfda8fc88a751ed0572a6572c125c551b257820c8aed4cab0425fd213dd1fe07ad6a7af645402b20d5ea71a4963
SSDEEP 192:sxRFRPYCM/fKsuWpVTXDZEczoA8pi/g6+WNIYorZYmXGG9IgV9J:sxRFdfM/fKsuWvTXtGi/5IFZHhp
TLSH
T1ED42C8156D28A93B8CC7E21DFB5ABF53D3F91032A1D16E48AAFC8A1C00E76DD120741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3761ba8515463e054585eba84d9a1d6e3abcb4fb82599de633bcefe63ce41be3
MD5 eec40b69153804f244f30de11972b629
SHA1 048265ba75423d230886c8bae2d8a10ab0d73757
SHA512 409e0d04bfaf2746e5581760a39a866c42ee15d98f2243876cecd5282071a01f164b79e9290d2b35c4b5853b439fe90ba49fc141db7028a8a8806415dd580264
SSDEEP 192:sxRFRPYCM/fKsuWpVTpfDZEczoA8pi/g6+WNIYoWTZYmXGG9Igv9J:sxRFdfM/fKsuWvTpftGi/5IsZHhf
TLSH
T15842B7156D28A93B9CC7E61DFB56BF53D3F91032A4D16E48AAFC8A1C00E76DD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ec1dc897b0ad786f2c0cc148b7c758db5803719323f43dce1f89a54f7113c55f
MD5 5d3de7899e5f46723e23795ce3f9796e
SHA1 76de51147f58a62ef15b8299171f1f7aded4af75
SHA512 fe7ae3e5b2e3646ace43332445d3983f85475b17c2b1dbf13c5a493d68c98f3db61bd71d288267310e6041249dabff14954763de252e9d7aa4297321196a2ab2
SSDEEP 768:j26HDo7pLuL7MRWgs2f028F1+UoAYDCx9Tuqh0VfUC9xbog/OVjVuwvro9kte0UP:j26HDUE7MRWgs2f02u1jaI4w8OW7
TLSH
T120C2CA7B640CCABF4F800ADDDD197E9F6D6802CB9698CD8047FE951C02C6BEE511A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 04153865dca8bb71871510002600b0cc708190378cd6a653f3c89c9247dc2516
MD5 4d1087864adf325a639f3776bb0a7bed
SHA1 2a4434084a6e27647c2a2f31ba560b6cf80be4a9
SHA512 85f18420b66b906a8b7bd9a6aeda9226ceb2cba782f8fbdf53dbf9981abdc0e50bb9ece4bd6e1b5b6ec492122e1cdba496fa62fcc802e7baa1c8e7c96098bf54
TLSH
T1B8E0269049CBC17EAEB9224307BAA30883F67D67D6C8BD923F84CC847542508B3A7290
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 f04463e1c6f514cae5967e296ebc92d55290ff94c233d4490fe724b0110354c6
MD5 fac5c005d03816f4a370f60e046450b3
SHA1 5c703c58dd7d853fd4bd7d9e4c34ed5e40954b0d
SHA512 82e4c740ba922d2617dff85e653e29d4309271a4f53bb8ccf1cc90cd8aeb6b5948fe423e47d8c31d8b0b88b1cc50411667efc60a256d9289a02269a0b009092d
TLSH
T1B8E0D87055CBC76FAA9921875368F30CC2A37953D6CA7AB13F0994806306180B347290
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 b68afec2aa54446e324ddc9eecf12dbc0c7371e86e80d084c52f9f276c5c2659
MD5 84824a8dc70221f2d5be2d7d0608e3b6
SHA1 39ffd025f11553b4ceffaca41d55a504898abc6f
SHA512 519afa66696224fccaa4bbd2ebe662f51699daa5a94f90f284a01dfe6fa592b3686eb8383b887669319c4c9671cda203fc97c0d86fdcb9ea6724bc4e505d4ffb
TLSH
T11DE026F085CBC67A9D5861D343A8B70D83F1BD5793C83AC36B087440A642101B3AB2D0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c135ddcbebfe13ab3da36729bb49db22c4e45b2ac1e17f45e5b8e7ac8ce5cc90
MD5 cbf3b359935252f90eefdab6da8d9d72
SHA1 e8890e36314f8243779dc9c7fada8fe974450de3
SHA512 cc775d7f0a024e8c59766f57a098c55dfde5af87e4ffbee3ce024721745abc17f504013475c2db48ba06a1b548fc16a61d9a4e7aa9eea8a6789ff1e46a06e7af
SSDEEP 96:KRFSr/VPTXW2r7gooK4tgaocII7aglHPMPNP4PcPWPaPOP8WPqPnPngP2OP22K4T:CFSr/VPTm2rEostgaHII7aglHU1gkeCA
TLSH
T190A1B9A1747B02453C7FB95884A98D1A43C178B3315DAC7B7BA901661F6BE028EFD8CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 be977a16e4c01bdb642f4f055c0dd79442d0fb72098331af515f4eb61df2bdca
MD5 03b1863659ebfe66e52063ae5089bb7b
SHA1 635770de08efb85b5ce44726cd24e923359d1c2b
SHA512 377b9aeef831d6bebcf53c80a0572a49a4972d050443f6a02cb2123b6718c93dc36deada7ca462eda3ff333f35c2a8ed6dcf7fbd0641506af235986282f6edc7
TLSH
T124210055F330C149E15A863A607F5B361738E8168FBCEC0F84BA20346EB6B040E8B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 67300dadde862a3705371556a71cdf1b3d528a106e97e201d7ab5ca089749189
MD5 83c227f5ac156f6881d7d7198a8b264b
SHA1 f0ad45a9c13c28e6ecc020f33c5fc456b46f4c9f
SHA512 4979770621c042b707f9564a883f3ce8f4a42e920917d7d7b987138e2203b6fdfc252ba9ddebf9f7428583eb948e75f7c95814709d92c1c19f204837bff16b2c
TLSH
T145E02050E4C7C67FD568248302B8B348D3D23D57EA843F856F04CC48714114177CF651
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 ffb77afbe8a5c94334806f74f99f9d8eed66af134a5a8914d26da0dd1e94313a
MD5 2d14896ab797c9843df4bae2fceff6ee
SHA1 b696d2e39a6374cc184e0d777c3a2a91c5cbbfa5
SHA512 bcd3636fdb246a10e731011696e2edeffac4c39a0bd7f16b99e16bf90d17bc631e3337b21756ac99ac2316998546277ea17f0cd83e8ce196f2b62a4b6b21ef0d
SSDEEP 768:qrv+4UNbdx3W/6nM/TBOWt3lfONXyer1IRCzni9cvMbGAY:qbsb/3WCMNfSIqnNveGAY
TLSH
T12C138C3CEC589E3F8CADB386710E76132EB8513BC5A406A0DBD91B4D817689DF30B956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 efba2bc73b4c37148f5c07b29dd12773ae1903746a2e7810568b99efa2e06e34
MD5 36719b63b273cbd7f9ccfccfe1a26881
SHA1 18d100a016a3a95e8f2a2a7f9c5b24284216b3a0
SHA512 3c711c635fc5cfde28dc4ab556a0a8745f5eae920b95d8599ed7d2c98305ffb3f0e79e1f2eeae3235c884c4bb363d5628ee9c8e246fbfe1a0c4663dea854d423
SSDEEP 384:nUZcI638NMI6pKOKU0uhf3RTpXOVc3dXDLXltDGrYGgAN8SyrCZr1IR0VhMxAREx:S63j+M/TBOWt3llONXyer1IRCzniejXM
TLSH
T115E2AF31E4A5DE278CE5E3C2B5067753AFF8A117D6C81B90ADED6F0D029756E030B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 39f89f4511c2e3f9772122ecb6c218573e2fc8ee803cebc77b245ef3634a0dd1
MD5 777a3a02aed18490a876b4955740b3da
SHA1 7c5ddfd98911ef899ff4f9b206109724f0c5c6d9
SHA512 2379f7276729c2410f1511d5e3ce76c8a1da4264da0bdd06ce9bf5f384c5dd63033b2c35c5e361cfb00ad36bd0c535e8f3812632f0fd8f7357350e428643c655
SSDEEP 384:ntZcI638NM56pKOKU0uhf3RTpXOVc3dXDLXltDGrYGgAN8SyrCZr1IR0VhMxAREx:163W+M/TBOWt3llONXyer1IRCzniejXM
TLSH
T1A6E2AF31E495DE278CE5E3C2B5067753AFF8A117D6C81B50ADED6F0D029756E030B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 9da228866f3fc55d6fbcbbbb5b3fa07b2c7b491fc0166772ce819d47f81e6df1
MD5 8d53f6cceab116ba3c6f2784c103a580
SHA1 ed8506c3d9482e01f0db9b2f3ead93cfd34d6a16
SHA512 29cdc04c02e8183b83be0b5ca4881e15cadeff86689f66ee1e5808dd12201bf39bd7c41d5a4e8c82147fbfdaccd63b7fadd4bdd51abb548e23e0e89c3a2aa3da
SSDEEP 768:9rv+4UNbdz3N+/TBOWt3lfONXyer1IRCzniwjeVH1SK7:9bsbV3ANfSIqnnEH1l
TLSH
T10E03BE31E1A9DE334DE6A395B14773837FB8206B89800B90EDDA1F4E069759E230F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 eec08accaf549fa2cfc18e028f0d9c7b04e0eff01e86085f09a715ff732485d3
MD5 7bf56b898a0d709c90183101afe470ea
SHA1 60e98f40fc65e9dc8a223590e98377ad242c796d
SHA512 fab3ef4a01ef735063d000f31a250457b9e0d06cc65cbcdf9ae0de798bea6c6b253d2c4d9bf9a8c9c4e623bfa43aecd553ba7d02f485e77331bbb668fe7aa7bd
SSDEEP 768:hrv+4UNbdz3nb/TBOWtqONXyer1IRCzniBPeVH1SK7:hbsbV3biSIqnsEH1l
TLSH
T12803BF32E4A89E338CE2A3C5B14776437FB86057D6800B90DDDE2F4E069B59E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7d5acd06d6a282e0d2b464be22bce1eb55b3e341187cd5f7182cde2b7debb62e
MD5 615b2c014121b90e63da08c5e2c60f7b
SHA1 7487c42b6e2856be1a82c2f475e2ac359ebe92e4
SHA512 eb23a4f2de35f212aa89878d9424ad233e479197add1fd63e1bcf1e4cc685bc632d9c7cd5ec6dd0928b93b81fd3edd87e1201dd7694d83f5c8cb905819a53e86
SSDEEP 3:MsEllllkEthXllkl2zEflhTRKX:/M/xT02zeI
TLSH
T1824404447FC00C1DD5101031C053C3707374D4100513574734D14433DDC75400C10014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

b6b2be99-ff71-4e0b-a6c4-721f29878987.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b6b2be99-ff71-4e0b-a6c4-721f29878987.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

921fd505-53ad-4ea4-b5fa-094a3f2a1a87.tmp

Path C:\Users\Admin\AppData\Local\Temp\921fd505-53ad-4ea4-b5fa-094a3f2a1a87.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

ed895ded-3ae5-4d30-be3a-f9067cc098b5.tmp

Path C:\Users\Admin\AppData\Local\Temp\ed895ded-3ae5-4d30-be3a-f9067cc098b5.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utorrent_installer.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-PNS9E79GS1.tmp\utorrent_installer.tmp
Size 4.2MB
SHA256 bc475d8c7bb2aab62adc06f7be24c7856d72ad80fe4a5c5b8c3996e9d03b2107
MD5 a20301eaf78ef3a073ae0f5520bd7e5c
SHA1 957cb563679f455aef1615517220909e930f8cf0
SHA512 67590ca2b14fc3c9dd10b89fb37ec40b7b5790be26efeb0c5992e2aeebf6f3124be4d0dd873c108fe68cac9b7086dd20930aea2acaec07849e5a676ca10372c5
SSDEEP 98304:DYU5hnuOajWwMPdCpepI3GrwrA+JI333Y:dxuHjWfZIzZ
TLSH
T1CA168F03B388753EE4671A3A583FA284983F7E213A26CD4B6BF40D5C8F395416D2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

107.png

Path C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\107.png
Size 47KB
SHA256 0c430e56d69435d8ab31cbb5916a73a47d11ef65b37d289ee7d11130adf25856
MD5 4cfff8dc30d353cd3d215fd3a5dbac24
SHA1 0f4f73f0dddc75f3506e026ef53c45c6fafbc87e
SHA512 9d616f19c2496be6e89b855c41befc0235e3ce949d2b2ae7719c823f10be7fe0809bddfd93e28735b36271083dd802ae349b3ab7b60179b269d4a18c6cef4139
SSDEEP 768:RtwR1Dy4rQznr1GYfvLn6froelhVNSyCPtSOeVlTTqYueg:zwR1DybhPwhvSyClSOk/geg
TLSH
T18623F1618E36D41ED38BE69B1F1D9824277AF197F59C1673866879230C039ADCC1DCAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

108.png

Path C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\108.png
Size 42KB
SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
MD5 faff96fb8080a98bd1def3c4f9cce9c1
SHA1 466c66dfaed49d93dd7d8a1e42919a4f03613efa
SHA512 ad87ccc0bcb0115d5e7255935c5bd2b5eeb85b75f46206987d85f0f5e04afce054b0b3cee3d7577039db6ddbff1f0fdfdca657b7877376e4f97c80c5ed7514b7
SSDEEP 768:53E5YnNz2SLHvDYgWfGHV8L77Yy/oksC+x8+RfWpzrdYnsi2anUpMQb3HGJ2:536Ynl2SLrYHAWHDgEqCSskn0nqA
TLSH
T11613F1B8B8DE416DDDDED6B8FCE66FF564816437CC84D1EA800CB028518E784366636B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

109.png

Path C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\109.png
Size 152KB
SHA256 2f116cdef55e05549d6f06913afe39a91b715b188e110188c7fbf7f5eb69b318
MD5 4e2421d76f1b0c5627f732d4e945a023
SHA1 89e3de5bcbfe50c18f17b5ee731dd24213f1812d
SHA512 13c97b5ec52344b605d1b9658dbe15ca05841fdb786f2e06ab52a4f80ca6398adfa7c0dda304ec343ab733df85d9a9da29012ac21d96e680a19ecbbfeb0b9001
SSDEEP 3072:zkL8PqE1l4NJoxLiog7R+1tNx+ZEaLbplAfkFO/lb95N:zFowWo7tv8bpyp9j
TLSH
T138E3121A702324BAB44EF4D6F1DB65C2EC22AAFD214D10A7D79A5C7428C0B66FC5D2C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

component0.zip

Path C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\component0.zip
Size 515KB
SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
MD5 f68008b70822bd28c82d13a289deb418
SHA1 06abbe109ba6dfd4153d76cd65bfffae129c41d8
SHA512 fa482942e32e14011ae3c6762c638ccb0a0e8ec0055d2327c3acc381dddf1400de79e4e9321a39a418800d072e59c36b94b13b7eb62751d3aec990fb38ce9253
SSDEEP 12288:ib5kasT/hWZEu58IbccPqwozk/2rYJb69+J2W:M5kzT/hWZjfbccPOzk/aIb3J2W
TLSH
T1C8B4237E2323A734A201E7A425373B520A1E63C6733C15EB7EC1AB927D3053D76A456B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

saBSI.exe

Path C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\component0_extract\saBSI.exe
Size 1.1MB
SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
MD5 143255618462a577de27286a272584e1
SHA1 efc032a6822bc57bcd0c9662a6a062be45f11acb
SHA512 c0a084d5c0b645e6a6479b234fa73c405f56310119dd7c8b061334544c47622fdd5139db9781b339bb3d3e17ac59fddb7d7860834ecfe8aad6d2ae8c869e1cb9
SSDEEP 24576:WF66IUpqM/XAl0drYaL6NFEXXN6abiklqOYadJ0CbmpV4CsCa0wDisO4qG:k/M0drYaIaXXOAqOYadJ0Cbmrhq0wTb5
TLSH
T1D2458D317586C031E1A211B219F9EBA585ADB8359F7244CBB7C05F2ED930AD25E36F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uTorrent.exe

Path C:\Users\Admin\AppData\Local\Temp\is-UK0PR3XL99.tmp\uTorrent.exe
Size 3.7MB
SHA256 e2837e13d80e4602b0c2d711c6d6c17217f4a80c8ff0b33dd90df219f025f3b7
MD5 7b1bcf79461ed67aa315a4e156dc83f7
SHA1 d15d84e371af61b2497d0f825167d8d19caa9ea6
SHA512 3857a4642a0e5911d46a96ee66309fc414997b347500dd90e8a88f8c578de615849d24ce02080cb30633ec822e2ec2e0503ea86819ba05d3a9ef795cb43c21f4
SSDEEP 98304:yg3iGC5mAyFoVCVMZUkPk0XdC/eBWLhR4qdGcQi:ywi95jooCM+gC2B6hR4/O
TLSH
T145063361E664FC6AE57885F5008B53CE9C63BC07F26C2BB387A1363B7B312415A94F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INetC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdBCFE.tmp\INetC.dll
Size 24KB
SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
MD5 640bff73a5f8e37b202d911e4749b2e9
SHA1 9588dd7561ab7de3bca392b084bec91f3521c879
SHA512 39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a
SSDEEP 384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh
TLSH
T1F2B2E69157EA135EF7F19F347475EB2249BBBC214821C8CF5633268E19B2242E930727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdBCFE.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsisFirewall.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdBCFE.tmp\nsisFirewall.dll
Size 8KB
SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
MD5 f5bf81a102de52a4add21b8a367e54e0
SHA1 cf1e76ffe4a3ecd4dad453112afd33624f16751c
SHA512 6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256
SSDEEP 96:8SMPv+eLDUDp+weLv2lstU+0IgNB2Aa20kdArfOwJKbFrMiRsuHdRYL:wnxLDUwp6sgN2RDrzJMMmsuYL
TLSH
T16DF1F936B7E18171C26F02B09F4F569DE1F8E66067E0013377628B5D2EB029DE836526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utorrent.exe

Path C:\Users\Admin\AppData\Local\Temp\nsdBCFE.tmp\utorrent.exe
Size 3.5MB
SHA256 285127f8530fcdb0166cf37c97e60a13ecff7d57d3f0066e7cec0e89188e9ae2
MD5 657775f666c15e8ac34687e994dba93c
SHA1 7462a199219a13700b48b3bfb094dcb6273d29cf
SHA512 a8ac6aa8ec3453c7d098b42f4b163ae8fe04c335213a9dd7ed39be76758064064b71d4d0dc1573c575f2a3d7df6a62cbf22323220dddfbd2d74220580375065f
SSDEEP 98304:O12+yYUKanBkVVZHvXzSoInsqsCBVCpTLNMYuA4FGPsI:O1BU5nC1bS1dspTBuNy
TLSH
T179063392DE312E84E0FE52F514694AA84121EE4A7D5C1F334231763D5F360C2EABADE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6152_1446080449\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f91d2d17ea675d4c2c3192e241743f9_0f948582-5eae-4bad-b3c4-4c763cae60fd

Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1738198120-2966725515-3980530802-1000\1f91d2d17ea675d4c2c3192e241743f9_0f948582-5eae-4bad-b3c4-4c763cae60fd
Size 1KB
SHA256 faa67256489324a8f0234b15ee2d611165d3aef15fc63fa6a2b3e09346f8fd64
MD5 53c16d517167df112f2199f4d89090ff
SHA1 8386f9efb82c2fcb8f454f5984e8afb06de4533c
SHA512 c3da2a6336ddf0511f3fdf4ba436c01cae48714978ed800646d3ae4e371313dfc1558b24de400bf48bdf5655563a1fb561e9d20fd238efb395371f2136b463f4
TLSH
T1F1310B2E76231586D4453EB69D07990D0CD209FCB4D2CE275B4EE1F4163F1A1E157783
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\uTorrent\settings.dat
Size 8KB
SHA256 6d390a088ed6b23f743d719dc0d5d5b9d26fc626621a26f6e5b7216a0997fd59
MD5 6abf838ffe32de4695a07f3962f20ba0
SHA1 9193ebc77ce6a396f157a48883d909a90a5bf591
SHA512 9aa09dc24d980ee467955222af3acb330518e19c3ab3ff0748bf77904dd92aea72de31125d3a82a39f51b635fa31c4960d1885ef4dd0ed428b9551e675ddf246
SSDEEP 96:uJAT09J5DhlflTlt8Aa0L0FiNazTV50e+4E6Wh+vRJ:uGT09/DhvENHPzj+r6Wy/
TLSH
T19902E9126CFFDAA0E8AAC03B8A7A4417757A1741D576FA11D1D84AF4351261F0CFF721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

helper.exe

Path C:\Users\Admin\AppData\Roaming\utorrent\helper\helper.exe
Size 8.5MB
SHA256 26f431428fc725af9c71fffd0eaed4ea1895329af8181d275d37ccb3457076f1
MD5 9de06b80053bdd692456dafe03c710f0
SHA1 d370f81a6f609f4d45bce40639034af6ab995c89
SHA512 6a87bc247d761a53bf7f55c7ef7a95df8e667bd58f6dc8062463907c8b1e7807c6d198bd6fb719eae41e5806732a187111326cd4aea042720528f42a2e2f5af4
SSDEEP 196608:+45JoA+rUX+B8k7uHmovJrlFzQO7iYWyaP3BeZFTzsMk8JGK:orUXqgmohrlxriYWpPBeZVI8j
TLSH
T14A96BF3375C080B7D25202B0998CBB9597FDB9700B72969BAB8C361D2F718C1AB36757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

helper_web_ui.btinstall

Path C:\Users\Admin\AppData\Roaming\utorrent\helper_web_ui.btinstall
Size 7.4MB
SHA256 4325244a7c1b300cd6006c6d4d8ee6335c4b04284b3677748de614d6acfae86d
MD5 670665adc104762488096e84624fa384
SHA1 b76a77a5d1f061434e4dd2691e5cd5855a70359b
SHA512 537ce79e9be83aa2a7c02f23903e759238eac34d7d37f11d616f7f3d9c3011e1d52dc6286454176bc593a9733cae7ba0e1361e2d6d4619705fdbe8f68261fc4f
SSDEEP 196608:Dtcf3YdAkSihw+MDq3dxfrZ28O/dDJz8Mpe8dmT88ejj41ZPTnUz:DtgISkSiyq388O/dDJz8H8dmhSAZPTnU
TLSH
T1AB7633FCCFD5A011E26A44F1DDBE0B799AC51D31B03699319B1D6B0B0873D4B96ABE80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\utorrent\settings.dat
Size 8KB
SHA256 e615705aa22644a0d4b06ce6acc15d28616595832e9be62ef41724ad505a04aa
MD5 1a9a4c8122d72dd1760466e70cd8b303
SHA1 3354bf9c3b00e759605dd6cb248886f3f92b8452
SHA512 efef86db0919305adca721f45d80cb948e8469b0c0dc8b9d34fd556c3131bd58a74dbfb88410f0c036179fdcddb818d0771b3d96f868904ea41ad8d39bc34a23
SSDEEP 96:aNdmJST09J5DhlflTlt8AapL0FiNazTV50e+4E6Wh+vRJ:umsT09/DhvENaPzj+r6Wy/
TLSH
T19102FA126CFFDAA0F8AAC03B867A4417767A1B41D5B5F611D1984AF4351261F0CFF722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utorrentie.exe

Path C:\Users\Admin\AppData\Roaming\utorrent\updates\3.6.0_47254\utorrentie.exe
Size 692KB
SHA256 1a23079b7a9d7aa8f77a2f957ed02486c925699587b177a07b56868e1d18e6e2
MD5 32fe851f520eacf7642a6a2a0b634e7f
SHA1 0f27f6ea1c4c3a8ddb7eed83ba69d1af9fe34ea0
SHA512 e6704afd4df40e9f23823bb21a5191cb352bcf3d465422654473d182e6446832d1922db3a6e0a007d9bcd334a172bd121bc8b7ed23a961edf438ee2f54e418be
SSDEEP 12288:NLRfW/m2IJBo/HNkE2siMnP8TL36GdlOS+VqdZZqlNxEUjIrOvQqjehp7z1U5bN3:NLRW/m2IJBo/HNkE2siMnP8TL36GzHd+
TLSH
T10EE47D213581C036D97110711E68AFB592AEFD375F7209CBB7C05B2E5A252E22F31A7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

µTorrent.lnk

Path C:\Users\Admin\Desktop\µTorrent.lnk
Size 903B
SHA256 8fcf65dd0fcf38756de449d58b4389eeae91036dfa90339868b2f414acbe99bf
MD5 71a709660a3218dd5d9a007bb9dfdd09
SHA1 4358c2e94933454166bc204d92da5354de3007d1
SHA512 fadfc29c42271257a2e183c2f8cc0045ff3d25d0a4a7e6f5c4be4e128d4fad8896fb6a1adcdd90014e7f769f52747facd0c8b2741be9bbbc8e08d0d986891b90
TLSH
T1AB11BD415FD70F4BFC9A52330ABA7368827BB8C16682EE5D8095CA182850F61DB4D35B
MD5 SHA1 SHA512 TLSH

Submit Download

memory/972-772-0x000001E4025A0000-0x000001E4026F9000-memory.dmp

Download

memory/972-269-0x00007FFE886D0000-0x00007FFE886D1000-memory.dmp

Download

memory/1288-957-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/1288-619-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/1288-617-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/1880-19-0x0000000001E20000-0x0000000001E21000-memory.dmp

Download

memory/1880-197-0x0000000000F30000-0x000000000136F000-memory.dmp

Download

memory/1880-24-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-34-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-35-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-652-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-29-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-23-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-161-0x0000000000F30000-0x000000000136F000-memory.dmp

Download

memory/1880-28-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-18-0x0000000000F30000-0x000000000136F000-memory.dmp

Download

memory/1880-6-0x0000000001E20000-0x0000000001E21000-memory.dmp

Download

memory/1880-65-0x0000000004650000-0x0000000004790000-memory.dmp

Download

memory/1880-64-0x0000000000F30000-0x000000000136F000-memory.dmp

Download

memory/1920-310-0x00007FFE886D0000-0x00007FFE886D1000-memory.dmp

Download

memory/2068-198-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/2068-186-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/2436-103-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/2436-104-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/2436-107-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/2436-108-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/2436-78-0x0000000000400000-0x0000000000D17000-memory.dmp

Download

memory/5976-1168-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1243-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1278-0x00007FF79D950000-0x00007FF79D960000-memory.dmp

Download

memory/5976-1281-0x00007FF78A700000-0x00007FF78A710000-memory.dmp

Download

memory/5976-1300-0x00007FF786690000-0x00007FF7866A0000-memory.dmp

Download

memory/5976-1331-0x00007FF7C02B0000-0x00007FF7C02C0000-memory.dmp

Download

memory/5976-1245-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1367-0x00007FF7E6A00000-0x00007FF7E6A10000-memory.dmp

Download

memory/5976-1404-0x00007FF786690000-0x00007FF7866A0000-memory.dmp

Download

memory/5976-1403-0x00007FF786690000-0x00007FF7866A0000-memory.dmp

Download

memory/5976-1435-0x00007FF7834D0000-0x00007FF7834E0000-memory.dmp

Download

memory/5976-1464-0x00007FF7C02B0000-0x00007FF7C02C0000-memory.dmp

Download

memory/5976-1468-0x00007FF7C02B0000-0x00007FF7C02C0000-memory.dmp

Download

memory/5976-1483-0x00007FF7C02B0000-0x00007FF7C02C0000-memory.dmp

Download

memory/5976-1505-0x00007FF786690000-0x00007FF7866A0000-memory.dmp

Download

memory/5976-1246-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1467-0x00007FF7C02B0000-0x00007FF7C02C0000-memory.dmp

Download

memory/5976-1466-0x00007FF7C02B0000-0x00007FF7C02C0000-memory.dmp

Download

memory/5976-1463-0x00007FF7C02B0000-0x00007FF7C02C0000-memory.dmp

Download

memory/5976-1458-0x00007FF7834D0000-0x00007FF7834E0000-memory.dmp

Download

memory/5976-1434-0x00007FF7834D0000-0x00007FF7834E0000-memory.dmp

Download

memory/5976-1248-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1249-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1254-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1255-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1256-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1257-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1258-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1259-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1247-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1244-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1226-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1189-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1188-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1181-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1176-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1175-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1174-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1169-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1170-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1147-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1148-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1151-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1149-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/5976-1150-0x00007FF7D67F0000-0x00007FF7D6800000-memory.dmp

Download

memory/6076-17-0x0000000000C70000-0x0000000000D55000-memory.dmp

Download

memory/6076-0-0x0000000000C70000-0x0000000000D55000-memory.dmp

Download

memory/6076-653-0x0000000000C70000-0x0000000000D55000-memory.dmp

Download