Analysis

  • user interaction
    yes
  • max time kernel
    80s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/10/2026, 17:05

General

  • Target
    -6-_-gta-6.exe
  • Size 3.1MB
  • Sample261009-vmaf2ab16t
  • SHA256 9d3d8ee8a07c6d471dd15c4ef5cb2e3f09d486131b31855006da78d5b41df611
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Contacts a large (4340) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Downloads MZ/PE file
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 52 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\-6-_-gta-6.exe
    "C:\Users\Admin\AppData\Local\Temp\-6-_-gta-6.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3368
    • C:\Users\Admin\MediaGet2\mediaget.exe
      "C:\Users\Admin\MediaGet2\mediaget.exe" --installer
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      PID:4552
      • C:\Users\Admin\MediaGet2\mediaget_crashpad_handler.exe
        C:\Users\Admin\MediaGet2\mediaget_crashpad_handler.exe --no-rate-limit "--database=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps" "--metrics-dir=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps" "--attachment=C:/Users/Admin/AppData/Local/Media Get LLC/MediaGet2/crashdumps/logs/log" "--attachment=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\fdec669f-8fc4-4fe7-fd36-f682dce77525.run\__sentry-event" "--attachment=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\fdec669f-8fc4-4fe7-fd36-f682dce77525.run\__sentry-breadcrumb1" "--attachment=C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\fdec669f-8fc4-4fe7-fd36-f682dce77525.run\__sentry-breadcrumb2" --initial-client-data=0x78c,0x790,0x794,0x768,0x798,0x6fc27b7c,0x6fc27b90,0x6fc27ba0
        3⤵
          PID:2396
        • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
          "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=utility --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=en-US --service-sandbox-type=network --application-name=MediaGet2 --webengine-schemes=qrc:sLV --mojo-platform-channel-handle=3160 /prefetch:8
          3⤵
            PID:6044
          • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
            "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=4048 /prefetch:1
            3⤵
              PID:5396
            • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
              "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=4580 /prefetch:1
              3⤵
                PID:2804
              • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=1948 /prefetch:1
                3⤵
                  PID:5792
                • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                  "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=5300 /prefetch:1
                  3⤵
                    PID:3524
                  • C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe
                    "C:\Users\Admin\MediaGet2\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --disable-gpu-compositing --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=5244 /prefetch:1
                    3⤵
                      PID:1156
                  • C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe
                    "C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe" /Silent=yes /Affiliate=mediaget_wizzard_offer_wizard_8y262
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Reads the TCP/IP host and domain name from the registry
                    • System Location Discovery: System Language Discovery
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of WriteProcessMemory
                    PID:2872
                    • C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\brightvpn_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\brightvpn_installer.exe" /pid=2872 /port=6451 /affiliate=mediaget_wizzard_offer_wizard_8y262 /silent=yes /exe="C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe" /appid="win_brightvpn.com"
                      3⤵
                      • Executes dropped EXE
                      • Reads the TCP/IP host and domain name from the registry
                      • System Location Discovery: System Language Discovery
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious use of AdjustPrivilegeToken
                      PID:1400
                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                      powershell -Command "(Get-Content -Path 'C:\Program Files (x86)\Bright VPN\native_host_manifest_tmp.json') -replace 'EXE_PATH', 'C:\\Program Files (x86)\\Bright VPN\\BrightVpnNativeMessagingHost.exe' | Set-Content -Path 'C:\Program Files (x86)\Bright VPN\host_manifest.json'"
                      3⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:4224
                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                      powershell -Command "(Get-Content -Path 'C:\Program Files (x86)\Bright VPN\native_host_manifest_firefox_tmp.json') -replace 'EXE_PATH', 'C:\\Program Files (x86)\\Bright VPN\\BrightVpnNativeMessagingHost.exe' | Set-Content -Path 'C:\Program Files (x86)\Bright VPN\host_manifest_firefox.json'"
                      3⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:4124
                  • C:\Users\Admin\AppData\Local\Temp\opera\opera_binst.exe
                    "C:\Users\Admin\AppData\Local\Temp\opera\opera_binst.exe" --silent --allusers=0
                    2⤵
                      PID:5176
                      • C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe
                        C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe --silent --allusers=0 --server-tracking-blob=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
                        3⤵
                          PID:1476
                          • C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe
                            C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x2a8,0x2ac,0x2b0,0x284,0x2b4,0x7ff70c7209d8,0x7ff70c7209e8,0x7ff70c7209f8
                            4⤵
                              PID:2776
                            • C:\Users\Admin\AppData\Local\Temp\.opera\0e28d7a6-085c-4c0f-b39f-e313c7eccdbf Opera Installer Temp\installer.exe
                              "C:\Users\Admin\AppData\Local\Temp\.opera\0e28d7a6-085c-4c0f-b39f-e313c7eccdbf Opera Installer Temp\installer.exe" --version
                              4⤵
                                PID:5600
                              • C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe
                                "C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1476 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\0e28d7a6-085c-4c0f-b39f-e313c7eccdbf Opera Installer Temp\opera_package_20261009180729" --session-guid=1aa229dc-f3b4-4fe1-91fe-7e6adba52054 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=1009000000000000
                                4⤵
                                  PID:3788
                                  • C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe
                                    C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x2a4,0x2b4,0x2b8,0x280,0x2bc,0x7ff70c7209d8,0x7ff70c7209e8,0x7ff70c7209f8
                                    5⤵
                                      PID:3184
                              • C:\Users\Admin\AppData\Local\Temp\antivirus360\antivirus360.exe
                                "C:\Users\Admin\AppData\Local\Temp\antivirus360\antivirus360.exe" /s
                                2⤵
                                  PID:2464
                              • C:\Users\Admin\MediaGet2\mediaget.exe
                                "C:\Users\Admin\MediaGet2\mediaget.exe" --minimized
                                1⤵
                                  PID:2628

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      82743fc2c64a773debe656f3c9103b461b2d256f.ini

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\82743fc2c64a773debe656f3c9103b461b2d256f.ini
                                      • Size 444B
                                      • SHA256 8a9c74d2b93bb4ee435bc7cd71bd87a0e72632a0a512e3bc87d9e4cccd9046da
                                      • MD5 SHA1 SHA512 TLSH

                                      82743fc2c64a773debe656f3c9103b461b2d256f.ini.HXKAvO

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\82743fc2c64a773debe656f3c9103b461b2d256f.ini.HXKAvO
                                      • Size 514B
                                      • SHA256 574f857a0df0912035622a0eeb6b01fae6005a5caf26129cb5c8fbc811639241
                                      • MD5 SHA1 SHA512 TLSH

                                      adframes

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\adframes\adframes
                                      • Size 29KB
                                      • SHA256 cab6b9a78f2135e13052820044e2b0663d67018e4b27e28dca0a08cb3ee178a0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      32ad04df-a798-4631-ad6f-58f8c38834f2.tmp

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\32ad04df-a798-4631-ad6f-58f8c38834f2.tmp
                                      • Size 111B
                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                      • MD5 SHA1 SHA512 TLSH

                                      data_0

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_0
                                      • Size 8KB
                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                      • MD5 SHA1 SHA512 SSDEEP

                                      data_1

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_1
                                      • Size 264KB
                                      • SHA256 a54331bce8745915205ea343392954445fe95c8e567835e368e19d58aad49790
                                      • MD5 SHA1 SHA512 SSDEEP

                                      data_2

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_2
                                      • Size 8KB
                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                      • MD5 SHA1 SHA512 SSDEEP

                                      data_3

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\GPUCache\data_3
                                      • Size 8KB
                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                      • MD5 SHA1 SHA512 SSDEEP

                                      CURRENT

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\common-local-storage\Platform Notifications\CURRENT
                                      • Size 16B
                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                      • MD5 SHA1 SHA512

                                      cookies.ini.lock

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\cookies.ini.lock
                                      • Size 61B
                                      • SHA256 1d21d7b59aa8eda5a13304021421c4a05fdaf93ee023a0946fa995a716de3e59
                                      • MD5 SHA1 SHA512 TLSH

                                      cookies_search.ini

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\cookies_search.ini
                                      • Size 19B
                                      • SHA256 0190c1423b560073a347568f06c9700af812844c1fe785faefd44369e5cb9975
                                      • MD5 SHA1 SHA512

                                      __sentry-event

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\fdec669f-8fc4-4fe7-fd36-f682dce77525.run\__sentry-event
                                      • Size 225B
                                      • SHA256 1f1c4ff7cd21f74fbed8c99150f93e8ae66a3e4cf65e5ba354739acdabdd189f
                                      • MD5 SHA1 SHA512 TLSH

                                      log

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\logs\log
                                      • Size 2KB
                                      • SHA256 9cea783ba39f5cda3fddd1d8fc29db65324d4777cda2bbc2942e36c61a9d899a
                                      • MD5 SHA1 SHA512 TLSH

                                      log

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\crashdumps\logs\log
                                      • Size 4KB
                                      • SHA256 829c9413b3a0cbd10a41f1d742d8ef4d2fc1e48f62c0285efeb94355992aaa70
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      f316980032c3150dfce31954e0b3ea89d6456003.ini

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\f316980032c3150dfce31954e0b3ea89d6456003.ini
                                      • Size 511B
                                      • SHA256 cdbf699c60b8ab3438bcb1de7c90ae09b09beb3fe8098347474f0addf47b7df5
                                      • MD5 SHA1 SHA512 TLSH

                                      f316980032c3150dfce31954e0b3ea89d6456003.ini.sHCHhs

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\f316980032c3150dfce31954e0b3ea89d6456003.ini.sHCHhs
                                      • Size 584B
                                      • SHA256 ef4a878a067cb7c5b287fe8473afc53b369f9bbc0e545df59930d5b8767bca9a
                                      • MD5 SHA1 SHA512 TLSH

                                      history

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\history
                                      • Size 27B
                                      • SHA256 503ad1af813e5f7483c72f287d5c103fe75cd71d043a66198b4202d1e2eff4a3
                                      • MD5 SHA1 SHA512

                                      loader.7z

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\loader.7z
                                      • Size 1KB
                                      • SHA256 6ca110ad272317443338101d0b43d5ec0b54b0149d0c5eb9d1e94b942317c72b
                                      • MD5 SHA1 SHA512 TLSH

                                      sigpk

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\sigpk
                                      • Size 278B
                                      • SHA256 a4a7fece1aa9b490506d66e44ddccf1a5a8346cc89d86431dafe39e79f57c159
                                      • MD5 SHA1 SHA512 TLSH

                                      search_stop_word

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\suggest\search_stop_word
                                      • Size 1KB
                                      • SHA256 83050ae428b81f7aa7942bf2c8de75cf24e1f31756d8241fae0a917270855f83
                                      • MD5 SHA1 SHA512 TLSH

                                      204.14.17.70

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\204.14.17.70
                                      • Size 447B
                                      • SHA256 9accdd887e9d5371d88cd1525ff5fd08689ce89084e5d3fd60cd10a6c00fec69
                                      • MD5 SHA1 SHA512 TLSH

                                      bitreactor.to

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\bitreactor.to
                                      • Size 519B
                                      • SHA256 54293423ca49bc746eed25dd9110149dc55ff27ebd04096b05a87c08d8fbc436
                                      • MD5 SHA1 SHA512 TLSH

                                      elitetorrent.net

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\elitetorrent.net
                                      • Size 234B
                                      • SHA256 3fc6fd262ae1d5fa419279c390cca313ae9f6d9fce5ce00547f7f8746e86f8ca
                                      • MD5 SHA1 SHA512 TLSH

                                      fast-torrent.ru

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\fast-torrent.ru
                                      • Size 616B
                                      • SHA256 e34276c23466e6d554fea7514e9ead4938b388ad1f639df30b6af4ccda13d059
                                      • MD5 SHA1 SHA512 TLSH

                                      fastpic.ru

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\fastpic.ru
                                      • Size 578B
                                      • SHA256 5459f82e7f541b1f4296def89c18309ec257df7238432fbdf499ccea2a00e547
                                      • MD5 SHA1 SHA512 TLSH

                                      firepic.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\firepic.org
                                      • Size 658B
                                      • SHA256 30650a7bd0e82a2edc2fd0fa4a4e95222403ca0213a9dec7f96b3a27b6e35eb1
                                      • MD5 SHA1 SHA512 TLSH

                                      hqclub.net

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\hqclub.net
                                      • Size 420B
                                      • SHA256 8ad1e892845f1e5ae3d2fc5b9452b74fbf1e57783e4b22ff0de746e462772bcb
                                      • MD5 SHA1 SHA512 TLSH

                                      imageshack.us

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\imageshack.us
                                      • Size 482B
                                      • SHA256 c46f3a888af7e828299627458ef03115bea4aa440ee5efa308e97a77ea29c26c
                                      • MD5 SHA1 SHA512 TLSH

                                      kastatic.com

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kastatic.com
                                      • Size 421B
                                      • SHA256 b6797e27a729efa75726a9186d7435a652d98787471359c63c929d206950ff4b
                                      • MD5 SHA1 SHA512 TLSH

                                      kat.ph

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kat.ph
                                      • Size 401B
                                      • SHA256 f4c233d10a0bff28f41bfb2d6259b64c8dbba930902ae4feeea5d2e8b2917469
                                      • MD5 SHA1 SHA512 TLSH

                                      kickass.to

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kickass.to
                                      • Size 413B
                                      • SHA256 3fecae7965a0300b754b22c11104270bdc46df580d0c1ee7e7da4af56faaaccb
                                      • MD5 SHA1 SHA512 TLSH

                                      kickasstorrents.com

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\kickasstorrents.com
                                      • Size 442B
                                      • SHA256 e5cf2f96fa493faba9b6f1adcd79f67bb38ef4ea468046ebd3c75c386529eb16
                                      • MD5 SHA1 SHA512 TLSH

                                      leetleech.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\leetleech.org
                                      • Size 456B
                                      • SHA256 9f48bd6f5f5b9931669eee4cbd5aa37675ba1a8df70361915424a38c95cef0ff
                                      • MD5 SHA1 SHA512 TLSH

                                      lostpic.net

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\lostpic.net
                                      • Size 642B
                                      • SHA256 b8fc74840501a81036f51ef2780940692de8c90e6d2461eb89da6ed3abb08961
                                      • MD5 SHA1 SHA512 TLSH

                                      mgshare.com

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\mgshare.com
                                      • Size 379B
                                      • SHA256 5817dabcd4d41012338308bb335bfe35e8fb63d65840d7f302ccdae09a012e50
                                      • MD5 SHA1 SHA512 TLSH

                                      nil

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\nil
                                      • Size 174B
                                      • SHA256 31f1050379a12388b16031be3fa1a1be5aab0994073b450a13f4d6d97c0b825e
                                      • MD5 SHA1 SHA512 TLSH

                                      opentracker.pw

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\opentracker.pw
                                      • Size 394B
                                      • SHA256 0554dd6ced262758c6ffb06c370fd804f3f43d11dd323cea134fd3d01fdc287d
                                      • MD5 SHA1 SHA512 TLSH

                                      pictat.com

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\pictat.com
                                      • Size 467B
                                      • SHA256 a02917e025c81094e2d271cd402015f5f2dc9c6f1a08e09dad3fcf32125030a3
                                      • MD5 SHA1 SHA512 TLSH

                                      radikal.ru

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\radikal.ru
                                      • Size 586B
                                      • SHA256 e224489706bcea4b2b91133fe48310f7be920013cbbe0eb1292c7146bccac0c1
                                      • MD5 SHA1 SHA512 TLSH

                                      rudb.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\rudb.org
                                      • Size 453B
                                      • SHA256 aea8f0b4c5e5932d4024b5b5b48d364b5c6cb6f3f15da0307bcf25e40e18834c
                                      • MD5 SHA1 SHA512 TLSH

                                      turbopic.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\turbopic.org
                                      • Size 220B
                                      • SHA256 1d97e3d403445dfad973f2bdcce8fef8d5c3b83e2b3522e1793eed1d5dce4d7d
                                      • MD5 SHA1 SHA512 TLSH

                                      youpicture.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\iserverinfo\youpicture.org
                                      • Size 611B
                                      • SHA256 84d7f005c9bae5395e2a05d6eb85251e4583a0eed15cbace853c223525b67c47
                                      • MD5 SHA1 SHA512 TLSH

                                      1337x.to

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\1337x.to
                                      • Size 1KB
                                      • SHA256 e757e8929a5f26bc21e2d676a2b71ac9d6f138d53d294c0d255c83d71a162fa0
                                      • MD5 SHA1 SHA512 TLSH

                                      elitetorrent.net

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\elitetorrent.net
                                      • Size 1KB
                                      • SHA256 df1d0974a7c594e75928d9ba1d83b5620c311baa67367f16400bb0883a04397e
                                      • MD5 SHA1 SHA512 TLSH

                                      extratorrent.cc

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\extratorrent.cc
                                      • Size 1KB
                                      • SHA256 5b5bac1e3ef42d350e6785e33bc18daf9dfe1c02a6389793d7147539b6ddc13e
                                      • MD5 SHA1 SHA512 TLSH

                                      fast-torrent.ru

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\fast-torrent.ru
                                      • Size 1KB
                                      • SHA256 e2978293661666b6ac7a794c9048b2ce0767764c6c8e13324ba049c029c7a818
                                      • MD5 SHA1 SHA512 TLSH

                                      maintracker.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\maintracker.org
                                      • Size 8KB
                                      • SHA256 ef6bb8c24b4215f420504023a2666ac3a419cd84dc50202449ad78e6ef091188
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      mediaget

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget
                                      • Size 1KB
                                      • SHA256 1d32adc78d3c334890409d7694509b12bb957c42fca74fca4df9a3c350d75b2b
                                      • MD5 SHA1 SHA512 TLSH

                                      mediaget-dht

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget-dht
                                      • Size 1KB
                                      • SHA256 9c75d017c83e545aceb4b9fcf07a2c7e963479ab3f0f37380575f54e6ad0c804
                                      • MD5 SHA1 SHA512 TLSH

                                      mediaget.fast-torrent

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget.fast-torrent
                                      • Size 1KB
                                      • SHA256 4fb984b0a39e0f489f6384bb7bd2eb92cf642a5108e1f5bfc00899cf0bca0883
                                      • MD5 SHA1 SHA512 TLSH

                                      mediaget.rutor

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\mediaget.rutor
                                      • Size 2KB
                                      • SHA256 b585d4fba57d0588af19ef562ff665a08a88f67671e9b77a58d4b7eacb66106c
                                      • MD5 SHA1 SHA512 TLSH

                                      new-rutor.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\new-rutor.org
                                      • Size 1KB
                                      • SHA256 a3634c82c648f7d9e79d9b9cc0ae21d0ee1d559aa5fe151e9705d3464b2d14e1
                                      • MD5 SHA1 SHA512 TLSH

                                      opentracker.pw

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\opentracker.pw
                                      • Size 2KB
                                      • SHA256 9cf2ebd02c36a576e176dcf3e757efdfe81a5e9f01da4d814dc0b4cf7983d216
                                      • MD5 SHA1 SHA512 TLSH

                                      rarbg.to

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\rarbg.to
                                      • Size 1KB
                                      • SHA256 b15c6edb77efe557cd63e9870f7a67bc423ea1a84c47e1fc1cfa3163e821b261
                                      • MD5 SHA1 SHA512 TLSH

                                      rutor.info

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\rutor.info
                                      • Size 2KB
                                      • SHA256 5baf1c0dd207da1893feb42c4744b99255deeb514b35f6b1f1cb853aff55a297
                                      • MD5 SHA1 SHA512 TLSH

                                      rutracker.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\rutracker.org
                                      • Size 7KB
                                      • SHA256 63a7c50ccc066508f39e1796c1d4db1916b17989712b96fab3706421f3ff000f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      tfile.co

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\tfile.co
                                      • Size 2KB
                                      • SHA256 03ce16919821895faff817af226a8a23c1d8581493bc8629d51322fab332601e
                                      • MD5 SHA1 SHA512 TLSH

                                      thepiratebay10.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\thepiratebay10.org
                                      • Size 1KB
                                      • SHA256 575cbff32b05df43f653068bff2d18277bb64fc909426c35ace0732ae86c7d3a
                                      • MD5 SHA1 SHA512 TLSH

                                      torrentproject.se

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\torrentproject.se
                                      • Size 929B
                                      • SHA256 5980675c71b81dd8bfafc152e59a076adb6c03963e6fd658c32291a1f0e7cad9
                                      • MD5 SHA1 SHA512 TLSH

                                      yourbittorrent.com

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\sserverinfo\yourbittorrent.com
                                      • Size 1KB
                                      • SHA256 5d9a8042d3a06ce69b350398c622686464d82daea72b2bc18f2381fe89610859
                                      • MD5 SHA1 SHA512 TLSH

                                      stop_words_urls

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\stopwords\stop_words_urls
                                      • Size 2KB
                                      • SHA256 be8a20c87c67f9206312cbcf9386c6f0f47cfa0ced5ff91d52496f7385a42776
                                      • MD5 SHA1 SHA512 TLSH

                                      bittorrent_trackers

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\trackers\bittorrent_trackers
                                      • Size 544B
                                      • SHA256 1cf623ac2a9ef766fe328f4b8ffc7f6b03b602cd52d249fadb657828f141bb2c
                                      • MD5 SHA1 SHA512 TLSH

                                      elitetorrent.net

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\elitetorrent.net
                                      • Size 1KB
                                      • SHA256 a0b12da0703bc75d8e18a103e3e7de34b912426dc495648966a1002a63cd68d0
                                      • MD5 SHA1 SHA512 TLSH

                                      fast-torrent.ru

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\fast-torrent.ru
                                      • Size 3KB
                                      • SHA256 1a63e5485daf44ac5b633b778883acedcec64dee9cac560047ab142d97b58811
                                      • MD5 SHA1 SHA512 TLSH

                                      maintracker.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\maintracker.org
                                      • Size 14KB
                                      • SHA256 d33a339c279d05df7fcaef12f081139570377e10e820b2b6da48e8059b22ba5f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      mediaget

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\mediaget
                                      • Size 2KB
                                      • SHA256 21bf664ea3532484efeacd9fdd07a2105841bc67f6d6b5c7f90e8ccd5722751d
                                      • MD5 SHA1 SHA512 TLSH

                                      mediaget.fast-torrent

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\mediaget.fast-torrent
                                      • Size 3KB
                                      • SHA256 31cffe03d068a90f4d0f463b37e2bed2190129c2d28a16a29af624a560b18c9d
                                      • MD5 SHA1 SHA512 TLSH

                                      mediaget.rutor

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\mediaget.rutor
                                      • Size 13KB
                                      • SHA256 5a283732bacf407f779d60bad7e1ff16f82d7d7b9f96267c56fe86fccf988c1f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      rutor.is

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\rutor.is
                                      • Size 13KB
                                      • SHA256 d9bb98a50f74c624e9ce36f8e8e0a52064086e15483f872c8fbe3e45d9ac5684
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      rutracker.org

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\rutracker.org
                                      • Size 14KB
                                      • SHA256 aa8aaa3ff06639f03787b864aca0855dd063252c55ad9ab48ba47ade5dd7d761
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      tfile.co

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\user_search\tserverinfo\tfile.co
                                      • Size 8KB
                                      • SHA256 fbd8a4df606bbb1bd56d810aa94654d5451c5e689ec427ecf34163a12d461a0e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      07ec7952-09dc-47e6-ba40-47576a896556.tmp

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\07ec7952-09dc-47e6-ba40-47576a896556.tmp
                                      • Size 84B
                                      • SHA256 712196693e3527ac1131831f1a2108b6c0e5c68967b26d51a452611cdfb86e0c
                                      • MD5 SHA1 SHA512 TLSH

                                      112e5191-25db-402c-b291-40cd7161a275.tmp

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\112e5191-25db-402c-b291-40cd7161a275.tmp
                                      • Size 835B
                                      • SHA256 19172bd87b1adf85e8df3837c760a8160ec3421c745a2b9750694c80a22b7e1a
                                      • MD5 SHA1 SHA512 TLSH

                                      79ec4e3a-810a-4b98-861a-702996e66fd5.tmp

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\79ec4e3a-810a-4b98-861a-702996e66fd5.tmp
                                      • Size 59B
                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                      • MD5 SHA1 SHA512 TLSH

                                      MANIFEST-000001

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\Platform Notifications\MANIFEST-000001
                                      • Size 41B
                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                      • MD5 SHA1 SHA512

                                      TransportSecurity

                                      • Path C:\Users\Admin\AppData\Local\Media Get LLC\MediaGet2\webkit-local-storage\TransportSecurity
                                      • Size 835B
                                      • SHA256 f435807830a94c4257e1640a335a6b34a03966d53ebec7cfb8151cad83ed3f16
                                      • MD5 SHA1 SHA512 TLSH
                                      • Path C:\Users\Admin\AppData\Local\Temp\[email protected]
                                      • Size 655B
                                      • SHA256 4a76fbf918591a8f5d8f567d9fddf1a9a9e1c5ee9a1c48306d1f31d84f57bf31
                                      • MD5 SHA1 SHA512 TLSH

                                      setup.ini

                                      • Path C:\Users\Admin\AppData\Local\Temp\[email protected]\setup.ini
                                      • Size 830B
                                      • SHA256 13dbf344ecf779641295820a86753ce0f4b65873bde2dddf9037e916bfd39166
                                      • MD5 SHA1 SHA512 TLSH

                                      installer.exe

                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS834B73CA\installer.exe
                                      • Size 8.4MB
                                      • SHA256 c2ac35ff3a7e38118be30262da2ba076470c58c10aa7f9a7e5c3b7ce15c73f1b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      __PSScriptPolicyTest_3pta0mz5.mof.ps1

                                      • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_3pta0mz5.mof.ps1
                                      • Size 60B
                                      • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                      • MD5 SHA1 SHA512 TLSH

                                      antivirus360.exe

                                      • Path C:\Users\Admin\AppData\Local\Temp\antivirus360\antivirus360.exe
                                      • Size 1.4MB
                                      • SHA256 76e74b2fb503d0eea981c914ba5a9148bc266b2f5eb72ee089a0f3cd3f5952d5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      bdvpn_setup.exe

                                      • Path C:\Users\Admin\AppData\Local\Temp\bdvpn\bdvpn_setup.exe
                                      • Size 1.7MB
                                      • SHA256 81e6e4fa68d5a2158c9d1dfb207c57a3116900a6e72577dbce2ff60eed725c65
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Montserrat-Bold.eot

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Bold.eot
                                      • Size 256KB
                                      • SHA256 7615a4bb88a5680cfead49c1774013ce48c4c7343cb82d7585f7935c705400b0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Montserrat-Regular.eot

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Regular.eot
                                      • Size 314KB
                                      • SHA256 057bc6c47c47aaccdf31adc48a6b401f6090a02c28e354099eff80907dc2af32
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Roboto-Regular.eot

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Roboto-Regular.eot
                                      • Size 176KB
                                      • SHA256 6cedf381d59fa4caabfb836e9a3720420645cbcea32491a5ac5f07cf274ceac6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      av360-check-on.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360-check-on.png
                                      • Size 445B
                                      • SHA256 8b8f0ad0cdf07227f759cb18c64ff64ae72fcbfc7916524acb355d889ddece3f
                                      • MD5 SHA1 SHA512 TLSH

                                      av360.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360.png
                                      • Size 216KB
                                      • SHA256 caec781eb9c39273dacfb6227adf6db3927b4c55d7591158fe8101238edb2032
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      close-gray.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-gray.png
                                      • Size 268B
                                      • SHA256 9ba220b02676f499296b258227582e7f9347890e530d0e6795aa476150d909c3
                                      • MD5 SHA1 SHA512 TLSH

                                      close-lightgray-14px.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-lightgray-14px.png
                                      • Size 271B
                                      • SHA256 2d445a49383ef3d251935caebe0a7b178f0bd69b20e54a44f67394409b6141a7
                                      • MD5 SHA1 SHA512 TLSH

                                      close-white.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-white.png
                                      • Size 264B
                                      • SHA256 c1d3c989cfc39531d46e25867e0f15c552688b3fbef8f5bd59dbae303aae9048
                                      • MD5 SHA1 SHA512 TLSH

                                      install-lenta-2-308.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\install-lenta-2-308.png
                                      • Size 19KB
                                      • SHA256 e7615879d5639c7b54e886ec6c0603282eac694f3f9dd5e9b793bceec2795639
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      install-lenta-3-308.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\install-lenta-3-308.png
                                      • Size 33KB
                                      • SHA256 77acc73a5c52b9af37a7277bce542a53444acf41ea43ab4c078f74cd4ad66760
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      install-lenta.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\install-lenta.png
                                      • Size 133KB
                                      • SHA256 7d59b164ddd2c8b9ee7ff03ce351322009a90ec92cd9ac7957854d2bddb9ace0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      main-logo-white.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\main-logo-white.png
                                      • Size 6KB
                                      • SHA256 e3990165ef06c69e64a8c8edd9c1a6b109a6f748e5305009e27adbc45cbff656
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      opera-check-on.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-check-on.png
                                      • Size 378B
                                      • SHA256 4fef700a16ebb413d3ecae78ab8d1462a5f916afb4ecc567c8ef300a66aa19ed
                                      • MD5 SHA1 SHA512 TLSH

                                      opera-empty.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-empty.png
                                      • Size 107KB
                                      • SHA256 d163d272e617caf16dca98cf25721b6b78a7a5ec59552af71fb4704758741a14
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      point.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\point.png
                                      • Size 159B
                                      • SHA256 0914121c7693afd3b625929d540acb7942401d6f46736e6cb8bbf59276d7a1b6
                                      • MD5 SHA1 SHA512 TLSH

                                      settings-checked.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\settings-checked.png
                                      • Size 382B
                                      • SHA256 d05f0be137ed891926de83bb83fa46c78d01da09b2fb6d62d1fa7dfb57701229
                                      • MD5 SHA1 SHA512 TLSH

                                      soax-mglogo.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-mglogo.png
                                      • Size 4KB
                                      • SHA256 cce96ae129b268e5a1fed76ce3e2e7e6eb3a5a9c4ba87fd6c22394863a6585e5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      soax-schema.png

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-schema.png
                                      • Size 2KB
                                      • SHA256 1398ff3a4bf9bb8011cb5230919bf48f72bdc5f34e3917d773edca3d3a758363
                                      • MD5 SHA1 SHA512 TLSH

                                      index.html

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html
                                      • Size 39KB
                                      • SHA256 df9491dfb096b729f4efdb34f9378dfee0ffbd213ca33636c5c209678ae3da9b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      page-wait.jpg

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\page-wait.jpg
                                      • Size 14KB
                                      • SHA256 a885583e65c215880f4448e853b1c966d8cb96e619c26daf095ba3d0789128cd
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      preloader.html

                                      • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\preloader.html
                                      • Size 266B
                                      • SHA256 ac071e1f7162b4d4a9a195b52fe138a665af7fc207e39ca5d047338acd6a55b3
                                      • MD5 SHA1 SHA512 TLSH

                                      INetC.dll

                                      • Path C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\INetC.dll
                                      • Size 238KB
                                      • SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      StdUtils.dll

                                      • Path C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\StdUtils.dll
                                      • Size 100KB
                                      • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      System.dll

                                      • Path C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\System.dll
                                      • Size 12KB
                                      • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      brightvpn_installer.exe

                                      • Path C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\brightvpn_installer.exe
                                      • Size 2.4MB
                                      • SHA256 ad79524beee79da7843a71f429475cba09d1d755040f61d09f53b0786284612f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      nsExec.dll

                                      • Path C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\nsExec.dll
                                      • Size 6KB
                                      • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      nsProcess.dll

                                      • Path C:\Users\Admin\AppData\Local\Temp\nsl5BDE.tmp\nsProcess.dll
                                      • Size 4KB
                                      • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      opera_binst.exe

                                      • Path C:\Users\Admin\AppData\Local\Temp\opera\opera_binst.exe
                                      • Size 3.1MB
                                      • SHA256 215711d15e1b96fd14f97d75318e378e8a70c95ecc65e2d4c165945885c460ac
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      360P2SP.dll

                                      • Path C:\Users\Admin\AppData\Local\Temp\{E13A0950-271B-4620-BC67-F242C7257B88}.tmp\360P2SP.dll
                                      • Size 824KB
                                      • SHA256 bf1b96f5b56be51e24d6314bc7ec25f1bdba2435f4dfc5be87de164fe5de9e60
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      MSVCP140.dll

                                      • Path C:\Users\Admin\MediaGet2\MSVCP140.dll
                                      • Size 438KB
                                      • SHA256 2db7fd3c9c3c4b67f2d50a5a50e8c69154dc859780dd487c28a4e6ed1af90d01
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5Core.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5Core.dll
                                      • Size 5.1MB
                                      • SHA256 4f8dc460162407cfccb1be6ef9cce45c4449de838aeffa3fd33378f01a3f9cc4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5Gui.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5Gui.dll
                                      • Size 5.6MB
                                      • SHA256 80016776efea2b2a838c3ffa4c82e5f146baff68c36073c0c34668809d1c4297
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5Network.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5Network.dll
                                      • Size 1.0MB
                                      • SHA256 37275f3ea79d15a2792bf21f71f1df825f201cf8b33aa1f94ca93d62d76b216c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5PrintSupport.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5PrintSupport.dll
                                      • Size 261KB
                                      • SHA256 74e737dda4f666c28f9543bde9cee526a18d0088a780b497ad7c1772b3cadd4e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5Quick.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5Quick.dll
                                      • Size 3.3MB
                                      • SHA256 5f246016691ff883243ee9b3c9215eb16b859b12aefc5f4bbd2fbda3911883de
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5WebChannel.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5WebChannel.dll
                                      • Size 104KB
                                      • SHA256 34e5cf82808bba7dd544fd83ab0a88ec6c336d7e00319a4b8389f8c4d4d2ebab
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5WebEngineWidgets.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5WebEngineWidgets.dll
                                      • Size 198KB
                                      • SHA256 c93c46c5669dbea6c9959b16f384df8e2d34bc87cd7f8a4df04d79cf1311295c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5Widgets.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5Widgets.dll
                                      • Size 4.3MB
                                      • SHA256 600285754e7eee7239b9d252dbed5c9d2c9c4c432751b8953dcb2e8b45e0408a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5WinExtras.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5WinExtras.dll
                                      • Size 197KB
                                      • SHA256 3db3e1e9a3bda8302aa6f177591feca2e04dc9a336459a25f160c3105c9a03fb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Qt5Xml.dll

                                      • Path C:\Users\Admin\MediaGet2\Qt5Xml.dll
                                      • Size 170KB
                                      • SHA256 d1de30f5e7247b0a945839028e78d8e91c79b234da33735466040ccb9deddb44
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      avcodec-58.dll

                                      • Path C:\Users\Admin\MediaGet2\avcodec-58.dll
                                      • Size 5.4MB
                                      • SHA256 d3a72ea93dc6267b25b534b59e46aae4fc9f4d1a72fb46f3b9ec9f83052805c3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      avformat-58.dll

                                      • Path C:\Users\Admin\MediaGet2\avformat-58.dll
                                      • Size 1.1MB
                                      • SHA256 93866a00bc5b8620663477979dabdce7856632a3f2e5a06127ca7ed6840f6af2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      avutil-56.dll

                                      • Path C:\Users\Admin\MediaGet2\avutil-56.dll
                                      • Size 348KB
                                      • SHA256 de39459464d7c55b970dc1d251761a6e046ef78469d681a076217ee6f38749e2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      libcrypto-1_1.dll

                                      • Path C:\Users\Admin\MediaGet2\libcrypto-1_1.dll
                                      • Size 2.4MB
                                      • SHA256 2e7c6aa4daea6e14d3d74e01a021a33e063cf60d34632e51b4730a2c3f0d46b3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      libssl-1_1.dll

                                      • Path C:\Users\Admin\MediaGet2\libssl-1_1.dll
                                      • Size 518KB
                                      • SHA256 71b19452b5fd7a389cde0c588b21f3f03ee443f57a1e42a7670671988be908cf
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      libvlc.dll

                                      • Path C:\Users\Admin\MediaGet2\libvlc.dll
                                      • Size 172KB
                                      • SHA256 072d31910b2a1cd83341bb8270fd2eebd8ca5a6e01fa0c6339e0867f59d2f29e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      libvlccore.dll

                                      • Path C:\Users\Admin\MediaGet2\libvlccore.dll
                                      • Size 2.5MB
                                      • SHA256 c56b1802f926a0b4b271fe9670c708c1c21adb9f7435eb87ce66d77f3298ed7e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      mediaget-uninstaller.exe

                                      • Path C:\Users\Admin\MediaGet2\mediaget-uninstaller.exe
                                      • Size 3.0MB
                                      • SHA256 2146866d0f235746f1a012e99c09e7107d2cac799db78819727ec2c8a4f0cf16
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      mediaget.exe

                                      • Path C:\Users\Admin\MediaGet2\mediaget.exe
                                      • Size 11.9MB
                                      • SHA256 ab696cf0b1a2061ed024f1dd38795a36f4644c69b39abed4dc0aa08a984e99f1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      msvcp100.dll

                                      • Path C:\Users\Admin\MediaGet2\msvcp100.dll
                                      • Size 411KB
                                      • SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      msvcr100.dll

                                      • Path C:\Users\Admin\MediaGet2\msvcr100.dll
                                      • Size 755KB
                                      • SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      opencv_core320.dll

                                      • Path C:\Users\Admin\MediaGet2\opencv_core320.dll
                                      • Size 9.0MB
                                      • SHA256 8408eee588c65584aed60751999f230116959b913e4be9ef10e6ad165196b90e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      opencv_img_hash320.dll

                                      • Path C:\Users\Admin\MediaGet2\opencv_img_hash320.dll
                                      • Size 182KB
                                      • SHA256 718630ee5693e13c3953d91399de34e6fe9ff81fd3323eccd22fc08c22a8b7aa
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      opencv_imgcodecs320.dll

                                      • Path C:\Users\Admin\MediaGet2\opencv_imgcodecs320.dll
                                      • Size 2.4MB
                                      • SHA256 3be4bdeadf9529fa251f090916801e8a3c12853f669208501399f81f10aa94f8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      opencv_imgproc320.dll

                                      • Path C:\Users\Admin\MediaGet2\opencv_imgproc320.dll
                                      • Size 18.1MB
                                      • SHA256 651921413fadcf6cb7680e0d7c3c63fdc5723702489b4c8e3c10d15d99238cdf
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      opencv_videoio320.dll

                                      • Path C:\Users\Admin\MediaGet2\opencv_videoio320.dll
                                      • Size 246KB
                                      • SHA256 fa26aa96ab75b015e8ded448e8ba1f5e17a927eff2372da4e165c884b08f5b1a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      sentry.dll

                                      • Path C:\Users\Admin\MediaGet2\sentry.dll
                                      • Size 375KB
                                      • SHA256 9288b5cbc3f1287a40adc794766abc74e5ff5edb8e271c075b39c596d6859a5d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      swresample-3.dll

                                      • Path C:\Users\Admin\MediaGet2\swresample-3.dll
                                      • Size 99KB
                                      • SHA256 a19f8a52f5f9e12f77c5f8f777ea06ac868b0d2c7163f49713a51b641d304190
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      swscale-5.dll

                                      • Path C:\Users\Admin\MediaGet2\swscale-5.dll
                                      • Size 403KB
                                      • SHA256 1dc9416d347788129e93a1b08e8483c461d877ea8603ac8394fa4e9519df2f6b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      vcruntime140.dll

                                      • Path C:\Users\Admin\MediaGet2\vcruntime140.dll
                                      • Size 78KB
                                      • SHA256 9d02e952396bdff3abfe5654e07b7a713c84268a225e11ed9a3bf338ed1e424c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      memory/1400-588-0x0000000006100000-0x0000000006122000-memory.dmp

                                      memory/1400-589-0x0000000008780000-0x0000000008788000-memory.dmp

                                      memory/1400-591-0x0000000008010000-0x000000000801E000-memory.dmp

                                      memory/1400-587-0x0000000000180000-0x00000000003E2000-memory.dmp

                                      memory/1400-590-0x0000000008030000-0x000000000806E000-memory.dmp

                                      memory/1400-628-0x000000000BEE0000-0x000000000C23B000-memory.dmp

                                      memory/2628-834-0x000000006F930000-0x000000006F95F000-memory.dmp

                                      memory/2628-835-0x000000006AE80000-0x000000006B114000-memory.dmp

                                      memory/2628-842-0x000000006F930000-0x000000006F95F000-memory.dmp

                                      memory/2628-843-0x000000006AE80000-0x000000006B114000-memory.dmp

                                      memory/4124-826-0x0000000006660000-0x00000000066AC000-memory.dmp

                                      memory/4224-706-0x00000000066C0000-0x00000000066DA000-memory.dmp

                                      memory/4224-708-0x00000000078C0000-0x0000000007E7A000-memory.dmp

                                      memory/4224-643-0x00000000054E0000-0x0000000005B2A000-memory.dmp

                                      memory/4224-650-0x0000000005C00000-0x0000000005C66000-memory.dmp

                                      memory/4224-651-0x0000000005C80000-0x0000000005CE6000-memory.dmp

                                      memory/4224-661-0x00000000060B0000-0x00000000060CE000-memory.dmp

                                      memory/4224-662-0x0000000006710000-0x000000000675C000-memory.dmp

                                      memory/4224-705-0x0000000007260000-0x00000000072F6000-memory.dmp

                                      memory/4224-642-0x0000000004CE0000-0x0000000004D16000-memory.dmp

                                      memory/4224-707-0x00000000071C0000-0x00000000071E2000-memory.dmp

                                      memory/4552-1329-0x000000000C470000-0x000000000C480000-memory.dmp

                                      memory/4552-1325-0x000000000C3F0000-0x000000000C400000-memory.dmp

                                      memory/4552-1185-0x000000000B5B0000-0x000000000B5C0000-memory.dmp

                                      memory/4552-1203-0x000000000C0B0000-0x000000000C0C0000-memory.dmp

                                      memory/4552-1330-0x000000000C460000-0x000000000C470000-memory.dmp

                                      memory/4552-627-0x000000006F930000-0x000000006F95F000-memory.dmp

                                      memory/4552-1328-0x000000000C400000-0x000000000C410000-memory.dmp

                                      memory/4552-1327-0x000000000C410000-0x000000000C420000-memory.dmp

                                      memory/4552-1326-0x000000000B5E0000-0x000000000B5F0000-memory.dmp

                                      memory/4552-1204-0x000000000C0A0000-0x000000000C0B0000-memory.dmp

                                      memory/4552-1348-0x00000000106B0000-0x00000000106C0000-memory.dmp

                                      memory/4552-1346-0x0000000010650000-0x0000000010660000-memory.dmp

                                      memory/4552-1345-0x0000000010620000-0x0000000010630000-memory.dmp

                                      memory/4552-1344-0x0000000010630000-0x0000000010640000-memory.dmp

                                      memory/4552-1184-0x000000000B5C0000-0x000000000B5D0000-memory.dmp

                                      memory/4552-1183-0x0000000009440000-0x0000000009450000-memory.dmp

                                      memory/4552-1182-0x000000000B450000-0x000000000B460000-memory.dmp

                                      memory/4552-1181-0x0000000004500000-0x0000000004510000-memory.dmp

                                      memory/4552-1180-0x00000000070C0000-0x00000000070D0000-memory.dmp