Overview

overview

8

Static

static

1

09AC716640...orrent

windows11-21h2-x64

8

09AC716640...orrent

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    337s
  • max time network
    334s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    24/10/2026, 10:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    09AC7166407ACBAB6BB9F8E873A615DED619795B.torrent
  • Size 55KB
  • Sample261024-mms95stwfx
  • SHA256 4a326212fc6d878b9bd94e6be9ff34462c84edb011da8bdaca744265af5969e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryexecutionpersistencespywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 3 IoCs
  • Executes dropped EXE 9 IoCs
  • Identifies Wine through registry keys 2 TTPs 4 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    defense_evasion
  • Loads dropped DLL 6 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 4 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Windows directory 64 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 8 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 8 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 18 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 25 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 35 IoCs
  • Suspicious use of SetWindowsHookEx 28 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\09AC7166407ACBAB6BB9F8E873A615DED619795B.torrent
    1⤵
    • Executes a command shell one-liner
    • Modifies registry class
    PID:4292
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:5768
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2052
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff80128c728,0x7ff80128c734,0x7ff80128c740
      2⤵
        PID:2712
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1596,i,17246102793170886195,11425416473229224927,262144 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1892 /prefetch:2
        2⤵
          PID:2596
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2200,i,6662111248387557504,3962496649676633785,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2272 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:4152
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2328,i,17237043127259530559,3283118538565812542,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2388 /prefetch:13
          2⤵
            PID:4512
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,15868745431853757300,2469872882390783233,2097152 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3436 /prefetch:1
            2⤵
              PID:1612
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,5018872298752847344,1406135277598412983,2097152 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3500 /prefetch:1
              2⤵
                PID:4608
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,18372407395281298408,11299834234382180209,2097152 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4496 /prefetch:1
                2⤵
                  PID:5532
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4680,i,15386278657697569825,9668145215697272700,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4700 /prefetch:14
                  2⤵
                    PID:5372
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,9048668589504370425,10067129601551065509,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5372 /prefetch:14
                    2⤵
                      PID:4528
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5448,i,16316306531906776353,8863562995803971790,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5460 /prefetch:14
                      2⤵
                        PID:5828
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5608,i,6775671945368888403,2807513288274452720,2097152 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5640 /prefetch:1
                        2⤵
                          PID:6056
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,1655634574791651907,13866461996533719122,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3484 /prefetch:14
                          2⤵
                            PID:6080
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3488,i,7937771806132865636,13440480700257867102,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5424 /prefetch:14
                            2⤵
                              PID:3168
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3540,i,13215162833816965818,13748520321140231158,2097152 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3616 /prefetch:9
                              2⤵
                                PID:768
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3464,i,10836556615399164420,17118182941529693245,2097152 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5624 /prefetch:1
                                2⤵
                                  PID:2012
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6000,i,15621429582909399071,3308399075764883048,2097152 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5640 /prefetch:1
                                  2⤵
                                    PID:5688
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3480,i,17277090043945234502,6156049377991506699,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6204 /prefetch:14
                                    2⤵
                                    • Subvert Trust Controls: Mark-of-the-Web Bypass
                                    • NTFS ADS
                                    PID:5448
                                  • C:\Users\Admin\Downloads\utorrent_installer.exe
                                    "C:\Users\Admin\Downloads\utorrent_installer.exe"
                                    2⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Reads the TCP/IP host and domain name from the registry
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of WriteProcessMemory
                                    PID:784
                                    • C:\Users\Admin\AppData\Local\Temp\nsv1CE6.tmp\utorrent.exe
                                      "C:\Users\Admin\AppData\Local\Temp\nsv1CE6.tmp\utorrent.exe"
                                      3⤵
                                      • Executes dropped EXE
                                      • Identifies Wine through registry keys
                                      • Adds Run key to start application
                                      • Reads the TCP/IP host and domain name from the registry
                                      • System Location Discovery: System Language Discovery
                                      • Modifies registry class
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of WriteProcessMemory
                                      PID:2520
                                      • C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
                                        uTorrent.exe /NOINSTALL /BRINGTOFRONT
                                        4⤵
                                        • Downloads MZ/PE file
                                        • Executes dropped EXE
                                        • Identifies Wine through registry keys
                                        • Reads the TCP/IP host and domain name from the registry
                                        • System Location Discovery: System Language Discovery
                                        • Checks SCSI registry key(s)
                                        • Modifies Internet Explorer settings
                                        • Modifies system certificate store
                                        • Suspicious behavior: EnumeratesProcesses
                                        • Suspicious behavior: GetForegroundWindowSpam
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of SendNotifyMessage
                                        • Suspicious use of WriteProcessMemory
                                        PID:1012
                                        • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe
                                          "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe" uTorrent_1012_0402B190_1373348163 µTorrent4823DF041B09 uTorrent ce unp
                                          5⤵
                                          • Executes dropped EXE
                                          • Checks whether UAC is enabled
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious use of WriteProcessMemory
                                          PID:5732
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --mojo-named-platform-channel-pipe=5732.5572.12813757825103282952
                                            6⤵
                                            • Enumerates system info in registry
                                            • Suspicious use of WriteProcessMemory
                                            PID:3856
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x174,0x7ff8010bb078,0x7ff8010bb084,0x7ff8010bb090
                                              7⤵
                                                PID:1756
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1708,i,574390766822561484,17006899478230515136,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=1704 /prefetch:2
                                                7⤵
                                                  PID:5332
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1872,i,574390766822561484,17006899478230515136,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:11
                                                  7⤵
                                                    PID:4496
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2292,i,574390766822561484,17006899478230515136,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:13
                                                    7⤵
                                                      PID:2208
                                                • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe
                                                  "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe" uTorrent_1012_0402B660_110610895 µTorrent4823DF041B09 uTorrent ce unp
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Checks whether UAC is enabled
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:5648
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --mojo-named-platform-channel-pipe=5648.4560.10730000046760411664
                                                    6⤵
                                                    • Drops file in Windows directory
                                                    • Enumerates system info in registry
                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:3636
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x194,0x7ff8010bb078,0x7ff8010bb084,0x7ff8010bb090
                                                      7⤵
                                                        PID:6076
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1744,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:2
                                                        7⤵
                                                          PID:2176
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1888,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:11
                                                          7⤵
                                                            PID:3588
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2260,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:13
                                                            7⤵
                                                              PID:1464
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3456,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                                                              7⤵
                                                                PID:5728
                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3652,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
                                                                7⤵
                                                                  PID:1368
                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3832,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:1
                                                                  7⤵
                                                                    PID:2288
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4420,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
                                                                    7⤵
                                                                      PID:3332
                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4704,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:1
                                                                      7⤵
                                                                        PID:4648
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=5208,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:1
                                                                        7⤵
                                                                          PID:2080
                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4804,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
                                                                          7⤵
                                                                            PID:3768
                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5392,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
                                                                            7⤵
                                                                              PID:5372
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5536,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:14
                                                                              7⤵
                                                                                PID:1988
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=3644,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:10
                                                                                7⤵
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:3928
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5444,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
                                                                                7⤵
                                                                                  PID:5900
                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4128,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
                                                                                  7⤵
                                                                                    PID:4124
                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5096,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
                                                                                    7⤵
                                                                                      PID:1556
                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4900,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
                                                                                      7⤵
                                                                                        PID:6316
                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --webview-exe-name=utorrentie.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4928,i,1222058312642410908,14454605226083410279,262144 --disable-features=msEnhancedTrackingPreventionEnabled --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
                                                                                        7⤵
                                                                                          PID:568
                                                                                    • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe
                                                                                      "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe" uTorrent_1012_0402AA58_1401298067 µTorrent4823DF041B09 uTorrent ce unp
                                                                                      5⤵
                                                                                      • Executes dropped EXE
                                                                                      • Checks whether UAC is enabled
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      • Suspicious use of WriteProcessMemory
                                                                                      PID:5968
                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --mojo-named-platform-channel-pipe=5968.1116.2207178471810692283
                                                                                        6⤵
                                                                                        • Suspicious use of WriteProcessMemory
                                                                                        PID:416
                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x180,0x7ff8010bb078,0x7ff8010bb084,0x7ff8010bb090
                                                                                          7⤵
                                                                                            PID:4584
                                                                                      • C:\Users\Admin\AppData\Roaming\uTorrent\crashpad_handler.exe
                                                                                        C:\Users\Admin\AppData\Roaming\uTorrent\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Roaming\uTorrent\sentry-native --metrics-dir=C:\Users\Admin\AppData\Roaming\uTorrent\sentry-native --url=https://o127107.ingest.us.sentry.io:443/api/4511257372459008/minidump/?sentry_client=sentry.native/0.7.0&sentry_key=8aff50f5e89f5dfc4fca527ca95b89e4 --attachment=C:\Users\Admin\AppData\Roaming\uTorrent\sentry-native\c4bb983f-e4d0-439e-f368-44238e8c3e2b.run\__sentry-event --attachment=C:\Users\Admin\AppData\Roaming\uTorrent\sentry-native\c4bb983f-e4d0-439e-f368-44238e8c3e2b.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Roaming\uTorrent\sentry-native\c4bb983f-e4d0-439e-f368-44238e8c3e2b.run\__sentry-breadcrumb2 --initial-client-data=0xa44,0xa48,0xa4c,0xa40,0xa50,0xb6365c,0xb63670,0xb63680
                                                                                        5⤵
                                                                                        • Executes dropped EXE
                                                                                        • System Location Discovery: System Language Discovery
                                                                                        PID:4392
                                                                                      • C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe
                                                                                        "C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe" uTorrent_1012_0402A7F0_106729570 µTorrent4823DF041B09 uTorrent ce unp
                                                                                        5⤵
                                                                                        • Executes dropped EXE
                                                                                        • Checks whether UAC is enabled
                                                                                        • System Location Discovery: System Language Discovery
                                                                                        • Suspicious use of WriteProcessMemory
                                                                                        PID:5680
                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=utorrentie.exe --user-data-dir="C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msEnhancedTrackingPreventionEnabled --mojo-named-platform-channel-pipe=5680.3800.4846373331914542890
                                                                                          6⤵
                                                                                          • Suspicious use of WriteProcessMemory
                                                                                          PID:1972
                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x174,0x7ff8010bb078,0x7ff8010bb084,0x7ff8010bb090
                                                                                            7⤵
                                                                                              PID:4440
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://utorrent.com/prodnews?v=3%2e6%2e0%2e1%2e47390&pv=0.0.0.0.0
                                                                                          5⤵
                                                                                          • Enumerates system info in registry
                                                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                          PID:2260
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2e4,0x370,0x7fffde04c188,0x7fffde04c194,0x7fffde04c1a0
                                                                                            6⤵
                                                                                              PID:2812
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,17589056017395681416,7155020338346527357,524288 --field-trial-handle=2260,i,18027037204713377820,13662787471342257993,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:11
                                                                                              6⤵
                                                                                              • System Time Discovery
                                                                                              PID:6024
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,18337861306831617201,8751940118711019011,262144 --field-trial-handle=2260,i,18027037204713377820,13662787471342257993,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
                                                                                              6⤵
                                                                                                PID:4048
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,5166653423873704258,17194336110897600475,524288 --field-trial-handle=2260,i,18027037204713377820,13662787471342257993,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:13
                                                                                                6⤵
                                                                                                  PID:1612
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,13382112412496193363,4359906913390127542,2097152 --field-trial-handle=2260,i,18027037204713377820,13662787471342257993,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
                                                                                                  6⤵
                                                                                                    PID:5332
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,11399687873545942263,1120913308354789040,2097152 --field-trial-handle=2260,i,18027037204713377820,13662787471342257993,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
                                                                                                    6⤵
                                                                                                      PID:4496
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3416,i,8836278470324936171,3556884385887478389,2097152 --field-trial-handle=2260,i,18027037204713377820,13662787471342257993,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1
                                                                                                      6⤵
                                                                                                        PID:4580
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                                        6⤵
                                                                                                          PID:4604
                                                                                                      • C:\Users\Admin\AppData\Roaming\uTorrent\helper\helper.exe
                                                                                                        "C:\Users\Admin\AppData\Roaming\uTorrent\helper\helper.exe" 38274 --hval 6g3reXStnTLWnLb7 -- -pid 1012 -version 47390
                                                                                                        5⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        PID:3508
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6792,i,12024258732226468555,1435090778422976021,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6808 /prefetch:14
                                                                                                  2⤵
                                                                                                    PID:1980
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6232,i,10780510774425660346,5382025362223206412,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6244 /prefetch:14
                                                                                                    2⤵
                                                                                                      PID:1744
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6240,i,1858574103324745829,7201229305030162789,524288 --field-trial-handle=1900,i,18279790836433672044,17339872142053633520,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6784 /prefetch:14
                                                                                                      2⤵
                                                                                                        PID:3176
                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                      1⤵
                                                                                                        PID:5152
                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                        1⤵
                                                                                                          PID:2412
                                                                                                        • C:\Windows\SysWOW64\DllHost.exe
                                                                                                          C:\Windows\SysWOW64\DllHost.exe /Processid:{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
                                                                                                          1⤵
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          PID:2476
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                          1⤵
                                                                                                            PID:2640
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                            1⤵
                                                                                                            • Loads dropped DLL
                                                                                                            • Drops file in Windows directory
                                                                                                            • Enumerates system info in registry
                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                            PID:2640
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7fffde04c188,0x7fffde04c194,0x7fffde04c1a0
                                                                                                              2⤵
                                                                                                                PID:5996
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,9800432639099906113,161020849772566564,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:11
                                                                                                                2⤵
                                                                                                                • System Time Discovery
                                                                                                                PID:3888
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,10581740227177675189,10398619739804307363,262144 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
                                                                                                                2⤵
                                                                                                                  PID:5148
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,4206490130652405896,178966358873064623,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:13
                                                                                                                  2⤵
                                                                                                                    PID:856
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,9654449032358258192,16431519508181427338,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
                                                                                                                    2⤵
                                                                                                                      PID:4188
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,9654449032358258192,16431519508181427338,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:14
                                                                                                                      2⤵
                                                                                                                        PID:3624
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,5179686306405831897,9644639559668653959,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
                                                                                                                        2⤵
                                                                                                                          PID:6856
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,6343454287999502024,11755846555736418329,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
                                                                                                                          2⤵
                                                                                                                            PID:6864
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,7741775332693507414,4704755769286387444,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:14
                                                                                                                            2⤵
                                                                                                                              PID:6872
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3016,i,11286741631902779193,3828422398011230130,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:14
                                                                                                                              2⤵
                                                                                                                                PID:7020
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,2188370183637476767,2442726024761374117,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:14
                                                                                                                                2⤵
                                                                                                                                  PID:2516
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,13178752954366530147,1765211783888101136,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
                                                                                                                                  2⤵
                                                                                                                                    PID:6268
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,7455133127669511183,13392525623696623518,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:14
                                                                                                                                    2⤵
                                                                                                                                      PID:6560
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,2019390403681200732,11021544677095540402,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
                                                                                                                                      2⤵
                                                                                                                                        PID:4896
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,17150288033767761119,2654511660136709347,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
                                                                                                                                        2⤵
                                                                                                                                          PID:2804
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5264,i,3267719128467143721,7809396569276648615,262144 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:10
                                                                                                                                          2⤵
                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                          PID:3644
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,8280366317081812804,15983377096680420299,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:14
                                                                                                                                          2⤵
                                                                                                                                            PID:5516
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,15850011881898829645,7710593610593967660,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:14
                                                                                                                                            2⤵
                                                                                                                                              PID:1072
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4132,i,12493667281968505651,9503877548086949886,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:14
                                                                                                                                              2⤵
                                                                                                                                                PID:4892
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4092,i,13251278488333436600,13405357565773496005,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
                                                                                                                                                2⤵
                                                                                                                                                  PID:4484
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2976,i,3966120518875053832,10019356093344764350,524288 --field-trial-handle=2168,i,2240624876434475243,12651882231906363076,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:14
                                                                                                                                                  2⤵
                                                                                                                                                    PID:5056
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                  1⤵
                                                                                                                                                    PID:868
                                                                                                                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                                                                                                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                                                                                                                                    1⤵
                                                                                                                                                    • Modifies registry class
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:4604
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                                                    1⤵
                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                    • Modifies registry class
                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                                                                    • Suspicious use of SendNotifyMessage
                                                                                                                                                    PID:4536
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ff80128c728,0x7ff80128c734,0x7ff80128c740
                                                                                                                                                      2⤵
                                                                                                                                                        PID:3936
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1824,i,5682753148188307302,15327786395609585186,524288 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=2144 /prefetch:11
                                                                                                                                                        2⤵
                                                                                                                                                        • Downloads MZ/PE file
                                                                                                                                                        • System Time Discovery
                                                                                                                                                        PID:6480
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1616,i,2622917169192150012,8952894658708739074,262144 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=2112 /prefetch:2
                                                                                                                                                        2⤵
                                                                                                                                                          PID:6460
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,3658899153703905260,2879531139375886913,524288 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=2520 /prefetch:13
                                                                                                                                                          2⤵
                                                                                                                                                            PID:6708
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,12537430314071843925,18374356955573443176,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=3440 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:4728
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,12571750606846294886,1909900320781769133,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=3460 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:4240
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,16666724829840195622,5451570837674477464,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=4460 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:7072
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,16203046480621289962,16311225387412462270,524288 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5316 /prefetch:14
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:5512
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5660,i,555215810078247670,7770969899769467680,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5536 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:6556
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3596,i,15248876448325997274,11674606013764401164,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=3600 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:2516
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3536,i,13576044525603049580,4927416283628408781,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5412 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:1480
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3592,i,1733170361274002635,2585910494979574682,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5788 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:6664
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6056,i,11787119806425280503,1303381574598534606,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=3588 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:4016
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6272,i,9586633098197494387,2124267252659754668,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5696 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:6216
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5600,i,286588549965933118,9328345644578822380,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6056 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:3356
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,12672726266558140649,4550241367003174023,524288 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5608 /prefetch:14
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:7068
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3572,i,15173523369486042354,10934565814790150662,524288 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5768 /prefetch:14
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:4240
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,16585136263042600693,10946545201220460919,524288 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6088 /prefetch:14
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:4728
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5548,i,242659012656763049,2907362224035577114,262144 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5564 /prefetch:10
                                                                                                                                                                                        2⤵
                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                        PID:1572
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6152,i,12520503551940339877,7032129690466252885,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5312 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:3724
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6428,i,13291273935434713784,18103811255566209915,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6404 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:6132
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6104,i,11440707424166390007,4507092913861534452,524288 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6308 /prefetch:14
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:1052
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6168,i,17954897539853604594,955078044031561490,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5660 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:812
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5832,i,7918105822398179968,2191192174608347241,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6480 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:6212
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6288,i,4393446972081156441,15425221572559973854,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5696 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:3444
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5624,i,2155611413937612063,7433690049716855981,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6312 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:6784
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6324,i,5798165013299670145,8154766877661287304,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6660 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:4720
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6340,i,12678299429598562596,3956966682958502607,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5624 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:6628
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6568,i,16878701849409796164,15370423631898877260,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6552 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:6664
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3436,i,16300822104338898167,4790022111651529988,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6428 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:7144
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6348,i,9728945433112071727,13804451154864528945,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6744 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:4272
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=5636,i,987402266683818025,13643072555102161376,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6968 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:5804
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6796,i,3800058140668978126,3283364101654999291,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=7020 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:6200
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6600,i,16318052368387000267,682461120230172706,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=7156 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:6908
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=3436,i,17408430743117554733,12607477655014769424,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6496 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:6592
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6368,i,6942512089554423403,17314290469064702672,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=4504 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:4192
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6456,i,9921232925314059695,6789700546974486743,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6976 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:2268
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6220,i,5662063788293559088,16526954379901550843,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6120 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:6984
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=6732,i,4071972312295822099,6735018290354039610,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=7120 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:3532
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6068,i,16944993510165010960,2686434089454510807,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6256 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:3780
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7100,i,16423097364246777572,9810971104992109840,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=6080 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:6784
                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=7104,i,7948109717198508347,16517357364953553587,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5708 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:6256
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6804,i,5733352890041293822,8316025236574604423,2097152 --field-trial-handle=2116,i,11563730281148251789,14614252365447821867,262144 --variations-seed-version=20261023-170053.125000-production --mojo-platform-channel-handle=5696 /prefetch:1
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:3496
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                        PID:6732

                                                                                                                                                                                                                                      Network

                                                                                                                                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                            Reconnaissance

                                                                                                                                                                                                                                            Resource Development

                                                                                                                                                                                                                                            Initial Access

                                                                                                                                                                                                                                            Execution

                                                                                                                                                                                                                                            Command and Scripting Interpreter

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1059

                                                                                                                                                                                                                                            Windows Command Shell

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1059.003

                                                                                                                                                                                                                                            Persistence

                                                                                                                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1547

                                                                                                                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1547.001

                                                                                                                                                                                                                                            Privilege Escalation

                                                                                                                                                                                                                                            Boot or Logon Autostart Execution

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1547

                                                                                                                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1547.001

                                                                                                                                                                                                                                            Defense Evasion

                                                                                                                                                                                                                                            Modify Registry

                                                                                                                                                                                                                                            3
                                                                                                                                                                                                                                            T1112

                                                                                                                                                                                                                                            Subvert Trust Controls

                                                                                                                                                                                                                                            2
                                                                                                                                                                                                                                            T1553

                                                                                                                                                                                                                                            Install Root Certificate

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1553.004

                                                                                                                                                                                                                                            SIP and Trust Provider Hijacking

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1553.003

                                                                                                                                                                                                                                            Virtualization/Sandbox Evasion

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1497

                                                                                                                                                                                                                                            Credential Access

                                                                                                                                                                                                                                            Discovery

                                                                                                                                                                                                                                            Browser Information Discovery

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1217

                                                                                                                                                                                                                                            Network Share Discovery

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1135

                                                                                                                                                                                                                                            Peripheral Device Discovery

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1120

                                                                                                                                                                                                                                            Query Registry

                                                                                                                                                                                                                                            4
                                                                                                                                                                                                                                            T1012

                                                                                                                                                                                                                                            System Information Discovery

                                                                                                                                                                                                                                            4
                                                                                                                                                                                                                                            T1082

                                                                                                                                                                                                                                            System Location Discovery

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1614

                                                                                                                                                                                                                                            System Language Discovery

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1614.001

                                                                                                                                                                                                                                            System Network Configuration Discovery

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1016

                                                                                                                                                                                                                                            System Time Discovery

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1124

                                                                                                                                                                                                                                            Virtualization/Sandbox Evasion

                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                            T1497

                                                                                                                                                                                                                                            Lateral Movement

                                                                                                                                                                                                                                            Collection

                                                                                                                                                                                                                                            Command and Control

                                                                                                                                                                                                                                            Exfiltration

                                                                                                                                                                                                                                            Impact

                                                                                                                                                                                                                                            Replay Monitor

                                                                                                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                                                                                                            Downloads

                                                                                                                                                                                                                                            318c8462-3a5a-4af5-a646-29ec1e428506.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\318c8462-3a5a-4af5-a646-29ec1e428506.tmp
                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                            • SHA256 791d0d994273ce1a3eb32d16d3b6fd1ef7c9a7d2f600b0a1e02909ccd4199bcc
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            3e95d7fe-777a-4096-a124-d825dddc8a9a.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\3e95d7fe-777a-4096-a124-d825dddc8a9a.tmp
                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                            • SHA256 fbe291dab7cb1ff7c9ea96fbd79810b025173fcd2ba5802a1f5882f33dadac3e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            5f50543f-d187-41db-91f0-6b9e69d6ecc8.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\5f50543f-d187-41db-91f0-6b9e69d6ecc8.tmp
                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                            • SHA256 afa5fb6395ecd3c63200ca7f1c0e6da99dd4d90f03dfe87e5e49d3cf7ccd0e53
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            5ff62021-b53c-4afd-a0cb-92b011ffac7a.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\5ff62021-b53c-4afd-a0cb-92b011ffac7a.tmp
                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                            • SHA256 2cd4629edaaa8dd821f49d5565434721a0f6c5a34b64cfbe2c0758658b4fa65e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            6ec5d031-02e2-46d1-8680-1222b5147a07.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\6ec5d031-02e2-46d1-8680-1222b5147a07.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 184778ecf11eb63f1053c6a06128cc4ab8d6fcbe2bafeb16f8ba00c9a1faf0a8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            77ea1bbc-2709-4fdf-b73b-96caee572850.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\77ea1bbc-2709-4fdf-b73b-96caee572850.tmp
                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                            • SHA256 2afe3827960ad509371210010965de9ae7dd413abb8a3991e944c64e55e8c710
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            80dcea79-f323-403e-a4eb-a0bc0315b2ee.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\80dcea79-f323-403e-a4eb-a0bc0315b2ee.tmp
                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                            • SHA256 7fd37888e90d0e6495230057b9a90c8065e22c8c43e86a9a9dea7d0f8bc5da59
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            8d64dac1-4cbb-4314-a36f-ddc6f6871630.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\8d64dac1-4cbb-4314-a36f-ddc6f6871630.tmp
                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                            • SHA256 250ce2d5f9a039b124b683c6c227062f252ba0dc6526f3953ae5c96142274fef
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            9180745e-e0af-47d8-afd8-be714aa80d76.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\9180745e-e0af-47d8-afd8-be714aa80d76.tmp
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 28e9efb27dbc4c835a22ec6753d9f32f470616baf3d8a8ca49dc00829cab907d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            crl-set
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\CertificateRevocation\6498.2026.10.20\crl-set
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
                                                                                                                                                                                                                                            • Size 118B
                                                                                                                                                                                                                                            • SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                            • SHA256 ebe028d732ad1479cf890e51d7bd49c0abd01cbd00cbce47d48c27adfd3113cd
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                            • SHA256 3f1c2e4fddadf8d742876749b3f5c22159603b14eeb4f65f70d96939fde64d5e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                            • SHA256 d2bc39a72e32ae17f0aa81c2cd73a005160bd7b1320b641e12114cd9fd6bce7e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            throttle_store.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                                                                                                                            • Size 20B
                                                                                                                                                                                                                                            • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            0f0cd664-c2cf-4587-87de-0c2f9d2d1ad2.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\0f0cd664-c2cf-4587-87de-0c2f9d2d1ad2.tmp
                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                            • SHA256 27428ea4db75c6b59179a1071914c63b6aaf66cc64f86386163e137491ff172f
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            5dad2ef6-b104-458e-8eb1-3a51f08a11e3.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\5dad2ef6-b104-458e-8eb1-3a51f08a11e3.tmp
                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                            • SHA256 fa613c8d25d27fed5327f41817e3da663cce2cff4d5112ab543faae58f41ed14
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            63f034ec-d876-420e-8f97-9020f7d9faa2.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\63f034ec-d876-420e-8f97-9020f7d9faa2.tmp
                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                            • SHA256 69b7a37cf0e45b75a916385f59ab4f1cb14dc0d258432c72f9f11e6dabfdd47d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000005
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000005
                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                            • SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_00000f
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_00000f
                                                                                                                                                                                                                                            • Size 32KB
                                                                                                                                                                                                                                            • SHA256 90cc909fb42b2f7d04fe8a84fb64e8f022bb81969667765a96d22c1abe4bd24a
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000011
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000011
                                                                                                                                                                                                                                            • Size 119KB
                                                                                                                                                                                                                                            • SHA256 4f2e3108b4ae9decf37ea6178aba5ffc437826c48712d41a34ced2fd4222d941
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000012
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000012
                                                                                                                                                                                                                                            • Size 92KB
                                                                                                                                                                                                                                            • SHA256 b98bd7bf22bd59d586418d2cb8068ebd0298b9ab5571300091cd4987be0673e5
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000013
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Cache\Cache_Data\f_000013
                                                                                                                                                                                                                                            • Size 52KB
                                                                                                                                                                                                                                            • SHA256 3a8e9e651265c114720a3a8540b35e6b7908fcdbe878cbbf8d1c0de7d860d564
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index
                                                                                                                                                                                                                                            • Size 24B
                                                                                                                                                                                                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            temp-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 18174e938ac16139f1abd932ecb6a188161b3a7c18beeb6f82a8843e02a55c30
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            temp-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 c0f60fa7bfe19e28380e7513ce204a7d6aa5cf5142123b3c01e7ed2858a5fc59
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Favicons
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Favicons
                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                            • SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            History
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\History
                                                                                                                                                                                                                                            • Size 184KB
                                                                                                                                                                                                                                            • SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            78c5f03d-3722-47e0-ab07-2ae4b6f6002b.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\78c5f03d-3722-47e0-ab07-2ae4b6f6002b.tmp
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 4b36424285e825522430008ed30a14e217005840ceed0a2710e5ac5930357ec1
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            TransportSecurity
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 cd96cafab282bc69f18dd2aa5a443a46c99c42aa49a939863f7f43615bb42d8b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            e20d7ec4-1da9-4c17-a841-c78cdf597ea8.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\e20d7ec4-1da9-4c17-a841-c78cdf597ea8.tmp
                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                            • SHA256 a59bd955e0e508a60cd684adea744bde32eb4b1d15c0141ef02f5c4abc3deb69
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            e5d630fb-4654-4fd3-b38c-b82cc436f007.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Network\e5d630fb-4654-4fd3-b38c-b82cc436f007.tmp
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 b93fb121a666f13ead7dd42f2f8c032d5099cb23ffb82ec310eee8ebebecd22a
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Preferences
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Preferences
                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                            • SHA256 0ca60befacf8386378dd94a8d9b16355eb57660e4e801963a49257395aba36ee
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Secure Preferences
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Secure Preferences
                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                            • SHA256 57d5e1637a4a1afe5567af19794dbe4e8c99cd021be18130d1741cc6669773ef
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            temp-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                            • SHA256 15fab2a5ed0d00ee36e0e7171782f9b2a8dbc8cb9dd74dc42b23afcfcf3505b6
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            the-real-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                            • Size 48B
                                                                                                                                                                                                                                            • SHA256 d386f5523a2f8ff10032c2beef1dfe64d16a1bf657dad189b0544fa048b994af
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            LOG
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Site Characteristics Database\LOG
                                                                                                                                                                                                                                            • Size 321B
                                                                                                                                                                                                                                            • SHA256 e591bf8c5760f06c5ab4acc73f57f2116680a2233185b1a84eb2ff68f1d12beb
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            LOG
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG
                                                                                                                                                                                                                                            • Size 295B
                                                                                                                                                                                                                                            • SHA256 2ead5234b7a232c2687fd5e0f13f73b7876b3efdcbe03cd97d5e0ce2e5cd2c1d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Web Data
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\Web Data
                                                                                                                                                                                                                                            • Size 216KB
                                                                                                                                                                                                                                            • SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            fc35d30b-d84f-442f-b306-982cbb89cc9e.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Default\fc35d30b-d84f-442f-b306-982cbb89cc9e.tmp
                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                            • SHA256 ec8cca7f138501fa4df4fe6087d00d35a68f372d76bd4a3fbb2b927394318a2a
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Last Version
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Last Version
                                                                                                                                                                                                                                            • Size 14B
                                                                                                                                                                                                                                            • SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Local State
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Local State
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 4094d05fa6458968b714dbe16a75277a8af2383805e51b4fc2b1793d7afdb86f
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\OriginTrials\0.0.1.7\manifest.json
                                                                                                                                                                                                                                            • Size 43B
                                                                                                                                                                                                                                            • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\PKIMetadata\71.0.0.0\manifest.json
                                                                                                                                                                                                                                            • Size 102B
                                                                                                                                                                                                                                            • SHA256 4a918873dddefc4e395c8a9f8580c8f03c9a37512eb7da6e6454730be756fdac
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\RevisitationBloomfilter
                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                            • SHA256 75d13e1b13d6ab5d4eda632450bbf379047d407d9a311553e95d2a9ffa330052
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            data_1
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\ShaderCache\data_1
                                                                                                                                                                                                                                            • Size 264KB
                                                                                                                                                                                                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\ShaderCache\index
                                                                                                                                                                                                                                            • Size 256KB
                                                                                                                                                                                                                                            • SHA256 0dbc58b41d9ee690b2fc5d6e58ebedff20e30edf1d89c61ea9e80926926f4daf
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Speech Recognition\1.15.0.1\manifest.json
                                                                                                                                                                                                                                            • Size 76B
                                                                                                                                                                                                                                            • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\manifest.json
                                                                                                                                                                                                                                            • Size 116B
                                                                                                                                                                                                                                            • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Variations
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\Variations
                                                                                                                                                                                                                                            • Size 86B
                                                                                                                                                                                                                                            • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
                                                                                                                                                                                                                                            • Size 69B
                                                                                                                                                                                                                                            • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            cca5fc0d-effe-42fd-b1bf-c1706e3f413a.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\uTorrent.WebView2\EBWebView\cca5fc0d-effe-42fd-b1bf-c1706e3f413a.tmp
                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                            • SHA256 1107a95555d91ec0ae1d47d57708b17d48affa9dedac36b30b1d14eca87213be
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            2b5b1f82-639f-42a6-bcb2-1e3d91ce0d59.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2b5b1f82-639f-42a6-bcb2-1e3d91ce0d59.tmp
                                                                                                                                                                                                                                            • Size 269KB
                                                                                                                                                                                                                                            • SHA256 aeb1a7dcb2e0bd41100ae50534189d5cbade592bd24d2269ddce9afcb326b7de
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            2f8a095d-428c-4036-97d3-ce194285a995.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2f8a095d-428c-4036-97d3-ce194285a995.tmp
                                                                                                                                                                                                                                            • Size 144KB
                                                                                                                                                                                                                                            • SHA256 27c1df4cf65fcb19f49a72889f3c0d62cf0534e84df40c6db2fcb53b9e822bb1
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            395b92ba-bcad-4a58-a4db-595f724c9d96.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\395b92ba-bcad-4a58-a4db-595f724c9d96.tmp
                                                                                                                                                                                                                                            • Size 269KB
                                                                                                                                                                                                                                            • SHA256 36076e65fc39a1d5e0666bf58b7d9abc50e3a7ad578966153bbfd2153ab7ebd1
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            4744b9e1-71d9-4a2c-a589-c0eab0dcf0dd.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4744b9e1-71d9-4a2c-a589-c0eab0dcf0dd.tmp
                                                                                                                                                                                                                                            • Size 145KB
                                                                                                                                                                                                                                            • SHA256 fb928710f76d12677df1145c11c211414ee50933ab5e0762f438395f11b4f4b8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            88e33b74-fc0a-41b7-9c80-bf55b624094b.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\88e33b74-fc0a-41b7-9c80-bf55b624094b.tmp
                                                                                                                                                                                                                                            • Size 130KB
                                                                                                                                                                                                                                            • SHA256 0679bbfeca51050107c6483359cdf740477bf370c7e2e3735727d60ec04382fe
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            8aaf0f61-9d94-4be9-998f-0d12ec3bac88.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8aaf0f61-9d94-4be9-998f-0d12ec3bac88.tmp
                                                                                                                                                                                                                                            • Size 145KB
                                                                                                                                                                                                                                            • SHA256 eee8575a370f2fffda7f112efc52bc918269c10d1068bdab7727fad11d160376
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                            • Size 40B
                                                                                                                                                                                                                                            • SHA256 7cd4d930f4e2895a941e8cd451dfaa5d7afb0a4eab6b2c1ba3c0a9fac276c913
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            18c3ebcd-9b75-4c56-9a53-3fb12fca5e9b.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\18c3ebcd-9b75-4c56-9a53-3fb12fca5e9b.tmp
                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                            • SHA256 ff0050d128239ac7e967c6be7bab2e6ae863737481ad4ba48a2fdac80166a76c
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            1e1a2648-95e4-4017-93c2-1c64f5a5825b.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1e1a2648-95e4-4017-93c2-1c64f5a5825b.tmp
                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                            • SHA256 f8451423f41051488c72e8f897566e5f54cb8488cd6a045842586fed78cec1ca
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            28890bae-ae0f-45ba-8584-0b988de34e90.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\28890bae-ae0f-45ba-8584-0b988de34e90.tmp
                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                            • SHA256 bf716375292b692c53b91e86bfb96725e96ec025b295b9c79494aaad65617e1e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            6fb200e4-74fc-4f0c-af61-83fb7066dc4c.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6fb200e4-74fc-4f0c-af61-83fb7066dc4c.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 9dbf9888d3fc98d591bb835c899dd57cecba7c83ee208b0f73e099ab52aac64a
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            75efecc9-196d-48b9-8b3f-ad3b5cf4f544.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\75efecc9-196d-48b9-8b3f-ad3b5cf4f544.tmp
                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                            • SHA256 6f7d2a281b66fccbd198dfcbf9d88621bd5933eedc6eff88416700b018393bee
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            8da2c9ea-46e2-434f-b362-05019ee53979.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8da2c9ea-46e2-434f-b362-05019ee53979.tmp
                                                                                                                                                                                                                                            • Size 15KB
                                                                                                                                                                                                                                            • SHA256 77f3fc2024dc5a7d57bbca575c3f06e23b6747efeef3b4bb67e4fa9dc2a37268
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            97e08bd6-82a1-470f-b494-5150616db4a1.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\97e08bd6-82a1-470f-b494-5150616db4a1.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 56991b298982b459ce813ac72be0739534d3618a8f8c5b25df6d539f265369e4
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000007
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                                                                                                                                                                            • Size 350KB
                                                                                                                                                                                                                                            • SHA256 9213695e49135b2b4210878deefb3175bda171b6b435beac015f402684e5ddd0
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_00001f
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                                                                                                                                                                                                                            • Size 307KB
                                                                                                                                                                                                                                            • SHA256 f3444da33b1bd124ae8998002a22066285431b24ecf6bbb6150741bfb7f03258
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000042
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
                                                                                                                                                                                                                                            • Size 65KB
                                                                                                                                                                                                                                            • SHA256 3d6f82776851ac919182783691d0c03f0880988ae14a6dc69f896f976bbb1cd6
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000043
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043
                                                                                                                                                                                                                                            • Size 56KB
                                                                                                                                                                                                                                            • SHA256 ff80852bd3a87c2cebb0521ef91602a3e594f1678e1c7eb078fd8e884d642c54
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000045
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000045
                                                                                                                                                                                                                                            • Size 59KB
                                                                                                                                                                                                                                            • SHA256 cde5f17a82ec2b3fe8ca36b5124d34b0266d5a0c06c6f1eff4c17e2275f82ddd
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000049
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
                                                                                                                                                                                                                                            • Size 353KB
                                                                                                                                                                                                                                            • SHA256 2a98714aadf565ba592cef0a445de8c55b95bc03612d0046043752bbe46a588b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_00004e
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004e
                                                                                                                                                                                                                                            • Size 124KB
                                                                                                                                                                                                                                            • SHA256 b3476b0461e37e64bb1ebd7e7606402db012a7c1cc289ea7637d881bf9436268
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_00004f
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f
                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                            • SHA256 c0fd73b6c060d104ed1a60a3e4bb3a38efd72727deee40c7458de72fe14177ee
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000050
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000050
                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                            • SHA256 0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000051
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
                                                                                                                                                                                                                                            • Size 169KB
                                                                                                                                                                                                                                            • SHA256 83d37058213732ab8c93173cf8683e734be3828cc775025ff01c9efabd92cd8b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000052
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000052
                                                                                                                                                                                                                                            • Size 176KB
                                                                                                                                                                                                                                            • SHA256 582984ab57ead0b3ba727ca77353f37cc44c65bb12adc7830cad6157e3d4ad91
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000055
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000055
                                                                                                                                                                                                                                            • Size 36KB
                                                                                                                                                                                                                                            • SHA256 a931e259101cd858117abd851fa2f6d85b848324e71ed326d9588d22daf84d89
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000056
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056
                                                                                                                                                                                                                                            • Size 37KB
                                                                                                                                                                                                                                            • SHA256 06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000057
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
                                                                                                                                                                                                                                            • Size 176KB
                                                                                                                                                                                                                                            • SHA256 cd9328bc3331229f7a84451b49206af629a782cc75c58e7abd32015f0950a8ca
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_000058
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000058
                                                                                                                                                                                                                                            • Size 42KB
                                                                                                                                                                                                                                            • SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            temp-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 97b1ea13851d0a2d26566ffec98bd3923ac384d63c42e8aa6833d39d341df1f4
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            the-real-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 8d3f095eb59aac8a8aad6cfc709f49e0b586b1513ae8811ed487879a1e8ccdb7
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            messages.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                                                                                                            • Size 593B
                                                                                                                                                                                                                                            • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            craw_background.js
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                                                                                                            • Size 531KB
                                                                                                                                                                                                                                            • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            27617c5b-8984-40ab-bdc5-b082276db1e8.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\27617c5b-8984-40ab-bdc5-b082276db1e8.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 e3ed81ecda801768060ca4f8ad02cfed22676ba8d50a79f6af7dd5d89552f16d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            413bdd95-7dfa-42e8-a2b9-8f47014429ea.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\413bdd95-7dfa-42e8-a2b9-8f47014429ea.tmp
                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                            • SHA256 3f804d2bd85b98f3f42b29aa25cd8a24b3cecf0710dfa24745622e99cc9c1abd
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            bd82d1da-90c9-40d2-be8e-c5c1afc05b99.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\bd82d1da-90c9-40d2-be8e-c5c1afc05b99.tmp
                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                            • SHA256 035280ec08b2258f4f3280b3260e365ebbf54b804be400534147f9d7a103d3ad
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            c699d7c3-2379-42b2-ae95-eb5ea969cd67.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c699d7c3-2379-42b2-ae95-eb5ea969cd67.tmp
                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            d68caf18-3634-4fc3-95ab-e0646f4ef8c8.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d68caf18-3634-4fc3-95ab-e0646f4ef8c8.tmp
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 a071d69ce4cf507b53cde3410a07795e129fe5fe804567960893d138d94854bd
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f3a687d1-ca79-467a-bb69-5ad33fef8fa1.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f3a687d1-ca79-467a-bb69-5ad33fef8fa1.tmp
                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                            • SHA256 c8286b695e5ae91831418a298e82ae7795244712e2ea36404363fd6d7c60a4f5
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            temp-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                            • SHA256 944519a0494c20de65017da489acdf454f8e5c4e9e5ec221b9bb2f554eb3892f
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            temp-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                            • SHA256 657b571e14562d84d5d65f5be1865714970f3e36c181f373522f47e7d4b2a92a
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            temp-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                            • SHA256 738f451bdfdf6e0f4762ba3b397da4f663d77cdf4985c67b9ca90a9b145dc1d6
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            the-real-index
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                            • Size 48B
                                                                                                                                                                                                                                            • SHA256 26eebdc19a102f552db3ea2016d4583735bc9adf39f1a36a945943725fc88c99
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            data_0
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            data_1
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
                                                                                                                                                                                                                                            • Size 264KB
                                                                                                                                                                                                                                            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            data_2
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            data_3
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            CURRENT
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\CURRENT
                                                                                                                                                                                                                                            • Size 16B
                                                                                                                                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            MANIFEST-000001
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
                                                                                                                                                                                                                                            • Size 41B
                                                                                                                                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            138777a4-8191-46aa-8ae4-11bb9d7b1f50.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\138777a4-8191-46aa-8ae4-11bb9d7b1f50.tmp
                                                                                                                                                                                                                                            • Size 111B
                                                                                                                                                                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Network Persistent State
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
                                                                                                                                                                                                                                            • Size 59B
                                                                                                                                                                                                                                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            00000000
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\00\00000000
                                                                                                                                                                                                                                            • Size 1B
                                                                                                                                                                                                                                            • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            a0762dc1-87ea-4072-a9a8-671ba79b60a4.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a0762dc1-87ea-4072-a9a8-671ba79b60a4.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 1e45219839a3470ab6d5f0c910e4d2b6d90d9ffa580d676808bfbd488f7344b2
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            d34a306b-12d0-406d-91e3-57e19bb5b3ea.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d34a306b-12d0-406d-91e3-57e19bb5b3ea.tmp
                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                            • SHA256 206a80ccea973a68ff26a1c34a6b74714dcf9e24df7920e444b58fa92deebebc
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            e41e5609-4280-42bb-99ac-89c27c4f8756.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e41e5609-4280-42bb-99ac-89c27c4f8756.tmp
                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                            • SHA256 ece6c6aa2d3b15a032282a3dec5238f1022666c1441b23500610620daf0127f2
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f92bc22e-067e-4d54-ba24-445630750539.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f92bc22e-067e-4d54-ba24-445630750539.tmp
                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                            • SHA256 c2beb75cf0d935d084f82ca6b6101bdfee1243f7d71de824d01e68c25a950e06
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            fabdc238-b27c-4939-89e4-c88f039176b4.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fabdc238-b27c-4939-89e4-c88f039176b4.tmp
                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                            • SHA256 61276a8703dc4e16d8d329e51af40435b88b404991ddfaf781ec6b4e842a560b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            fb089e19-9432-46b5-83a3-a334e0e5aabc.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fb089e19-9432-46b5-83a3-a334e0e5aabc.tmp
                                                                                                                                                                                                                                            • Size 6B
                                                                                                                                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            a85d0453-4e1b-4b77-866f-0f27d418c889.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a85d0453-4e1b-4b77-866f-0f27d418c889.tmp
                                                                                                                                                                                                                                            • Size 144KB
                                                                                                                                                                                                                                            • SHA256 ce09e0aff168ac7d964ac2151650ff3110a060d7f1cd24664528bd5206a1c5f8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f00f0bc1-c9fc-4ca7-92af-d99bcb1aba2d.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f00f0bc1-c9fc-4ca7-92af-d99bcb1aba2d.tmp
                                                                                                                                                                                                                                            • Size 269KB
                                                                                                                                                                                                                                            • SHA256 c160f6bd95721f73f95712b5c40590988f44425fd94a5a968331e57530de9ca9
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            fd9507d2-1930-48fb-86ea-8e2c07b2aeed.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fd9507d2-1930-48fb-86ea-8e2c07b2aeed.tmp
                                                                                                                                                                                                                                            • Size 145KB
                                                                                                                                                                                                                                            • SHA256 ae76b6d08bb5338bf7fdb11e29bf2dbb37902ac299fc59b1bd235f868e25b4e9
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            25d3470e-4e56-4e50-a7fd-1efda749eb56.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\25d3470e-4e56-4e50-a7fd-1efda749eb56.tmp
                                                                                                                                                                                                                                            • Size 29KB
                                                                                                                                                                                                                                            • SHA256 84b4e230cfc2ddae7c6078e6b63237fcb4772faaa1a424275c95120b84390aac
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            5672db52-6b58-479c-a716-10662696e69d.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5672db52-6b58-479c-a716-10662696e69d.tmp
                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                            • SHA256 9ce246d4c7be82b4e2e95b000288c7824f30dc1b62f68e84627bf7eeef872416
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            587f4b6a-04da-4e9b-b532-540f52fa24c1.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\587f4b6a-04da-4e9b-b532-540f52fa24c1.tmp
                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                            • SHA256 df889a1c5470fdd26befc8a7590935e3d7d57669d834497cc84cb572a15336c9
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            632302ca-e863-439f-80c9-827a7e515085.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\632302ca-e863-439f-80c9-827a7e515085.tmp
                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                            • SHA256 3d7fb743bb2a13b082640e6321acd6bfd4005c8c8cae653a18fc8fe6c818a2df
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                            • SHA256 c9a92cbd849eecadff108aa705c8bffeefa88b48debb99ebb0a61da60d1ea55d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                            • SHA256 963d1ca64a1137b1f2bb5e19e82f0bf9af693419bf7e09e42fd77d5a9bb1b1c7
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            01631a01-d677-4119-bdf5-08e118f06f55.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01631a01-d677-4119-bdf5-08e118f06f55.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 0b593280bc80ff9a205a2374fe82e0f71a7ed271360c16469701c6f098dc3ff2
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            35a75eef-7c56-40b2-a1e9-7c36c3f09622.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35a75eef-7c56-40b2-a1e9-7c36c3f09622.tmp
                                                                                                                                                                                                                                            • Size 1B
                                                                                                                                                                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            592c3a7c-cec6-46ac-ba6c-c278eca1f26b.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\592c3a7c-cec6-46ac-ba6c-c278eca1f26b.tmp
                                                                                                                                                                                                                                            • Size 33KB
                                                                                                                                                                                                                                            • SHA256 e88d266a7bdd080347fceb13266cf777fe3353d85dc4423c4eb9f2d0ad3fca7b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            5c690b52-958e-4259-a2f4-b2a8b3724006.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5c690b52-958e-4259-a2f4-b2a8b3724006.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 0f877190f7afb11e3517d875a30e2fc86a0da32107e82435444948f971997923
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            65c95ba5-b62e-41b5-92ca-7aeda0c1cfa1.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\65c95ba5-b62e-41b5-92ca-7aeda0c1cfa1.tmp
                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                            • SHA256 ac426f191086fb0c094be5034e20bf5c6002463a3c0098dc6e9b0720906feb0e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            9ea43314-95dc-4b3f-9935-636ae0ffe920.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ea43314-95dc-4b3f-9935-636ae0ffe920.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 0a81a2fdab8a42fb21d61f54427adaf41c7d4d1e246ac8b14820694f8ecc871f
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            f_00005d
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                                                                                                                                                                                                            • Size 95KB
                                                                                                                                                                                                                                            • SHA256 912c278273055b194a0e2517eee6122adb1dfe30c0b7b1bffdf80d7a54387367
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            d46c85d6-4f15-4e09-a42d-7fe0f4b67620.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d46c85d6-4f15-4e09-a42d-7fe0f4b67620.tmp
                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            dasherSettingSchema.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                                                                                                                                                                                                            • Size 854B
                                                                                                                                                                                                                                            • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            5079bc91-fa42-42ab-8b60-c6251c7fec4a.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5079bc91-fa42-42ab-8b60-c6251c7fec4a.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 25ef17cb15725b59dea8d0f1e14c972052036531a2044ba5be44b724187d4fac
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            a56957dc-5e6d-4a22-8209-c8e5bef587d6.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a56957dc-5e6d-4a22-8209-c8e5bef587d6.tmp
                                                                                                                                                                                                                                            • Size 40B
                                                                                                                                                                                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            a73f1a35-d13f-4a56-a044-5ab78b604224.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a73f1a35-d13f-4a56-a044-5ab78b604224.tmp
                                                                                                                                                                                                                                            • Size 356B
                                                                                                                                                                                                                                            • SHA256 87407ab0278c4cdd9c0982641b6ab5b1acad1accebb169652cc76c5547f7ef1f
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            b6581287-ad7f-4a33-9eb9-74ebc3050d19.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b6581287-ad7f-4a33-9eb9-74ebc3050d19.tmp
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 63c744fb5c9966c06c5de02584b02c9201c5c5e1bf57e08407123f816573f09d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            sync_diagnostic.log
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                            • Size 23KB
                                                                                                                                                                                                                                            • SHA256 af6bdf92dc3f2686bb00ff00f67a8365469b0fb8da9af94eac762e7cd9c13dd5
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            c287ec22-3e95-41e1-88dd-f1adba8e78fb.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c287ec22-3e95-41e1-88dd-f1adba8e78fb.tmp
                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                            • SHA256 73050802245fca44cb8f90ab14d676a476fa23b43af80d4f4f817ba4e42681c2
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.26\manifest.json
                                                                                                                                                                                                                                            • Size 53B
                                                                                                                                                                                                                                            • SHA256 e1cd8395b2a987ed86c356bfae0952ae09f0cb012030690d6e23615698478f77
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            keys.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.10.12.1\keys.json
                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                            • SHA256 b0724d5592e6441a840c6622d7ad51caad2564a3746e563ce1f1bbde30944b2b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.10.12.1\manifest.json
                                                                                                                                                                                                                                            • Size 80B
                                                                                                                                                                                                                                            • SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.10.23.1\manifest.json
                                                                                                                                                                                                                                            • Size 119B
                                                                                                                                                                                                                                            • SHA256 306b47ad1400901a8a6e9c7a28e580cef84cfcb7f79a7daed81791c218bc00fb
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Web Notifications Deny List\2.0.0.158\manifest.json
                                                                                                                                                                                                                                            • Size 177B
                                                                                                                                                                                                                                            • SHA256 976e13362933c4e9d37530c32a043728f47136ff030f249ade8210d4d1300df6
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.3\manifest.json
                                                                                                                                                                                                                                            • Size 141B
                                                                                                                                                                                                                                            • SHA256 fe8c5046a79693a9b7f32bfc3ed7c8fdf84c5d186f5326a527ac508345a44009
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WidevineCdm\4.10.3112.0\manifest.json
                                                                                                                                                                                                                                            • Size 1005B
                                                                                                                                                                                                                                            • SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            cec38571-e2be-4746-9fc0-eb04351fc7de.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cec38571-e2be-4746-9fc0-eb04351fc7de.tmp
                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                            • SHA256 6866df395bf4499b225003378347b3e317f773eb155593d2fa88be3db7bae201
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            17a75249-fbf6-4d35-8130-da637fbca92c.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\17a75249-fbf6-4d35-8130-da637fbca92c.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 4401fa01588dd44b04dc76a941bb6eb287d7d04a637702447aafaca82815645c
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            67815fe1-28a0-4ef3-8877-dfeb7dec53c1.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\67815fe1-28a0-4ef3-8877-dfeb7dec53c1.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 27494c019f4265c0eb8b18ab6ebb73e6d72ab69f44ca76148b8cb600eaad5b61
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            8ae0876a-7a09-469f-816a-8c2d177b9ba2.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\8ae0876a-7a09-469f-816a-8c2d177b9ba2.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 fabaf924f4555c656bd7870288b2f63e41476885ee99b854209f217d2553721e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            96135d58-3fdc-4fa2-bf60-635bc76f364d.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\96135d58-3fdc-4fa2-bf60-635bc76f364d.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 139f772acba85848313176c1c60e514a8667b9aecfdbba0d654c82e98bc448ab
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            bbe38daf-fd27-4a5c-a87c-9ee4bd69b870.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\bbe38daf-fd27-4a5c-a87c-9ee4bd69b870.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 26324f5542622d4fafd20d105d895b22061687bd2ca7d6e4ba2b8449f17ef3f3
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            dff03596-c34e-475f-945b-9bcea6f76524.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\dff03596-c34e-475f-945b-9bcea6f76524.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 e74dd221adb3d3a6fa7b8a7748ecb094253ceccb29b984e005ea685eea6198e9
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            ee4f56e6-4682-4a99-aeb2-c72fc8e0419a.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\ee4f56e6-4682-4a99-aeb2-c72fc8e0419a.tmp
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 b55be1ff47b580eca97a998db17a980aa7132d87165af4a60d26e330c660ad05
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            metadata.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 57a34b817ecc5ae6cf222addeed7718e484b1f3b31b9222255a4eb78b9db2363
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            de6cc5a4-616e-438b-a243-0fe152d0cdfe.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\de6cc5a4-616e-438b-a243-0fe152d0cdfe.tmp
                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                            • SHA256 0b37b1a6d32454a0416ed1137c353035c0d8035289b2f79f7fe712df2e47ca98
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                                                                                                            • Size 158KB
                                                                                                                                                                                                                                            • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            aac96b60-ac38-4fd3-a0d5-d052192f3a3f.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aac96b60-ac38-4fd3-a0d5-d052192f3a3f.tmp
                                                                                                                                                                                                                                            • Size 132B
                                                                                                                                                                                                                                            • SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            d89bf941-6921-43ae-a5ac-f3d7f987dd52.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\d89bf941-6921-43ae-a5ac-f3d7f987dd52.tmp
                                                                                                                                                                                                                                            • Size 242KB
                                                                                                                                                                                                                                            • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            INetC.dll
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsv1CE6.tmp\INetC.dll
                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                            • SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            System.dll
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsv1CE6.tmp\System.dll
                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                            • SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            crashpad_handler.exe
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsv1CE6.tmp\crashpad_handler.exe
                                                                                                                                                                                                                                            • Size 736KB
                                                                                                                                                                                                                                            • SHA256 e047fddae1687509baa7461c9f75af7e0b900af837ab54a8aece26d831d68180
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            nsisFirewall.dll
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsv1CE6.tmp\nsisFirewall.dll
                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                            • SHA256 53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            utorrent.exe
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsv1CE6.tmp\utorrent.exe
                                                                                                                                                                                                                                            • Size 8.9MB
                                                                                                                                                                                                                                            • SHA256 ff5415b72cef625fca65f002bb1a27cabe652264a722342028c5c523ea0874a2
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            messages.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2052_875154404\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                            • Size 450B
                                                                                                                                                                                                                                            • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            messages.json
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2640_1362392121\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                                                                                                                                                            • Size 711B
                                                                                                                                                                                                                                            • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            utt2F45.tmp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\utt2F45.tmp
                                                                                                                                                                                                                                            • Size 170B
                                                                                                                                                                                                                                            • SHA256 19c2aa2ffeefa9aaee8ca7758c86075abf033119acbff40213622eb2356107c2
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            1f91d2d17ea675d4c2c3192e241743f9_3ce5b361-a418-49f6-a3dc-b0185c2e35b7
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1570888168-524493533-3242721904-1000\1f91d2d17ea675d4c2c3192e241743f9_3ce5b361-a418-49f6-a3dc-b0185c2e35b7
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 339687be2e218c8365d2165ec6634201fc7c799eeff5aee76333d8953cbd8ec9
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            default.dic
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            1JVJLBP77UGGECYVPW6Y.temp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1JVJLBP77UGGECYVPW6Y.temp
                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                            • SHA256 91c988853c28372640d8f9538ebd8de9208ff97d1d941a89844a8925719ffe4e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            5d696d521de238c3.customDestinations-ms
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                            • SHA256 873246003d193280a287dac67aa4e87ea05e01d7ca045a57e3125ec8020f4e2e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            ER4719LIVMAMAB6ST02J.temp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ER4719LIVMAMAB6ST02J.temp
                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                            • SHA256 c4fb35a6feb0ac819dd6849c056bfd3d8f0ced8a6ec966a7c4358351f0afb0cc
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            updates.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\uTorrent\updates.dat
                                                                                                                                                                                                                                            • Size 344B
                                                                                                                                                                                                                                            • SHA256 b42324bb5fcf31447e52206d241a4ad43732d1198e55a6c36162119289c613bb
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            utorrentie.exe
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.6.0_47390\utorrentie.exe
                                                                                                                                                                                                                                            • Size 693KB
                                                                                                                                                                                                                                            • SHA256 8e084f6197954953dee8cb6f737a12baad54b2592734c8d13355f7571efd8cd1
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            165F6EF40A81DD175FFAEA69E77ABFD30B27E71C
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\dlimagecache\165F6EF40A81DD175FFAEA69E77ABFD30B27E71C
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 ec9e7c253d599175af470832da851cf4f59614a4c4d4e37183159801b13abf5f
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            helper.exe
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\helper\helper.exe
                                                                                                                                                                                                                                            • Size 8.5MB
                                                                                                                                                                                                                                            • SHA256 26f431428fc725af9c71fffd0eaed4ea1895329af8181d275d37ccb3457076f1
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            helper_web_ui.btinstall
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\helper_web_ui.btinstall
                                                                                                                                                                                                                                            • Size 7.4MB
                                                                                                                                                                                                                                            • SHA256 4325244a7c1b300cd6006c6d4d8ee6335c4b04284b3677748de614d6acfae86d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            resume.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\resume.dat
                                                                                                                                                                                                                                            • Size 77B
                                                                                                                                                                                                                                            • SHA256 8fa6b2a084c07a34d258341278a3a3aed01a35671deb796b9054640979afef87
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            resume.dat.temp
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\resume.dat.temp
                                                                                                                                                                                                                                            • Size 21B
                                                                                                                                                                                                                                            • SHA256 5c280b9eb0a3e0f2fdf76d6e3393e1d682dfec66694e1b3eda86b72bc13a3d8e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\settings.dat
                                                                                                                                                                                                                                            • Size 15KB
                                                                                                                                                                                                                                            • SHA256 bdf639e875a6bb0af13fba3f0848960dc56cec74d7f26aa71bba720defe3adc8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\settings.dat
                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                            • SHA256 dbb087d839e7d67e28f0c4ef863f9851b17e359e71631e9e520c13510ceb7cda
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\settings.dat
                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                            • SHA256 219c6d47c709bbf7e103721ad52d5db502d391900520b7df2851d5f9fd35a7a3
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\settings.dat
                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                            • SHA256 bd9874a5ca28dc4315533398172511c18ffc0fa7f7a8e05823bd7b8a36c9bda6
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            settings.dat
                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\utorrent\settings.dat
                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                            • SHA256 c3a7ef50f5372c524756d8921266b506d4f54947bfeb9105608a788d1458ce58
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Unconfirmed 607498.crdownload
                                                                                                                                                                                                                                            • Path C:\Users\Admin\Downloads\Unconfirmed 607498.crdownload
                                                                                                                                                                                                                                            • Size 4.0MB
                                                                                                                                                                                                                                            • SHA256 b1646a1a4880c319856801b2799b0b2bfed256c7e18de3daed182261e696f44e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            utorrent_installer.exe:Zone.Identifier
                                                                                                                                                                                                                                            • Path C:\Users\Admin\Downloads\utorrent_installer.exe:Zone.Identifier
                                                                                                                                                                                                                                            • Size 237B
                                                                                                                                                                                                                                            • SHA256 62389dab182d632fdb3e841edfbc9631a4be75c12e2eee239d0ccdcb978c214c
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            LICENSE
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1196942729\LICENSE
                                                                                                                                                                                                                                            • Size 473B
                                                                                                                                                                                                                                            • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            verified_contents.json
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1196942729\_metadata\verified_contents.json
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 a6ce8c1d0d27c54034e67a83270bf3fd2bdfcc45ffc4b9084357169c00c90f77
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            widevinecdm.dll
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1196942729\_platform_specific\win_x64\widevinecdm.dll
                                                                                                                                                                                                                                            • Size 21.9MB
                                                                                                                                                                                                                                            • SHA256 e1f9ad648017e2cb0f0cd798d815dc51012b279ba32571e7b6eb5120b0ed2c05
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            widevinecdm.dll.sig
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1196942729\_platform_specific\win_x64\widevinecdm.dll.sig
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 868171d91275d1e180a452621f66428afec0a9288ab96344ce92fc904ac1f70d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            LICENSE
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1202398332\LICENSE
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            verified_contents.json
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1202398332\_metadata\verified_contents.json
                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                            • SHA256 c9e76a313bb06d9d761611d7cb8c2ab8de59eb9959b77458138630dacebaeb0e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            well_known_domains.dll
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1248314182\well_known_domains.dll
                                                                                                                                                                                                                                            • Size 86KB
                                                                                                                                                                                                                                            • SHA256 f63a806e2b89ed1db25687026abff5df4675a82a13882cdb2a47d1b08d2c996e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            deny_domains.list
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1412135939\deny_domains.list
                                                                                                                                                                                                                                            • Size 12B
                                                                                                                                                                                                                                            • SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            deny_etld1_domains.list
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1412135939\deny_etld1_domains.list
                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                            • SHA256 1c999530d7fed6e4346d8cfb3933a044055544eea970efc00b114505b9cd3a86
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            deny_full_domains.list
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_1412135939\deny_full_domains.list
                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                            • SHA256 19e871f69e774c847717469957dd18f342712e702d2c54c5efb8542907bcbabd
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            typosquatting_list.pb
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_209849845\typosquatting_list.pb
                                                                                                                                                                                                                                            • Size 1.4MB
                                                                                                                                                                                                                                            • SHA256 1426f19ffeb8a2dea6e43467649ac78a4d44de9826c2823180a0c9df277577f4
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            data.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2640_481128052\data.txt
                                                                                                                                                                                                                                            • Size 152KB
                                                                                                                                                                                                                                            • SHA256 bf2c0a94df6f6a32ea1072e61ed3767c23fb8b3e864b0f6144f65c4b8e477338
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Filtering Rules
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Filtering Rules
                                                                                                                                                                                                                                            • Size 2.1MB
                                                                                                                                                                                                                                            • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Filtering Rules-AA
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Filtering Rules-AA
                                                                                                                                                                                                                                            • Size 2.3MB
                                                                                                                                                                                                                                            • SHA256 95beb1f39b4cd5b29f5ebaced4a33753fb0bb876f078ed3de041f12be16cec5c
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Filtering Rules-CA
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Filtering Rules-CA
                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                            • SHA256 65aa171487dca70aad69973d0459c6a4b0882fcc6223bdfb53cd9ab711c5b125
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            LICENSE
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\LICENSE
                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                            • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Part-DE
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Part-DE
                                                                                                                                                                                                                                            • Size 305KB
                                                                                                                                                                                                                                            • SHA256 367ad4a5699a69499d13e8bf9ed5e8bab3573e3731ff8127178e539735ba46a8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Part-ES
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Part-ES
                                                                                                                                                                                                                                            • Size 137KB
                                                                                                                                                                                                                                            • SHA256 55e005c8aea4180093fcb56f4ddeb9fc763892d8cf1fcc840f612a7531b7ed18
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Part-FR
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Part-FR
                                                                                                                                                                                                                                            • Size 528KB
                                                                                                                                                                                                                                            • SHA256 56e80041432156be4f08bac11e3494f2f06f65b61a60b7dcb61d15debb7b318c
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Part-IT
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Part-IT
                                                                                                                                                                                                                                            • Size 216KB
                                                                                                                                                                                                                                            • SHA256 e1552312fc16e0f279e72f7eb4189a47e0beb36733220b0ef605f66defcc5fa7
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Part-NL
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Part-NL
                                                                                                                                                                                                                                            • Size 79KB
                                                                                                                                                                                                                                            • SHA256 935465fc40adbb4ae89ba37542ed37609014666c67fdf5115927809d69144b41
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Part-RU
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Part-RU
                                                                                                                                                                                                                                            • Size 1.2MB
                                                                                                                                                                                                                                            • SHA256 f8abf856660805e271d9d2033accf4f8cc43b19b7662fc2b96f56739229a90fe
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Part-ZH
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\Part-ZH
                                                                                                                                                                                                                                            • Size 686KB
                                                                                                                                                                                                                                            • SHA256 9645edd48b978354345b657bacb3f30be1f450300856a82ba4d5dbf1236c7c9e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            adblock_snippet.js
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\adblock_snippet.js
                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                            • SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.fingerprint
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1106201257\manifest.fingerprint
                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                            • SHA256 b1c8d3a1e8d3d85433eaa60a50001e5d1599809fb03a7b31bc19f963058a0d54
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            crs.pb
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1168550810\crs.pb
                                                                                                                                                                                                                                            • Size 286KB
                                                                                                                                                                                                                                            • SHA256 1a5fc66d5c38a3a0e99b6a90120b7abd3c42bdc3fb9b62e99fca271898550d6b
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            ct_config.pb
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1168550810\ct_config.pb
                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                            • SHA256 fb01dc73c575e6426d637f6c72d3ba253b21b8a183c3f9e8d5da67a4353fe24d
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            kp_pinslist.pb
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1168550810\kp_pinslist.pb
                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                            • SHA256 fcd4c7afc4b9465b47e9f0eff7d7b01af9fb2a8ed7b812df123673d95823a2f9
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.fingerprint
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1168550810\manifest.fingerprint
                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                            • SHA256 7bfd6cbdef90a0201e9f1c180f12f2c67a0bedd1fbe517e9c4ac874570eb4dc5
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.fingerprint
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1500160707\manifest.fingerprint
                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                            • SHA256 9136f7c8a30419dc70fbe015784d1e8590a197ba88b564ca26b5a1e918e1b850
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            Microsoft.CognitiveServices.Speech.core.dll
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1621403645\Microsoft.CognitiveServices.Speech.core.dll
                                                                                                                                                                                                                                            • Size 2.6MB
                                                                                                                                                                                                                                            • SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.fingerprint
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1621403645\manifest.fingerprint
                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                            • SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.fingerprint
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1960286734\manifest.fingerprint
                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                            • SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.fingerprint
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_1961144705\manifest.fingerprint
                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                            • SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            english_wikipedia.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\english_wikipedia.txt
                                                                                                                                                                                                                                            • Size 269KB
                                                                                                                                                                                                                                            • SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            female_names.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\female_names.txt
                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                            • SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            male_names.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\male_names.txt
                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                            • SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            manifest.fingerprint
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\manifest.fingerprint
                                                                                                                                                                                                                                            • Size 66B
                                                                                                                                                                                                                                            • SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            model.markov
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\model.markov
                                                                                                                                                                                                                                            • Size 44KB
                                                                                                                                                                                                                                            • SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            passwords.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\passwords.txt
                                                                                                                                                                                                                                            • Size 233KB
                                                                                                                                                                                                                                            • SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            ranked_dicts
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\ranked_dicts
                                                                                                                                                                                                                                            • Size 865KB
                                                                                                                                                                                                                                            • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            surnames.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\surnames.txt
                                                                                                                                                                                                                                            • Size 74KB
                                                                                                                                                                                                                                            • SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            test.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\test.txt
                                                                                                                                                                                                                                            • Size 15B
                                                                                                                                                                                                                                            • SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            us_tv_and_film.txt
                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3636_814454815\us_tv_and_film.txt
                                                                                                                                                                                                                                            • Size 159KB
                                                                                                                                                                                                                                            • SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                            Submit Download

                                                                                                                                                                                                                                            memory/1368-1666-0x00000230E45B0000-0x00000230E464E000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/2080-1704-0x0000023BE1FA0000-0x0000023BE203E000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/2176-1665-0x0000024C7DF40000-0x0000024C7DFDE000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/2288-1667-0x000001704AA50000-0x000001704AAEE000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3332-1466-0x0000020094340000-0x00000200943DE000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3768-2731-0x0000029A7BC60000-0x0000029A7BCFE000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2548-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2539-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2549-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2550-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2551-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2546-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2545-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2547-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2540-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/3928-2541-0x000001AC5BDC0000-0x000001AC5BDC1000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/4648-1267-0x000001295D610000-0x000001295D6AE000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/5332-901-0x00007FF80F800000-0x00007FF80F801000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/5332-991-0x0000019EE5210000-0x0000019EE52AE000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/5728-1184-0x000002C4F4660000-0x000002C4F46FE000-memory.dmp
                                                                                                                                                                                                                                            Download

                                                                                                                                                                                                                                            memory/5728-1071-0x00007FF80F800000-0x00007FF80F801000-memory.dmp
                                                                                                                                                                                                                                            Download