General

  • Target
    Motrix-Setup-2.1.1.exe
  • Size 127.4MB
  • Sample261029-zhkhnaszcs
  • SHA256 13acb6c9851318d39556a6b25a0917362656d9eae41f75cc907dccc0ec597619
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Motrix-Setup-2.1.1.exe
    .exe 127.4MB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/UAC.dll
    .dll 14KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/app-64.7z
    .7z 125.7MB
  • LICENSE.electron.txt
    1KB
  • LICENSES.chromium.html
    5.4MB
  • Motrix.exe
    .exe 238.6MB
  • Motrix_wer.dll
    .dll 415KB
  • chrome_100_percent.pak
    555KB
  • chrome_200_percent.pak
    906KB
  • d3dcompiler_47.dll
    .dll 4.5MB
  • dxcompiler.dll
    .dll 24.6MB
  • ffmpeg.dll
    .dll 3.0MB
  • icudtl.dat
    10.3MB
  • locales/af.pak
    626KB
  • locales/am.pak
    1012KB
  • locales/ar.pak
    1.1MB
  • locales/bg.pak
    1.1MB
  • locales/bn.pak
    1.5MB
  • locales/ca.pak
    707KB
  • locales/cs.pak
    736KB
  • locales/da.pak
    658KB
  • locales/de.pak
    710KB
  • locales/el.pak
    1.2MB
  • locales/en-GB.pak
    571KB
  • locales/en-US.pak
    578KB
  • locales/es-419.pak
    697KB
  • locales/es.pak
    694KB
  • locales/et.pak
    634KB
  • locales/fa.pak
    1.0MB
  • locales/fi.pak
    647KB
  • locales/fil.pak
    731KB
  • locales/fr.pak
    756KB
  • locales/gu.pak
    1.4MB
  • locales/he.pak
    918KB
  • locales/hi.pak
    1.5MB
  • locales/hr.pak
    707KB
  • locales/hu.pak
    757KB
  • locales/id.pak
    627KB
  • locales/it.pak
    684KB
  • locales/ja.pak
    833KB
  • locales/kn.pak
    1.7MB
  • locales/ko.pak
    713KB
  • locales/lt.pak
    766KB
  • locales/lv.pak
    764KB
  • locales/ml.pak
    1.7MB
  • locales/mr.pak
    1.4MB
  • locales/ms.pak
    661KB
  • locales/nb.pak
    628KB
  • locales/nl.pak
    656KB
  • locales/pl.pak
    734KB
  • locales/pt-BR.pak
    689KB
  • locales/pt-PT.pak
    691KB
  • locales/ro.pak
    716KB
  • locales/ru.pak
    1.2MB
  • locales/sk.pak
    748KB
  • locales/sl.pak
    712KB
  • locales/sr.pak
    1.1MB
  • locales/sv.pak
    639KB
  • locales/sw.pak
    675KB
  • locales/ta.pak
    1.7MB
  • locales/te.pak
    1.6MB
  • locales/th.pak
    1.3MB
  • locales/tr.pak
    690KB
  • locales/uk.pak
    1.2MB
  • locales/ur.pak
    1.0MB
  • locales/vi.pak
    819KB
  • locales/zh-CN.pak
    585KB
  • locales/zh-TW.pak
    578KB
  • resources.pak
    12.8MB
  • resources/THIRD_PARTY_LICENSES/MPL-2.0
    15KB
  • resources/THIRD_PARTY_LICENSES/aria2-COPYING
    17KB
  • resources/THIRD_PARTY_LICENSES/aria2-LICENSE.OpenSSL
    6KB
  • resources/THIRD_PARTY_LICENSES/rust-base64-LICENSE-APACHE
    10KB
  • resources/THIRD_PARTY_LICENSES/rust-base64-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-bitflags-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-block-buffer-LICENSE-APACHE
    10KB
  • resources/THIRD_PARTY_LICENSES/rust-block-buffer-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-cfg-if-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-common-LICENSE-APACHE
    9KB
  • resources/THIRD_PARTY_LICENSES/rust-common-LICENSE-MIT
    1023B
  • resources/THIRD_PARTY_LICENSES/rust-cpufeatures-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-crypto-common-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-digest-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-errno-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-generic-array-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-hkdf-LICENSE-APACHE
    10KB
  • resources/THIRD_PARTY_LICENSES/rust-hkdf-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-humantime-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-libc-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-linux-raw-sys-COPYRIGHT
    881B
  • resources/THIRD_PARTY_LICENSES/rust-linux-raw-sys-LICENSE-MIT
    1023B
  • resources/THIRD_PARTY_LICENSES/rust-memchr-COPYING
    126B
  • resources/THIRD_PARTY_LICENSES/rust-memchr-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-memchr-UNLICENSE
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-rustix-COPYRIGHT
    853B
  • resources/THIRD_PARTY_LICENSES/rust-rustix-LICENSE-MIT
    1023B
  • resources/THIRD_PARTY_LICENSES/rust-sha2-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-subtle-LICENSE
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-typenum-LICENSE-APACHE
    10KB
  • resources/THIRD_PARTY_LICENSES/rust-typenum-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-unicode-ident-LICENSE-UNICODE
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-version_check-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_LICENSES/rust-windows-rs-LICENSE-MIT
    1KB
  • resources/THIRD_PARTY_NOTICES.md
    14KB
  • resources/THIRD_PARTY_NOTICES.zh-CN.md
    14KB
  • resources/app-update.yml
    97B
  • resources/app.asar
    16.6MB
  • resources/app.asar.unpacked/dist/renderer/app-icon.png
    .png 102KB
  • resources/app.asar.unpacked/dist/renderer/apple-touch-icon.png
    .png 3KB
  • resources/app.asar.unpacked/dist/renderer/assets/add-task-window-BEnE3OCX.js
    .js 1KB
  • resources/app.asar.unpacked/dist/renderer/assets/app-root-BrgbBR-n.css
    232KB
  • resources/app.asar.unpacked/dist/renderer/assets/app-root-CGB6XJW5.js
    .js 1.9MB
  • resources/app.asar.unpacked/dist/renderer/assets/app-settings-Df9bd-AE.js
    .js 13KB
  • resources/app.asar.unpacked/dist/renderer/assets/ar-DvrvF5TR.js
    .js 175KB
  • resources/app.asar.unpacked/dist/renderer/assets/bg-vt0TKTiJ.js
    .js 205KB
  • resources/app.asar.unpacked/dist/renderer/assets/browser-edge-BDohVkL2.png
    .png 7KB
  • resources/app.asar.unpacked/dist/renderer/assets/browser-firefox-CPKSyRn2.png
    .png 7KB
  • resources/app.asar.unpacked/dist/renderer/assets/browser-safari-BYbMHBKA.webp
    7KB
  • resources/app.asar.unpacked/dist/renderer/assets/ca-DRVxuXw0.js
    .js 148KB
  • resources/app.asar.unpacked/dist/renderer/assets/call-graph-engine-h2GIZhy5.js
    .js 5KB
  • resources/app.asar.unpacked/dist/renderer/assets/de-BthVxfiW.js
    .js 148KB
  • resources/app.asar.unpacked/dist/renderer/assets/el-CDY1lwfW.js
    .js 213KB
  • resources/app.asar.unpacked/dist/renderer/assets/elk-worker.min-CsFgvLym.js
    .js 1.4MB
  • resources/app.asar.unpacked/dist/renderer/assets/es-C4WFOPy4.js
    .js 145KB
  • resources/app.asar.unpacked/dist/renderer/assets/fa-DMoWA4o4.js
    .js 182KB
  • resources/app.asar.unpacked/dist/renderer/assets/fr-D3Ct7-E6.js
    .js 151KB
  • resources/app.asar.unpacked/dist/renderer/assets/hu-DxjwRrvl.js
    .js 151KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    4KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    7KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    7KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    5KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    4KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    4KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    5KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    16KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    5KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    8KB
  • resources/app.asar.unpacked/dist/renderer/assets/id-hAGTgg6G.js
    .js 134KB
  • resources/app.asar.unpacked/dist/renderer/assets/index-mInq-V8v.js
    .js 374KB
  • resources/app.asar.unpacked/dist/renderer/assets/inter-cyrillic-ext-wght-normal-BOeWTOD4.woff2
    25KB
  • resources/app.asar.unpacked/dist/renderer/assets/inter-cyrillic-wght-normal-DqGufNeO.woff2
    18KB
  • resources/app.asar.unpacked/dist/renderer/assets/inter-greek-ext-wght-normal-DlzME5K_.woff2
    10KB
  • resources/app.asar.unpacked/dist/renderer/assets/inter-greek-wght-normal-CkhJZR-_.woff2
    18KB
  • resources/app.asar.unpacked/dist/renderer/assets/inter-latin-ext-wght-normal-DO1Apj_S.woff2
    83KB
  • resources/app.asar.unpacked/dist/renderer/assets/inter-latin-wght-normal-Dx4kXJAl.woff2
    47KB
  • resources/app.asar.unpacked/dist/renderer/assets/inter-vietnamese-wght-normal-CBcvBZtf.woff2
    10KB
  • resources/app.asar.unpacked/dist/renderer/assets/it-m_AKUY3_.js
    .js 145KB
  • resources/app.asar.unpacked/dist/renderer/assets/ja-Be4oyoLJ.js
    .js 164KB
  • resources/app.asar.unpacked/dist/renderer/assets/ko-zgZv8kwZ.js
    .js 149KB
  • resources/app.asar.unpacked/dist/renderer/assets/nb-vSlhWe0g.js
    .js 136KB
  • resources/app.asar.unpacked/dist/renderer/assets/nl-CDSQx6T0.js
    .js 140KB
  • resources/app.asar.unpacked/dist/renderer/assets/onboarding-window-CfSJZ2nm.js
    .js 6KB
  • resources/app.asar.unpacked/dist/renderer/assets/operation-form-DF0D0DjI.js
    .js 29KB
  • resources/app.asar.unpacked/dist/renderer/assets/pl-rJM4SS6x.js
    .js 146KB
  • resources/app.asar.unpacked/dist/renderer/assets/pt-BR-DYyd0Xmv.js
    .js 144KB
  • resources/app.asar.unpacked/dist/renderer/assets/renderer-BeU_TWSH.js
    .js 13KB
  • resources/app.asar.unpacked/dist/renderer/assets/ro-Cnp6cUnX.js
    .js 146KB
  • resources/app.asar.unpacked/dist/renderer/assets/rolldown-runtime-COiEfhsA.js
    .js 1KB
  • resources/app.asar.unpacked/dist/renderer/assets/ru-DXmCYEUC.js
    .js 201KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    6KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    4KB
  • resources/app.asar.unpacked/dist/renderer/assets/[email protected]
    4KB
  • resources/app.asar.unpacked/dist/renderer/assets/th-Be3XaYup.js
    .js 232KB
  • resources/app.asar.unpacked/dist/renderer/assets/tr-rLetSOcI.js
    .js 142KB
  • resources/app.asar.unpacked/dist/renderer/assets/uk-DfbVBbmM.js
    .js 201KB
  • resources/app.asar.unpacked/dist/renderer/assets/useAriaLabelledBy-2X3RQvRc.js
    .js 147KB
  • resources/app.asar.unpacked/dist/renderer/assets/useAriaLabelledBy-BxRureef.css
    518B
  • resources/app.asar.unpacked/dist/renderer/assets/useLabelableId-BhatPOGD.js
    .js 250KB
  • resources/app.asar.unpacked/dist/renderer/assets/vi-C1YmLtsy.js
    .js 156KB
  • resources/app.asar.unpacked/dist/renderer/assets/zh-TW-CTJpD5hl.js
    .js 125KB
  • resources/app.asar.unpacked/dist/renderer/favicon.ico
    4KB
  • resources/app.asar.unpacked/dist/renderer/index.html
    .html 1KB
  • resources/app.asar.unpacked/dist/renderer/mo-logo.svg
    .svg 877B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/LICENSE
    1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/binding.js
    .js 2KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/darwin-arm64.js
    166B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/darwin-x64.js
    164B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/database.js
    .js 4KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/index.js
    149B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/linux-arm64.js
    165B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/linux-x64.js
    163B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/linuxmusl-arm64.js
    190B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/linuxmusl-x64.js
    188B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/aggregate.js
    .js 1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/backup.js
    .js 2KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/explain.js
    292B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/function.js
    .js 1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/inspect.js
    174B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/pragma.js
    543B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/serialize.js
    625B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/table.js
    .js 7KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/transaction.js
    .js 2KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/wrappers.js
    1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/sqlite-error.js
    512B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/util.js
    .js 331B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/win32-arm64.js
    165B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/win32-x64.js
    163B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/package.json
    1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/prebuilds/win32-x64.node
    .dll 1.9MB
  • resources/bin/motrix-finalize-fs.exe
    .exe 509KB
  • resources/bin/motrix-native-host.exe
    .exe 493KB
  • resources/builtin-plugins/motrix.filename-template/dist/plugin.js
    .js 12KB
  • resources/builtin-plugins/motrix.filename-template/locales/en-US.json
    512B
  • resources/builtin-plugins/motrix.filename-template/locales/zh-CN.json
    482B
  • resources/builtin-plugins/motrix.filename-template/motrix-plugin.json
    1KB
  • resources/builtin-plugins/motrix.url-resolver/dist/plugin.js
    .js 2KB
  • resources/builtin-plugins/motrix.url-resolver/locales/en-US.json
    536B
  • resources/builtin-plugins/motrix.url-resolver/locales/zh-CN.json
    509B
  • resources/builtin-plugins/motrix.url-resolver/motrix-plugin.json
    2KB
  • resources/default_app.asar
    .js 108KB
  • resources/elevate.exe
    .exe 105KB
  • resources/extra/aria2.conf
    4KB
  • resources/extra/tray/mo-tray-colorful-active.ico
    135KB
  • resources/extra/tray/mo-tray-colorful-normal.ico
    134KB
  • resources/extra/win32/x64/aria2c.exe
    .exe 10.9MB
  • resources/legal/THIRD_PARTY_DEPENDENCIES.md
    44KB
  • resources/legal/THIRD_PARTY_LICENSES.txt
    5.9MB
  • resources/legal/sbom.spdx.json
    309KB
  • snapshot_blob.bin
    365KB
  • v8_context_snapshot.bin
    735KB
  • version
    6B
  • vk_swiftshader.dll
    .dll 5.2MB
  • vk_swiftshader_icd.json
    106B
  • vulkan-1.dll
    .dll 935KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 424KB
  • $R0/Uninstall Motrix.exe
    .exe 630KB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/UAC.dll
    .dll 14KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • resources/torrent.ico
    530KB

Motrix-Setup-2.1.1.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 13acb6c9851318d39556a6b25a0917362656d9eae41f75cc907dccc0ec597619
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths