Analysis

  • max time kernel
    300s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 10:29

General

  • Target
    optimizerDuck-Windows-x64-2.25.5.exe
  • Size 82.7MB
  • Sample260808-mjmm7aywex
  • SHA256 74a4e5e9190a955f87b623305a7baf2eb8af73436521758bfa58d8c7033b96ce
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\optimizerDuck-Windows-x64-2.25.5.exe
    "C:\Users\Admin\AppData\Local\Temp\optimizerDuck-Windows-x64-2.25.5.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:3224

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        DirectWriteForwarder.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\DirectWriteForwarder.dll
        • Size 244KB
        • SHA256 553e8ed976fb30ab6a76a7fa16fec744b8aa38a496102727c9cf579649f5d634
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Configuration.Abstractions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.Abstractions.dll
        • Size 24KB
        • SHA256 59da83027a4118c039b7bb557005277d1fc9e82e1f3ac9f97e6050763e071cab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Configuration.EnvironmentVariables.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
        • Size 16KB
        • SHA256 035b2305e9db2c5792a464fa0b4c0663abb3efdd380a2f4c6ae75670b78b62a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Configuration.FileExtensions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.FileExtensions.dll
        • Size 24KB
        • SHA256 7c7262807dce3033bf443996776858d67b2621ec1a26ae39fd43dc5083d456ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Configuration.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.dll
        • Size 40KB
        • SHA256 3f55e0bf61b834e336707ed55a198932c094a940cb2ebdc255e85f74ea387c08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.DependencyInjection.Abstractions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.DependencyInjection.Abstractions.dll
        • Size 60KB
        • SHA256 a2827bbd180729782ecabf55bb5fb8ac7b52b2e945374f4d047781bf40396a24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.DependencyInjection.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.DependencyInjection.dll
        • Size 88KB
        • SHA256 dec098ccb5deb87fabd746fd4d75854d467347372d1bae47af8a49812f821091
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.FileProviders.Abstractions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.FileProviders.Abstractions.dll
        • Size 16KB
        • SHA256 06339830288ad687f61c1e97e1fa09d78d5f090bd02ebf33bab66678130659c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.FileProviders.Physical.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.FileProviders.Physical.dll
        • Size 40KB
        • SHA256 95341deaca97dce2a606fc1ba766f90eba2019ceb01e1370e8f905efe92c2630
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Hosting.Abstractions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Hosting.Abstractions.dll
        • Size 48KB
        • SHA256 fd7693e6fea5f6a6fa3f41a7f56f6e12b13e6375fe8812cfa75c83340fcad0c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Hosting.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Hosting.dll
        • Size 64KB
        • SHA256 1af52e34d5484efaafe166245777c63c988fa38dc18f0d87831addeffeab96df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Logging.Abstractions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Logging.Abstractions.dll
        • Size 60KB
        • SHA256 952db4bf81dafad8c037d723cfa00733d0b37a5576308ad323f151b585d7dc10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Options.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Options.dll
        • Size 60KB
        • SHA256 d3ab47ff29c7820003be1b52844903a186ce3990bdc82ab9c17f94157285f183
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Extensions.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Primitives.dll
        • Size 40KB
        • SHA256 4c5ca56cf1176f2aac871dcc5f7c2a9b7b0c9aa8f22ba3f12754573f28204449
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Win32.Registry.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Win32.Registry.dll
        • Size 48KB
        • SHA256 70f2d5bd0a605d7f9f31145d72b08805d437277d1f73bdff294406237555c1fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationCore.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationCore.dll
        • Size 3.3MB
        • SHA256 864fa043a715ea8df4829aba0e31324aa23cf8efb7f4e27e5fecc7fc5111ca01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework.Aero2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationFramework.Aero2.dll
        • Size 244KB
        • SHA256 2dcf4f0ccfbdf2205634970035e86c8ddd49f6e430685be8ad4f1b1fe749bd82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationFramework.dll
        • Size 5.7MB
        • SHA256 b81bada150fa51e4258c6f087d39c0ae650721d068dd99318e63f9d321041035
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 7382f135c559fba317f73fbeaf9b84a4f34e760207fd6f31225698b260e26623
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Serilog.Extensions.Hosting.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.Extensions.Hosting.dll
        • Size 40KB
        • SHA256 da3304bee232cb7eb91f46b437eaa80c597e86652fd92e9734073bb5bf8bfaf8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Serilog.Extensions.Logging.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.Extensions.Logging.dll
        • Size 32KB
        • SHA256 eacc63c77b6e2d5697ee24b053bb4e831b6c21e44324fe953fd9dce4399f4347
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Serilog.Sinks.File.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.Sinks.File.dll
        • Size 40KB
        • SHA256 3dc4773d65d7848012e7750fca78e078edd09c0067d59c8f539e1d4cabf1748c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Serilog.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.dll
        • Size 164KB
        • SHA256 cab161e8319374e687966bb2b089cff4bfc8fe05b632618c64e7940fe2e5486f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Concurrent.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.Concurrent.dll
        • Size 84KB
        • SHA256 d9088a2c503dc33faba050ba982f462e15671d5d094bbc025af5521805aa8a8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.NonGeneric.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.NonGeneric.dll
        • Size 44KB
        • SHA256 557106d472575c274314e2e7da66608957b621a7a38993a7f9333f9bbeb9fe9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Specialized.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.Specialized.dll
        • Size 44KB
        • SHA256 100ef80190dda2acebd2371b717830f362519812a60ac1beea0f7c1a3ca602e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.dll
        • Size 108KB
        • SHA256 c5466871c67a0bb1a9dacd137db9d5a296c178902f57a45ca8f3f6392112a412
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ComponentModel.Primitives.dll
        • Size 36KB
        • SHA256 4087d8daef6965210866953d4caa3d45483ae0038b6c06d19f7893dcb4754c87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.TypeConverter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ComponentModel.TypeConverter.dll
        • Size 308KB
        • SHA256 8e601caf193f4f6543ddf5831a72a3f2004d889d9e8e5322b0b04a673b8ca5cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ComponentModel.dll
        • Size 12KB
        • SHA256 b0882b06a26e1f7c48068922e38de9815e5fcb1760fdf29c25a42843161f8e61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Configuration.ConfigurationManager.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Configuration.ConfigurationManager.dll
        • Size 432KB
        • SHA256 df267ad5fda3d65ec4727bdd6b8951f653d89c4f2d88c578f607786bf3f9e1c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.Debug.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.Debug.dll
        • Size 8KB
        • SHA256 9b4043fb836f21e940c4cb40374951447c7e4bfb02610ddb583eca4ad71d3b43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.DiagnosticSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.DiagnosticSource.dll
        • Size 196KB
        • SHA256 f13a2f21b5230ed97251170a6d613ee84296712c193540320e44a4c198f54aba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.Process.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.Process.dll
        • Size 136KB
        • SHA256 03e9a7a93e3eb7560d586565d1b5c4070113115d69afc1a71d992cd911824b3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.TraceSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.TraceSource.dll
        • Size 52KB
        • SHA256 385468d1d2899c53525b18d6e3a24db45f7edb1a2ffd353e18d98f722414a93d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.Tracing.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.Tracing.dll
        • Size 12KB
        • SHA256 2dea4d7e10567ee19f0f56146de5e10b992cbae71caba5b96ecda7746567648c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.IO.Packaging.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.IO.Packaging.dll
        • Size 152KB
        • SHA256 91c86b98b6add10fc10fed8972caa7e8c492fbc5fb1c6922ae42a80965f21fb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Linq.dll
        • Size 192KB
        • SHA256 4e0b207a98992eaa5f5a75e556ab1680f8219d928539da3fe257a1ea633a7ef1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Memory.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Memory.dll
        • Size 48KB
        • SHA256 ad3b7c0eebdabcacc5050c0ecb0b29bb1f030b179aecd2a5a011331e299c756e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.Primitives.dll
        • Size 96KB
        • SHA256 fae7f4dae35fbb21df40ad673ab37ba378d6cb381c0bc91679fe8718a538eedc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Requests.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.Requests.dll
        • Size 156KB
        • SHA256 2a1b5ed0fb8cb8eadada92ed6eeeba02d612cddf485462037068204e1b2373a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.WebClient.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.WebClient.dll
        • Size 64KB
        • SHA256 369e563e454459796d1ed04f48b7dbb184daf37f8593d382a93df2fdc7df0a22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.WebHeaderCollection.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.WebHeaderCollection.dll
        • Size 28KB
        • SHA256 f4f839a07b28c0ef7bc200b297ae3fc3b64786785834b9c8eeb78cea169405dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Numerics.Vectors.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Numerics.Vectors.dll
        • Size 8KB
        • SHA256 0ff0360eba289c8c39ad4f30f1da3c4b36af6f631cd40892b65a5c5c2eafd751
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ObjectModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ObjectModel.dll
        • Size 36KB
        • SHA256 f26d9ca184e0ded7c7b4912720f607f0d004bdfd1b76ef06974dbc3d76b6cf1a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.CoreLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Private.CoreLib.dll
        • Size 5.4MB
        • SHA256 575de3c1bc287741cd34264bbe8af40c0a578aac552db0428e9d4b1e34639448
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Uri.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Private.Uri.dll
        • Size 100KB
        • SHA256 6c6c7eb552762871fb097c7e107d7a59b1e634bb30c0cd452cfc06511a483868
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Xml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Private.Xml.dll
        • Size 3.0MB
        • SHA256 7de24238cf106093f109efe8b0058cf2ae18a6307edbef76d8ccd57913bd8365
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.CompilerServices.VisualC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.CompilerServices.VisualC.dll
        • Size 12KB
        • SHA256 8a77c342ece6c4f0278aebda4c44dc09a47026c78457fa21276e7c16595e2e7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Extensions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.Extensions.dll
        • Size 12KB
        • SHA256 908b2dba13453ccef82fcf29f94b7168b0a37c9e0e5c24f676c453edf9432e62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.InteropServices.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.InteropServices.dll
        • Size 60KB
        • SHA256 c3d063a90d1acfec3d263088a635fc463aef81a98ef9965e81cf23869d795665
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Loader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.Loader.dll
        • Size 8KB
        • SHA256 89f990b950249fe2d9c9f249630f71f71dd4a2fb988f33b878ba7e23fcfc4495
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.dll
        • Size 40KB
        • SHA256 3ff2a44bb6f867cb87f72fb78798ad2f78c069ccf6ca288ac7c2d2bbe233d670
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.Thread.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Threading.Thread.dll
        • Size 12KB
        • SHA256 c205bf207941042cb631582f84db3b213fa629cf5a904c5ecb4ae3cf600ea707
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Threading.dll
        • Size 40KB
        • SHA256 052a0e6bdcfbaa50d88402d1f2965d52d2081cfd99145d79d412b88d5b200635
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Controls.Ribbon.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Windows.Controls.Ribbon.dll
        • Size 732KB
        • SHA256 2344de25301c59b84f7281a3d19a5799f539e5f99e706ed181033722b0e41e66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Extensions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Windows.Extensions.dll
        • Size 68KB
        • SHA256 1efefb64d9d691f5dec069de0bc3f367df00ec251d3029df725eb19d9e878fbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Xaml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Xaml.dll
        • Size 556KB
        • SHA256 66e512aca043a1736ec8969d05be6dc198466c78d40c24b5d0f17a1a89d7117b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Xml.ReaderWriter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Xml.ReaderWriter.dll
        • Size 16KB
        • SHA256 9538a305f95d0ea872cd29f9d718fd1ba97f8f4f7634cd00c8b317cd29c72e8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WindowsBase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\WindowsBase.dll
        • Size 1008KB
        • SHA256 d4f935e656ac76d9b679ad49bf799cb62086c06385fe526e69363b871077ed70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Wpf.Ui.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Wpf.Ui.dll
        • Size 6.3MB
        • SHA256 2adaf3df313e98b3d3da11aa433efdf5e90d49562747ef0e65ba23a81d5ae699
        • MD5 SHA1 SHA512 SSDEEP TLSH

        optimizerDuck.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\optimizerDuck.dll
        • Size 1.2MB
        • SHA256 822b9bbef5e43046d01bec097d2d16035f0c9a0c5a58a5168cad8858eb9c28e0
        • MD5 SHA1 SHA512 SSDEEP TLSH