Analysis
- max time kernel
300s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 10:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
optimizerDuck-Windows-x64-2.25.5.exe
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
optimizerDuck-Windows-x64-2.25.5.exe
Resource
win11ltsc2024-20260709-en
2 signatures
300 seconds
General
- Target optimizerDuck-Windows-x64-2.25.5.exe
- Size 82.7MB
- Sample260808-mjmm7aywex
- SHA256 74a4e5e9190a955f87b623305a7baf2eb8af73436521758bfa58d8c7033b96ce
- MD5 eabae49a5d3025cf5ef4ccc4a1d647a9
- SHA1 bc4c84e2c0ffe1f5d0f58ec49b2e79dcfadeedb6
- SHA512 b5c81683fe1cdd37c0a0328db7079f9d291996d847870be61656d04d722eff07bd775af0973bf73a969a6a4a5580873bb5d7f23ad4faf5a869641f1dc15de445
- SSDEEP 1572864:Z02NgPN+JBw0AHPIwCI5st342Bod9WQBQxOTKGJPNaadlC+kgS5pN1:Z02NEQBw0AvbLsedAQBi4JvCpgS5l
- TLSH T1C8182356E2FD00E8D4BAC1B8C6574627EBB1345513309BEB26A48A252F37FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 64 IoCs
pid Process 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe 3224 optimizerDuck-Windows-x64-2.25.5.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3224 optimizerDuck-Windows-x64-2.25.5.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\DirectWriteForwarder.dll
- Size 244KB
- SHA256 553e8ed976fb30ab6a76a7fa16fec744b8aa38a496102727c9cf579649f5d634
- MD5 45318e072121793efb8c8839eb296944
- SHA1 d68a11412b84e2c8b5bd5a1f8a121eff7091baf8
- SHA512 aefa89f6eaf562bb060116e0cba161d1291ef506dccfc1bcfc5fb360fb5f2c62cbd0d62ca7c379dfa1a4776356bcc7800e529e3abfad75fa082d09d46270d88b
- SSDEEP 3072:BV4CH99S4YUZEGGUYU5Bb2s9BcUQT29SBufv8ylojiKKSV6N6KPQpGo9nR+cWrSx:f4P4XW+5E+LQT29SBufv8ylSolrA
- TLSH T106347C697A8A3A37E58C537F4667C4604335C8FAA607E363E74263622C5F3C1D9039DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.Abstractions.dll
- Size 24KB
- SHA256 59da83027a4118c039b7bb557005277d1fc9e82e1f3ac9f97e6050763e071cab
- MD5 231180f8a82a6b179bf6db4c25061f42
- SHA1 a6017fe4e83ae11d3abb699c3b8929c6caf734cf
- SHA512 744d3ebf7e6d82d97ff0c0ab9490c6a32b4d17cc46922241c62774ede2c659ff428f99bfc98ea97dad4b80615d990d51104b85a3541d4c86142fe5db2891b4f6
- SSDEEP 384:EIWs+NWhgi95r7AShBQuUIbQearO9vaTG/dwSzRjz67MmTF:E1E95gShzFbQe6Qp
- TLSH T10EB2091553DC9332C8BB1F36FCA240540B76D566A806FF5D98DC210A8EA778056B2F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
- Size 16KB
- SHA256 035b2305e9db2c5792a464fa0b4c0663abb3efdd380a2f4c6ae75670b78b62a7
- MD5 72fdf8730735836864d4f3f0c426c963
- SHA1 7f29deac69753777980347c4acf012837e832ed6
- SHA512 72724627995eff2921a2ea16c8a8cb78cc28a486e474810fcdecd1de9e736e340bf3e7b10476a1ad0b4f9e55aa95efc59a9ce1ccc16df488ddf3f321e20d25d3
- SSDEEP 192:SWUeeWrOSm8bIULF7tP6voIKw0NrpXQNAgMvL:SWUeeWrhfIULFBK0NrhQOD
- TLSH T1F472D64063FCC615F5BB3778EDFA56694A36FA919963853E402D100F186AB148FE1F32
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.FileExtensions.dll
- Size 24KB
- SHA256 7c7262807dce3033bf443996776858d67b2621ec1a26ae39fd43dc5083d456ef
- MD5 99cfc5c728da1283f5e4712141169aee
- SHA1 e2fd24feac673dcfe400dbe6f7ec94e35e7d376a
- SHA512 60121f50582cae4ceb4166abf02090792ce2a066680e268c15ba20cf49f47e17166ea144f9f57673d7dcc9bdd22285cb6dc17461ab764e601011977c32f46e86
- SSDEEP 384:qqWqO6WgPXAdQcOMczUtmyW11FmL7DlWOs:qpcPAcYtBW1MF
- TLSH T11BB2F821D7BC8327C8FF0F72FCF165045732E647A815FA2D889C11082AB735099A3BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Configuration.dll
- Size 40KB
- SHA256 3f55e0bf61b834e336707ed55a198932c094a940cb2ebdc255e85f74ea387c08
- MD5 d14dc5028e67e825ae06b0d78bdcefc2
- SHA1 3f4c885e6a1945cc41ff5af3b957219fa5b0f1fa
- SHA512 18d50fff230a2009a548a1e3b1a92178002938e87fb6cbd6250fe882607256b33ae28559ba32721980b0b6c2b7a4d0174a85d18a99705feec646e0d8681d1694
- SSDEEP 768:LAyVxQxp53g1O/T1yF3tKjWdCQr3JnY3rOOAZ7:LAyVxQxp53g1OEeGGSOA
- TLSH T1FC03282263AC473BC67F0BB2F8F041440B75E597B226F24D8D5E3096696B7C1AF12627
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 60KB
- SHA256 a2827bbd180729782ecabf55bb5fb8ac7b52b2e945374f4d047781bf40396a24
- MD5 560e5a50d9176898f9618f7dbe2fc29a
- SHA1 162701087ff63501e3f6c2f5b37175b3bf33db7b
- SHA512 e60786463df7aa27c3a63058ff52b31b1d507c5a67512592bde9df69d166fec98804f99b624a467439aa836b8d0c98010a72116c207e1180b84b178a3ad9ca45
- SSDEEP 1536:Jgcu+KNTA5+iU5T9Du4+M+p2VvsEEWz8:JZ4bQ2Vvsp6
- TLSH T17053086833E9E723D7BE4B713BE302809B78AF577205FB0F254612A91456BC99490DB3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.DependencyInjection.dll
- Size 88KB
- SHA256 dec098ccb5deb87fabd746fd4d75854d467347372d1bae47af8a49812f821091
- MD5 7558f1164b7a073693b668d390164045
- SHA1 b0e5bf9a3ec87f3d2ec91a17c891340bcc09e61c
- SHA512 6c71fbe58cc83e76887407091893d7f6e56f28cd57dc284a621d9fa39159c971da843d23d4e7af814c8a48aeff608501c0daeca4f107d553698ebe8daafd3c81
- SSDEEP 768:BoSnFnGULc6XQmVHHn1dSslkbdDCD3XCxY/Q1Ud/6rUyruyqCCf4Fvr64TX:BoSnF/imVnPSslmdDI3QYqJrutCjRX
- TLSH T11E934C3623FC9B26EADF0B74A87502004BB5F6963502E75D4D84A05D2EA3FC5876327B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.FileProviders.Abstractions.dll
- Size 16KB
- SHA256 06339830288ad687f61c1e97e1fa09d78d5f090bd02ebf33bab66678130659c3
- MD5 d93ab3c9bad61641cb87b26c806c03ac
- SHA1 7417d6183348959bf39858f67c854284441ad39e
- SHA512 c1014904bdb2c9f103fff3ea35aee4603de84f55323b7470a0611cfac9e3d4cf99e7463460905796201d0e3249f7c506b49e4e4d2a82854018a34ab5f6d95d97
- SSDEEP 192:QWsuhWK4k0rIrJn9+0d1cNkhl9zHj2q7BdVrkfXQHHBLXA5pY/tnsD+sMfZjO5M+:QWsuhWK4f/Y9zHj2q7BSCH1JiMdv0
- TLSH T13572E824ABE8C331DEFF4F32AC6348450735D9969819FA2D564C520A6EB378485F2F72
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.FileProviders.Physical.dll
- Size 40KB
- SHA256 95341deaca97dce2a606fc1ba766f90eba2019ceb01e1370e8f905efe92c2630
- MD5 3255d7f9a51bf35fafa442f1dfface24
- SHA1 fc33c17b5a22a58a4d48d5b2a2ad4d0652cf484f
- SHA512 4c6a22f16794a0bca26a8b3575e4e5d0b8d6dad1ed1fd999badde6e4893bc264d0aef4b7c793786ce92b0c7b8a068c53d4bffddcb84de7266a312f681f713a63
- SSDEEP 768:F6XNbJMmN03zS6p+wuzPkuPYBpdtUspTuf:F6XNbimN03zS0+wg8uPYpdtUyTS
- TLSH T1A4035A2153DC8327CDEC0BB56CE1B1860335F2E79607F69E1D8C319AB9A37D446A12A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Hosting.Abstractions.dll
- Size 48KB
- SHA256 fd7693e6fea5f6a6fa3f41a7f56f6e12b13e6375fe8812cfa75c83340fcad0c4
- MD5 6041396f2949421eb53999c7d8a93bee
- SHA1 a410a961e29694d228a6f46d5883bf0405fc718f
- SHA512 0cdddbe90f19e9297d2e6682b86b250a2270b1f9af84167768b841b6b4542eaa426f2ec950e81ee52862ab5b6585719ccb0a061390aedf7aa5b0d7838e2d29ce
- SSDEEP 768:hZlm8TCr3F+cqxbPxROm4e+X9CzJ65Mo7tKoV2nwsyQQZt164yCmi3FbFi/Up2cS:hZlm8+rV+cqxbP21TbUcg
- TLSH T1E323510163F85729FAF73F78ADF561258A3ABD66A934F62C054801DD09B2B80C970B37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Hosting.dll
- Size 64KB
- SHA256 1af52e34d5484efaafe166245777c63c988fa38dc18f0d87831addeffeab96df
- MD5 b098db1faf5479147bc65f662ded3088
- SHA1 0a1e891c415d7b71eebff5d6a15d8f649cbea19d
- SHA512 be9eb14567da9fc4c256416bd4a7d301d41ff16629ac68ad0d6abcdbdb48c51244a124820a83a2b5d5c35f6accd350f146cddeba66dbd37e82ef6bd45f4e4591
- SSDEEP 768:xu81bab/8/ZCAR+8w6QdoQCwu3MXJrsE3mgcGGMMorlNnbADFfBi+UZ:xu81ejFedwTXJjmg0WnnbALy
- TLSH T156532C0263AC4713CBFF2BBAE9B524181776976B5419F71D9C9C70D819E7BC08A1232B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Logging.Abstractions.dll
- Size 60KB
- SHA256 952db4bf81dafad8c037d723cfa00733d0b37a5576308ad323f151b585d7dc10
- MD5 5ff7ca23d576e5bcceb350bcf95c3fbe
- SHA1 f204361bf7fd656914598fabcda8260ca575dce0
- SHA512 8c95c5ae4bcf580a80260aea95f47b630ea004c451cc2a237a3dcda0b36a035e530f7837196441dc5907fa6274fb94382308331187a8b30a8c5182b527d28748
- SSDEEP 1536:gpAkzjYAxRy/y4rzb66t7ulqmV8bfO4LNU:g+oD6rzb/6qUY
- TLSH T117536C1153DD1333CBBECAFAE82152124B79D4977207E7576CCC6169B427BC8EA202B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Options.dll
- Size 60KB
- SHA256 d3ab47ff29c7820003be1b52844903a186ce3990bdc82ab9c17f94157285f183
- MD5 d3010ec6d04edd2edde3f33d83b7204d
- SHA1 9bd99cbefde7861fa4b5f807fd70e5054579fb1a
- SHA512 76529d401d32fb6784cd9264c98b3b071f9a6e1f910ac7e1c86df798506f4b664e20085637104a359bc4af0265edb0a1b3219536d83d40f8d6ab92eda4e9d80e
- SSDEEP 768:EC9YNOz2rY6sc/01D5JD/GQ+Jud3DiNax4PTcFBLKx5NLd07N:ECSGd6c1KQ+eWyek05EB
- TLSH T147535C11579C9732CEEF46B1F855C0B50637C267B64FB32A96CC62882D67360EFA1631
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Extensions.Primitives.dll
- Size 40KB
- SHA256 4c5ca56cf1176f2aac871dcc5f7c2a9b7b0c9aa8f22ba3f12754573f28204449
- MD5 439d1a59f32d4e5033974c8c61fee86f
- SHA1 955abee4a8776550c117634a1bb6c1240638a3a8
- SHA512 7a0c48f745b196a723c59819f46cb7112b2dcd3bf8a87555e2f3d8dda34468b36ba6a72a8e3749c7a755ef844100ed1d6bb024c93f39e3e433b2ee4fb29c2872
- SSDEEP 768:YyDONV6Z59FoBQ2d3Ih/aYal6et/dElz1OkytW58cZM7uiFK1Kh:YyOoZ54Ow9LtFEp1OkytVc67uiFK1
- TLSH T10F031901A3D88337CFFE4A36B4E29114067896FAB765FA5F92C810916D237C0976663B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Microsoft.Win32.Registry.dll
- Size 48KB
- SHA256 70f2d5bd0a605d7f9f31145d72b08805d437277d1f73bdff294406237555c1fb
- MD5 c243ea34cf1bcdcc7cdd275c8b3d0ba1
- SHA1 ca55edc017a2ef566dbb5f282770bf0daa43f17e
- SHA512 8914f72b6df5d03eef746e9c2ea80f607c3d8b10a25d64794feac2967ce9d0846fcc4c51d4a602dad7d412ffce9bb062bebadd7b0612f7a29e38e6f062d34265
- SSDEEP 768:tEtwrT+YMv3PUhQu+ABNGtVMaJSvEXN/vivc+IVi1LHv5N:tEtwr6YMXu+xYaJSvEXNy7IVi1LHv5
- TLSH T19C234C51ABC4811FFBEE0B3A6C7250889376EACE9E43FF8D66D0115966A37C0D123761
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationCore.dll
- Size 3.3MB
- SHA256 864fa043a715ea8df4829aba0e31324aa23cf8efb7f4e27e5fecc7fc5111ca01
- MD5 85c153fcaee7d9d9ee9ead2838f08c87
- SHA1 545e527d8d6007e812d012bc33e1cb623837f3a3
- SHA512 4c8fdbf512a9809ee74cafcea80a119992c692c4d5c37879b58678472396c4e076636ab7c052f71359a05574204668ae0eb1f932e24a3e754b12d18b06990ba4
- SSDEEP 49152:2Zzt6sAmTLxkBuqRDno5BBcjd8Ckr1gElAZWd5hzR12TDSPzlqFk2HJdXp5YEXQX:2ZztsFCr1acsAtGQ/
- TLSH T1FAF56D02FBC48E3AD1AF1232B6710401FBF5E46B6765E65A3A4D266C3F93340D9653A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationFramework.Aero2.dll
- Size 244KB
- SHA256 2dcf4f0ccfbdf2205634970035e86c8ddd49f6e430685be8ad4f1b1fe749bd82
- MD5 69ef969be1f3b5090cb68276c53b6646
- SHA1 66d671431a7f49ad289590141e735b2fb58ebe12
- SHA512 f8e9b5018a38a05d633f15655a5961e6cf80c890d253d234d948131af703962f614139996cf987d8eb72fe1712a6302591026acd42102ca22e008a61cb9fb73b
- SSDEEP 1536:Z02Yr6m3wLLjINyb+Hf7LXSaOz/WRYHuL5GjsecTjTCQH16PMJBQbPDF+R5hdPrK:Z4ELjr69d6FM50mqz9DQs3iOm+
- TLSH T13434E9C83A8459F1C93A16F698F6404D3770A56232E0E46829CF0FDDEDDDF824A9916F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationFramework.dll
- Size 5.7MB
- SHA256 b81bada150fa51e4258c6f087d39c0ae650721d068dd99318e63f9d321041035
- MD5 0bec60e73bae06f976ad65c79025530c
- SHA1 08639228ba267de049ad423fe32833f408a2317e
- SHA512 aa5059b009f191abee19081bbd78325b7baa6ff9337a2cf034d838cb886cc52b9cf19d14f49e6e86810c453677140f3a793cc1e362aa35c96baa3c897cc8748d
- SSDEEP 49152:UFrDxLDyUcQh+s75upETGuFSxJX4hCDXEJjnmmkKuSY018Eeo9QdF1ANqZOJ:CX+CPFuEJjPk
- TLSH T17F566B01B7E8CF2AC4EF47B5A5B3101587F1F9E78352DB8E5900A1AD7C92301BA563A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 7382f135c559fba317f73fbeaf9b84a4f34e760207fd6f31225698b260e26623
- MD5 6e076879ae2567cc58dc750ba5d18b5e
- SHA1 65a53f5e6a832ac42de5b0862e4d494b226a32ac
- SHA512 4d93c2d1979137fa0bb062994b75f97922c6ea2780c9b7bcec7d8fa84c421eb758c5c074b5d588ed42657d1533740256face1774ffe2a0af06190fab547f1855
- SSDEEP 24576:vGD+42x2Jvddeoyo7Pkmn/V1Pt8clT3D4iLFxVCPL67uMFAC0q4dovzvfPbR2R9M:z2BzeoRPkmTP2clT31wPO7hACNYovznF
- TLSH T12A454A62E2E642E5C47FC1B8C6469717FBB0740A131C66DB87608B592F27FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.Extensions.Hosting.dll
- Size 40KB
- SHA256 da3304bee232cb7eb91f46b437eaa80c597e86652fd92e9734073bb5bf8bfaf8
- MD5 1289f2c89441f3019b21e7f89d3ce578
- SHA1 fa5ab6f955dc444bca0d8da374b512a7f8dacab3
- SHA512 bc906df2ecd39848ec50af038bdddbccd67cf34f0cce2b948f95051870e75fb53c4b2d193b41d3e0f4bb2988f4a2b79936e6cae67c2c9b8bc12d243ebd67eb92
- SSDEEP 768:Bzpn6AAgvtJABVaq65gYcBstQa3qTKWQ8X+YR2EGuS9N7k:BVn6AAgvtJA96GetQyqTNX+yLS
- TLSH T19C03F81E834822EBD6AD0EB9F5E097457779D0BA7717F7873E8D38B068267A80C40257
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.Extensions.Logging.dll
- Size 32KB
- SHA256 eacc63c77b6e2d5697ee24b053bb4e831b6c21e44324fe953fd9dce4399f4347
- MD5 53a102829734fb609314a879a605876c
- SHA1 8276892927e8d2db049266936625c95e0de83021
- SHA512 9c0544e844d3834d61c9a4468cfa793de17cd3957458c17482919f648a3bdcc55108688f22ea1f4bb02bfdacef815758bf7bfe7ba1cf2a9e903fe3e96adf3b96
- SSDEEP 384:PWXqYMq46TFPlYAG4gjO6FfZaCgRNVix5bkV4nH7UGCZDKdte95BT6c6YaWpjZwU:FjqOUgtTxbUGCZDv9Pj3l
- TLSH T1AFE21802B3AD6332D9DF4B36B4F58A804731C7B2B425E64D2DC83295AC737554B722AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.Sinks.File.dll
- Size 40KB
- SHA256 3dc4773d65d7848012e7750fca78e078edd09c0067d59c8f539e1d4cabf1748c
- MD5 d7f788d295884699eed0be6d1879dcc8
- SHA1 935b309af6b9694d23d926295ec9591b2805fea1
- SHA512 26c11beb3107b8aa4a25a0e177f7be69b544cc041519c74406131a50998b82f31771ee0b07c18e261bb9cde05b9034f53d870d3c5d00d114e66f533ee9a42f3c
- SSDEEP 768:Xwei/EER7tyqjf82XdrHdDQ7cRAPUWvXPomsA:XweATXj1dC7cRb
- TLSH T1B0032752B7DD433BEAEF5F78A4F095920735F6F2A836EB4D109402A85C22F011A607A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Serilog.dll
- Size 164KB
- SHA256 cab161e8319374e687966bb2b089cff4bfc8fe05b632618c64e7940fe2e5486f
- MD5 37924997de16f5160fd4015d61437f01
- SHA1 33e4b655fcf331cdd58d367aa64c2c4080098312
- SHA512 e8825df0079acc6cf7897b79c96c3ce66dc3e314a7eaa11f2b14b684a05ffc2153798719f6c5023a615df44445905e5522bdbdcc1f8faafb320a4aa1d905e300
- SSDEEP 3072:L6k2xy0W0mYseHMxK/brVkRGhKBhOqsdhya/KuLN9VbuWDcKfOMPzTj8Wr5K97tQ:mkYyn0mYseHMxK/brVkRGGYqChya3LY2
- TLSH T1B4F32A2373EC4776E6EE4634A07122006BB5F957E437F78E594976DDA812F80EA103A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.Concurrent.dll
- Size 84KB
- SHA256 d9088a2c503dc33faba050ba982f462e15671d5d094bbc025af5521805aa8a8f
- MD5 18453899d457dde408da751f66298d02
- SHA1 3d95bcd0aa6ae60be87b2a2821a01e0318de96ea
- SHA512 2232b35627696bae3455c92c3c56c07ee5bf7b1ea15c7e924a2c95c171141c8864323b6064b529c06a213923e0f8e028504f1e2bd591bdc2ccba427f328332bd
- SSDEEP 1536:UeRh43iddKK98wQfs7ZEq1US3gPymYQr+PEN7Azg902Eb9T/H:UOhKiLJ76qSa6ymYQraEN7Azg902iT
- TLSH T107834A0173DC573AEAFF4B77B5F204A91733EAA72517D25D60A422981C737408BA27A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.NonGeneric.dll
- Size 44KB
- SHA256 557106d472575c274314e2e7da66608957b621a7a38993a7f9333f9bbeb9fe9c
- MD5 42ae7c915b50a1b865f7fb1231324750
- SHA1 1778bf598d2af8e730db546107860a6baf9c1169
- SHA512 dc404b45aae2f8b41358cf45fe01c3006f6d3e088ecdbf2da56e33f2e285e6649ec2c3115b0314de70ce42411247672564cbf6ea579bffdfa1d803cdbc082edb
- SSDEEP 768:5GXoxFtWR5Xv79JTHG488FBs31RoGWLLyOc5b3Vb:5GXsgF79Jja1RgAFlb
- TLSH T1DE13F91973AC4777DAAE07FAA4A651234370E9F3BE07EF8B145020866567740C6B33A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.Specialized.dll
- Size 44KB
- SHA256 100ef80190dda2acebd2371b717830f362519812a60ac1beea0f7c1a3ca602e3
- MD5 d12650c2058dc623c0f0b19ec06a4157
- SHA1 2787662547f43ab3f453c7b9bb88c6cf02891e08
- SHA512 5592d1c428cf0c27e6b835f0f82d4c3a7ab7a3484f42fdaf0e73978070832d4a5a9cbc16636299ef4ecca59cc0e661b89c55aed71229978ec432bdb062153ea7
- SSDEEP 768:At2MuAdcrV0E36IA0EiZd5GREyBmnNemayVy9F/st4YjIXw2WbOMp:AoeE3A0Eiv2EywNwjNYGD
- TLSH T11C13090573DC8B36CBAE07B6A8B201110779E6E32612FB5F6D54215AA8677C0C62376F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Collections.dll
- Size 108KB
- SHA256 c5466871c67a0bb1a9dacd137db9d5a296c178902f57a45ca8f3f6392112a412
- MD5 8b439489bc7684de5e1687d23bff42b1
- SHA1 a1b8c144d0feb35edf225228c844e111e9965115
- SHA512 c4e6ad6c4180a99c2b0ad2404d3d949365a90690a9edc83406e979e4f349eef5ed222aa844d6c2d1cb3bacca20ba30f1ccbe43f3acc0f18ae22fe5471798c93c
- SSDEEP 1536:hM/Xbmu2QMsf0r+Mp2CgkuiL2SAmT4bEQXCmRUTy3wP15iEw90yq:yfb92QMsf0r3p9dJ2SAmT4bn0gwPDi2
- TLSH T121B34C0073CC5731DAFF0AF3F0A2006B4776E5E3E70DDB8D54E927A1589338096A666A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ComponentModel.Primitives.dll
- Size 36KB
- SHA256 4087d8daef6965210866953d4caa3d45483ae0038b6c06d19f7893dcb4754c87
- MD5 54d684cd74fda5ead0ddbf619fd0594a
- SHA1 c7213d6ab74d606fb899c100cb0b91225b67d1e2
- SHA512 b5512709ba83202d5db686bf13a7bd3f1b0d2d18feb48f4a706b0edd70ff2d2cd591d3d3113a2c4748100f0d074759c74d4b1ebece3518c878522a9ed959e77e
- SSDEEP 384:0W2ZWSSRBIYdrhIanbptONxfws4QiRdhaUWMOIG+Ym1KU2Qayv0RedrriMibhVB6:o2RpdNztMpMVPaU1Q+Y1U2nCjEhV9
- TLSH T146F2090523F9833EEBE90B7468B3595003B9F59A7617DE8E5AA0180FB767340A111F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ComponentModel.TypeConverter.dll
- Size 308KB
- SHA256 8e601caf193f4f6543ddf5831a72a3f2004d889d9e8e5322b0b04a673b8ca5cc
- MD5 cff7dfc95f265c64a40063f835ae1e9b
- SHA1 67dc5016328c652e812a805a220a7bb6909cf95a
- SHA512 2ce5efc42b7f6fd62cadc708809e2a9c75cff231657ac7db2275481527a6b56f5588243e9a5bc6347359d400283e41bb9bad72315dcab8ab994260abe7b12db4
- SSDEEP 6144:qs9v+uIaWvTqHUWbxcKCPhmgcLmoK+4rB00YKvq+j0KeNY:5D4Tq0WbXC5m5JK+4rBvq+I7Y
- TLSH T1BD647C2137DC8BBADAEF8771F931091547B9E887955DEB4908E058E90CA77C0F9206B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ComponentModel.dll
- Size 12KB
- SHA256 b0882b06a26e1f7c48068922e38de9815e5fcb1760fdf29c25a42843161f8e61
- MD5 b5d0d9686ab49176a65638a59fc977b3
- SHA1 79804914260b846f8da6dfc50f761654db781dd8
- SHA512 60199c8f7e4ee2d107c8d869349452f7e24e2186a1b76db0e095d4de64e905a1be33bcd6ab29cb493f79fed04b2f6d895833112abfe57a190d0486fa3b8b05ef
- SSDEEP 96:SWB1WtqdIB0Sxmg/JwvT1kSYLVP1+AWxvA7DmDSL:SWB1WkIB0SxtBkWSY7+AWx4
- TLSH T1B042A56193E44332ED660B36FE72B602537AF984DE13CB6F4295760B9E46B045A30B36
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Configuration.ConfigurationManager.dll
- Size 432KB
- SHA256 df267ad5fda3d65ec4727bdd6b8951f653d89c4f2d88c578f607786bf3f9e1c2
- MD5 1c4cc7d968d43a45b0d7c8a51ad063f3
- SHA1 f66479f0fe37cd9641ec950a6f7cc50777c3422b
- SHA512 1012ba472d79146d0eed2f7dfa337d0886f1c80a5c2570e5eab5c220e655af48592c2c03f14e053ea8cf270ead922266f18cd10f5e0ddd003e8f44c8df74217a
- SSDEEP 12288:cfOsdV0Z8oApKK1sPTdokGH5OTNWLOdNg/HAMuUAfNKq8YhetiQ+2/NVQ8GLa0Uh:ZGg7Iq8SMn
- TLSH T13094282233F8572FF2EF1F35E03A00145AF6FD9A162AD74DA556309C1827780DA927A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.Debug.dll
- Size 8KB
- SHA256 9b4043fb836f21e940c4cb40374951447c7e4bfb02610ddb583eca4ad71d3b43
- MD5 49517e702c634fb61d9bf8b607ef79ec
- SHA1 aaa4db6ca9922c55258bc0c461bd01a48fa9d46e
- SHA512 f5e95695f0c1d669ec657e25d83dc80a66314a5fa3a497cb9d8dbc6d1db19dfb45b6cb4706022910d09cac6ee4c30957778d03547917fd82ecf074c4180b60a4
- SSDEEP 48:6ck0KZWHQGi25WzBqA89ZL4ta3AiQlBm1NkPVWaZF4ZhBXl+IvdToPRzDmDIZL69:UWLimWtqHGjiQlBmwx4Blxv6DmDSL69
- TLSH T17EF1522497E80336FDB20B72ED62568115BAFA40DD679FAF05D5460B9C17910DB32F21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.DiagnosticSource.dll
- Size 196KB
- SHA256 f13a2f21b5230ed97251170a6d613ee84296712c193540320e44a4c198f54aba
- MD5 491e06e45d9ab60c6804015de48cb3f3
- SHA1 4d1e6ea3a676dd34c0ef4554135b37224d594f76
- SHA512 60632a6e6b82599d69e306e9ebe8d71fa25ae59e214f61b58232151a902c96d357c1115f79198c41b4404d09a315e86fb229b2b5a369191dd5430e6ca5e0d262
- SSDEEP 3072:Oyq/g7BmhXO/oVRmKKCGAnBfH/zHx+TMBlukPSl:Yg7BbfKfBfHDxvuj
- TLSH T172145C1023E8472AEFEF1B75F5B044064377B98BB66DEB9C2A9455DD2913B80EB01363
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.Process.dll
- Size 136KB
- SHA256 03e9a7a93e3eb7560d586565d1b5c4070113115d69afc1a71d992cd911824b3b
- MD5 698bbf5bc6b1f65946a90288ae927213
- SHA1 a2f585000b3a183aa45ada9df3d1f907ac0a267b
- SHA512 f289f0b6245974a98e18e10b8d274738c381249fd00b55624b96c830d031379ada95bb816e013b248b538e5283fa0e07abccdd67c02cefc85c2f86f2bfcb1211
- SSDEEP 3072:ugkWQlS+DHeRq5QO3tW2QrfGn4l9jb3bG1P4mdlgQbAcO:clS+LeRq5NYTv9jb3bG1PjdlhO
- TLSH T162D36B3013EC8B1EEBEE0739B47150524BB7AA872A17EF5D4A9456DD2A433C185217F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.TraceSource.dll
- Size 52KB
- SHA256 385468d1d2899c53525b18d6e3a24db45f7edb1a2ffd353e18d98f722414a93d
- MD5 5648eed37e131528d8369467fee865a3
- SHA1 00d717b59bead07213aab153bd2b9b881b4aed81
- SHA512 64d37b2320c2ca61143997021b7b093a4c498c39adbcc8a99688772d6497f69e11897206ca96715438550b2af6115be20410b1dfb06832974df598b00d032ea7
- SSDEEP 1536:EesMwGXEuZtsRm94Xzwj0XDoaPQ0bteBf:EHMCfm9AwYDDveBf
- TLSH T139333B2B17C88B7FCBAE273569B1106103F689DB7A17E74E9E82549A1A177C0C7122D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Diagnostics.Tracing.dll
- Size 12KB
- SHA256 2dea4d7e10567ee19f0f56146de5e10b992cbae71caba5b96ecda7746567648c
- MD5 b5b26ff182288e902e11ab4579e3ec44
- SHA1 2d8b9032c090a06f6f26fcee09d9cfe76b830678
- SHA512 a86a04968346935a8f563a3329d175b3595cc3f21052d94f0e43d91008211b7ee820c70707f8a9a836e80fbbd5ff9b8eae87608d0bcd1c3685703f4bbd2a9c9e
- SSDEEP 96:hWUDWtqHE4mrNgn88itSoI+j+M34xv0DmDSLi:hWUDWhJryz6DDj+y4x
- TLSH T1DF425320A7E5033FEC632B31AB7757C026BBFAC3D9668A5E05804A469826D149F31F25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.IO.Packaging.dll
- Size 152KB
- SHA256 91c86b98b6add10fc10fed8972caa7e8c492fbc5fb1c6922ae42a80965f21fb7
- MD5 6a078012c8166598c264cb32018e5e7b
- SHA1 8213088a9c2af5d4c0832e39982c90fe61907c0c
- SHA512 06462f3403f02215f79867e0e35166ad8732a5e406f8b1706aca5e9ce8d8d551bd0a980678d4f80c5ec960df2b66c7a033ad5ebd050d35feacd570ae780b4c6d
- SSDEEP 3072:rNzi//2WjM2laXNqXQiZXFFA6PxUSV8+U:5+//2aaXNUJ9vVf
- TLSH T131E3182133FC471EFBFB5BB5B4B561218A79B9536A3AD65D084020CE1962B80CA71B73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Linq.dll
- Size 192KB
- SHA256 4e0b207a98992eaa5f5a75e556ab1680f8219d928539da3fe257a1ea633a7ef1
- MD5 6b1379438893e2de8465f4500477c6b2
- SHA1 a3f10dca7c68fb2fb43d7c8310c9219d346e771d
- SHA512 22ff06ea6187eaeb2a46585a7cd40e4659fe6e9af5b518cbc272a3095e99c71c2de7b1f8b664113346c2b98a5c3de5bf44c94189d49e6e67754f6c267566185c
- SSDEEP 3072:TBOoGYHBjrxUk5mGvR12gvzaU2RddzYOpVj1VyZf7yPA:9hek5mGvXyU2LnVjzeQA
- TLSH T1A0143B2523CD8333CD6E07F3686255D683B38197D6CFE649BC8C26A46CE7790E9446B8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Memory.dll
- Size 48KB
- SHA256 ad3b7c0eebdabcacc5050c0ecb0b29bb1f030b179aecd2a5a011331e299c756e
- MD5 f629131af5064d4f1c0653c6e1c92fe1
- SHA1 aa707d27967078c2f9f95bdac8a2568c5e148ef9
- SHA512 a695a8326dab68ce1e6aca54b20f095a97f9dbe61a7eb3a05aabdfe114ec5c427baea575c82a71b0cc6844112754dad435b2ac7009eb8853bd1d81ebeecb0462
- SSDEEP 768:eGoS/p03PqVo7uwamzrtkKXUq43rtsBH3VO8rzez//hZ1S5ttdyTab:no+4CyawaGrpXUq43b8Gz//hO
- TLSH T10D235A1953D49733FFBE837BF17052654B72D0CB2204F78A8CA866A83D577849A922F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.Primitives.dll
- Size 96KB
- SHA256 fae7f4dae35fbb21df40ad673ab37ba378d6cb381c0bc91679fe8718a538eedc
- MD5 39a7c9fee8a614c2f98bfa33142aea75
- SHA1 f85e50154d34541677be552ac5604620fceaa6fd
- SHA512 2de7783acac39585e5d481f0a505607af625aa66b21a70085d5e480e774bef71d083e408cdcdf5da3ae7dd621a2197df51e6673d32e27b017c16fbbe52f873c8
- SSDEEP 1536:cATaopZAr4MFx16wBnsu5Wy8NXyXBjtqCN5UAx3tj4IiOpFgoPAmkyL2wc:cYpZAcMXBuXcjtzN5UAx3Z4IbpFg6ABh
- TLSH T154A36C2463CC9F2AE7DE0F75B46052080771DE936A02F7AE6C8075D968B37C49A127E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.Requests.dll
- Size 156KB
- SHA256 2a1b5ed0fb8cb8eadada92ed6eeeba02d612cddf485462037068204e1b2373a3
- MD5 4eac1889a4ba790dc2532654196ec79c
- SHA1 b3dfc8c1b2ad58575a3454beac8f2b45eea56de5
- SHA512 e07675a331240e6223cae4f688760cd1b69716b541d225991ecb925e7490fd7250a734bb1052a5925e202a930a96d9dd384d9457f6a1f7b401d3ae6a9a154b59
- SSDEEP 3072:iAXqJt/2FCUActW/r5MyA6hH5B6tBAdNdJY1qbP800p7pEjdrMz6R:DIh2HtlmBcQNdUks7p2R
- TLSH T1BCF35B1023E8477FEBEF57B5F03595208776BACB661AEB4D680128DC24973C0E6913A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.WebClient.dll
- Size 64KB
- SHA256 369e563e454459796d1ed04f48b7dbb184daf37f8593d382a93df2fdc7df0a22
- MD5 f3f644364b6bbc66446acf3e2dff909a
- SHA1 bbec6ecc8a5e8ccbebe966acca2f55f34b913d31
- SHA512 312c9653e86b2ef8d7e5cd0e03268a830913ab6a65a6a6cb2d0eaae31d607faef347547c594fd4b1837c613716298034823f70e86bb343586e6118dbee4d8510
- SSDEEP 1536:EDRJbKUixgF3C6yx3bpqyYR7Y3ypJ9/itj/5:EtB6YJY3ypJ9/i1
- TLSH T1DB53291293DD9B23C75E82FCE93A82902B70D4C79242F785AC8CA5F43493BC166916F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Net.WebHeaderCollection.dll
- Size 28KB
- SHA256 f4f839a07b28c0ef7bc200b297ae3fc3b64786785834b9c8eeb78cea169405dc
- MD5 810b5a0d0700b169627c02ec3db5b0ca
- SHA1 9de48a628f48325ed098b6ec5ab03ed9b0647265
- SHA512 55d1ebc073ed49c992e8b62a4de92e64a2804e0db23561d48cd8f4c0d5dca188084db40f4a9f2a0c2e5c2bd83eae716c5ee3050eb5d49f9bf97c30685e16f94a
- SSDEEP 384:EWQlWQL+EW1rD0gt2Lax7wWEBmbaR/hWzUbI+vKRCS:e1+10K2amRQwpvQB
- TLSH T1E6D23A00A3EC1769FBFB1E75ACF760988232F9956499DE5E6C54008A18D3790D773B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Numerics.Vectors.dll
- Size 8KB
- SHA256 0ff0360eba289c8c39ad4f30f1da3c4b36af6f631cd40892b65a5c5c2eafd751
- MD5 f8790921cb617ab3e526875a581b6783
- SHA1 b23e7f87352ee72b60539c78fa712bd78c5e4693
- SHA512 86968b4007d8ba695da6c322383141955771daad7e84f5f2b0e5f154a92cfe4ec8f58c85bd77a4b4092077042c1aa6fa7b11670e0b632ce0492afc07a71b4e78
- SSDEEP 48:64UtjZWsFQf5WzBqABJUatgiodfJn9A4HzdiRkrYm+F+IvQTFNPPDmDIZL:EWbBWtqaUqOvA4Tdi9VFxvuDmDSL
- TLSH T168F16420D7E4833AFDB74B729C7356816679BB41DEA39B5F0588520A6C25A009F71B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.ObjectModel.dll
- Size 36KB
- SHA256 f26d9ca184e0ded7c7b4912720f607f0d004bdfd1b76ef06974dbc3d76b6cf1a
- MD5 41a1a4df688dacbb8447a1cd5dd22ba3
- SHA1 8a7964ddcb9d36ad1b03a5576002c660fffee0ea
- SHA512 a2af56bcf2f7b907a362c47507bb1c97ce3a818b74c7a18ff2c53dd93e6af5b452769935237f30d81dd2a073674dd1f355fa2dab2a3de497e51d99092e0cf0ad
- SSDEEP 768:paGAx7mkQFUUbuuHNyjRmmLuUAZ+X2yg47T:paGGmXaUbuANiwQ847
- TLSH T1F1F2291133D88B3BDBEE0776FCE510810735E6E66622EA0F6A95140AFF5375053B162B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Private.CoreLib.dll
- Size 5.4MB
- SHA256 575de3c1bc287741cd34264bbe8af40c0a578aac552db0428e9d4b1e34639448
- MD5 a30c2a60ddb22acf07e60ebe77dfeeea
- SHA1 04caed2bd9e5a90b34832c82c9139a0efb586f0f
- SHA512 70d8c256fd658afd277ee7678745107e53e03798685456f01608b2d35de5387342401054c1d76804872c2f74bce2b0ea013647ab03c7f2f9f7bc4ac2630c4594
- SSDEEP 49152:7aCocOeDEFY0EnhuAZD4Es5yy4G0DOH0U89YbpBtrQx5U+UVspMUSJBE6VC3ShVq:aZ4zOH0UfriDpWS6Vd
- TLSH T10E466C01E7C6DF1BE56E537B5032843C067AE89B631BA74B716C9B993503788A7133E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Private.Uri.dll
- Size 100KB
- SHA256 6c6c7eb552762871fb097c7e107d7a59b1e634bb30c0cd452cfc06511a483868
- MD5 879935bc0b6937f36ccc22f0408417d1
- SHA1 9815cb25b76fa8b96b60ec193c9f05509a11519b
- SHA512 f3121efbf5f26217a0cbbf15e7a331d0cd28a5bd7627b4ecbc1054e4417e7ec8f514007141388c25c7dd658c0b31d1ec5b2b1d7be9433656749e22a6a85481c6
- SSDEEP 3072:NxuJ3756nYGFr76LGZxJyjMjPhArX+AYgSP3m/3tpeB9pSzF17K3O2djHMYYMpSI:r2gnYGFr76LGZxJyjMjPhArX+AVSP3m2
- TLSH T1F7A33C28B7DC5B3EEBAE477B5492129303B4969BB581F7CD4D6820C929323C1921DAD3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Private.Xml.dll
- Size 3.0MB
- SHA256 7de24238cf106093f109efe8b0058cf2ae18a6307edbef76d8ccd57913bd8365
- MD5 b581d8d13dbfcb748f5e758f3dae7adb
- SHA1 d81cadf13cf78dc69acd30b20e9f32932b081012
- SHA512 eaf743dd4d706983ac4880be7a29c8ec50ff34337fecfca08f0b25e48f091e3f69130062f38457dc52d4169c97ced4cf3376dd22b7bbd88985a5f6296be3a696
- SSDEEP 49152:VEw0jrmZqm45F5C88iewlxOso2bOmBnKrUb:Dlqm4z5C8zv
- TLSH T147E56C0573C84E37D29F83B2E076562887FEF8676381DB4F6849A6E92C47740E9512E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.CompilerServices.VisualC.dll
- Size 12KB
- SHA256 8a77c342ece6c4f0278aebda4c44dc09a47026c78457fa21276e7c16595e2e7b
- MD5 f17a980fc2d6fe6f8cc51d0fa6f67f0e
- SHA1 4c71941a002c1d8268a44f35f636a0c72af83219
- SHA512 0e4800eb1b9d10a5f7144f78e901f87637bcbdced99533ed157836cfa360924503509a44a73dabbd9533aa7fd1210b9094af2fe47a84c45c69bc2b951d4dd84c
- SSDEEP 96:bW7LWtqxUVhQbrvPFV/Cxl7pfVCXVxvP1lzWVruKDmDSL:bW7LWzVhQ/36xl76lxH1lzWVi
- TLSH T1074295306BD9C73AEF270A7ADCB3A2410776F614AD6B9B1F405C9217EC586044A71B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.Extensions.dll
- Size 12KB
- SHA256 908b2dba13453ccef82fcf29f94b7168b0a37c9e0e5c24f676c453edf9432e62
- MD5 7a81d54dd22d9667d530dabdf9a9982b
- SHA1 7f2ea9657d688db31b9fbb3ce030ebe7c2045af3
- SHA512 9b9a334efb467b6b25c090b7ed38022d0cdf8f3d6dc7338f8d0cf587a5822cdf64e6da9c92cabb4c3c144960a233b309437e657b03cf4eb73eff493c2742a57f
- SSDEEP 96:jWdNWtqOoiZClHpfvuoQ/X6VSZ7r1x21PlxvHDmDSLZ:jWdNWXoiwR1uooMSZ7r1x+Plx
- TLSH T1C74272219FDCC336DE664BF2FDB3974142F9B6C19D72DA6F0289400A9C67608C6B1B25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.InteropServices.dll
- Size 60KB
- SHA256 c3d063a90d1acfec3d263088a635fc463aef81a98ef9965e81cf23869d795665
- MD5 e19aaec2effac16de31143e07d19cc89
- SHA1 79f77b9b0f4e47ef63b26b3eb3231dfb0688c7a6
- SHA512 a3fb913afba377a488e0cfb6468cb22c64ed715a285bd04c3900f5409771a8144b42c6ef244f9c88657b7634157d6d6ea6596dd649d31881d75b93cf530815b7
- SSDEEP 768:yQHHf7dFK+pBzPEZsBK8ZPWjpSFzy+pudKeOSD0j/w2sLVM9iO03egAsO:yQHDzCcKmWkW4udNY/w2yVvO0ug
- TLSH T169533A213FE8437FDF4A0B35AC3262504AF2FFC96153FA199A88549E08DB78547357A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.Loader.dll
- Size 8KB
- SHA256 89f990b950249fe2d9c9f249630f71f71dd4a2fb988f33b878ba7e23fcfc4495
- MD5 f772ab9513497d5b02fb7850a849b0c5
- SHA1 b4fe64f08ed74ac6cf22b8ac702dccdc34bcd193
- SHA512 2978f8917b95fbe3c87b30e572161a16bf3e3da9a746b7c7ce886ecab588f43dfde15071ca86fc326761ab4a9b2b93df057216ddfa6db530248b2e39b1b3b924
- SSDEEP 48:6nQ3qZWOAdW5WzBqABpMggitjFXFAnfpxhiRk8s/+IvQTiTNPPDmDIZLd:oWhGWtq6M/itZFAnfpHiLExv7DmDSLd
- TLSH T173F142A153E54337EE734B77DCB3A68197BAF914CDB3CA5F1494420F980A7489A31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Runtime.dll
- Size 40KB
- SHA256 3ff2a44bb6f867cb87f72fb78798ad2f78c069ccf6ca288ac7c2d2bbe233d670
- MD5 adda0da25c96eb4617614e9958bda337
- SHA1 dd0c84598455b97e829a3dcf20f676f01ea3867b
- SHA512 f976b21519018bd46f9c9d01dd019cf4e4ade4725513e13c33b01eb722ea2ccd527d9c3eda7069e9942f20d561f90fcc809ad3f2b37d75cd994fe7cff9869f4c
- SSDEEP 384:OgWQJWH/XNTShwsI4b0wZ03150v4w0bI9ti6/tFUqRiPH4Vbs62IzVXbeRY5Xcy:OqS/JShN9Yzl50v4boRiPYVbugVJ7
- TLSH T17C038261EE68D333CDCA93B6DC7360800EF272C640764D7A956F873660EAA49423677D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Threading.Thread.dll
- Size 12KB
- SHA256 c205bf207941042cb631582f84db3b213fa629cf5a904c5ecb4ae3cf600ea707
- MD5 80f4077cd66c941d97804c881a698ac5
- SHA1 aafd6a1d61ddd4bee60250f3f6edc13618ba0feb
- SHA512 b2fc7a150e1bc1eaab13b1e33d669dbf4c18f2dbb6faf4c84b45ecaab3e5d1b959ba3a0573d0a665c849762147c07816b0f0b2f728d5a392995837fc6e19dd8b
- SSDEEP 96:IWL7WtqYKoZNefSATzKdiI+bpiExv8dDmDSLL:IWL7WpKoZNefS6z4dEpiExU
- TLSH T1E042832487E54373FC731B329873978166BBBB90E9BACB5E059092066C1E6088F71F61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Threading.dll
- Size 40KB
- SHA256 052a0e6bdcfbaa50d88402d1f2965d52d2081cfd99145d79d412b88d5b200635
- MD5 4e8ae2a0309f431a44794af89650fdf2
- SHA1 89b7c07f5c51a6a174f7b9f2352f710140ce47b2
- SHA512 cdd48c3d69412748802412599fb4306bd705607912916212762524f40b3bfbb565e01613ef98a47af77bb11a54d2a8993cc407bfecc63ead0a430d96282b1d29
- SSDEEP 768:/NEtOpX8BMJpfI5JXTR83a/AyrxEyfzp/Rvt6VU5Qo:/N1wX9h/19Rvd5b
- TLSH T12A031A11A7F8072AF7FF0B7ADDB524144272FEE51911E65E6049400E25BBBC096E27B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Windows.Controls.Ribbon.dll
- Size 732KB
- SHA256 2344de25301c59b84f7281a3d19a5799f539e5f99e706ed181033722b0e41e66
- MD5 36f1c7640e8cb1e5b6c732f3ab8ff137
- SHA1 8817c8053756053c2dabd9e86996d5dccc897f12
- SHA512 928fd2733ccd13a74c7d5b631a13bf88e1a5bb55cc9ea5668da63529ad72364441ae12b042a766fd17f372774d3917be4690826f16f439a7fca1d11cc514c245
- SSDEEP 6144:H8MhlrjftLnV6HmaFzXe1mHyjOYLAvCchq/OoLNILBa3nrX+uJkc5xANSjBz:HllrTtLV6HmaWRAvC5LsUrTX3B
- TLSH T144F45B5037648BB5CA2E4AB5D021290C4A3295B35AF3D16614EF3EDC7CDBB408B85E6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Windows.Extensions.dll
- Size 68KB
- SHA256 1efefb64d9d691f5dec069de0bc3f367df00ec251d3029df725eb19d9e878fbc
- MD5 3fd0f97163ae0b602f70298d4ef12ef1
- SHA1 c3f76d58a44921651496e82a402d9f6d6d6b7612
- SHA512 284df685d51220277a83f4e6ce6659025fdc8255e39b77f38537a7e63c6ac4effec6b1f753b49726a1e16bb617dae0a6522b8d7d5458b61d5d3ba815544d339a
- SSDEEP 1536:4GFG0ATE8J214fnALSGGDDwbYqxsrmj1TbUc:45JI4fALSGGDMYHmh
- TLSH T1F563C51163F81629FAFB2F38BDB16421467ABC96BA35EB2C094401DD1DB6B80C970737
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Xaml.dll
- Size 556KB
- SHA256 66e512aca043a1736ec8969d05be6dc198466c78d40c24b5d0f17a1a89d7117b
- MD5 8683fc4d23d32c309d3e3c737ec1e860
- SHA1 36b7b13f1c8d2445ee4776edc95771bddeaff2d6
- SHA512 5b5e7f7f819e5969d169bf95f366dc65e7446d947220a965dde183c5004fa4e315399c06c773f1f760a5de84d4b1a71e268e3b3166e51b761bc652f4099664b3
- SSDEEP 12288:8f0xOL0caxiXfr1AL2rSnp7ABqWAF/Q9YHT:8f0xOL0nsfr1ALfnp7pQeT
- TLSH T175C45A2033F8923AD6EF4778A4726938CBF9B1636759DB4E8951709D2C93782DC016B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\System.Xml.ReaderWriter.dll
- Size 16KB
- SHA256 9538a305f95d0ea872cd29f9d718fd1ba97f8f4f7634cd00c8b317cd29c72e8a
- MD5 3e532fe68ee28cd311974cca1bd10c99
- SHA1 8bfa5520a9a285accc8a9162f50071cb24fefde3
- SHA512 8f353fd951fb1058d5c2935242818c0eac4eab237c62386f0f41d3642ede6fc9cc82c487df074bb868916ce71de3de1935dab3148137c47a467d08dc806e7932
- SSDEEP 192:nW7AWBrBEnPE1FEB5q9W+4cgPy67e0O4FCofuK7x:nW7AWBL125qkxK67ex4FCCV
- TLSH T1FA7240A0DEB4CE33EDAAB776C99B61C273F1B0607072CB76E485450BC4A25547633B11
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\WindowsBase.dll
- Size 1008KB
- SHA256 d4f935e656ac76d9b679ad49bf799cb62086c06385fe526e69363b871077ed70
- MD5 2e13cf4239bac0dc6e855663408f225e
- SHA1 f1d06189bb027dc1e99b01623da1c8ceaddfbc81
- SHA512 1c6db0f7f8515350ffa5a01f1bdf3da16c9ef21ce2f527ae5ced26e77843beb198902a429e4847f8c7b44e0aa033e117e1d5747140decabc3606b284e9ef2050
- SSDEEP 12288:olfCppyqr0RxxVO/20YdnDb95UYVOQniMM+BMob/m+hM8qyIcZ7RstNPadac:ifGwxc/rYd1/I+h4R+uyda
- TLSH T12A255B1237E4873AD5FF4779A8B25506A7B5F95367A6D38F2406823C2CD3B508A203B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\Wpf.Ui.dll
- Size 6.3MB
- SHA256 2adaf3df313e98b3d3da11aa433efdf5e90d49562747ef0e65ba23a81d5ae699
- MD5 5f916bdc5b0ec634349c758167416cf5
- SHA1 2180e63d100a4b7a093450ac0d553bfa183f5e6b
- SHA512 633d36f86447b2fce3519a578aa61f1dfd2ee5edc09ab6d1ad57b289b006300d75ac63d89720a3320cf26d81d167a4eea791f62f2d7ca98fbe227bf1f73e0670
- SSDEEP 98304:U9xe/+FOvSmaRf+UcDN9NppBLxAHDfyLrZl:U9xz8N9Npp
- TLSH T136666B6E17EE4D36C3A3C37ACDA07323286919661142AB934F4EDF2D446A1C4CDF529B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\optimizerDuck-Windows-x64-2.25.5\uK85yIKYk8QY\optimizerDuck.dll
- Size 1.2MB
- SHA256 822b9bbef5e43046d01bec097d2d16035f0c9a0c5a58a5168cad8858eb9c28e0
- MD5 073531d3a445689c5a1b384f053c3aef
- SHA1 ec2db9bbdbe46b0fa58112e622034fa9bd48207d
- SHA512 6120cbf04f29b81feb903882b1b104d49a1cbc029e9c0fee4510438d8de3548535b6b90b43d7b550b2a47168e62bb315309675bb80599d6423f58f4483c65b96
- SSDEEP 12288:c5dquXj17Fk7eXXizcrRggWN+XjPKGyw+/rX0lwhwQB2tcAwo5iWswKU9YWB1SMp:c9jZyzmggWN+TPKs+TUEAw2/B1f9
- TLSH T167455A1033F8472CF9FF0BB5997245588F76BA27A951E75E2116208D2DB2B41CE23B63
- MD5 SHA1 SHA512 SSDEEP TLSH