Overview

overview

7

Static

static

3

PDuckF.exe

windows10-2004-x64

7

PDuckF.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/10/2026, 15:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    PDuckF.exe
  • Size 9.5MB
  • Sample261002-sdzy8awsaw
  • SHA256 5d970355a67798b5511de5ab2c942ad3058b4e3a7f323f3c23a1d03e40c10e37
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Program Files directory 6 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PDuckF.exe
    "C:\Users\Admin\AppData\Local\Temp\PDuckF.exe"
    1⤵
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4960
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=PDuckF.exe --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4960.2900.10769087419579545874
      2⤵
      • Drops file in Program Files directory
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:1120
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x168,0x16c,0x170,0x144,0x178,0x7fff669fb078,0x7fff669fb084,0x7fff669fb090
        3⤵
          PID:2152
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --webview-exe-name=PDuckF.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1744,i,15132737994428151996,6157575157609691989,262144 --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:2
          3⤵
            PID:4312
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --webview-exe-name=PDuckF.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2060,i,15132737994428151996,6157575157609691989,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:3
            3⤵
              PID:3912
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --webview-exe-name=PDuckF.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1732,i,15132737994428151996,6157575157609691989,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
              3⤵
                PID:5036
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --webview-exe-name=PDuckF.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3620,i,15132737994428151996,6157575157609691989,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
                3⤵
                  PID:5016
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --webview-exe-name=PDuckF.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4360,i,15132737994428151996,6157575157609691989,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
                  3⤵
                    PID:1684
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --webview-exe-name=PDuckF.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4328,i,15132737994428151996,6157575157609691989,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
                    3⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:1656
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView" --webview-exe-name=PDuckF.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4088,i,15132737994428151996,6157575157609691989,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
                    3⤵
                      PID:4248

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      manifest.fingerprint
                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1120_1698327391\manifest.fingerprint
                      • Size 66B
                      • SHA256 bc8d4367c67f869cbf134ee18cc34007003022251fd5d54980fae22d990f1563
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      manifest.fingerprint
                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1120_349328625\manifest.fingerprint
                      • Size 66B
                      • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      protocols.json
                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1120_349328625\protocols.json
                      • Size 3KB
                      • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      WebView2Loader.dll
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\WebView2Loader.dll
                      • Size 159KB
                      • SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      app.js
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\app.js
                      • Size 8KB
                      • SHA256 c030f7c61bf150e3a795406cbaa932958fa56b1c44995dc01bb1051cb124f233
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      merge.svg
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\assets\merge.svg
                      • Size 403B
                      • SHA256 1691a10688c83d8eca1fe3acf817b3cd0592c9ee147e8f31befede1441974915
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      pduckf.png
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\assets\pduckf.png
                      • Size 54KB
                      • SHA256 c0b1e4c010028feb546d45919acb43f31c3e9895085ca088f2fcd3a527d00351
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      split.svg
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\assets\split.svg
                      • Size 414B
                      • SHA256 17bd8af233c9ff60aef4961bad1c8c7bdfe60dff213e0276de7e6b7aacfe3359
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      success.svg
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\assets\success.svg
                      • Size 276B
                      • SHA256 c1deb90c7cebf7213996520c15e682e5ad8f074b42d399b2d2257f9162fa04b6
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      upload.svg
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\assets\upload.svg
                      • Size 372B
                      • SHA256 eaddb3ffc119a20472a3d524275c6d46048554d89e4664eed05727da629df4d8
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      word-to-pdf.svg
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\assets\word-to-pdf.svg
                      • Size 407B
                      • SHA256 6733e54d905b1a481c0e75ce6617a23191ce38225089d6011ea7ff803ffe7a45
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      index.html
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\index.html
                      • Size 10KB
                      • SHA256 d8b39b5a363cdefb5454e389d5d072c65dc252fe92e6ba7d8d9d1a214d50e1d8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      styles.css
                      • Path C:\Users\Admin\AppData\Local\PDuckF\Runtime\final-20260920-v1\web\styles.css
                      • Size 12KB
                      • SHA256 086d8756fb2efb7c58dc84e7cf2beadbb612578dc2cfe95497d67828d28b86cd
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      manifest.json
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                      • Size 135B
                      • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      crl-set
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
                      • Size 22KB
                      • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      manifest.json
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\CertificateRevocation\6498.2025.9.4\manifest.json
                      • Size 113B
                      • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      settings.dat
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Crashpad\settings.dat
                      • Size 280B
                      • SHA256 a6ba8745b3a98141283c28029126ea5c76cd9d4d9c1ea9d014fb92400e0c3e13
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      settings.dat
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Crashpad\settings.dat
                      • Size 280B
                      • SHA256 ad6005d2c7a69c315091d02d8bf39ecb160b3926494d4e702ee815d8569580b6
                      • MD5 SHA1 SHA512
                      Submit Download

                      throttle_store.dat
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Crashpad\throttle_store.dat
                      • Size 20B
                      • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                      • MD5 SHA1 SHA512
                      Submit Download

                      9b793844-12c3-468c-b841-4e29ef4d2e80.tmp
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\9b793844-12c3-468c-b841-4e29ef4d2e80.tmp
                      • Size 6KB
                      • SHA256 5344d2bc9c265009b9ba640132cf500d1155375c3615f4fa5cddf02b222dab17
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      temp-index
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                      • Size 48B
                      • SHA256 f28781129003fa2ae6ce0e919f40143a997b73705451ebf6b136f146b50d9ad6
                      • MD5 SHA1 SHA512
                      Submit Download

                      temp-index
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                      • Size 72B
                      • SHA256 44edc6cd28ac1818d0c8e28a10b5978c74cb16d7ec7ace6c8218e31bc9b7b4e1
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      index
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\DawnGraphiteCache\index
                      • Size 256KB
                      • SHA256 ba2594095512574de46792392c447fc61e1978758482cbc7822c9ce692e97757
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_0
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\GPUCache\data_0
                      • Size 8KB
                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_1
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\GPUCache\data_1
                      • Size 264KB
                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_2
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\GPUCache\data_2
                      • Size 8KB
                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_3
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\GPUCache\data_3
                      • Size 8KB
                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      8b529f3d-0fc4-46a5-93ff-e6b7aa472ee1.tmp
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Network\8b529f3d-0fc4-46a5-93ff-e6b7aa472ee1.tmp
                      • Size 111B
                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      Network Persistent State
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Network\Network Persistent State
                      • Size 59B
                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      SCT Auditing Pending Reports
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                      • Size 2B
                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                      • MD5 SHA1 SHA512
                      Submit Download

                      Preferences
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Preferences
                      • Size 6KB
                      • SHA256 fb6e2b71c40a6df384e0b8c8a4c3e1b490f18713cbfa55f02219fb91248e927c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      MANIFEST-000001
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                      • Size 41B
                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                      • MD5 SHA1 SHA512
                      Submit Download

                      000001.dbtmp
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Default\Sync Data\LevelDB\000001.dbtmp
                      • Size 16B
                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                      • MD5 SHA1 SHA512
                      Submit Download

                      Local State
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\Local State
                      • Size 1KB
                      • SHA256 a5209e04c87eeaab59ff94feb83af50a6094c972678723d196f1035fa2d65c59
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ccefaec2-1a35-4bb3-a84a-62a1e2e4c8f7.tmp
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\ccefaec2-1a35-4bb3-a84a-62a1e2e4c8f7.tmp
                      • Size 2KB
                      • SHA256 12065b32d215f1a2fea4120323126495bfb28d958b75f292656ffd2e94e790e4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      f74caa3a-cd9b-4471-96ce-70d88d5b84b2.tmp
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\f74caa3a-cd9b-4471-96ce-70d88d5b84b2.tmp
                      • Size 3KB
                      • SHA256 bc9f26388cad9ce079c8efaf1d3ae38c1035b43d0a4aed8e64af665456108bc0
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      f830a60b-8c12-41e4-ae04-f33ae7717753.tmp
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\f830a60b-8c12-41e4-ae04-f33ae7717753.tmp
                      • Size 1KB
                      • SHA256 e622e0685577d5325ddb95de9a1c0d4fd615c53856d50cf203267b38e7bd644f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      fe7a7367-c6f3-47a6-83ad-07b379a2e0c0.tmp
                      • Path C:\Users\Admin\AppData\Local\PDuckF\WebView2\EBWebView\fe7a7367-c6f3-47a6-83ad-07b379a2e0c0.tmp
                      • Size 16KB
                      • SHA256 56ab0cc8e53966793631bc28c010cb2634202d2ea33fc045d01fca1bd40fb58b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      memory/1656-410-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-414-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-405-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-404-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-409-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-411-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-415-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-403-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-413-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/1656-412-0x0000029F37990000-0x0000029F37991000-memory.dmp
                      Download

                      memory/4312-97-0x00007FFF83130000-0x00007FFF83131000-memory.dmp
                      Download

                      memory/5016-213-0x00007FFF83130000-0x00007FFF83131000-memory.dmp
                      Download

                      memory/5036-160-0x00007FFF81C50000-0x00007FFF81C51000-memory.dmp
                      Download

                      memory/5036-153-0x00007FFF81A90000-0x00007FFF81A91000-memory.dmp
                      Download