699f439d4fdd2507c0fd7424b7bbdad92e75975249164c8f21043fcc5a1a705c

Analysis

user interaction
yes
max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DuoHacker.exe
Size 65.5MB
Sample261030-2bsa2astc1
SHA256 699f439d4fdd2507c0fd7424b7bbdad92e75975249164c8f21043fcc5a1a705c
MD5 73006016dedea6cb910b4e65f9e4ff4d
SHA1 b3f6ea9db6febb855971df3071ca06aaf4ab96d8
SHA512 84625786f5ab5e03b270ded0e6e10252c1981f802ab8188af992bd78253190c5aa71ef91f5ddb60a4917a5f4a2511990d66f68dd0cf900dde6659ba9fda772a5
SSDEEP 1572864:2uky+ptA+NklHaArQ2ocxSG3oSi061S71zyV6yrh8+c1qVBrYaNy:2byUa5ppnYG3Zi061SZzyc9+cfMy
TLSH
T199E733F968DD1F71F691E0F43078631DE04AE425AD52BA1790F62D0BDA0390ECA8D5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

credential_access defense_evasion discovery spyware stealer trojan

Malware Config

Signatures

Uses browser remote debugging 2 TTPs 5 IoCs

Can be used to control the browser and steal sensitive information such as credentials and session cookies.

credential_access stealer

Steal Web Session Cookie

T1539

Modify Authentication Process

T1556

pid	Process
2300	DuoHacker.exe
1424	DuoHacker.exe
3064	DuoHacker.exe
456	DuoHacker.exe
596	DuoHacker.exe

Checks computer location settings 2 TTPs 6 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	DuoHacker.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	DuoHacker.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	DuoHacker.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	DuoHacker.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	DuoHacker.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	DuoHacker.exe

Executes dropped EXE 11 IoCs

pid	Process
2752	DuoHacker.exe
4648	DuoHacker.exe
3364	DuoHacker.exe
596	DuoHacker.exe
2300	DuoHacker.exe
5632	DuoHacker.exe
2916	DuoHacker.exe
1424	DuoHacker.exe
3064	DuoHacker.exe
456	DuoHacker.exe
3756	DuoHacker.exe

Loads dropped DLL 23 IoCs

pid	Process
1876	DuoHacker.exe
1876	DuoHacker.exe
1876	DuoHacker.exe
1876	DuoHacker.exe
1876	DuoHacker.exe
1876	DuoHacker.exe
2752	DuoHacker.exe
4648	DuoHacker.exe
4648	DuoHacker.exe
4648	DuoHacker.exe
4648	DuoHacker.exe
4648	DuoHacker.exe
4648	DuoHacker.exe
3364	DuoHacker.exe
596	DuoHacker.exe
2300	DuoHacker.exe
5632	DuoHacker.exe
2916	DuoHacker.exe
1424	DuoHacker.exe
3064	DuoHacker.exe
456	DuoHacker.exe
3756	DuoHacker.exe
3756	DuoHacker.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
23	ip-api.com

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	DuoHacker.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	DuoHacker.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	DuoHacker.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	DuoHacker.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DuoHacker.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{73480B19-23BF-440C-AA97-3E286A58942E}	DuoHacker.exe

Modifies system certificate store 2 TTPs 7 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	DuoHacker.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	DuoHacker.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 040000000100000010000000324a4bbbc863699bbe749ac6dd1d46240f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b060105050703016200000001000000200000001465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb6587f0000000100000016000000301406082b0601050507030306082b06010505070304140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d777e00000001000000080000000080826f22e7dc01030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a190000000100000010000000fd960962ac6938e0d4b0769aa1a64e262000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794	DuoHacker.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	DuoHacker.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280	DuoHacker.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280\Blob = 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	DuoHacker.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A	DuoHacker.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1876	DuoHacker.exe
1876	DuoHacker.exe
3756	DuoHacker.exe
3756	DuoHacker.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	1876	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe
Token: SeCreatePagefilePrivilege	2752	DuoHacker.exe
Token: SeShutdownPrivilege	2752	DuoHacker.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2752	DuoHacker.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 2752 wrote to memory of 4648	2752	DuoHacker.exe	96
PID 2752 wrote to memory of 4648	2752	DuoHacker.exe	96
PID 2752 wrote to memory of 3364	2752	DuoHacker.exe	97
PID 2752 wrote to memory of 596	2752	DuoHacker.exe	98
PID 2752 wrote to memory of 596	2752	DuoHacker.exe	98
PID 2752 wrote to memory of 596	2752	DuoHacker.exe	98
PID 2752 wrote to memory of 2300	2752	DuoHacker.exe	100
PID 2752 wrote to memory of 2300	2752	DuoHacker.exe	100
PID 2752 wrote to memory of 2300	2752	DuoHacker.exe	100
PID 2752 wrote to memory of 5632	2752	DuoHacker.exe	101
PID 2752 wrote to memory of 5632	2752	DuoHacker.exe	101
PID 2752 wrote to memory of 2916	2752	DuoHacker.exe	102
PID 2752 wrote to memory of 1424	2752	DuoHacker.exe	103
PID 2752 wrote to memory of 1424	2752	DuoHacker.exe	103
PID 2752 wrote to memory of 1424	2752	DuoHacker.exe	103
PID 2752 wrote to memory of 3064	2752	DuoHacker.exe	104
PID 2752 wrote to memory of 3064	2752	DuoHacker.exe	104
PID 2752 wrote to memory of 3064	2752	DuoHacker.exe	104
PID 2752 wrote to memory of 456	2752	DuoHacker.exe	108
PID 2752 wrote to memory of 456	2752	DuoHacker.exe	108
PID 2752 wrote to memory of 456	2752	DuoHacker.exe	108
PID 2752 wrote to memory of 3756	2752	DuoHacker.exe	109

C:\Users\Admin\AppData\Local\Temp\DuoHacker.exe
"C:\Users\Admin\AppData\Local\Temp\DuoHacker.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1876

C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
"C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2752
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1712 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4648
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --mojo-platform-channel-handle=2224 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  PID:3364
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --app-path="C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\app.asar" --enable-sandbox --first-renderer-process --remote-debugging-port=50525 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2892 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Uses browser remote debugging
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:596
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --app-path="C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\app.asar" --enable-sandbox --remote-debugging-port=50525 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3752 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Uses browser remote debugging
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2300
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --mojo-platform-channel-handle=4040 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5632
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --mojo-platform-channel-handle=4064 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  PID:2916
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --app-path="C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\app.asar" --enable-sandbox --remote-debugging-port=50525 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4240 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Uses browser remote debugging
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1424
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --app-path="C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\app.asar" --enable-sandbox --remote-debugging-port=50525 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4748 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Uses browser remote debugging
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3064
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --app-path="C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\app.asar" --enable-sandbox --remote-debugging-port=50525 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4544 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Uses browser remote debugging
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:456
- C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe
  "C:\Users\Admin\AppData\Local\Programs\DuoHacker\DuoHacker.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\DuoHacker" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4996 --field-trial-handle=1896,i,8668151250688408468,15596904919531230693,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:3756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Modify Authentication Process

T1556

Privilege Escalation

Defense Evasion

Modify Authentication Process

T1556

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Modify Authentication Process

T1556

Steal Web Session Cookie

T1539

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\LICENSES.chromium.html
Size 6.3MB
SHA256 652457f1b5ec60a81c8aff095366bcc068402c21eb380ba8286366bc4e9a029e
MD5 6e638956244aaded2c92b77f9d421a81
SHA1 f5269556b6fe04cfca5a1da21af718641708a666
SHA512 f0e173761a6acd13b6c1b5eb896c361487a770a54f1842ffaa80c8ff780b37a1e801169786776c4afa7d9c75cd968dbaddabff082de55cf75cc4f9d871d08bc1
SSDEEP 24576:nPVZ5W5WS95zHIlGMmfu626s6W6a6q5AHOeQDph:SMn
TLSH
T11166942F7B48037306C60262AB8BA5CAF21F903F3B565654345CD1681F6BE2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\chrome_200_percent.pak
Size 175KB
SHA256 b2c25fb30fee5f04ccdb8bf3c937a667502d266e428425feeb5af964f6167d48
MD5 9c379fc04a7bf1a853b14834f58c9f4b
SHA1 c105120fd00001c9ebdf2b3b981ecccb02f8eefb
SHA512 f28844dba7780e5f5c9d77ac3d29069dfcd6698447d5723886e510eadd51d6285e06adbda06bf4a69f841afc161c764cb2e5b9ad2c92f0a87176709b4acd2c13
SSDEEP 3072:oDQYaEQN6AJPgqzOovg6/Csp7rfR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+HxNN:oDQYaNN68gyrgKpngx5GMRejnbdZnVEd
TLSH
T19804E1DB63B4DD7DC9630AB3A22901F1ECB1123559B6425B53DFEC353A56B8988CC283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\d3dcompiler_47.dll
Size 4.7MB
SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
MD5 cb9807f6cf55ad799e920b7e0f97df99
SHA1 bb76012ded5acd103adad49436612d073d159b29
SHA512 f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
SSDEEP 49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
TLSH
T19E367D5673E940A9C1BBD138CE478213EBB1781403345BEB5191C669EF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\ffmpeg.dll
Size 2.6MB
SHA256 7922878b04d21b883d28da17316f3b174f35335a2820d504f7ac91458d2e9cac
MD5 2438f9abea41a6fe835c197f22eac825
SHA1 33d0e0091b3fa82d688d11af0f0f29b38d6ec16b
SHA512 d8bfb20be316ba19c06d13ea981839c034ddbfccfa23e55be431904f5fc88646f2c169a531085b29b8dd69c2257703dff3f28fa26cd7d2d6d692edf1aa221307
SSDEEP 49152:YpWD/YnI32AwYnv8zoRIIIC092xFlPY6uyY01fqKo/5snusyB4lkj+IP6yT9QVs8:Yp+a8IIICG6zYD/5tP6yT9QVsU5ikJht
TLSH
T177C59E13E6D644DDC01EC27487AF9233F93138468724A5EF2A9196252F3AFD06E7E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\libEGL.dll
Size 464KB
SHA256 fc2cc4deec921ffba6e1165d569d0df4209722524aaa21e78e5e1de2ca922ac0
MD5 bae33873ea0db05ea5555f53ebb19a9c
SHA1 070af32bcfebe55e66db75e1f7b3ce3cfe67c3e4
SHA512 a7037350365ca3cd41115d332a9ea4daaa22206cb6b6670092af7e1da2f341d499f1961a31c01b2955bb28c0a178abe8dc942dec144db765dbb9129560e42d0f
SSDEEP 6144:HaKrTDTs6svmKuCF8tvM/jvtGgJ53B6Zj8s1al2z1koPJ1Q/V7:TrTDTs6lS8ZM/jvtGgJZB6ZicQ
TLSH
T11BA48D16779444B9D03AC1748A578612DE72B8920F25F7EF02A4927D2F77BF85B3A320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\libGLESv2.dll
Size 7.0MB
SHA256 8b6a54b72ec42f94072cad21911950014553e11fedc1573c11b3c233eadb0dbf
MD5 cbd65f2853517cba2dbe6628223d9863
SHA1 2b5efd10aa1ef64fee1cd7ac0b21762b6f1b4e87
SHA512 75d8cccfe8921f9931b8f0e6a2a82f4162fc3d9be66f1556cf4857a48595f9820ae4b46e150d642ee27f327a31eb04445edc07e49e9333221a1ce77575224b21
SSDEEP 49152:UfOX5aYHo/5AYbsnsspwFSDLHfwY9yKkZnXsWEPsYtxTG58ujlW0Qn+dpvjFHQEQ:Dgmoh4nESsXY8i+VOiwmzu1
TLSH
T198766B07E69540DDC05DD2B88B5BA222FA31BC490724B2DF26A473152F77BE46BBE710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\af.pak
Size 327KB
SHA256 219d94355d0c460516f9baa83f4b8dcd3353ce13e7648f019810047ee8eecb41
MD5 f78831d4aec1d0e1735ad630f9e8f4ce
SHA1 4afc52c9d2e0fba6aff22596bf876621a7d88a27
SHA512 ffbf51a4ff656edd65575ae4d1f489281e3ef08e1e5bb05daac9786958d1af832520e6ed77ed197e0160e368fb56bf303f8779bcdcbe77d995364a433024d65f
SSDEEP 6144:ZLgVKc+kVWlEvC9Z5D49Em7kLjB6oAYxjYgDbwxesB+xSK1qA3y25tHwDwv22iGe:ZEdclEvC2im4LjB6oAYxjYgDbwAVSK1Q
TLSH
T1B8641B0ADB80273D05E07696BA0445F7BB9CB26DD770B2BADD9D81321962EFC01BD1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\am.pak
Size 531KB
SHA256 f62791089b07bb9796292e5e3fd81eb1e68f3adba0fcc88fea4df744dbad6775
MD5 8e8fbaad0de95893785875e20cfbe5f3
SHA1 f179e4db197a974e1e428f0bcb9cb1bc09df04f4
SHA512 93cfc2f82d3f83dd992ba758d067055cc26bae5c2e9b1ecd6974f4143c22da405bc6845d2d2a811ff043ff1cd55929ed04a6f929ae01ac211c781d4786a90246
SSDEEP 12288:oI+uzxX8xMzKsE1gI5z9SBeuWqQ9x30jH8+I:oIVX8xMzKn1gI5z9SB6qQZ
TLSH
T119C4BA547DF9F7170F8E8A1994221E8E9594AD4692813C38C35AE3FC2B2DF1B4CDE219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ar.pak
Size 573KB
SHA256 c28e612cae27402f2a75c9699268f1781b286748b0590d396e0a538e3aa67e49
MD5 cbeaafb259a3a0ad76739186e9b2bf75
SHA1 11b348534a84c9648eb86c9790bfb7703cde242f
SHA512 2c91f17343d947cd4eb4d8d339e5932a3331445b4e826915d54196c29ce548b7e98a9b5f9857146a9a956ce20d3e624fb04b7c44d3c1a2593e8b6e2cb12662b0
SSDEEP 12288:eCYtqr0jXjiRp/DvYUBuGYurA5SNbr+ATg5Y3MgSENFh:Z1Cuk52+k
TLSH
T1E0C48BE21B2584720B96DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\bg.pak
Size 608KB
SHA256 6c10b64d31e0dc2c4befc6703ac17343ca473b4350cfb3c6e01833f505b69590
MD5 96372403a9ded96f3a699262029a4580
SHA1 07069b20fe303f6eef1fb6c8c0a19266a0c705c9
SHA512 0df60fe13818f0c3c6838e77686c5de9fa03b97cbf0943f7a2a4ae2f3a0890d3d64b3a7652d8c81c23de876ac92e4c6b71d584fb106c3520c96ef76ba30250fd
SSDEEP 12288:dPnB1xlYrdAs1alUDpzaVVwsl867mFyY3SKN3rsbDxXs7Jfu64KGzrFSZp8VqJ5O:dvBjlYrdAs1alUFTsWoY3SKIVcdu6pGB
TLSH
T1D1D433A15B9A689F0101F45F98087E093CEB54FE3FE7879241642DBD39F20B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\bn.pak
Size 780KB
SHA256 297d52b252df0912490ddf26fa58706895e70c2a0f3f09d0dc756706720095ef
MD5 cb203032925be270222dc2c20fe771e2
SHA1 2f2f20bbbd07ee01cc996247bd9c2f40037dff80
SHA512 052be75c51051949c84216566b462733b61026ba74e212b000cbed7d93cb852e74ae83d64d2eaadc3093af4265b6783184cf8e0368a75e077d4b75daba40f9b4
SSDEEP 3072:Kw+ZjJj+E7z0eC6HcvR1kgBbdawSU5ZwXll4:4tJXZ78vRNBbdz5ily
TLSH
T10405EE209C6E91B2A8D5CDC9434C6370C1236E9B9B61F34DDC17A24938ADC7C8DADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\cs.pak
Size 377KB
SHA256 08e40f5efc616cdc0588fb4b1a706d997c69d17ddaf97eb91a4aabafaa11cee6
MD5 3e2c49143f4718ddd9c1c74f8599fac2
SHA1 7cce45de66a3895c3493b998fef7bedf045b29e2
SHA512 a849ca0d09e0d4c025d9de6c8008c13e13581961c321f53a552deeaa210db891914386fd51673615aec8b5d8d68a921a968db5d0fe447963892ceb0948861e3d
SSDEEP 6144:QhKH/gwYPl/XACAjRe15q8+Y1zAXn5q8QM:9fgdPl/Q3e15q8+Y1AXnF
TLSH
T1F0843B1EDB936435894002487BFA4228BD5E87500B6FA5BB7CCF98862175B7E8FF4D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\da.pak
Size 342KB
SHA256 e20628baac73a284b2cd6514fb396d4e0a22f4f6fd193d5d7d45190a0944e4fd
MD5 6c24baadc460e788486e336ae505a224
SHA1 dd1aad964c24f46c69a81ea29a12a69bb0290767
SHA512 287bf70065ff99f20cfd150562b022762e2e61858cf0203d7272b5cd8ecee9c0567b8910913effc291162243833d445d13fc45f02b4b0f26d30611ad9c8d0376
SSDEEP 6144:moDww1XXv/f1hwlE4KJwRXNGZO2Z5nYryGzO8i05TWwc:fHH9AN85YrZT0
TLSH
T1C7746C8BCC5C332FC6A90B65F2108EA7EB5D953CC680664F75D8943A49CBD6093BE1C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\de.pak
Size 367KB
SHA256 2d4130e036290ff3cd938c664fe0bde8755fed9658ff84ba09c926829fec3c2f
MD5 4c83231e20122f26e0a81a91ba6146ab
SHA1 4597efc299df26a0e6db5db622921eb7b66c6b16
SHA512 ca872465b222a145c90a314f44671a7efcd3e18ff072b1855a509a56e34854c4aa80ba1ab5ab5f9a3650e32a98d859bd80e52762ce2da57a40bde83092a80303
SSDEEP 6144:FICifZl9UPnzaqSFaPjON3Be0mzUWCj0Xs5HgIxBI0gql:eP3+PnuvFaCN3mzUd5xy0gql
TLSH
T152840703ADDB625EC78273607701CDBB7718E26BC346316794DDD137A64BAB283AC426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\el.pak
Size 664KB
SHA256 bc07e403272a4d65305fe24a827404d7b931d01cda547f8c07a840d19e591430
MD5 8f5a15560710db2af852512b7298b93e
SHA1 30a13ebef10108effbad8c24b680228660658415
SHA512 e3cedc0eaa82b10a68a40aca8ec1379a6bb924766e1c5abd97e39c621dcbc195d6c1ff80921c2320f0f1c87d160bc2a6258108399876339e5104f98d90a861de
SSDEEP 12288:RdquNwK202pgaZH4q5OaPY3HvO9K63/fgBsbfFnxHuhWTT9rkv0pfBtMMkffFZig:RdquNwK202pgaWqsaA3Hm9K63/fgBs9I
TLSH
T16AE4DFEFB4542DED8086950785D8F07C67C62D6CE749CBD86229CB20BDF90719A22E1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\en-GB.pak
Size 299KB
SHA256 e1e357c853eed83fb6c4133f8f4df377a8eda4fe6f0e55395f21c5ab6e38faa8
MD5 05ac84aa6987eb1f55021b6fba56d364
SHA1 58cb66bba3af0c6cc742488ccc342d33fc118660
SHA512 c615e1eb01412c5e2c0402242d442a6cf08965318d1c0d261ca5bc6df9acba5efa2c87ade20e1e4740d2239ea56d1ce4d3fc7a4c3eabe81b876ecb364b3e91b6
SSDEEP 6144:WJeP/KOb6vG8GGvDJAgdMP9ectcaAfaYEnG2J05SSvqo:1COb6ugdMrcarnGf5SSio
TLSH
T105643D1FF784226906931162BB45A6A2FB26D07CA31116673CBD802C33B6B56C3777E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\en-US.pak
Size 302KB
SHA256 a99bd31907bbdc12bdfbff7b9da6ddd850c273f3a6ece64ee8d1d9b6ef0c501c
MD5 3fef69b20e6f9599e9c2369398e571c0
SHA1 92be2b65b62938e6426ab333c82d70d337666784
SHA512 3057edfb719c07972fd230514ac5e02f88b04c72356fa4a5e5291677dcbab03297942d5ecdc62c8e58d0088aed4d6ea53806c01f0ea622942feb06584241ad2d
SSDEEP 6144:yoaiWmH9xPN6DacNMP9elahdQfaYejDJDsN5ySMZswS:taiWF+cNMbhd7jDJi5ySEswS
TLSH
T15E645D1FE784226A069352627F05A5A2FB36C06DA35112573CBC812C33B7B66C3777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\es-419.pak
Size 366KB
SHA256 fdf3a44e1fe4fe753c196921f700014c81280464f99e15b8a6137804ec14ca19
MD5 527210238ad4c2f1b079cfd8857b08e0
SHA1 b779d21fb05cf8e6e9446fac4634d71e48a18113
SHA512 fef1cc7fab7816fc1e3ac5507f875ad592dde63509b7d738c96a010ff1a2e32ec1c9d1188023c5b92eea63fde72aa6bf990e9b89cd05788baa46e5e3b5198d4c
SSDEEP 3072:3k4wjwbC52iXhfmcv5jrqMCOyu0sdzPh7buhwwJ9Os57lLfGLFg3WSozHG6:3+752YJv5rYQQJx5sLFg3WSoTG6
TLSH
T1F0842C22AAC81F5310E2A348B783D753E5D49545F408C29BE8EB83A562CCF8CD977ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\es.pak
Size 367KB
SHA256 cc423403f5bab00309993241125577d5e64a1a4130a44979b4c8d3e07428953b
MD5 96bdc30c826aca4fc7e5e6adfd889b75
SHA1 aa71721b78ab54a99b97b580c4f6d1610b198df7
SHA512 30e3df376fe06d60388afc13a421ab335a75bf05651f2ce83c8eb80653f29180bb89154149136e3c5009de62bb62ba451a4aaff65f1de9cddb6fe3dec8e90706
SSDEEP 6144:SCcds7km2U/qCngfr56ZUb5R7K5zrT7zUl56AN6PZmz:TkckmyLr0+FRW5zrol5Fnz
TLSH
T1D6842922AACC1F6340D39349B383D743E5D89585B408C29BE9EF87A651C8F8CC967ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\et.pak
Size 330KB
SHA256 3599e7138a24a31839da877cc9718b9c0c9522437ea93a6222a119080f108d14
MD5 054865950b3b9e8312a7f9490268eaca
SHA1 28b0176112eddb7af58386b4f8aed4a49b9a2661
SHA512 bfc72f19ad1a52c0da82409accb33a27b2844ed29010207268c7d695ad7562a8867a87b70ac50142909b50b81a5c84d6f6a43968353ae7a72bc042aea8cbb59f
SSDEEP 6144:GPJXg42WkHwGkDmzZpDM0djry2zuJbT/RcLvihV15Ujc43ceLfLPQu:6JuvymrDbWF15Ujf
TLSH
T184744B42A17D771B692412F4D223AE63DC9FE7C974000D9678974A1970FEF8C39B2B68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\fa.pak
Size 535KB
SHA256 ff72cec00f81f0caa8947c78df2402bd7b643b27281bf0890b8eeee4c4f7de25
MD5 b3adacc0f472d65371b8c8ead3595d4c
SHA1 2d4773fd77b2690598158769a788389ee80dae1c
SHA512 fa01da4d811c8de89832262a8b1d227ecc5ff42b37e53a817feab2bd0bf91c9dd41097677ef20ecc269ee1ad792b23ecdd52ae3d3f65c8ca1336a22d82cd63f8
SSDEEP 12288:jDOyeNX9nuya1jfwHLwNUaGSSfStQvueKT+JwMTAKzIxRAQiHedNu3htodxWetlA:P0vuya1jfwrwNUaGSSfStQvueKT+JwMt
TLSH
T14AC4C3D56AAC9AB15756CA0341D33838C773EF12D34DFE40ACA1076609A5B139B4FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\fi.pak
Size 338KB
SHA256 df8cefa4831fc2fdf817dd6d49a6373edee4f51f23cf990c690e72ce348f69bb
MD5 aac0554a39bb1ae91e2ed4246e04c30e
SHA1 031785024765eda1534fd9504eccbe1b471ae618
SHA512 a6afc9464047c75157dcb8ece086c1c5bf4dccb48d33da24e35c43110f300cfea503c4cca093f3d4bcc7a0fdcb306138da5be288ef646881b625751e40d93689
SSDEEP 6144:3pR/2jxpvwhnVgQsm3aOE/8aCEELsR5w5jSH4EJ18GWU/8nZRuX1wr2:vOnvoG8a35w5+H4EJ18GWU/o2
TLSH
T151744E914259C22237C4928E7CF0903EF6E9E39D8C244D9AF443C6D546EA9C87E7277E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\fil.pak
Size 379KB
SHA256 448bc8eae353c188ffaa4c2466956598ad807f0f0aae7f12e1bc59584e1aac2d
MD5 f989a7215cac1e3fb4759e5fba9aef67
SHA1 5ecf35f160e1f8242b3bca163673e24cf6d77403
SHA512 b872beb5b1c2702f4eae616f633318b4575f573c06a3f1f0f1e1ab83585a52caf2f3c788c0c3a0d499c381fb7f06a3ea355b8686ded2ed1e392662f2746db01f
SSDEEP 6144:Po2wvMrF/y/DQkaRqQHunLxenGkZ3+mo59gmPHkAxw78:ykeCBHudqo5KmF
TLSH
T18E84E706A7402744DBC356E613A0682F66E570B83F822C6E4FBF26977BE7CD5D270186
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\fr.pak
Size 395KB
SHA256 c3980e2755c0fb13c09210d560fab480a907be5512c896f83033526c83bd0ba8
MD5 1a7333b3598f8dd05ec29a561053374c
SHA1 01fbc828e0b0ed5d06d4bd9f4195303759ad2feb
SHA512 f45c077787bc1795db34d6c0901a86022eef04cb92a556b246a0eb9dabe0dd618ee6ef65549c851da887e56c9d4f889619a5c319d6c816dc29fd15ca92a3e46b
SSDEEP 12288:k7LseOn6QuagV1YzhKJZsMYnYE1OxBWk0xLHIWWCMcpU8wRp5a5FQusDh6dBKIJt:GYMV6McN5B
TLSH
T18F84E75FAAD431C719C212B3FB12D667D9348248F212E340D8DF4296129B9ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\gu.pak
Size 755KB
SHA256 047da4dfadcfc6bec8f4dc7d250b1757caf31a23bcfa2ea3e1f3b1cdbe9a3995
MD5 7b476c423ce29e61b0b21d7b6a2a56b2
SHA1 5558dcec5b2580345b0797f1f2ea41952417335a
SHA512 a494ab32e45cf74e2b7e0424b4e3740470c5c6cfac8f6cc980a681eb8c21cab76255391b6884134593dc7b1029ffd861f74b47130533232881c137c41ef92cac
SSDEEP 3072:/h/zHr2DzDNmtZITYKMaWZu/lsMhmkTd4MUz2sQm251jvHsWnIIRfAHw/g/I/B6i:/ZDizBm/Voaz5cYh+Gyj
TLSH
T165F419D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\he.pak
Size 468KB
SHA256 d57a910976a19e424390a5deb2216d9d3023e8d84d4c96d4bc1fa5bc22e494ba
MD5 738493fe36742789beb1eeb506a34772
SHA1 de88f04e8f97f8219eeca24901ecc02d12f2d9ef
SHA512 4d5dfdd6fa88ddb552a40e3d9982f2796ac36a80438abd69167155dcd3dc61fd7dcec94e77233ce384ee6725486fbd1f554e3f6e342f37d76845ea1dd308e2d5
SSDEEP 12288:w/ZYTMiBr3By4L92QmYq6A560SAX4o75P5oAHM7O5p9mTfDnwPEQgo:wg/s5BoI
TLSH
T1FCA4AAC4A2D452255231AAC39FA4FA286FF3CAB53CA37512CB18526CAC774F4BD530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\hi.pak
Size 787KB
SHA256 19b0b5d9d77aaff3ff83b6cf33b7f141181c143bc9ce3a3acb4aa0b42e7e48e0
MD5 2d626a4e3b9026f16f5d73e7c5a209ae
SHA1 8f9b3c05606d282a7dd15879603611ae48d9461e
SHA512 ea0097c931d8f86895ac70d1f911a8b31b7959fd43aa13a437655d5483ce49a71307a0f8f1ab63a9e17c357c9d50c96fdaa6ef8a3530e0e99bd2642c9824f1cf
SSDEEP 3072:3yDi+Azc5Cos6Hwdkiv34QAEm5dmLFsoZ4GR3QaH7NiedYbOqGPt383q8A7ndNTo:8i+AI4tgz5p5cQHF
TLSH
T1ED05190CEBBEF3B55DEC3C8A32890D37D59D3674A3E9521348D5B3DB9844CB4146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\hr.pak
Size 365KB
SHA256 bada5828fc0d80c842d1409b54e8da516ae737ca30d86658b3fad5c8ace4722e
MD5 04fdc1dac2cae614b0f566310dc83bd0
SHA1 74e460e19a5e9c8b6181fa37cb9085f93bbc6233
SHA512 a07bebd16f00b0b46059a7b80454664757687a59903bc36cb837cfb55e69bf7f683157372f74ff8355ad50c3b747c9674ee942aac95a9804c39acb3841721d24
SSDEEP 3072:Rt0zZ58bkQijHuVGgYzgJ5OSFT0uPFG4rV6WI6DkYAiKbeMuVjLsGW0Yqz7pFyLI:72Z5QYuVb3P6T5D37pW
TLSH
T14C842B7CBEF2670A0896A346EFA6434579FE08CCE56587BB7C4F522E0003F4D66B8159
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\hu.pak
Size 395KB
SHA256 688312f38488c7256370b1517b84963a3ff886b31692cc504fe169db241a43f0
MD5 410d8966721ff8817eb3a57f95a4b885
SHA1 f0fbe70c772bd635b0c4a927420e15b96dae05a5
SHA512 d0aa167ee919589ff3b80640e8db4c6d11f9159e4a246082f0a564482789011c260f124b9a7102649d998c6a89cbff58cffab5a40e33769b990e64d6cc703378
SSDEEP 6144:gvROCXS24UmV5z/fZ2GRoSYTLySam7YF3tys5gRULJatGqUnvydpECk3ICf:gvRZsV5z/+lP7+tys5vNDp
TLSH
T1C9844C7793769449BCA8179368643F16592E485B9F3B25FB28C3C8AD30A17CD0D83C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\id.pak
Size 324KB
SHA256 cf29b1d2c889842d2899cd615e5baf059df3bee2d899e5d196ac38e298a47524
MD5 dfa205151d8fd00101f2748705d6f307
SHA1 87f00af9668460e733bb1f5f8c37bf3ce3784a6d
SHA512 767df5dfb0023a799acb56360bb4d56ffa99b9d718deb1bd2f1dc1c942fb324e7c9faec99232df5ace31308b519e169bea631306739cb63c925939079bc1339f
SSDEEP 6144:NbXLepwAYTmqEQ/kUEPsw0ofjDVnjHFeFmP2L6aF5NyhBvt42SRsEaF:h7tXmqE/0GVnjHFym+LlF5Nyhz
TLSH
T15B64F8632EC9310C4A4803D5B2C9A91F7CCD233BAF05A76F8E748F7055B67686726B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\it.pak
Size 360KB
SHA256 7f3710678d8582be97638fcdcb98c9ecd372fd9982a1ac21a40c8af93dfea76b
MD5 d6a9ffabe491fc403a74b7560c85a3e0
SHA1 52efb6af41e7831d5c7d7daf53c14858b66ce1c4
SHA512 f8dd0f154fa50691cc731ebb894245bcf30f5991602efef58fd26e2b2f686d47bb6d5a6c799c3393b48dc34741440766ea0e514f020fc0cf40362c1b0b9a8342
SSDEEP 6144:6HTMNBaVex7MctIYSrqRrhsO1LGT9TEAGw3nlXgOPwtkWgGyu8HryYm0wNB6XtSV:8M7xUxZRe8+Yxnvje5Lso1
TLSH
T196742A3699D621111A876359D211B085FBAEF8CDFE41721C999B431C23CFE84F2ADB4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ja.pak
Size 440KB
SHA256 f5849cefc882872ac31e790816e3695260378e4989c4609c66bcdd54a89cae19
MD5 7fc361c2d7becb728ca7ab6e64d09c7f
SHA1 0053d0ebca0c4c0187bb956cff335af88a9185e5
SHA512 987934807ac6da563915457fdaeec57aabb04aac102575018b3a8fecd4f3951a13e691b2e9690bd0ad1b7cb7f061164e0fe6bbd5a6c389a2b438f6c8c126047e
SSDEEP 6144:jUZWQGehaoCZn6S+RUpZSb2LwPH+5jgxVg:LQhJCp60pZSb2kPH+5jV
TLSH
T1D9A45F7CE3C969369D6153A22C0E36D57606EC9BFCA23A36402DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\kn.pak
Size 872KB
SHA256 c315e791770cea204c7e49ef5b68fa46fe42864a33e77fa5a1d42f87ba85124f
MD5 8a3427385226ab72e8421d84225f7adf
SHA1 701a85bc6bca0ed33dbe1aa3a617ce26576c7421
SHA512 310719fb102c1f892d354f1478bba06e856bd45da08416be970a0a76e44c7d81aaa9ddd878234b2348b625e0d18cfe7c966379115f35d51f4ee78a986c1243b0
SSDEEP 6144:O+wN1jeEb7qb4GvGK25j/u7cB2jrith0vkcVwVattrmQLHMj0AWviYRpySIvSuNu:NwzSS7qdR+QygZ5gJ765mWUj+yt++FS
TLSH
T13315CF185DBA7D302BD5006B24EC603EDFF16BD29CAA07D2F4DDD7802C66C6A90869DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ko.pak
Size 369KB
SHA256 3ee7d79af9ec226bebfdd9d79907f1bc97d528d2009dbd0db23d74ad655e0256
MD5 3340fd0a5e8f97f122e1d6e9a2052ca6
SHA1 9c8504b78633b6d6e445723b351a08392916c7d0
SHA512 07eb8dab24ea8545cdaf38e35bc23a71a33bf87a1c0ac78ac564c103c6ae53357de2d4fd635b22995cefdc9d8e8241c66d78dd44d68a9f2f251be77c0afa7704
SSDEEP 6144:DL/SK0qZvHJmb1QdTVtZqZXRZqiq7vqLZyQnP9kYvWyCt8Oh+jJAhxlw5R7X98dz:DL/SQJmJKh0noyCt8OhoJAhXw5R7X989
TLSH
T12184E9F238DB63CD11938D82AEF4FA1983C1D976B7430294ED44CE54DE146C7498AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\lt.pak
Size 395KB
SHA256 e7c133a8dc438870f97112587f5f223f5fcae4f1510874b95b72cc281fa150fd
MD5 c037c0d80be2c913c20e3fe96d9cdaff
SHA1 8dfd2a42fb2e0041d6ac9b90c78b3cad0283c757
SHA512 0a90dd7d39759e1e63205a827ed6611dc6e54b37c668795123de7f35c446ee41174675a0d813974dba7353c0a1cc4320049d4fd1368cdfccb9cf9afa47fcb4f5
SSDEEP 6144:ExMwGiVqc4anfOfbZnaI+onSzwB74p5Ub04ua7OoMI8Z2IF6SB:lw/M/fBX+onPup5S0MMJP6SB
TLSH
T1AD843B016AD3AEFB9B0053CA81E4CA74DFFE50009627A861EC59C79BC477F4629A4F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\lv.pak
Size 394KB
SHA256 aec37ab5c79a66ef713bdbd2547e8e22dbad7ac226dd1470466c7f58a1500a25
MD5 3053d480a88a2796fcd59573b9104bb9
SHA1 664a1f3d1f29b35e3cf7f855ec1592bbef2a43d7
SHA512 5fb5283e6d5af3738b2d9a53e85e2245c6e8e03548d9aae19b0b6ffc64630cd689f60d3cd19d943e43c8b1e4692ed60c4f5db21cc21d57cc629780d24dd0689f
SSDEEP 6144:jRLXgCxIh9mFNhtVFO6mMvpl44cfX7apaRZ5v4m0cxEl9AC7anpArAFTHVs1C:jRcDfh8vP4467zZ5NEHJms1C
TLSH
T144843A959EC68F964E905DCB7336D123A9CCC740EE07E112ED7D4B3A620F52422B5EE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ml.pak
Size 915KB
SHA256 6295eb0b0d05d26b3fdaa19ad390ba30f267b7af7a60a214db558dcdbdb436c4
MD5 fc33673850c17a865cae7695fd3eb5b5
SHA1 72f3241ea35554c881e1849ba53b8f64b04502c1
SHA512 6845293c0cd4ee1aa94972da1d58fd7085da5dd664d4031005200ae38fc4ab20f2c5cf44fe07ff80e003ef072f7f1cb23a452d6ce47124aa1efb3d26ae86b279
SSDEEP 12288:Wq0rekvVG6W+SG7/KgLC4nMmWDcZubSAemNPHVhJ5n/7d597Y3rE:fQel6W+jHsd5n/7V03w
TLSH
T1E415AE1BA036CD3B0FD102257B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99431
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\mr.pak
Size 743KB
SHA256 f63460da44e2f71c237b2555eda621c8c211c13ae68927c27ad121f03daa0599
MD5 d1f1c482775f60a868ca094108e3ac3c
SHA1 ba4396e5b585735e8505263ed42884876bdb564f
SHA512 2686c406b29750ee39b83247e4a4e6a0ce3325c1284ea11fc986696b43c672eeb0c5259c4834e4419c131941b9d1d35e53b05606168c766d27a614f49e223dae
SSDEEP 3072:2ZUwY/TAN6sXspP2eIbFNMEu3RTD5014CQ4WmHwMa4AtRRYfNJZIFyX9a30OKSQs:2ZUwYMNeVhfIS09ddv5ieUIK
TLSH
T12AF4D24CF77AF3685DACBC8E36584D3BD8FD31B1C3E9925608E1B3A74884CB405596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ms.pak
Size 339KB
SHA256 ad044cb5cc56f8cba19ea3319081c194661f072d6b1193509e3690769bbfc2d3
MD5 52c793391de0e946616d31f7d5b90761
SHA1 50e014d9715df658221edea402609d7b09c9fb10
SHA512 d5db7fb23779bf1b258f949ce6af5115adf3bd93760041ef70f1e2f599ef3be6a7a1ec871b18858a1eaca906b98b0a04348a427d5ecd26bc99d8e6d986843478
SSDEEP 6144:4RN7RATF08Q+MxbcjsV5ulDUjd/ZwT5sC4AMMqZI:4RN7oHkxbhklDgNZC5mTM/
TLSH
T14774C6069EDD3118496843D9D2D96A2B3CDD3333B705AF2B4DA08FB112AE7A53316F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\nb.pak
Size 332KB
SHA256 4b5e5026d815c7c4ccc1ae6d58f0b5f1c83a2ece91f7ec028c05961171ad30bd
MD5 be28cf3c50da9f1c3b7a85ba898072af
SHA1 d23db9be2cb40dcb9b6480a15cc21527c593e343
SHA512 5446f8c7ddbd8b2678d1abb921e6635f6d0c51229df20f9b9c5bda7fa84ea7965914efaa6e7fcfd030b574cbdb40cee0114394173ee152edcf4cbe4bdec6a032
SSDEEP 6144:Ggsh6EQyXzqOp7f8yVgLmy07E6SNw5PA4RXXycF:GgNEQyXzqOp7f8y3ELK5PA4tycF
TLSH
T11B742A83EE86B72AF29447A4F018965B9B7D852CCD88099B64CCC63B1DC7EF052BD1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\nl.pak
Size 344KB
SHA256 dd7f66e04f78861d8f7d3986f707f06740bb35b839076ab8d3799944370b4544
MD5 e442b2f2406c6e47a4e4d0e7743de448
SHA1 d2445a2c804ba181cafa343944aa8af1ec3da773
SHA512 11b065eb66495a52d2bbd343b655e91b7e98cf51ab50e816c90a272022460cb2b297623c41a6f078c8362fe7e09032920c6f38663309ce920887c5d4058a47fb
SSDEEP 6144:ISOJagCV256qzaHoNA3D+qnujSV5nxQeN1PW:wQgCV256qzlAuuV5nxQejPW
TLSH
T1A9741A07AC8D253E59C0B785F6044FBBBB2ED22CC26CEA7D94DDD1350453FA8926D889
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\pl.pak
Size 381KB
SHA256 0f555aaa36f2908b842a4698dffd739b5381b12dde686303341d47fc475f9867
MD5 a742d06d1423b4ac4c9c38ac327887b6
SHA1 55d4b1e92a5911b4df37c8cebd0ee24d3a9d3ac1
SHA512 18f40b161c6741e483f3206bcbf6d0d18969be985cea774055003b31cafc45b7e1580965fd3d2b32de17020eb866df3dcd2290c652ca4d0719b73af6073f3e05
SSDEEP 6144:VycnFUKfCp+gAhiWTAbRvPvmCUdUU+hzLSIQpmN/1Qht9f52z4c5x1:VycFZfQ/AhiW0bRvPeCUdUU+bumN/1QI
TLSH
T14C846D0E46E59E4E4DB008E6F1E31B3CACDCC848E119C39FE45F8526615729ECABE5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\pt-BR.pak
Size 360KB
SHA256 7b171f2a6d46295147a8d10e475048bac4346c6a5162b32a0336334baccad520
MD5 e4b1fb0229dc7a913012cb5313123c3c
SHA1 6c137b91712593040c6e02bedb82d90d85cc2b84
SHA512 7224d310713d94f56aafbdb80a4a7ddab5e19dd18a7880f93770b86204e323072aa8e879d2f7e1fea25a6506836e8ca9ed73068e76f4ff9b74c0ecfb807c37cf
SSDEEP 6144:EQE7KHElRCGZNBXBLZd6Rqkd8yOB5cDJYvvpphX:EnAmkK5CJOTR
TLSH
T1F9744C2E1DC9136605225340B74ADB47E6881646FD0ACACBDCFF4B46A3D9F80DA33B65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\pt-PT.pak
Size 363KB
SHA256 5ca8d063080a3ee10baad94fe25f5dce33d17a269d02572f5e8c5654c7c0a28c
MD5 d412b4a6bc7097cecaa56742263ba3e0
SHA1 8978b9820d8f193c933697d01b1882ecd348a60c
SHA512 ade2b6405957a8f1fdf03aeef50b568cca61e89c0880582d596586e36c1ed05a1f1c9baf1cdfd691ea6134d9165d83995b6b0a718d50ed9aab735bdd21344d76
SSDEEP 6144:pz/X8IOieJVJJxhgXlm1js+majX5KKx6B:d/X84Xl/+PX5KKo
TLSH
T1E5842A185EDA136605225341B709DB03FBC86655F809CACBDAEF0B4272CEF84D2B6F65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ro.pak
Size 372KB
SHA256 c50f824e63806e5782b693f7d474c48684b9e5174e93463a9bc2876c94990879
MD5 efd3112d1eac487bb3dd2839385eed39
SHA1 d7a45ffdc10d24425c8b1590ef1239de34737a2b
SHA512 f604f37f59c17e7a231ecc55121620138ba3c458f532889cd4b70a6046f0aa3ca0d53e0f342977d5ae0c1edf23706806ed429f72442ff90603b896125243e406
SSDEEP 6144:0IF/ZU9jrzEFGC7+mo0O5ZG/ou+s2K/xuoTr:x/ZqzEFGC7+mLO5Zaoe/br
TLSH
T119844C2391C82ED72D5102B2F76625D7E98E105DF641D28D60EEC97910CA9DBC22EECF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ru.pak
Size 606KB
SHA256 6bf94fa22251f8931efc3978a8eddd0e4b3c945a8d30347178aa1402e70b375a
MD5 284fb3c4c19e22a9945d4f39709c0664
SHA1 247319c0d6beab4b5543ff650e4a4fa35e85354c
SHA512 0fc12bcae5d4cbfefc40dc761b27bf066a1329927d03c78983eb7fda037a54cafc3541d9273c8878c570c1a990f87bb0a489cc3c47bce530e0b1f11b0ce2ecff
SSDEEP 12288:CElTXeXN2hHO3j/juDzvsJ/ZkFOe8P/XzLhI0aUdLkUwCoWcWCfG1ULZ22bqGYhx:CEeoV5X6oa
TLSH
T193D48660669E64DE1101F01BDC08BE0D7CEB45FE3FABA36619642D7E35F2024C67E61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\sk.pak
Size 383KB
SHA256 dbd82a2a08f8e9ba9581b2672bc49e0fa5c89f073b58f152225f9e2815228ddf
MD5 989d000fbe286c0fd4bfb35305b52f48
SHA1 5a30a2cc1abe9977b1ffc4c4712452e6d55bc7df
SHA512 ed57c66237d5226d4d5cb63e98248c0df9d381ef86b6d4ef339523f430c54aab14f84121e05e9fedaf273323ec04b8a539c0aeb791245858890126de2ce38283
SSDEEP 6144:HX/6WrhCQ+koL+vMFVxyXiFJ7VC35hJYLjaQ3yGLBGR:HX/6Wr8Q2hnxyXiHVO5hJYLjaQ3yGL2
TLSH
T1BD845E3FCFE61C1E8E990108DEF57210F9BE4690864DA4A6D44F328724E37DD9AB8D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\sl.pak
Size 369KB
SHA256 b5226b278f174cbf533ce248bfa01b69929f1d6633b92e9e010e0035ac69caf4
MD5 18414de97f92ebbeaf44f3679ed0fb2d
SHA1 edad45b03ca8a73f068ed586d52af9a583088735
SHA512 4ae6e0a86da119d495a084f107f6a7769f14e3bfae2458860bd2bc5c43b1f3b8331e7104ae280b08d28154e23aff02e1ae3d44ce41b2c70b64c5db864ed63df4
SSDEEP 6144:Bb1aj+hWYynnbANj7nHZ7Gm4ocyxPbPDZFu+Hr7ftjQLm55gdrcKx6EIbi/fzMNS:BOw791L55Arc7EMi/fzMiqg
TLSH
T132842C35ABAB5E0E0DA766CBFDB203007BDC044CD686D6A5FC4F33695012B2827BD599
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\sr.pak
Size 572KB
SHA256 4a9d3e9c9cd593830a7b1c8649926c819bfbe0f40c158d4582ad45d4236d05a8
MD5 9e3951f7fea4dac374f5a33d8ede32eb
SHA1 ff36601cc3420ef637a809e1c3287479100d1337
SHA512 510a396691091fbfe2e1ac068c54ad7e224b0a613976cf4705be74aca38bf4e7c8e329966eaa092f3d5d781ffa7192082e3f6e488a68286222a7b8c9922bf112
SSDEEP 12288:QE3SlJRr1HI/Y11XPeHyxsYQf5uaxbbNK6374Xzt/k/N:qh3fNcf53xnx
TLSH
T10AC457B19B9E64DB0501F41BD808BE493DAF41FE3FAB975611202DBD34E20B847B925E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\sv.pak
Size 334KB
SHA256 3f0acf6f6319636c3e72cdc392b7b80ab0cfd8ae1a5a8e319624e4b46bcd3c42
MD5 c5437bb175fed93e85c5e7caf76ff352
SHA1 0d74f7df049ea73a47fe93b75c98e356b9bdd4b7
SHA512 00af14e7d89a12f4f39fb45a3f9c136e20c06752f98fdedbad426ac9a5b820260a329059659cd82fd089ab1d94c1f51ab4202fb6b142b27538d0139e67877239
SSDEEP 6144:UIcs6Ou/WpIjSwjcT+BjxEEkb/LX6uTSOoDE/xUDSS35655egbH:It/vjtBok5U5h
TLSH
T1D5743B428A20F536FBB2170DB904115F4ADDE15CE7E2848E78D9883DAE87D9845FF24B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\sw.pak
Size 351KB
SHA256 dea6947693fceb6457801d912ea7c716add3c0cfb4c34782a9cfa4c4e06b9402
MD5 e37fc1c3dce484bd0ce496f548f14a43
SHA1 02b088a11363b0a4c0527053669af32737f1403b
SHA512 c5c39d54f4eb6b0659903ce9b5c8804a750a254bf88cc7c6e729e7813ecbbcc88df882af9294b5b795ef5b8afe8f1a60fcb46b3929a9b2cdf41c84188e5852b2
SSDEEP 6144:HhUmBklgBZcaZwoRdkN6Csdq0rnKKcLLK+9s35FSaDN+q5CwAyeKnHwQ0/:mplGCkp9KhHW35gyCHyG
TLSH
T1E974E76288B1D0195733518603D8FF7317DCED9C292B28A35A46BF4F218F98C57ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ta.pak
Size 899KB
SHA256 77548aa804c4fd61942d2953990680e4d3780a42d3583a65fff899751915f2a0
MD5 909acba1351ea1753fee2aa006b75de9
SHA1 5203920c2ebdd37527c3df2fdf2748f6f9675428
SHA512 92dea042052d780ec0abda9a88360a8f8c4a63e5b3b8ef9b23ea759d8aed18408d0b65f9968075dd88d09a474c5f124585ef609ecfe81d9ec647f8720203cfac
SSDEEP 3072:gsHZ1YBI4oCMxh0unjsyR5nG7zWtRjcA2S:pHbY2DCMxhXjsyR5ozWtRjcA2S
TLSH
T1C8151CCE923EEE890F93288F0319536912996155C07BE3A27C756E1298ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\te.pak
Size 836KB
SHA256 c03f968f167476f7a073b6e6723b51332206416354190e3156d12ac6998e8889
MD5 61479f367868263d3797a1a4d1ee556e
SHA1 7886cbd1eab7a04a3a8b594a48ba74362b7f3785
SHA512 21a689be75b0a015a0f0e4b6ff8050211273c61377a89964136f43599acb1ab82baaff7a0a44ba95d3eff886163bfbc6bd8cdf10fa10591c32c83203123b416d
SSDEEP 12288:0FTBV3p1F9fBiTlbUYgANFOSdrUU4GrQKbkC28+5HX0D4q9GyAdR5Akh3dVMtS6J:0Jdu45PMN
TLSH
T1880591023A6AD310DAE70273752CF66C49681B8161D6732C1EAFA357FB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\th.pak
Size 704KB
SHA256 4fe2b7b6886e3ce068be0b7a0a71d45756eb797eda1e7d4fad52ab8a370e8336
MD5 85f59bf2f1167e34ab2b666608805420
SHA1 f0d8e8fc644c15c52c5f9d3419f88e6072799736
SHA512 86d6061895c996ad1caa3f3871c014b656e7ba7bb91f05c72a591cb5877c3db61965bc1a5094dcf7c4127d11f8106622355464704fd0695372627d8400a16ddd
SSDEEP 12288:kCoJR/3RMVqsUs5Uv/cLRflrj87rS6DotyeuLADu7Kle9don7j9Fo09XAyFHPL4i:poH25p5p
TLSH
T142E44BB33247D9D479441B5B262A7789673DAE693F73F8E00489215A73F071A8422EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\tr.pak
Size 357KB
SHA256 eed468f71e218be2f49e79cc7dcb97e140a5d9176a13586196f03dbeab0d8c77
MD5 ff425815f6377ecdba0b044b0ee73c41
SHA1 2c4bddec47d19f1bd8c0fb68e80807b9dc012c9e
SHA512 49561f6c02b6a4f38d136d4601eaf3da70140ff3de5fe44a92bdb772a6520545d8cb1c7480aaf0ff098dbdb284ae702da53257cdbd493420e9fc1a1f4ca5d4ec
SSDEEP 6144:GqgGhItL0NbKiPxTcQXKVSIOD7rB/78GgeD58/i+iMi1AxZE9VwiBsJm7:JhIN6Oi5TTmUrZ7f58/Q
TLSH
T110740A8178EF382CCBB9278FD2E50626F99F0766B331E4469A169636774674703F620C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\uk.pak
Size 605KB
SHA256 ffc9894126035e91c96e9912e4d6c5b0964caa130aa47f280ce0db10cc6e45c5
MD5 9d029670cbcc964eca2a70e9a877419b
SHA1 f826f0bdd83e43503cff82bad5dc403404f0aff2
SHA512 56b5727ddc8a96af953e2285b53501164bceba4da1df140e37c133e49b11ad8886a06ccb738757a9f6d653f029e04caf5467ed91b8858033a0427bf269e2daa8
SSDEEP 12288:c5cHmNYribnlyvk7KQ0N1nteW51B3IjNtE6TxLNiXE7qIDV2:c5cP+kT552E1
TLSH
T13BD488B19A9D58DF0105F05BE84C7A0D7DA741FE7FA6871625A43DBF28F20248A3C71A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\ur.pak
Size 532KB
SHA256 06a0c18d978b54dd163c7f77b7ee0f2ecf3607c5dc14032326f21b4a1f304d81
MD5 6310a289e55b1022f12b4f3cc29fe831
SHA1 150d81ec8db4d9aec6c0e83e5577dcb7f1956b38
SHA512 acb538fce25486e6a01401aa0e9204a6f519cd1dfbca48663d6142e1fb6280bab271dfd2b4c5ddc858de6920805e539b791c48eddcad124d0aae298d479dcf48
SSDEEP 12288:K6Du8PzOYzXPyn+jAcMR5RQEA2WzRbQYrkuvco/9NjjFpvUu:cYiD59WZ
TLSH
T115C410D1E6BC92B25A21D92780E33C34CB635F13D34BF286E56106C54E9A1136F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\vi.pak
Size 424KB
SHA256 04efa5f9bb7e8fcc7062c10b92b79db29a147f2a27ddd09863d73c078463c581
MD5 d81a7c3e9ba88077a352b216cb03ff33
SHA1 4caf53fa39a474a5ca1400d0671d5b0aadbd08c2
SHA512 c49d57ba45176db66b0ac43ce9c9539434b8e66a5583e081b713264c257f159900f16ab111f4a51e92dbbd3d1fe9af74dacc3feec2d5fba51d4dec4c429e60e0
SSDEEP 12288:PJwrvsPgnzj0VyK1wSMTgG9lt5uEHziW+UH6JziV7ZH:xwTsPgnzj0VySwSG1n5/TiW+UaliV7ZH
TLSH
T17394861216E0702680AC153EC5CE540E6FCAE42FF7818FE57FE4297576221A56F21BAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\zh-CN.pak
Size 308KB
SHA256 ab6b435de352aca2c2353a26da7ca6bdb1fe3b8c9ab9b590311e53d33e5a8cff
MD5 a24b6fdc5c86e265f79f4e26d2d16b24
SHA1 3edf0016afe18622feae03ce7f126e78339355ad
SHA512 473570d0390829e46a05e0aae6acfa70d98381ea24f4863570789004a60a4a1f4fcc9c3235b2fc9a0e42fd6f2a2dc1c779e2a52bbbae7f9a3337d878443710c3
SSDEEP 6144:ZdzInJQyQ74nqKm0YnfrYEx5UN6RregFlo:DYQunqKRYnfxx5UN6Rr4
TLSH
T16B647EE900F8BDEC054640902725613E7941620BF767AFB77ED244ED2BA2F9E0757A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\locales\zh-TW.pak
Size 305KB
SHA256 280ba35171dfb6a54efb13fc4ddedc13a0283a9a6eebff4c15275767beb4ba77
MD5 14f3f547a54713f91251b38459a096b5
SHA1 02ac592a2eb4a7c6631dad5aae83726ef9c33ec0
SHA512 0ad8c6a6eb0dcbcbbf6f9e114c93bc2cf6004dfa9ad7b68dba31c2a9856c0a56acb66507f65b1823434b1ad362c1ac812b72c254e5329a2858e888a761f45ec1
SSDEEP 6144:c0oQX1m/Xs2eI7uhvxO4/x5wuznWMc/9yJTl:cQX1m6IaxO4/x5wuzWZ/u
TLSH
T151646CA608FFDEEE0901F884B3C9462F7C8B742CDD377637FC4918992E76A541A5214A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\app-update.yml
Size 107B
SHA256 d7b21a2ac7f64d412f2b579dfc8196f25f68350523fed988e03425b659a8d57c
MD5 fde81a28161384c35aba5f62b1f55f62
SHA1 108baf0829ecfc24e581843e5cda4acdf5fa6a77
SHA512 f535b10d070935072d458dc63d9af6da913c95b209de64074b1c0b735e149c4f635c52c6a29e83865203c5fd605e9595aef6dd5ef625aa0fe059443e6046fd26
TLSH
T1CDB0127CC907C03A62721D1EF831D634E0DC81D0D642121147DB010C833765419CC0CC
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\app.asar
Size 6.4MB
SHA256 de451b65bdc4ce458117bb07d7594c189713da2b34721a3f16b7ab6ca9cb4e6c
MD5 c8e7f4137fe09cf8b0fdc21fbb2838f4
SHA1 5b09e6942c05a9eab7b6c9a81886ea23abe22df7
SHA512 9746c6ffa4d2b318f1ac5a787fe748a34f5d5bd91c60b8fb86801fd96bef885ad426be6d87d3205a26429f76929676011c75a8e2c336584b0de848218ec93e48
SSDEEP 49152:3OGCgYUMMq+H+7+C7l23FEmROTL85f97Z4leBy8JEmROx4iLfXzzauyj7YXOlf:b
TLSH
T14D66C71295F69537215712A75DCF81937A30401F2C88AD5078CC835CBF8AF3DBAF6AA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\snapshot_blob.bin
Size 409KB
SHA256 8eee6adbbb335ddb3716d2e509aa8459d2f39cea020e67c22dfb85b8598fa375
MD5 7fca1510183ba736f72d7f2ca0febb55
SHA1 8f05a77029bc372b31162892415cd969299c164e
SHA512 32f1d6868a491110d4420aa15eb1fd56018207821a2e16ff3bde15ec4078b149fbe75e909d7c1b587a672b65d4e994d7fdf90b175d788857b9e086fe61d75c67
SSDEEP 1536:9+cnVF12dTCL/TNBCR/+7c1oEcD0Oc+68KcldU1zVbnyVC2hiCfwoWJiuqi+wcWb:s5IMyWFOlFnxW1OwE6Ut4QG72Pe
TLSH
T1D694D936F368C269EB17F2BE88C2C5A86572F2041F651A3F7565072DB4BBB680D71780
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\v8_context_snapshot.bin
Size 710KB
SHA256 16973309aff802c143ed31bf8b5f9e66766da082e03e8cc47004f99bb25b6ead
MD5 09b26aecfebe483e73c5c0566542b7a0
SHA1 7ae13f668381f2ecb70197c226cb5cacb87ea935
SHA512 32485d9ee70ddab62f6e5545a29f9e465966caac95f211941a4c471ecfd1cc046181a4d0030940f290c1bde3af722be8b60c9da8acd56858a43ccfee1e3c9418
SSDEEP 6144:vdxIaCPBHaXAqTOTNwTR5sLRgxFyHgm9ZMf8kfS7eTTIF5r1a5:vdxIdhaXAqAcnyAazkfdwF5r1I
TLSH
T17BF4A539F719CA2AEB03ADFD09C2D94531B1B948AF56152BB1E9072F71EBB581C70390
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\vk_swiftshader.dll
Size 4.8MB
SHA256 44d2d6927607355dddd923bed2025edcf368fe9daabedcee2b6894e0c34f6825
MD5 7d637d9f1015835d99639fd6950f548e
SHA1 9591104b23f46b0723deed596bcd16e2f31b3ac9
SHA512 c218221c8900d7a45d97736764a0864f060c26b76562ddb65bc2dd0452291cbd89c24191dc80ee71451f26826c0b5f1d0002e016740b127ce31f1ebfef31d3dc
SSDEEP 49152:fu+r9Ciz/KS91DGMDhqON9p+hZMA6802ydDXbrl0OzkomDPPm13FLMgKyao461fd:mYz/yNSGu1QFoshO
TLSH
T16E364B03F6458199F06ED17D875BA522E672BC811B7276EF12A02F062E77BE06B3D704
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Programs\DuoHacker\vulkan-1.dll
Size 858KB
SHA256 a4df19cda9cba76e6ef085b7bc693c4237178b29be77a40172d534b6f17bd691
MD5 e3b0249d0209585230ed299bb7a154a1
SHA1 1fc4d66ed099314be664eb80fad3834328697638
SHA512 cbe6fdd299112d0141bc73a334fdc5273f70c906176ab37791c1fee1d177c38cb7b9b5b01f04039b5a96afa75cb5d645fbcee4724a291d0921a9f12fded2c449
SSDEEP 12288:sefVW1lX8MvG9g8lFtjHKCTmp6yWEaAT6bJUQzH3ToLsVEi8+S:sOcTX8pC8lFtlmXaATmXjw
TLSH
T12B156D27A7948566E476C035D9828603CAB17C921B26B6CF03686718BF6FBF4273D734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\7z-out\chrome_100_percent.pak
Size 126KB
SHA256 bca4401b578a6ac0fe793e8519fed82b5444972b7d6c176ec0369ed13beaad7b
MD5 44a69827d4aa75426f3c577af2f8618e
SHA1 7bdd115425b05414b64dcdb7d980b92ecd3f15b3
SHA512 5c7bdf1f1deb72c79b860bf48f16c19cb19b4d861c0b6beb585512ad58b1bc4b64e24edfcd97233e5b91dcd0f63ed1c7b278d22ec062fd0dfe28fe49cae52049
SSDEEP 3072:DKzwqCT4w/qzOovg6/Csp7O2o418Gb0+VRLf0ld0GY3cQ39Vm2I:DKzwt44yrgKpyK18Gb0OV8ld0GecQ3f2
TLSH
T1C4C3E0D7B3F5EDBDCA5355B3A12640B2ECB246351A92034A478FD8362A3674DD8C8783
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\7z-out\icudtl.dat
Size 10.0MB
SHA256 b75bd14a3d9a174ee44eca8c62b89c65d9836fcf62c28d103bfa300c02cef255
MD5 25d87a2bb3581bc3597dfb9008516710
SHA1 e3f59f1de852cde2204256c7a8b1580483ab907a
SHA512 59977fa5ec1dbda7cb6525c48655d6e8f3d7b00408e973efed1f2235d1d7fd88eae443fdd5e07d52f31ce83943aba050c31261baf2798c1b10aeae67981685ff
SSDEEP 196608:y5zwSv9AAyse6liXUxCGZHa93Whlw6ZRnGO:yyKlysTliXUxCGZHa93Whlw6ZRn1
TLSH
T143B62907A2FB4DC2F9F7AF30D8F552679567BD496E32805A01442F3B1C337A08661BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\7z-out\locales\ca.pak
Size 371KB
SHA256 9058aa0f327ff79b62e730d72a06351380b21dc9217f565a94acffa73abfe2ce
MD5 6d6f760b1fd64e4b83536a1ac4713e4f
SHA1 929a965b0ad9b8062c64ae940064260b13d05c2a
SHA512 ffb2fa6d6e809e4ff527d682a9eec422f2a123826529793b85ea0fdfb3f358d1e321f49ff707fe3777494e4043019ccf0e0f545670d4d29216a8aba56c7951f6
SSDEEP 6144:moaCg6tj6OdSIs3cehEYBC2l3nbh9aGHQl2SwAGwXZM0dLbpuQRBtryBocaGIleR:Hg6tj6OdSIs3cehEYBC2l3nbh9aGHQlO
TLSH
T1DC840B238BCD3B7604D2220AFB46C357F08CA9847B16D295F5AF0B5622CCADCD673695
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\7z-out\resources.pak
Size 5.2MB
SHA256 4e10d654ef27624370b879ab551d7423dcc12a0523e18c183d40d97650d7ebf7
MD5 9d878b1d256eb3f25d6ac803adf0b4d4
SHA1 17d69922b63e329392dc0b2db1c17abbe58ef113
SHA512 529e46567b955c9d369df9ac4095c0dbc00be73249caa23aace044808eea900ef670de1b0384a2eace2d63c6711a5bf1905629b9664bccbf85d97179e953f61d
SSDEEP 98304:ALF43bm18oDw6q4KVVoh1syU7sHCMvrwrfinPF1GZW+extMVUAkWZkm:ALobm18ocih1U7sH3krfAPfGZMkHkm
TLSH
T14F463310F2946D32D589A3BBE8A890261B38D14319E1785CF4CD611ECFAD6BB067877F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
TLSH
T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc8A79.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000003
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_00000e
Size 350KB
SHA256 9213695e49135b2b4210878deefb3175bda171b6b435beac015f402684e5ddd0
MD5 ec8b9b0c9f3c90635368e649421dfa07
SHA1 abe7ca6128a3b1b393c902eff3ed39605279cd9f
SHA512 2072062f4ed9d3a5f4d69ed6fa79c52c12336147b03b9e0258a61cfb7efa411ec230fc8c28f2dca7bb8253bc48ecfbc51a06083ae5433962dd0f85a56f96acb0
SSDEEP 6144:VatIoleCgd8D9UZrUqr3NI5bwvb8PgMvlYeUyPWzDL80niVq03XfEt:gl3G8DWiqru5bU2yeUueL80mXfy
TLSH
T132742317566A63A822A9DCAAFFF31F02D4EDC23150ACC45B412653BCD64E6933538F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000011
Size 34KB
SHA256 c811b76785137c789ae1dd0f21ee61c40ee7eb76518b51e3c3fe6a32a606d92f
MD5 5591ff4b466999e32aec305d8474ac9e
SHA1 22e393341dcefff9d1d67520eb83688cb904ae1a
SHA512 04dcd2ebe34c90d7cf4e92800c4f69d7632bd45949f1c64a74256f627cc79c6ab0bf61adab871aeea10daee06e8d528c7002c39aba4f6a68b35e7aa4b03501b5
SSDEEP 768:gnBd63kaD1qJ9skOECPJ6K6LNJmuZEo1Vb:SBE0aDE7s4Y6bjp1F
TLSH
T1D4F202276B7F59F1263821E4251C30D17E3D2FE3D40114CAEE8CA58C53390926AEE966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000027
Size 16KB
SHA256 274b69ddc4868d40313c07a55542237fbb2a6219f0cb4ea7f60911afb0b4a456
MD5 6389a5c34c721fcb7e58deca4b7a738b
SHA1 03210cfaac35380ffacb0a2c5edc4e4a0c739eec
SHA512 cf189cb8034ab48d03ed0f079fca5c4e5d61b8b29d9fe3d57854f1f6ee6cffa92f97bc5383a60e37f1e26a18fdbf5a66f9f2aba3aeae5674277d412e7cb752a1
SSDEEP 384:jKB4xeZLUxZW5XzMefSO55l4Q3DuhH61IB0hCFokYcMd0T:W7Z2o5jMn+HdzYa1RhCocN
TLSH
T1F572E1C6D5130E40961034F7EE62EC2DACD154E6FDBC6150316E2531E42DBC990BD2E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000028
Size 70KB
SHA256 9517960542629b248faedcebf8771ca3fe3b1052c9067a5f6167f5ae9217b2ef
MD5 7d5cf965b58ffd7d9d7e83bcd84689ed
SHA1 83824036786072eb2a56c88581133e2c47257a20
SHA512 645fb89859dcbb5f446373b5bd4a0d3e1adc248eb9efbd3224d5109f66ab40abe68c73a1ae027d9cad915d0fdc0a349222f93412d7a195dc64c3fd3541a67b93
SSDEEP 1536:mzY+kj/u7eyF8UD4lmdRW6FNYruQcOllPMAdKWaj91pHiwhc1MYKbmWF7WV:mzYdru7eUtFRbFNYrDcOpMppHDhuMY6G
TLSH
T11B6312344467AD0C30B729330139B92A798840C2B63C6EF08DFF82C7665B7AD762AC59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_00002a
Size 237KB
SHA256 63e9575abc76c67e27a707f330e9f5491561ab53aa79d211528631a2c4cce7ed
MD5 7932bf1f590c2eec9a1dedcf88a198ab
SHA1 932884e0f238119d0e1ddf70b18e90d8623b2881
SHA512 41d46b9efbdbd88adb962c28930ab2d8a9ee2d1a05da3c08a95f00b4a8470e14acb0e4abe933c2547baf0537894e4b33875eafe9a8bd5bfc1be6eaec299acdc6
SSDEEP 6144:1hkQNzaCq0OX6Ib3SGsyhOapcB3HUNM0J885+4kD:1hxNNqHX6Iu/ywagXyT5+46
TLSH
T17034238D368D03809AF4A44A84D3A71BB785F426DB8CCDD450D30B9ED2AFA02E2DD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_00002b
Size 74KB
SHA256 b4f4beb2bbbb493444f706bd146bb37619c18314fa34cf755c1fe69e182f30f1
MD5 670bdcb60bf98027e622ac6a9e1c53e8
SHA1 219df4c9977e28b98017a93cf82c3ec9ca6ca30b
SHA512 0afb1fcc2c92f51b6d44d7034b940c4d4933326e340eb5e757e9ea0500d837ed1732f067eab0348d570d7d5e6fc4448e4c1f60de4ba50fa8e312ddbbdc45b176
SSDEEP 1536:1b4c9wc0cLLCpQ+f5tVHbNCGiJBYIn70PdE3cz1y5yz413o:p4awUvCpf3V7NCRF3cz1Jzs4
TLSH
T1517302365AFDE45428DA523E2013E6E633797E0848DE044EAF7C4F8DA9CD685C1A5C0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_00002c
Size 64KB
SHA256 583b1bc72f6a6f5411daba02bbc2a55d60c5ed1e7769c63101113ff18135b692
MD5 702be39f562db87bd68bd50446188d4d
SHA1 d5ebf0162034c4ee3eccb517bf9bb26dbdf8849d
SHA512 a640c17432fa44f870b5ac2a41240da96173c85b64bcfbbf9379f415fc44d3fe0456dce6a945f5d957e06cd7efa8b864a4d90e5d12c7e6ee358972f785f71c53
SSDEEP 1536:VmiTj2IEl1EpwPWDyx0NPIrRmLMiVzKaPyn8AyWsUSoZMt+eSV:VxTyZKwPWgoLMq+5KWsUxZI+e0
TLSH
T17F5301A9B2594E378D13F2F43AAB0BD13373EFB6C0C2961048887A9D6CFE5563412657
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002d

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_00002d
Size 108KB
SHA256 fa6e92dfcf2bb4916ee7766c767ce3ab2eda40c1fab222772ee0fd2493169615
MD5 3b02e4d8dd086747aaf329144e5b4487
SHA1 98d11c67f5612216caa374202e409eae68cca280
SHA512 c07d412fc42f04f6f2ad4b6731a95adf46cd8065e7060effc93d539844a8ad5e0b5e0231ce4fc566a24d91f98fba7774de0acd1b1bd8724bc9a374643247d2c8
SSDEEP 1536:tdHFiOqxaNfuqe4mOtPMHKJlq5+sFDuKmKarHr2bupNgU8q7kIIrw:THF7fuqeyPCKC5+ssKlarHrLLZ8khT
TLSH
T1B3B312B4016FEB7475FBAFFD4041D402538B3A51E42A15B7CFC2C626EBA1EA1C5580AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_00002f
Size 27KB
SHA256 3802de7e6e8deb3d64e5bc93875fda89daefd01109b1ec6b1fe2da71c6d3b195
MD5 36ab0bd265d07fc186caea831c21b88e
SHA1 50db329a42dae366ce2c54424548d5a7eaa14585
SHA512 b1aaf8deb5eef1ac70fe851e0d572d1069899968faed9df4f576bebdf0f0fe5bb79aadde23e41630d3aea5f415934fc9b40818fccdc1ace1224131bbd1e5a051
SSDEEP 384:X/F5rhzGjTr+XHEhShGY5qRAeU6GWz2E3IhxKhlEt5ssvaC91PB+NiO+ND+WD6vH:X/zrhqH+JGsAA7HW631tGml3CiOs+N4w
TLSH
T1E0C2E0735020E6EEB526C574E8A5108568F54C5708F62A1D980828CF0E7F47BE8DFABC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000030

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000030
Size 45KB
SHA256 ea4adfca91ef08a9b9e39e28d5c13304281580d9840f6a1fc66aaf14d9952ed2
MD5 b16c0bbf8beb92b568be88019e3966c4
SHA1 8f3224e48c52e8cb4d1ea8458fb39f18cf6dd1d4
SHA512 18519e37de42eb8af65e3952e3b6010d25f460e1c6d40bc84afb50e9da4aa18f9911271d167657aa7b539549dfb4e97c7e22acbd5226bb2cd9d659bf2b0fb77e
SSDEEP 768:G2jrws1WUFZEcvdUPQjiOHNcfpcMvt63ts0BtD2fhsT0DyxVYXB/rnCTGLOD7:7r/1WenuIVH2fpjvhetD2fhsTweYX9rE
TLSH
T15123F1B4FE8809BB56916439EFDCBD5D7D0342EA8D99BCC00201691ACEBF1391277AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000031

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000031
Size 54KB
SHA256 e10d0ef8ef15fa671bdb21a39c2c282abb82cf092ce0bc3c13f066d793483e86
MD5 b272bf85f3cef7df495eaa3d2353b019
SHA1 20aaa8defdaa269a384a45de9ed486603bf3e47e
SHA512 c928a3147d831f9d7013249791ac40623868cbb24dd04706372193eb19286e06cfc4a17a8a9bcd172a3a2cc883086831644c1963451e7291ada200399af34309
SSDEEP 1536:TpzcBMg24/q29iEL8VmdMqOpnatBKBpSBzwg:Sm4/5L8VLqOosuP
TLSH
T13543F187DAC4B8D61D29B8AACBB060DB7CDB12C932CDAD441895842BDF4CCB07A91D43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000032

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000032
Size 40KB
SHA256 6bfb2e9ff6716abf87329b7a540b69e87978db0af7b2a189fc458459a507ff3b
MD5 f75da9d29bc05497e7df6feac5f1d53e
SHA1 9b5e2169e227a80a969eea2a2939499984e0e9c3
SHA512 1f45b5a01c068d6705d5dd25b3195d7b6f1e52b2c4b6fd9984e6c090dce62ea49334361ad84b36a8cf5455fdf6761f411b074f03d1ded2b2ada231f3bb96dc6f
SSDEEP 768:pqk/DIFYec5H7NEk0qnONRHUkWQ/X8ASUwrlFB1BbfrmL0AX0oh/y:pqpiH7KqAHUkWQ0AnwzpDmLz0oh/y
TLSH
T12A13F11D40B6033208ABA8CA6CF7FDFD3281025497EAF80955A0A37F6D152DF5D7E991
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000033

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000033
Size 47KB
SHA256 a2cb7e422ab855501659200e175641d328ab0d212abb0376e401d3502ac72982
MD5 0b58d9ce7867fafa0b03930061e0f274
SHA1 3e768bb57b28f5f539deb82a205b64195aec586e
SHA512 1a1461c8055915a57d57f7017d169f869909aa9c99aaa1f1827a08ea36840251638e1e041b555715b6729ce8dfc8d4cb9bf05b97e5424469b4483476ba2c7f22
SSDEEP 768:8R51r/3HQ9Qsudb8jOCsG+lQYU13r4O1fBJuQAxDoDLxgx3IM7Pd6Ch9OBK0XQM:8R5t/3w9QN8Ts9LIVBwroRe31dVh9OBx
TLSH
T1D12302F02312275184919D8A63930183DFB8E9CE61D2DD2337A13C8EE576B975E53A8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000037

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000037
Size 184KB
SHA256 5b31b11e9ed8940be1e1e051344b73fe0b630d8dc888034d1e4fea1a1b04c60b
MD5 d59bbdb0013960585a7147dd10d8f5af
SHA1 386e8fbdc1e96fb7e5845dba6f4c0b90ffc08824
SHA512 14f46d94dc43abe3fae4f732d97c1a16f0221ac7c9819943393f32fa1d68aa7b7a850a1a79d18cfd8415fdbcea16eafeb2c317dffdcffeaccf8cb65b892261b3
SSDEEP 3072:33gZiSzFxfNFUdWcwPgtKgNIGs9ofjTTB2uuzNLWi2hQkGo0ak+E96zoI7T:ATzFx0twPcIG5bTT3aEckGlPDI3
TLSH
T1920422E94F36703A684F792F2EF5F7A4895E80A057B827FD64675A25C5348F8C88603C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000046

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000046
Size 57KB
SHA256 876e99f4e46e0068d777bb5e99f52422137f18305cc2871b4ea774a84e8a2d78
MD5 dd0f6d8f9f6f0a7b983167965acfae6a
SHA1 dbee3a023f5746d03907263e1f90c6cb2df01b05
SHA512 7f377548dc70844a35ac599c4fc67d4d7a2c3a6f5d6cece4f41e3da0107ffaee707e761bea5aa5cf224e0afe3fbf7091099d5bc2485ddac429e68df01c3cdb8f
SSDEEP 1536:qSxGHBzqV0R5wgKnNTY1vh2XmSVPyNisLZ2cjb:JGHBzqBa1WmSVPykIZp
TLSH
T1ED43013ADF1F090AC1604EF1076F17895A3199D2892E85D9B44217B6F60838EFB4B63D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000047
Size 39KB
SHA256 76ce894d5cc04551f2a16a60a22e6312b376afc88352ff7f0f1e93e7d1b87a58
MD5 10e8f913e4b01e97b1a4e2185bac458b
SHA1 a973df8ef87a8698682f626ba9e6bf24c3bcb0fd
SHA512 e210565e1ee536bbd1c8c5eef67acb4cad8155d9083810fff3c711ffd86e848d5a1d21d80fc60eb71d30a97357331981058f1b99c071992a18f8a2582ff825a5
SSDEEP 768:lMtlSUicmeEvjPAsRgLzRTjmy7UK9gnG4kqCvYL7nd8dsyG0o:WSUceEvUsRg3InG/hvAeej
TLSH
T1C903F1FA4F610F135910D50DA91E9E65209617E6A0E2251FE3EF2DA3C735FF3621C28A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000048

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Cache\Cache_Data\f_000048
Size 734KB
SHA256 66264f130dc18fdcb25d8c6954e12ba460bbd8f1b93d305a7fbb0443c75005a6
MD5 eb499a16da7a1f0865f86288ceca3451
SHA1 cead8482cf92ea9a01880a42cd9f7f48b505c2d6
SHA512 88afeb5a6545a22b2eb32557b2485bb4c2105fd9dfc47b98649b8f27ffded438f849aa5b1a8104b975f4235b81bdb447819c5f1d98cbf6d783c4dc406cf7a241
SSDEEP 12288:68DsfWCLWNCiw2a4rVDm9elsEyz2j0DoB+KQ+WGb9B6k2cljN7uoNeyVNQ0ofSHY:68QLUCiwgrxlsEy2j08BtDbqiljIoNeR
TLSH
T187F4233BAFA77034AD65DE1D50DAEA6271774C08C17651F0A624A306E0E28DF923ED7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 f9c9dde751ac8eaa8b0001d2d8613fa14c78896b49cca3daacd8756487b975b9
MD5 3088206de1359838c2798f0eade60aae
SHA1 282ffe3eba12c666a5a9622ae76d76e7ff851beb
SHA512 fb8ee47b7dc54ad401c6037c2a97512487f05f19ee558801b276d62343e15e7ddccd54fdb3e150d722b8b8c8f5067cce9feeff7b2aa57e5896056c49b6ee8158
TLSH
T1B021645329DA1A06F3C08EBD01D60C0CB276912015FF3C335B153432F498381BD86F84
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 5c1884f16f3b635a294b1365493fe0684896290b48b0e66a692c169b205d54ab
MD5 8d1814424a0b4952446006829a47d0e1
SHA1 43e0aeef77efaa0c826134f6d89ea222bb7d877b
SHA512 b60cc7ca8bb5fe7efffc3985022846c69be85ed5a9f75cb54bb2d47dd96dfaae19fefeb400ee56dd17612bba4b5e3435ebfa26a9b76169f0e7f51877141c0362
TLSH
T12C3100532BDA1916F3C06A7D21D609CCB27A652038FB3C3A1F257431F4C8785AE81F55
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Code Cache\wasm\index-dir\temp-index
Size 48B
SHA256 fc15a82280cc92965074bf9e588713452530f7b8a41becd3b4c6538caf4bd1e5
MD5 7845a49a4178b3290defd61914535138
SHA1 e743066a5d69c55d3ff7549313f78a929169d570
SHA512 17ab15eac57b1c4eb8d8e5059ad5aef6f2de7cdb641c60404599f1a9359de71dc8ca5775feca43e38cfb91b045189983fed4af05338d9b2002972ca5db26d1a4
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\DuoHacker\IndexedDB\https_www.duolingo.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

1178d2f4-5887-4841-b32d-66d34a0cc76f.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\1178d2f4-5887-4841-b32d-66d34a0cc76f.tmp
Size 5KB
SHA256 b56ecba4e8585a62dfcffe41843d40d96377a63b6427a88e559d32107a004b7d
MD5 caeff94c040e942f69322355a0210374
SHA1 7d2c8b5ba292471aad8e429ba9a78dab4be0cfa3
SHA512 33c2a0c22e09f80a85b3bb49ad5c52c380424807f50be8346d9b08d44a54e051ead8da5a7005604ec310082451d6e09e7cc3f1d59183e2b0d31c4efcf192193b
SSDEEP 96:GTqkEphskghUAgFii6VeJPX6LHMzxrwXZ6+fWBFQ0t0iFi+zMo5x5eQ:GTqkEjs9hUAgFii6VcPX6LHMxrwJ6+fw
TLSH
T137C1CE9BC7E8417E8543A7F5AA223B26D0FE165D52687C4A8DC89F4F62F0C73930144E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6087e475-e875-44df-aa69-3258a86987b7.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\6087e475-e875-44df-aa69-3258a86987b7.tmp
Size 1KB
SHA256 6cbcd47415a73d75d67c4d9982b39384fac64ad2b5eff0485b0a1ed9ef11b661
MD5 2b18673df9e83cc0b040e928357dc283
SHA1 487dc8f54df434918cae3768a8b16e598c09885d
SHA512 624e65c9a0a66c1d5774449d872772f03d5365385e90dd5020e4dfc34ee351dfd705c3af5ea844ffba043dfe0e3c22ba56159c848ce88b04de8d486ab4cdc76b
TLSH
T1FB31379BEA7EB4EF143D4CBB0D1478196EBAB435014150E8DE97C27E70A04B75A0647A
MD5 SHA1 SHA512 TLSH

Submit Download

652bd56d-905a-49e0-a010-3b101b70f88a.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\652bd56d-905a-49e0-a010-3b101b70f88a.tmp
Size 1KB
SHA256 569ab39468213d2fb83969c87f28c0129e259c96c1ac7b1c34840942d023ab36
MD5 b01e2555dd10c33d52cd2bc3f3f7cfb8
SHA1 61e195725e429661a30d0e3cee1363cabff98026
SHA512 b5378398859f6671680f255d15aa99820c92db87cc9f17bae9c5bd4671583207d950d7c283ad9e064c5cd5467a8cf77ca1a061daf7984ec78d6e706b0af8e276
TLSH
T12C213A97967EB4FF153D8CBB0D58780A6EBAB431124154F8DF97C27E70D04AB0A1643A
MD5 SHA1 SHA512 TLSH

Submit Download

7c4b2aef-3bf2-416b-9517-adcc1e8f0a01.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\7c4b2aef-3bf2-416b-9517-adcc1e8f0a01.tmp
Size 1KB
SHA256 ce9026c93254d2069b5b18ae89fdc2ce60b36f3f45233982fa37374f05ec1245
MD5 0825b6bb42e465f2fc859b7d3b52a739
SHA1 0617eec006d87ee4569a62cd8cc9b31232823365
SHA512 02066fb5f851b75d3b9a1d61c7399afcad6a61f0b5b9a027222588f051063cc95018b0e9e0f90f3beed55442f91e57f78ccfc0bbc65ba6a212e128a66d3b4984
TLSH
T1FF31399BA67EB4EF143D4C7B0D1878196E7AB435014150E9DE97C27E70E04F70A0647B
MD5 SHA1 SHA512 TLSH

Submit Download

7de075f3-38f7-499e-8421-642add674400.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\7de075f3-38f7-499e-8421-642add674400.tmp
Size 1KB
SHA256 cf1e34555bfdfea4155711c85c68c5755cad83cecb26534eeeba5e0bcebb583b
MD5 a090584c69aae3db6a1ee43f6ad91a1e
SHA1 e43fce2fed59c7f24e6e3f9a9fa88372d612c1a0
SHA512 eb7b05a07bdc6734154d69cc435b1b910c806327303a2f3c2865305110ea6101b18f6bc264f5457b37ec493ca2920bda53755a0ad8d8a151abd196f1b80ea29f
TLSH
T10A3168ABAA7EB4EF143D4CBB0D5478156EBAB435014150F8DE97C27E70E04B71B0646B
MD5 SHA1 SHA512 TLSH

Submit Download

9235da1b-d3c2-4d94-90b7-2047f0a2c9bc.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\9235da1b-d3c2-4d94-90b7-2047f0a2c9bc.tmp
Size 1KB
SHA256 6777347405a92723806951f02e854c9227b59cc9b5edfbb47cb547c642441cd6
MD5 d13bd1d0def8d0b33c1a50aa466518d0
SHA1 c6bdce7bf36adfdf6a56892c2a4b94258172fba5
SHA512 32f93448a44356550fe8d4da69d04cb10d0d94890d0d6d085cb2c69c4b390581779f8347b6098546879860834312ca9f1b5d5a791b50d678be1f56697ab33ad8
TLSH
T1CC3168A7AA7EB4EF103D0CBB0D14B8056EBAB435014150F8EE97827E70E05B71A16466
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\TransportSecurity
Size 1KB
SHA256 f04113f6008166a41ec40753785c7a2dfebc59de0fae082c57a2533184e28722
MD5 648d6493a857256421ebdd9982c59271
SHA1 e760ff2813d950e9f19ec86f1774000f0c71ddb0
SHA512 71b84f05559a0b1eb9e39cd0bf070af75a2a9c61b3605c4edf4d5613986ee3c9a9e0ad5a56b839be9cccc4aaf903ae5dd24eda1f5ae5f5041f7ba8ad913127b1
TLSH
T180118996AA7EB4FF113D887B0D68780A6EB9B431114154F8CFA7C27E70D08F70A1643A
MD5 SHA1 SHA512 TLSH

Submit Download

fc96bf64-8ba9-49d6-8a89-6848f1dddefb.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Network\fc96bf64-8ba9-49d6-8a89-6848f1dddefb.tmp
Size 1KB
SHA256 7fa69b5d83bb6006e0db53f65fa06980ce487e250c1e293e875a9fcd55559939
MD5 9d357efa8ae8f00317b0751b05c686bb
SHA1 803618b07882c45d19cd1549f4b0deea397dd975
SHA512 9b94300aaf595ea815f3a86a0a2cc5001fd192d9296bb5dcd90bf27efe6ab7e70a24e0372d6fcd08ce464aa7340b11ceb8423b53121140a013894e2ab441b91a
TLSH
T12A31399BAA7EB4EF143D4C7B0D1878096EBAB435014150E8DF97C27E70A44B74E06476
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\d31f74e1-e7f4-41cd-b967-08d1cb443ec3\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\d31f74e1-e7f4-41cd-b967-08d1cb443ec3\index-dir\temp-index
Size 72B
SHA256 986f5f9e8d487c9eac05c1a938cf4ab55af31ee4d2ebb80001a952492b7a7beb
MD5 a8a95eec681e328f45e7afeb70b1bef2
SHA1 292bf7889c15517f34655ca55ede32f17732f4b2
SHA512 9c973707123e1b7d3b541ba0b71e9287869d5eb0dbe96e985b1ea1807ce3fb700a6d7e2d3998c94da9c4bc3164ed45c5dd7fe1c26aa98d0a2d7b25185911b26f
TLSH
T19EA0022C41A04254C4124970145F02612265AD18F815161398D07596CCD14958103538
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\d31f74e1-e7f4-41cd-b967-08d1cb443ec3\index-dir\the-real-index
Size 48B
SHA256 d96cf0a3887ef52f70fb815c6d29d2ee961ee6f01b8b895ff485291d2925b7d9
MD5 71471c83b33d15ce2487e159e776fbcc
SHA1 0197745ec0857f44078a021b5af4f398403db143
SHA512 5901e66b5911098bc5893b7b5498e48dfe2ca6a7aa7c3761fd738c013e5d8e40605ee28758543f06519023d39b4c1559deb0c2dcc1ab49651dce79883edcc306
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt
Size 138B
SHA256 24b2bfe4fbb8a3e46593d31eddebfb526e33571d1142b021f07492f6f9697f4f
MD5 8b86ebdb2bdfcdca0253817fd11ec826
SHA1 77d0fd01c7d3d681e455c2e542fb4c72bc584c0b
SHA512 b3704c786bd6bf3cf0887770d755b22c176fc12b49b8422a54c852beacbfe08daa550e3ae3606b4b9037a96ecfcbd69d116fbd1520cbe5c0eebba01a5fcaa311
TLSH
T1C7C02B8E3A00D45F3980D3C25820B44DE0070E8984C5CCFC440CB01030341274B00D13
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt.tmp
Size 74B
SHA256 60ebfbe19e0b00485e81b7fa15d8988ac37bc2cdfd734311d3ee4b24f562a8bd
MD5 73a465dadf426a1816e6124332dbbe2a
SHA1 9016ee293d948b12d364e9eeccf7eec06a1aa032
SHA512 e55d2a34a093562bf8cf9d051dcb7b1bdf459a86cdfde578ece91f76ec18f7fd1007db5c93dcd9864fb97dd7d5d7581ec6bbfb0d0e867e04290bf434935725f6
TLSH
T117A0045F1404C44F5D5057C15410515DD00F01CDC4C4DDFC440D505130145571D01C13
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt.tmp
Size 137B
SHA256 61d3c11bed77b10406f81115f2710b7dfda3802452e7eb7da5e13e97d0556930
MD5 5b175e57593421d5a05f63032b9bca47
SHA1 9f8f2ac6d234a4f7c7da2803b45bf17ce3f061cb
SHA512 2cc28dbb5051ec0c109a92e50b573587fd5ec13284f1d447683ef3ef62096bfd87f5abe9f91b1fe857687e0029086948f932a86de8ee1d8c2ecdf8731f01c3b7
TLSH
T1EAC04C6A2514C94B5B6066825420654D905F4DDDC9C9C9B8A40EF09160355575E43926
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt.tmp
Size 131B
SHA256 ed34088cc0a43152bd878345af2428fbe742a85ac3dc85d7b9e3366a69e20838
MD5 8ce46bd6ccc2df1b771d269bd78d3bca
SHA1 e09f465ca8cd0d1ee807a2c786a9027d26fa0aae
SHA512 8c68e369e400361e4c87dee6351f8ba4bea2dabde671416b8db947330149ca44d60d5386968f216022aea5069920ddf91394eee657a387a56714370f49257b9e
TLSH
T194C0926F2A14CD4F5FA067C35424A98EA01F46DDC9C8DDFE940ED0A270259A76E83D37
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\96987ac9a26da52eafee5918e416296f955231fe\276bb650-c244-41ed-a12f-cc0e054df758\index-dir\temp-index
Size 72B
SHA256 77937102293516833fc100aeaeb4ef3c4d8e249ccd1abc902d36dc0bc54dbbea
MD5 1119103cb799dbcd3aa969412840a548
SHA1 458a0a3b5300b8931c42ddf20c405f4c447f33dc
SHA512 b730a629f9c429aa882237bbb7cd624ec37532edb7269d620759d9671019a12cb236c33fd47358168246e79000f3af708c064ed8d95559ae9c2ca0fc8af79910
TLSH
T1B1A0026259C4DC25C8423B757542019D33B14C5056568243439D98968963A81B201530
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\96987ac9a26da52eafee5918e416296f955231fe\276bb650-c244-41ed-a12f-cc0e054df758\index-dir\the-real-index
Size 48B
SHA256 95d3db3cb76b71b662cf01b0b29aebb61673658382bb8547e6fa0bcdafff74f4
MD5 25dad0625d0135abd2d2154ba9783809
SHA1 aa68c82277713d07eff6112adf18457428cca58b
SHA512 36af751ba3c33a8a64d52e458ecb90fbfc0e23bcfac3c2b977368958ae9127de4e4444aa3f253fd5f1a4ea2c892e9a228bd6be93547485083f51ea0c0aad7d90
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\96987ac9a26da52eafee5918e416296f955231fe\index.txt
Size 128B
SHA256 85a300da3ba94fd99d8ba7453f2ee9196ca048ef254bd0d4499b1a66469b53a2
MD5 15d2cb40eec995cdeb24429301e54f1b
SHA1 cd231ff67ef66ab8c5fab65d43a97a246ba6ec62
SHA512 28b82d80934d274d1e9d402483567f8b573c3f127e67f3b4669657824461a2de404d16ddee8f3cf0e82e6bca63311a0bab3f42a3cdee522a25246d910b58f687
TLSH
T1F0B09B5F511DC1625740C6C2D5565B1557832FC5DF58EED18544314D42F81971003B92
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\CacheStorage\96987ac9a26da52eafee5918e416296f955231fe\index.txt.tmp
Size 123B
SHA256 27c5ae0dcf8e15d8c6f05255505869a5cea43786134ffd1430aea00391dd98de
MD5 2afca52c6118fd67361330cc91898f6e
SHA1 7cf2c07e71818d55dbb19bb8733d4668c86e7367
SHA512 5a5fe4e40f552cecbc6656698553cfe1c2d377e552ca9f58e5b41211c4bbe349b9b2d8e9971c99d616a070723bf7e4f669111e6c2edfa7bf75dbe4595415af90
TLSH
T134B09B5F551DC1664740C7C19556975956432BC5CF58EDD38944114D41D81971007BA3
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 58f3a46e028db48efc6871f65e861fbc225350bce470ad00c9dd2df6fd49f784
MD5 149dd77f6354a8f2f05348bda17f0fb2
SHA1 a8e7049e2cb47b645e3b2219c092c52ee0bf1af6
SHA512 8f33649b603b7b61f1fbd31d6f1f0f8d21c30f07d7ef27b3a1fa3d95fc39c6ed5f6f61e501f7ac445c8ca82266da0e171c2a2785b02b2aacb8c12331e788d07d
TLSH
T133B01240858BE117C98252B4675400CA3120AA39C42423468BBC5276CC521804581500
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 2e941005f28f14a2ed3188f705d9850eb594403b83894af9d2b8cd292db79a57
MD5 1554e531723b7246a74a967819b456cd
SHA1 23dee3e6f2ba987add3382166ece3d0fc3358c40
SHA512 4304e2e1b09cfe3b74bed23ab52576f342079828a600c0f79ab4e16ffd5491e2d1bb4e23dc2bc1a4db189fcf8335b23b39a8cfd1f8994a13dd06df990d79a2af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\DuoHacker\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/456-1059-0x0000022723CD0000-0x0000022723CD1000-memory.dmp

Download

memory/456-1173-0x0000022723B20000-0x0000022723CC1000-memory.dmp

Download

memory/596-643-0x000001DD983C0000-0x000001DD983C1000-memory.dmp

Download

memory/596-879-0x000001DD98210000-0x000001DD983B1000-memory.dmp

Download

memory/596-642-0x00007FFE784A0000-0x00007FFE784A1000-memory.dmp

Download

memory/1424-959-0x0000020A412C0000-0x0000020A41461000-memory.dmp

Download

memory/1424-824-0x0000020A41470000-0x0000020A41471000-memory.dmp

Download

memory/2300-661-0x0000016EC2AC0000-0x0000016EC2AC1000-memory.dmp

Download

memory/2300-840-0x0000016EC2910000-0x0000016EC2AB1000-memory.dmp

Download

memory/3064-961-0x000001E395FE0000-0x000001E396181000-memory.dmp

Download

memory/3064-875-0x000001E396190000-0x000001E396191000-memory.dmp

Download

memory/3756-1330-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1320-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1319-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1331-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1321-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1329-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1328-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1327-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1326-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/3756-1325-0x00000253EC960000-0x00000253EC961000-memory.dmp

Download

memory/4648-574-0x00007FFE79AF0000-0x00007FFE79AF1000-memory.dmp

Download