|
dupeGuru_win64_4.3.1.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
initial sample
|
|
|
|
| Filetype: |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Entropy: |
7.999924097963753
|
| Filename: |
dupeGuru_win64_4.3.1.exe
|
| Filesize: |
32392211
|
| MD5: |
d82ff512b88c1adc706abbb7bba938f2
|
| SHA1: |
335ed3692ebe699ed907f8c96728f259652e37bb
|
| SHA256: |
28293dada3c88336b2b53aca00adf59f85cabf1362f8386a8ffc6be5e1742836
|
| SHA512: |
79fee28fa9c21e70dfc3f02877e8ea5dd388699ff0a26de55d98c4d7dc4745d58890abb4ff75d12bba33fc0c219fbd442ccf14a3d0f3ee0511d4e11ac19b3e7b
|
| SSDEEP: |
786432:u7kuITM2/Y4IS+Ds0r7I7wQ6wyBTCivfhsu//4FpvuzJ:uMZ/ms0ruFpIeSh8k
|
| Preview: |
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf.*_9..Pf..Pg.LPf.*_;..Pf..sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....$_.................f...*.....
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Queries the volume information (name, serial number etc) of a device |
Language, Device and Operating System Detection |
|
| Sample file is different than original file name gathered from version info |
System Summary |
|
| Stores files to the Windows start menu directory |
Boot Survival |
Registry Run Keys / Startup Folder
|
| Uses 32bit PE files |
Compliance, System Summary |
|
| Checks the free space of harddrives |
Malware Analysis System Evasion |
System Information Discovery
|
| Creates files inside the program directory |
System Summary |
|
| Creates temporary files |
System Summary |
|
| Disables application error messsages (SetErrorMode) |
Hooking and other Techniques for Hiding and Protection |
|
| Enumerates the file system |
Spreading, Malware Analysis System Evasion |
|
| PE file has an executable .text section and no other executable section |
System Summary |
|
| Reads ini files |
System Summary |
File and Directory Discovery
|
| Reads software policies |
System Summary |
|
| Sample reads its own file content |
System Summary |
|
| Tries to load missing DLLs |
System Summary |
|
| Uses an in-process (OLE) Automation server |
System Summary |
|
| Contains modern PE file flags such as dynamic base (ASLR) or NX |
Compliance, System Summary |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
| Creates a software uninstall entry |
Compliance, System Summary |
|
| Submission file is bigger than most known malware samples |
System Summary |
|
| Found installer window with terms and condition text |
Compliance, System Summary |
|
| Found GUI installer (many successful clicks) |
System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\MSVCP140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\MSVCP140.dll
|
| Category: |
dropped
|
| Dump: |
MSVCP140.dll.0.dr
|
| ID: |
dr_6
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.461874649448891
|
| Encrypted: |
false
|
| Ssdeep: |
12288:xI88L4Wu4+oJ+xc39ax5Ms4ETs3rxSvYcRkdQEKZm+jWodEEVh51:xD89rxZfQEKZm+jWodEEP5
|
| Size: |
590112
|
| Whitelisted: |
true
|
| Reputation: |
moderate
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\MSVCP140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\MSVCP140_1.dll
|
| Category: |
dropped
|
| Dump: |
MSVCP140_1.dll.0.dr
|
| ID: |
dr_339
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.499754548353504
|
| Encrypted: |
false
|
| Ssdeep: |
384:rOY/H1SbuIqnX8ndnWc95gW3C8c+pBj0HRN7bULkcyHRN7rxTO6iuQl9xiv:yYIBqnMdxxWd4urv
|
| Size: |
31728
|
| Whitelisted: |
true
|
| Reputation: |
moderate
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\iconusers\qsvgicon.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\iconusers\qsvgicon.dll
|
| Category: |
dropped
|
| Dump: |
qsvgicon.dll.0.dr
|
| ID: |
dr_264
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.0993566622860635
|
| Encrypted: |
false
|
| Ssdeep: |
768:VPs5g31JfDgej5JZmA0ZsEEC6lmn+4FdDGimUf2hr:VkC31ee7ZmA+sEEC6lmn+4FOUfc
|
| Size: |
41968
|
| Whitelisted: |
true
|
| Reputation: |
moderate
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qgif.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qgif.dll
|
| Category: |
dropped
|
| Dump: |
qgif.dll.0.dr
|
| ID: |
dr_269
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.0316011626259405
|
| Encrypted: |
false
|
| Ssdeep: |
768:ygk2hM0GskFtvPCjEIxh8eDzFyPddeeGvnhotdDGPUf2he:yN2a05kfPOEMaeDzFkddeFnhotOUfh
|
| Size: |
39408
|
| Whitelisted: |
true
|
| Reputation: |
moderate
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qicns.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qicns.dll
|
| Category: |
dropped
|
| Dump: |
qicns.dll.0.dr
|
| ID: |
dr_274
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.016125225197622
|
| Encrypted: |
false
|
| Ssdeep: |
768:vEip0IlhxTDxut3dnm8IyAmQQ3ydJouEAkNypTAO0tfC3apmsdDG9Uf2hU:vxvXxgVIyA23ydJlEATpTAO0tfCKpms/
|
| Size: |
45040
|
| Whitelisted: |
true
|
| Reputation: |
moderate
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qico.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qico.dll
|
| Category: |
dropped
|
| Dump: |
qico.dll.0.dr
|
| ID: |
dr_279
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.957072398645384
|
| Encrypted: |
false
|
| Ssdeep: |
768:zBXBEfQiAzC9Oh5AS7a3Z5OGrTDeV9mp7nnsWdDGgYUf2hi/:8JAzuOhy3zOGrTDeV9mp7nnsWjYUfz
|
| Size: |
38384
|
| Whitelisted: |
true
|
| Reputation: |
moderate
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qjpeg.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qjpeg.dll
|
| Category: |
dropped
|
| Dump: |
qjpeg.dll.0.dr
|
| ID: |
dr_283
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.7491063936821405
|
| Encrypted: |
false
|
| Ssdeep: |
6144:USgOWz1eW38u9tyh6fpGUasBKTrsXWwMmH1l3JM5hn0uEfB4:USPQTnastBRB4
|
| Size: |
421360
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qsvg.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qsvg.dll
|
| Category: |
dropped
|
| Dump: |
qsvg.dll.0.dr
|
| ID: |
dr_286
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.978149408776758
|
| Encrypted: |
false
|
| Ssdeep: |
768:uOVKDlJJVlTuLiMtsKVG7TSdDG9Uf2h4e:hVgJVlTuL/tsKVG7TSQUfre
|
| Size: |
32240
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qtga.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qtga.dll
|
| Category: |
dropped
|
| Dump: |
qtga.dll.0.dr
|
| ID: |
dr_288
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.865766652452823
|
| Encrypted: |
false
|
| Ssdeep: |
768:1lGALluUEAQATWQ79Z2Y8Ar+dDG2vUf2hF:TZl/EH8WQ794Y8Ar+hvUfm
|
| Size: |
31728
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qtiff.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qtiff.dll
|
| Category: |
dropped
|
| Dump: |
qtiff.dll.0.dr
|
| ID: |
dr_299
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.724665470266677
|
| Encrypted: |
false
|
| Ssdeep: |
6144:V0jqHiFBaRe0GPAKwP15e7xrEEEEEEN024Rx/3tkYiHUASQbs/l7OanYoOgyV:0qqwP15bx/q7/yyV
|
| Size: |
390128
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qwbmp.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qwbmp.dll
|
| Category: |
dropped
|
| Dump: |
qwbmp.dll.0.dr
|
| ID: |
dr_304
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.938644231596902
|
| Encrypted: |
false
|
| Ssdeep: |
768:EfEM3S46JE2X/xBZ76pC5J6GdDGZUf2h4:63S3JE2PHZ76pC5J6GEUfn
|
| Size: |
30192
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qwebp.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\imageformats\qwebp.dll
|
| Category: |
dropped
|
| Dump: |
qwebp.dll.0.dr
|
| ID: |
dr_309
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.605517748735854
|
| Encrypted: |
false
|
| Ssdeep: |
12288:bPTjgdqdsvh+LrLrLrL5/y4DVHAsqx3hXS+oPZQqRaYG:jT5sMLrLrLrL5q4dAsaOFo
|
| Size: |
510448
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qminimal.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qminimal.dll
|
| Category: |
dropped
|
| Dump: |
qminimal.dll.0.dr
|
| ID: |
dr_314
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.625808732261156
|
| Encrypted: |
false
|
| Ssdeep: |
12288:y6MhioHKQ1ra8HT+bkMY8zKI4kwU7dFOTTYfEWmTxbwTlWc:BMhioHKQp+bkjAjwGdFSZtbwBd
|
| Size: |
844784
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qoffscreen.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qoffscreen.dll
|
| Category: |
dropped
|
| Dump: |
qoffscreen.dll.0.dr
|
| ID: |
dr_319
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.6323155845799695
|
| Encrypted: |
false
|
| Ssdeep: |
12288:/HpBmyVIRZ3Tck83vEgex5aebusGMIlhLfEWmpCJkl:/HpB63TckUcLaHMITAZmW
|
| Size: |
754672
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qwebgl.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qwebgl.dll
|
| Category: |
dropped
|
| Dump: |
qwebgl.dll.0.dr
|
| ID: |
dr_324
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.152380961313931
|
| Encrypted: |
false
|
| Ssdeep: |
6144:WO/vyK+DtyaHlIMDhg5WEOvAwKB2VaaHeqRw/yVfYu4UnCA6DEjeYchcD+1Zy2:bKtHOWg5OvAwK0NYu4AShcD+1U2
|
| Size: |
482288
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qwindows.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platforms\qwindows.dll
|
| Category: |
dropped
|
| Dump: |
qwindows.dll.0.dr
|
| ID: |
dr_329
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.575113537540671
|
| Encrypted: |
false
|
| Ssdeep: |
24576:4mCSPJrAbXEEuV9Hw2SoYFo3HdxjEgqJkLdLu5qpmZuhg/A2b:nPlIEEuV9Hw2SFFWHdWZsdmqja/A2b
|
| Size: |
1477104
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platformthemes\qxdgdesktopportal.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\platformthemes\qxdgdesktopportal.dll
|
| Category: |
dropped
|
| Dump: |
qxdgdesktopportal.dll.0.dr
|
| ID: |
dr_333
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.125954940500008
|
| Encrypted: |
false
|
| Ssdeep: |
1536:Nt4B1RLj3S6TtH2sweUH+Hz6/4+D6VFsfvUfO:AB1RHFdoeUs6/4O6VFSZ
|
| Size: |
68592
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\styles\qwindowsvistastyle.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\plugins\styles\qwindowsvistastyle.dll
|
| Category: |
dropped
|
| Dump: |
qwindowsvistastyle.dll.0.dr
|
| ID: |
dr_336
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.294675868932723
|
| Encrypted: |
false
|
| Ssdeep: |
3072:rrjwZ43rCOtrBk7wcR0l7wBlaL6BtIEt51T0Nhkqg8FoQY:7hZu9R0l7wFBtIEt51T0Nuqg8JY
|
| Size: |
144368
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ar.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ar.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_ar.qm.0.dr
|
| ID: |
dr_338
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.35627970915292
|
| Encrypted: |
false
|
| Ssdeep: |
1536:XGlAMfkX1M0RdaCkR8lfv8vtc8EFrVYA2I4AJZWEWgHg1C8COvzHKHC6Jp9NV0V7:XUr0RACkIwDEpV1Lgf1ubtw3Bb
|
| Size: |
160017
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_bg.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_bg.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_bg.qm.0.dr
|
| ID: |
dr_355
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.332219158085151
|
| Encrypted: |
false
|
| Ssdeep: |
1536:9ULiyUxPoT6qx+J7FJlaaMJnxjqxq+0Uiff0mbVeb7wiEwYuYqDKBkKHMXHCIMll:9ULpIVFnpwUiEujw27ncUQUz
|
| Size: |
165337
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ca.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ca.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_ca.qm.0.dr
|
| ID: |
dr_359
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.666388181115542
|
| Encrypted: |
false
|
| Ssdeep: |
3072:P/DVhdlafzvZfeW+6kXEVjSVPzC3ceKdP2:xYf7UW+WjwP2
|
| Size: |
210159
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_cs.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_cs.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_cs.qm.0.dr
|
| ID: |
dr_363
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.87192387061682
|
| Encrypted: |
false
|
| Ssdeep: |
3072:5WjuhX0CVRaakGjW9E8SSOQfX/JlwVOMxrboRPqWxXfQvO7zjBf:5iFGj1QfXr8Gd
|
| Size: |
174701
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_da.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_da.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_da.qm.0.dr
|
| ID: |
dr_367
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.755193800761075
|
| Encrypted: |
false
|
| Ssdeep: |
3072:XzswP2UvZ5aZ9jFTkmq/gnBNW/+PcWrqm2Vliz0DGdaS4KSLZjwTTgwUR0toT:j3m27AjCT
|
| Size: |
181387
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_de.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_de.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_de.qm.0.dr
|
| ID: |
dr_371
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.626295310482312
|
| Encrypted: |
false
|
| Ssdeep: |
3072:7w8go8+ph6JVB8XVXYWpSNEeg8+vaD+p4N8DDiEKugwGZulh15ce4M+4NsPYXCZW:88h8Sj286tTiDD
|
| Size: |
220467
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_en.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_en.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_en.qm.0.dr
|
| ID: |
dr_375
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.0
|
| Encrypted: |
false
|
| Ssdeep: |
3:j2wZC4n:CwZ
|
| Size: |
16
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_es.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_es.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_es.qm.0.dr
|
| ID: |
dr_379
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.679910767547088
|
| Encrypted: |
false
|
| Ssdeep: |
1536:JVwzuvb+Ta64KQd84arHX5pxiVhA8QlOD/BnFNa8NsvsfFsfcoZtIx6F:JVwSTG4KqVaLX5pEVK7OJFczstgRtIx8
|
| Size: |
165170
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_fi.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_fi.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_fi.qm.0.dr
|
| ID: |
dr_383
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.720938209922096
|
| Encrypted: |
false
|
| Ssdeep: |
3072:lvdTgO2Yl97ZWnbgTLt/Tf9IlqAeiy5uWkYGM0wNCdRjSK2YUlUs:lvdkA9vh5uWkY0MK2YXs
|
| Size: |
179941
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_fr.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_fr.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_fr.qm.0.dr
|
| ID: |
dr_386
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.685212271435657
|
| Encrypted: |
false
|
| Ssdeep: |
1536:CLZ1w8McowCppcPwL5pYFw+G00QsbLckCiWxvq+sjs06oFm:C91wxcowspc4L5pUw+cz39CiQ7tloFm
|
| Size: |
166167
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_gd.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_gd.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_gd.qm.0.dr
|
| ID: |
dr_388
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.630160941635514
|
| Encrypted: |
false
|
| Ssdeep: |
1536:SiaI3C87jhakhR0VGkw7ys7CskUH6y4e6IFB4xyMuhvDnJGhFaCo527arBbm07LZ:S2yGjh17yGqxTXhvQoejJd8FUjVgk
|
| Size: |
189580
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_he.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_he.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_he.qm.0.dr
|
| ID: |
dr_405
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.515748942553918
|
| Encrypted: |
false
|
| Ssdeep: |
3072:XSue8Z7T3iJsqBejt/zNHSLzdetY2ZISfC/S:XSueK3w7Ijt8zUtYAISfC/S
|
| Size: |
138690
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_hu.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_hu.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_hu.qm.0.dr
|
| ID: |
dr_409
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.831791320613137
|
| Encrypted: |
false
|
| Ssdeep: |
3072:BmOMZadV9n51xXeQvjOiIzz7/Vs9Db3ihuJNvMfWxBNlYzYbTrIkfwb03l24cNKu:HkWa5pg0MahBHDd
|
| Size: |
160494
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_it.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_it.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_it.qm.0.dr
|
| ID: |
dr_413
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.680034416311688
|
| Encrypted: |
false
|
| Ssdeep: |
1536:eSfxfdO4BKJb0td5pqCOIUP/PFIM7gxGQ9sRrFM6QJ4m8ihkM:eSfxFO4BKJb0td5pnOrvCqg9mRK4IkM
|
| Size: |
161172
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ja.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ja.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_ja.qm.0.dr
|
| ID: |
dr_417
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.802855391832282
|
| Encrypted: |
false
|
| Ssdeep: |
1536:W8YYSCjKBJ26c1Z7f25pVmuLXpxfqt7FEUWNrfQje9kWI23pKXvx:xYuKBJ01Z7u5pQuLbESUWNzAAI23pKfx
|
| Size: |
129911
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ko.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ko.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_ko.qm.0.dr
|
| ID: |
dr_421
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.859529082176036
|
| Encrypted: |
false
|
| Ssdeep: |
1536:rvTy18hhPekHs1iNXVExWbStnn8TExgkYOvYejZOvXx4Mmf0MwUL8smk/pDZyy:y18hJ61nMStnn8TOgknQRLWZmkxNyy
|
| Size: |
156799
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_lv.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_lv.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_lv.qm.0.dr
|
| ID: |
dr_425
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.843805801051326
|
| Encrypted: |
false
|
| Ssdeep: |
3072:y5pmbKIhooMbGe91MrjOhmGzP6LJbWz5XIxELpU6:yObeqrjPGzeJyJLy6
|
| Size: |
153608
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_pl.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_pl.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_pl.qm.0.dr
|
| ID: |
dr_429
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.841899887077422
|
| Encrypted: |
false
|
| Ssdeep: |
1536:sXpestp/YIFtDT8FIWYbIJmPYuIpnmxAk6mwyJNqSm9+P:sxpTDT8FIWfJmdCmxApmbnqSm9+P
|
| Size: |
162982
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ru.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_ru.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_ru.qm.0.dr
|
| ID: |
dr_433
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.362551648909705
|
| Encrypted: |
false
|
| Ssdeep: |
1536:hn4dEJ63pdhPpy6gu5fs4MHQv6sLlxnrncF423ZL9xyuXwdcX8LZuf76CW+WeXFx:aN3pdV5fZbpItXsttRY+WSq
|
| Size: |
203767
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_sk.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_sk.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_sk.qm.0.dr
|
| ID: |
dr_436
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.80343609423322
|
| Encrypted: |
false
|
| Ssdeep: |
3072:roXDuC1u/2lUBGjJirE5tsd/aev1GIfOdvhw:OucMGjH5tbm
|
| Size: |
125763
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_tr.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_tr.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_tr.qm.0.dr
|
| ID: |
dr_438
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
4.877239354585035
|
| Encrypted: |
false
|
| Ssdeep: |
3072:yRRhAFCvqDBitD/iDG9AOH+l4TcwZBPqHo9fd9CFRK+2IKAimxsjucV2p0ZqvRu7:yRRHs5mksWVX3lA3
|
| Size: |
194487
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_uk.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_uk.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_uk.qm.0.dr
|
| ID: |
dr_452
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.402056706327934
|
| Encrypted: |
false
|
| Ssdeep: |
1536:jXwjFVUDdMUD4TzdAhpQgO5poZHvJllEnhmdK4I77/dnPJX/imfb1jhvv3BxT8ue:jBzD4Tzaw5pCvJ8hVPdlvj3p8
|
| Size: |
158274
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_zh_TW.qm
|
Qt Translation file
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\Qt5\translations\qtbase_zh_TW.qm
|
| Category: |
dropped
|
| Dump: |
qtbase_zh_TW.qm.0.dr
|
| ID: |
dr_455
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Qt Translation file
|
| Entropy: |
5.83455389078597
|
| Encrypted: |
false
|
| Ssdeep: |
3072:Fv2cHP10gOs6dcFxsJopMqOWv2WIrPFP8pa:Fh6s6iFxEodjef8pa
|
| Size: |
127849
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\QtCore.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\QtCore.pyd
|
| Category: |
dropped
|
| Dump: |
QtCore.pyd.0.dr
|
| ID: |
dr_628
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.224503278521548
|
| Encrypted: |
false
|
| Ssdeep: |
49152:+4r7tJXNSet/d/EBZYrf6G7/iqhMfhaw8e8ER0FuwXqPlXUV1T/YUuh1LR4FK1vu:+QtGed/EBOrf6G7/iqhMfhaw8e8ER0F2
|
| Size: |
2442752
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\QtGui.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\QtGui.pyd
|
| Category: |
dropped
|
| Dump: |
QtGui.pyd.0.dr
|
| ID: |
dr_249
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.224875663058188
|
| Encrypted: |
false
|
| Ssdeep: |
24576:Xd+SVgN2GgwoPS0P8JupfVD40whSRkv+w+I8dG7iIbf0stpvxrxqmM+:tBgN2Gg9S0PSuLBwLvd+I17hbfZD
|
| Size: |
2455040
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\QtWidgets.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\QtWidgets.pyd
|
| Category: |
dropped
|
| Dump: |
QtWidgets.pyd.0.dr
|
| ID: |
dr_254
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.24719041781986
|
| Encrypted: |
false
|
| Ssdeep: |
49152:mcyvTukRwO+6eGCw8MsFy1AeVFSsS84uegkbZ49/NzQYHbL086PePuhd7dfidfRB:bFKFZuFUhHbwTK
|
| Size: |
5036032
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\sip.cp38-win_amd64.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\PyQt5\sip.cp38-win_amd64.pyd
|
| Category: |
dropped
|
| Dump: |
sip.cp38-win_amd64.pyd.0.dr
|
| ID: |
dr_259
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.997058387169426
|
| Encrypted: |
false
|
| Ssdeep: |
3072:svSEAUjHx1CNbRMpAOUd6l1CX5gh3kqn/s:hEAKURRR0rCpO3Bs
|
| Size: |
121344
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Core.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Core.dll
|
| Category: |
dropped
|
| Dump: |
Qt5Core.dll.0.dr
|
| ID: |
dr_340
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.768988071491288
|
| Encrypted: |
false
|
| Ssdeep: |
98304:hcirJylHYab/6bMJsv6tWKFdu9CLiZxqfg8gwf:+irJylHFb/QMJsv6tWKFdu9CL4xqfg8x
|
| Size: |
6023664
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5DBus.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5DBus.dll
|
| Category: |
dropped
|
| Dump: |
Qt5DBus.dll.0.dr
|
| ID: |
dr_341
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.392610185061176
|
| Encrypted: |
false
|
| Ssdeep: |
6144:ZLvnUJ17UTGOkWHUe/W9TgYMDu96ixMZQ8IlXbKgp8aIDeN:KP7cGOGegTwu96ixMZQtlrPN
|
| Size: |
436720
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Gui.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Gui.dll
|
| Category: |
dropped
|
| Dump: |
Qt5Gui.dll.0.dr
|
| ID: |
dr_342
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.674290383197779
|
| Encrypted: |
false
|
| Ssdeep: |
49152:9VPhJZWVvpg+za3cFlc61j2VjBW77I4iNlmLPycNRncuUx24LLsXZFC6FOCfDt2/:BJZzI1ZR3U9Cxc22aDACInVc4Z
|
| Size: |
7008240
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Network.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Network.dll
|
| Category: |
dropped
|
| Dump: |
Qt5Network.dll.0.dr
|
| ID: |
dr_343
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.41486755163134
|
| Encrypted: |
false
|
| Ssdeep: |
24576:eXPn73RXox1U9M0m+1ffSDY565RzHUY1iaRy95hdGehEM:+7hXU1U95m4ff9A5RviaRy9NGI
|
| Size: |
1340400
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Qml.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Qml.dll
|
| Category: |
dropped
|
| Dump: |
Qt5Qml.dll.0.dr
|
| ID: |
dr_344
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.333693598000157
|
| Encrypted: |
false
|
| Ssdeep: |
98304:iPnt09+kVh2NrSdSG779LLLS/o/L4YqoY0Xba+mRRH2T:iPnt2ZVhT
|
| Size: |
3591664
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5QmlModels.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5QmlModels.dll
|
| Category: |
dropped
|
| Dump: |
Qt5QmlModels.dll.0.dr
|
| ID: |
dr_345
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.312090336793804
|
| Encrypted: |
false
|
| Ssdeep: |
6144:k1tE6lq982HdyuEZ5gw+VHDZjZ0yOWm7Vdcm4GyasLCZCu6vdQp:k1tEuq9Hdyuo5gwguyOtVIup
|
| Size: |
438768
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Quick.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Quick.dll
|
| Category: |
dropped
|
| Dump: |
Qt5Quick.dll.0.dr
|
| ID: |
dr_346
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.462183686222023
|
| Encrypted: |
false
|
| Ssdeep: |
49152:EcDwCQsvkBD+ClI3IAVLA7Tr15SokomoqxQhT2bAssCFEUGX5ig:E7CKPsA3p0Z/QV/sS3Ag
|
| Size: |
4148720
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Svg.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Svg.dll
|
| Category: |
dropped
|
| Dump: |
Qt5Svg.dll.0.dr
|
| ID: |
dr_347
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.381828869454302
|
| Encrypted: |
false
|
| Ssdeep: |
6144:6qLZcTC3wR/0JNZ+csBkBv0L0hq+SvcO8MsvwbIeblsjTR:6qNcCwqHE2fYlsPR
|
| Size: |
330736
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5WebSockets.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5WebSockets.dll
|
| Category: |
dropped
|
| Dump: |
Qt5WebSockets.dll.0.dr
|
| ID: |
dr_348
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.116105454277536
|
| Encrypted: |
false
|
| Ssdeep: |
3072:4sSkET6pEXb3loojg1Q2sorWvZXF2sorrLA7cG27Qhvvc:4sSd6pwzloDbsnX0sCrc7ct7QVc
|
| Size: |
149488
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Widgets.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Qt5Widgets.dll
|
| Category: |
dropped
|
| Dump: |
Qt5Widgets.dll.0.dr
|
| ID: |
dr_389
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.619117060971844
|
| Encrypted: |
false
|
| Ssdeep: |
49152:KO+LIFYAPZtMym9RRQ7/KKIXSewIa/2Xqq1sfeOoKGOh6EwNmiHYYwBrK8KMlH0p:IGoKZdRqJD10rK8KMlH0gi5GX0oKZ
|
| Size: |
5498352
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\Uninstall.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\Uninstall.exe
|
| Category: |
dropped
|
| Dump: |
Uninstall.exe.0.dr
|
| ID: |
dr_49
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Entropy: |
6.788044083969469
|
| Encrypted: |
false
|
| Ssdeep: |
1536:uMpxVUC9B3yGoERbEy/Qlc7uAg9/QlLPA+NZu2RmAz+s13sdL+Q0:uuxVUg3yGDRb8lc7uAqQ9PAi9+s13sdi
|
| Size: |
79594
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\VCRUNTIME140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\VCRUNTIME140.dll
|
| Category: |
dropped
|
| Dump: |
VCRUNTIME140.dll.0.dr
|
| ID: |
dr_390
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.452201564717313
|
| Encrypted: |
false
|
| Ssdeep: |
1536:ywqHLG4SsAzAvadZw+1Hcx8uIYNUzUoHA4decbK/zJNuw6z5U:ytrfZ+jPYNzoHA4decbK/FNu51U
|
| Size: |
98224
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\VCRUNTIME140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\VCRUNTIME140_1.dll
|
| Category: |
dropped
|
| Dump: |
VCRUNTIME140_1.dll.0.dr
|
| ID: |
dr_391
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.627837381503075
|
| Encrypted: |
false
|
| Ssdeep: |
384:Aim/NRETi8kykt25HwviU5fJUiP2551xWmbTqOA7SXf+Ny85xM8ATJWr3KWoC8cS:0Ie8kySL2iPQxdvjAevcMESW5lxJG
|
| Size: |
44528
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_asyncio.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_asyncio.pyd
|
| Category: |
dropped
|
| Dump: |
_asyncio.pyd.0.dr
|
| ID: |
dr_392
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.619663740833838
|
| Encrypted: |
false
|
| Ssdeep: |
768:/exkm0+xODcZOogzgl7wxxsVwm71VZ7qbVA6GeuKqO33k3LSzBzFIR5n:/gkm0+DZ427JSG7Kf33k3WdFIR5n
|
| Size: |
61952
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_bz2.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_bz2.pyd
|
| Category: |
dropped
|
| Dump: |
_bz2.pyd.0.dr
|
| ID: |
dr_393
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.256830440792308
|
| Encrypted: |
false
|
| Ssdeep: |
1536:9BB7fwi+Cz4qaLcFGKRtMU+Z90R+Xy7AdKBon0pQP8x43SZg9MDIHiJmt6TYXk55:VY2MU+Z90R+Xy7AdKBon0pQP8x43SZgS
|
| Size: |
93184
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_ctypes.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_ctypes.pyd
|
| Category: |
dropped
|
| Dump: |
_ctypes.pyd.0.dr
|
| ID: |
dr_394
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.819117330192149
|
| Encrypted: |
false
|
| Ssdeep: |
3072:jW00/RUFMoVPFYx3ZJUx8RvcNf2xbHFK1ws/NtRIRQP:nFMogxpUDfQT6wyt
|
| Size: |
136704
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_decimal.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_decimal.pyd
|
| Category: |
dropped
|
| Dump: |
_decimal.pyd.0.dr
|
| ID: |
dr_395
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.4945278556587365
|
| Encrypted: |
false
|
| Ssdeep: |
6144:aVNstylPzBqNg47S2IKeO08Hva010iq1yK3X+W5AUSONCIm0:+sABqNn7S2KO0AxuTA0
|
| Size: |
335360
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_elementtree.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_elementtree.pyd
|
| Category: |
dropped
|
| Dump: |
_elementtree.pyd.0.dr
|
| ID: |
dr_396
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.229598566670439
|
| Encrypted: |
false
|
| Ssdeep: |
6144:VF6WIr+nRoYYcUWMCptjrl5wX0uWHzthWqHiEu8iEtk9Fba:RIr+RrZUW/ptjBuWfi99EtkS
|
| Size: |
229376
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_hashlib.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_hashlib.pyd
|
| Category: |
dropped
|
| Dump: |
_hashlib.pyd.0.dr
|
| ID: |
dr_397
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.575064268436143
|
| Encrypted: |
false
|
| Ssdeep: |
768:rxNcob/k6RIuTKUbw2P5l2eP4zgevTZFIR5IZ:rxNcob/ksIuF5l2hBvTZFIR5IZ
|
| Size: |
39424
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_lzma.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_lzma.pyd
|
| Category: |
dropped
|
| Dump: |
_lzma.pyd.0.dr
|
| ID: |
dr_398
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.643442702201296
|
| Encrypted: |
false
|
| Ssdeep: |
3072:OXXM1314o/ZhLpqUNbD2xKfo25ko94wIqy9azffs9mNowYIFePNIRe1:OXX64SHbcoakMYOrIcP
|
| Size: |
183808
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_multiprocessing.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_multiprocessing.pyd
|
| Category: |
dropped
|
| Dump: |
_multiprocessing.pyd.0.dr
|
| ID: |
dr_439
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.24438275433327
|
| Encrypted: |
false
|
| Ssdeep: |
384:3+iPsbawncDjGefiqQqPtKmtG7DmtRY54JP7gR04MWo81IRRBLT:ORg9PtjSqxJDumWv1IRRt
|
| Size: |
24064
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_overlapped.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_overlapped.pyd
|
| Category: |
dropped
|
| Dump: |
_overlapped.pyd.0.dr
|
| ID: |
dr_440
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.664418712319263
|
| Encrypted: |
false
|
| Ssdeep: |
768:6oLhIFWbbKOB9HxFfWMAxViGOCFcoYwFX6Bf0vnIDr6FDTJIRstL:6II+WO1Ojx4HYaf0vnIDrYTJIRstL
|
| Size: |
40960
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_queue.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_queue.pyd
|
| Category: |
dropped
|
| Dump: |
_queue.pyd.0.dr
|
| ID: |
dr_441
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.297479704146136
|
| Encrypted: |
false
|
| Ssdeep: |
384:IuGM64wH6Gm1M5kgExYsA6r5dN5RmOnx+cE+eRIR7U:IC64W5SYF6r535Rm4DeRIR7U
|
| Size: |
23040
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_socket.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_socket.pyd
|
| Category: |
dropped
|
| Dump: |
_socket.pyd.0.dr
|
| ID: |
dr_442
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.88652238232672
|
| Encrypted: |
false
|
| Ssdeep: |
1536:RyCFInzhTALJKJxUod7UA//yBsz9/s+7+pZW9y+xRjDCNpRIRQwH:R7FInzWKJx5USusz9/se+pZCxRPCNpRK
|
| Size: |
74240
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_sqlite3.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_sqlite3.pyd
|
| Category: |
dropped
|
| Dump: |
_sqlite3.pyd.0.dr
|
| ID: |
dr_443
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.6380003198737585
|
| Encrypted: |
false
|
| Ssdeep: |
1536:R6mLUdfu6+WIgA/QQMDGXZXkXF44UYnaaaebBYCcElpMsq+FIR5Q:pLCm6+WIvYDGJXkXZUYTBLcEnq+FIR5Q
|
| Size: |
76288
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_ssl.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_ssl.pyd
|
| Category: |
dropped
|
| Dump: |
_ssl.pyd.0.dr
|
| ID: |
dr_444
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.810444100703272
|
| Encrypted: |
false
|
| Ssdeep: |
3072:yVD+F1zvb2K5OmhKwvsRnqd8VXSjnqddOazjzYH6nCxAvTHy1t/6tYdWkeRFKd7E:mST2K5//vzd8VXfdwazMsuBrB
|
| Size: |
161792
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\_win32sysloader.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\_win32sysloader.pyd
|
| Category: |
dropped
|
| Dump: |
_win32sysloader.pyd.0.dr
|
| ID: |
dr_445
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
4.965513271316106
|
| Encrypted: |
false
|
| Ssdeep: |
192:HFmt9zPNAxlmIA1ZtlmP1Y3xpqdoXU/ZdcyhPg+5T/:lmxx33m5KcdPT/
|
| Size: |
14336
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-console-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-console-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-console-l1-1-0.dll.0.dr
|
| ID: |
dr_446
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.975148254582308
|
| Encrypted: |
false
|
| Ssdeep: |
192:PaW1hWiZqe8Cjdks/nGfe4pBjSYqW/nW5RKTt3E2sVWQ4GW5rYZpqnaj71nxPI45:yW1hW4r1m0GftpBjQm3SllndaVrQ2W
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-datetime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-datetime-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-datetime-l1-1-0.dll.0.dr
|
| ID: |
dr_447
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.984171794145316
|
| Encrypted: |
false
|
| Ssdeep: |
192:aUW1hWi8dsNtLxCjdks/nGfe4pBjSYvQF0RW5RKTt3E2sVWQ4GWsTJsqnajkZtT6:HW1hWfsngm0GftpBjmtm3SglmTok6
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-debug-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-debug-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-debug-l1-1-0.dll.0.dr
|
| ID: |
dr_448
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.988934641003721
|
| Encrypted: |
false
|
| Ssdeep: |
192:2W1hWi9cvHCjdks/nGfe4pBjSYLky6b+W5RKTt3E2sVWQ4GW2y9jqnajXagRbG1d:2W1hW+Qim0GftpBj81nm3SMlDCED6
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-errorhandling-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-errorhandling-l1-1-0.dll.0.dr
|
| ID: |
dr_479
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.01639527920599
|
| Encrypted: |
false
|
| Ssdeep: |
192:8mxD3uLW1hWioedXACjdks/nGfe4pBjSYTdvW5RKTt3E2sVWQ4GWGCWkqnajTWOj:8BLW1hWeXRm0GftpBj8m3SclgCohax
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-file-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-file-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-file-l1-1-0.dll.0.dr
|
| ID: |
dr_480
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.9179162203047495
|
| Encrypted: |
false
|
| Ssdeep: |
384:TBPvVXcW1hWYDzDm0GftpBjrm3SXjltFpx:VPvVX/TViNZ
|
| Size: |
22280
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-file-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-file-l1-2-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-file-l1-2-0.dll.0.dr
|
| ID: |
dr_481
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.993868508484722
|
| Encrypted: |
false
|
| Ssdeep: |
384:aW1hWF5OZkum0GftpBjjNWm3S0ZlmTof1:JKoViqi1
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-file-l2-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-file-l2-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-file-l2-1-0.dll.0.dr
|
| ID: |
dr_482
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.054510010549814
|
| Encrypted: |
false
|
| Ssdeep: |
384:eVrW1hWbvm0GftpBjzH4m3S9gTlUK3dsl:eVuAViaB/6sl
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-handle-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-handle-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-handle-l1-1-0.dll.0.dr
|
| ID: |
dr_483
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.998147659672995
|
| Encrypted: |
false
|
| Ssdeep: |
192:yW1hWBJ9M7tOZk7Cjdks/nGfe4pBjSYj+a2W5RKTt3E2sVWQ4GWJ9xqZsqnajkZ9:yW1hW+5OZkum0GftpBjt7m3SlGlmToC
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-heap-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-heap-l1-1-0.dll.0.dr
|
| ID: |
dr_484
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.963329589517269
|
| Encrypted: |
false
|
| Ssdeep: |
192:fZlgW1hWiR+49Cjdks/nGfe4pBjSYBPq+W5RKTt3E2sVWQ4GWDG2Oqnajd2si3TT:hlgW1hWP4wm0GftpBjVsm3STlM/
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-interlocked-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-interlocked-l1-1-0.dll.0.dr
|
| ID: |
dr_485
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.00560797197583
|
| Encrypted: |
false
|
| Ssdeep: |
192:CW1hWiRnedXACjdks/nGfe4pBjSYC6rSW5RKTt3E2sVWQ4GW+60yqnaj/6g6dqpl:CW1hW3XRm0GftpBjl7m3SOLltFpU2
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-libraryloader-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-libraryloader-l1-1-0.dll.0.dr
|
| ID: |
dr_486
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.969703170679177
|
| Encrypted: |
false
|
| Ssdeep: |
384:KvuBL3BYW1hWp5OZkum0GftpBjPJm3SyAlJrqsK:FBL3BTioViH+ElK
|
| Size: |
19720
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-localization-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-localization-l1-2-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-localization-l1-2-0.dll.0.dr
|
| ID: |
dr_487
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.999439379402039
|
| Encrypted: |
false
|
| Ssdeep: |
384:XOMw3zdp3bwjGjue9/0jCRrndb6kW1hW85OZkum0GftpBjcqEm3Shupl4aRGWa:XOMwBprwjGjue9/0jCRrndb0noVialbj
|
| Size: |
21256
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-memory-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-memory-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-memory-l1-1-0.dll.0.dr
|
| ID: |
dr_488
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.988263632360211
|
| Encrypted: |
false
|
| Ssdeep: |
192:E8W1hWiEUcvHCjdks/nGfe4pBjSYY3iW5RKTt3E2sVWQ4GWRRhbOqnajd2si3Hv:E8W1hWXUQim0GftpBjMnm3So3ylMHv
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-namedpipe-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-namedpipe-l1-1-0.dll.0.dr
|
| ID: |
dr_519
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.058960418674579
|
| Encrypted: |
false
|
| Ssdeep: |
384:eW1hWU5OZkum0GftpBjxKvm3SQTlUK3dsDT:1noVimvf6sDT
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-processenvironment-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-processenvironment-l1-1-0.dll.0.dr
|
| ID: |
dr_520
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.974766888869884
|
| Encrypted: |
false
|
| Ssdeep: |
192:XnW1hWioe8Cjdks/nGfe4pBjSY6ydpW5RKTt3E2sVWQ4GWwvcUV2HPqnajkSXt7m:XnW1hWE1m0GftpBjZ4m3SZ7MvlJrU
|
| Size: |
19720
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-processthreads-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-processthreads-l1-1-0.dll.0.dr
|
| ID: |
dr_521
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.990402551132059
|
| Encrypted: |
false
|
| Ssdeep: |
384:gWXk1JzNcKSIXW1hWEXRm0GftpBj1U6m3SddlmTod4V:gbcKSbxViZx8
|
| Size: |
20744
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-processthreads-l1-1-1.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-processthreads-l1-1-1.dll.0.dr
|
| ID: |
dr_522
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.005927948691754
|
| Encrypted: |
false
|
| Ssdeep: |
384:dtUDfIeFrW1hWC5OZkum0GftpBjVzm3Sx56lgCoha6LDF:dteFuJoVijz1HB
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-profile-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-profile-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-profile-l1-1-0.dll.0.dr
|
| ID: |
dr_523
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.078838863546672
|
| Encrypted: |
false
|
| Ssdeep: |
192:D4VW1hWc2TVCEmCjdks/nGfe4pBjSfMesvMW5RKTt3E2sVWQ4iWJBJ9qnajuZDAu:DyW1hWTvm0GftpBjosv5m3SKlUK3dsl
|
| Size: |
18184
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-rtlsupport-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-rtlsupport-l1-1-0.dll.0.dr
|
| ID: |
dr_524
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.970973012980799
|
| Encrypted: |
false
|
| Ssdeep: |
192:OGeVWW1hWixluZCCjdks/nGfe4pBjSYW5lW5RKTt3E2sVWQ4GWavOqnajd2si3n:OGeVWW1hWbFm0GftpBj/m3S6lMn
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-string-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-string-l1-1-0.dll.0.dr
|
| ID: |
dr_525
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.023539681578989
|
| Encrypted: |
false
|
| Ssdeep: |
384:eyMvxW1hWa3szm0GftpBjD0m3SojlD16huQf+:eyMvgZ8zViZ0sEG
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-synch-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-synch-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-synch-l1-1-0.dll.0.dr
|
| ID: |
dr_526
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.945077946165594
|
| Encrypted: |
false
|
| Ssdeep: |
384:vdv3V0dfpkXc0vVaRW1hWW5OZkum0GftpBjwRm3SklD16hpv:vdv3VqpkXc0vVaA9oVi67v
|
| Size: |
20744
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-synch-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-synch-l1-2-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-synch-l1-2-0.dll.0.dr
|
| ID: |
dr_527
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.035970190329706
|
| Encrypted: |
false
|
| Ssdeep: |
192:ntZ3mW1hWig+49Cjdks/nGfe4pBjSYS6XXL6bW5RKTt3E2sVWQ4GWUFsqnajkZtu:ntZ3mW1hWA4wm0GftpBjbLZm3SElmTop
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-sysinfo-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-sysinfo-l1-1-0.dll.0.dr
|
| ID: |
dr_528
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.966818956285711
|
| Encrypted: |
false
|
| Ssdeep: |
192:6dKIMF8XW1hWixu7jCjdks/nGfe4pBjSYmL8lW5RKTt3E2sVWQ4GWfO+psqnajkt:iZXW1hWxam0GftpBjxEm3SK2lmTo6N
|
| Size: |
19720
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-timezone-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-timezone-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-timezone-l1-1-0.dll.0.dr
|
| ID: |
dr_549
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.033308637681508
|
| Encrypted: |
false
|
| Ssdeep: |
192:bW1hWipu7jCjdks/nGfe4pBjSYpGQjW5RKTt3E2sVWQ4GWqsegPBOqnajd2si3Ed:bW1hWJam0GftpBjEm3SPZlMELmA
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-util-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-core-util-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-core-util-l1-1-0.dll.0.dr
|
| ID: |
dr_550
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.988420393814923
|
| Encrypted: |
false
|
| Ssdeep: |
192:k5GW1hWiHu7jCjdks/nGfe4pBjSY4QUzzeW5RKTt3E2sVWQ4GWpmBPqnajkSXt7l:k5GW1hWDam0GftpBjqzzTm3ST9lJr/
|
| Size: |
18696
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-conio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-conio-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-conio-l1-1-0.dll.0.dr
|
| ID: |
dr_551
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.99002101391893
|
| Encrypted: |
false
|
| Ssdeep: |
384:J1W1hWA5OZkum0GftpBjNuCm3Sbsl4aRGWDk:JM7oViKCPpt
|
| Size: |
19720
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-convert-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-convert-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-convert-l1-1-0.dll.0.dr
|
| ID: |
dr_552
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.834980539632574
|
| Encrypted: |
false
|
| Ssdeep: |
192:VpdkKBcyhW1hWBeI2WksSrCjdks/nGfe4pBjSYs//rvvW5RKTt3E2sVWQ4GWdziZ:/uyhW1hWk3szm0GftpBjsum3SiclPXOA
|
| Size: |
22792
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-environment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-environment-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-environment-l1-1-0.dll.0.dr
|
| ID: |
dr_553
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.968498181647119
|
| Encrypted: |
false
|
| Ssdeep: |
192:sfW1hWiQcvHCjdks/nGfe4pBjSY6Na3sAW5RKTt3E2sVWQ4GWIjcyqnaj/6g6dqd:sfW1hWPQim0GftpBjzim3StltFpn
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-filesystem-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-filesystem-l1-1-0.dll.0.dr
|
| ID: |
dr_554
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.988912266221658
|
| Encrypted: |
false
|
| Ssdeep: |
384:Mq6nWm5CZW1hW6am0GftpBjToIm3S7ltFps:R6nWm5CIcViCIk
|
| Size: |
20744
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-heap-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-heap-l1-1-0.dll.0.dr
|
| ID: |
dr_555
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.948901824610626
|
| Encrypted: |
false
|
| Ssdeep: |
384:0Y3eBW1hWeXRm0GftpBjI6xIm3S006lD16hU:EQzVi66xI+
|
| Size: |
19720
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-locale-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-locale-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-locale-l1-1-0.dll.0.dr
|
| ID: |
dr_556
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.029158368882181
|
| Encrypted: |
false
|
| Ssdeep: |
192:eW1hWmL+49Cjdks/nGfe4pBjSbRIdnV7IGW5RKTt3E2sVWQ4OWVZsqnajkZtTT2N:eW1hWJ4wm0GftpBjpnVMLm3SDlmToDr
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-math-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-math-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-math-l1-1-0.dll.0.dr
|
| ID: |
dr_557
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.630573984882858
|
| Encrypted: |
false
|
| Ssdeep: |
384:SQUbM4Oe59Ckb1hgmLNW1hWzXRm0GftpBjDm3SBulJr6:SRMq59Bb1jEAViFla2
|
| Size: |
27912
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-multibyte-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-multibyte-l1-1-0.dll.0.dr
|
| ID: |
dr_558
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.6336781806240035
|
| Encrypted: |
false
|
| Ssdeep: |
384:my+Kr6aLPmIHJI6/CpG3t2G3t4odXLNW1hWOQim0GftpBjk8Cm3SqlM7:mZKrZPmIHJI6aDfVim8Cr
|
| Size: |
26888
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-process-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-process-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-process-l1-1-0.dll.0.dr
|
| ID: |
dr_579
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.972767516542363
|
| Encrypted: |
false
|
| Ssdeep: |
384:wKwW1hWe0sngm0GftpBjaxm3S+crlndaVrQOpt:RVngVik5W
|
| Size: |
19720
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-runtime-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-runtime-l1-1-0.dll.0.dr
|
| ID: |
dr_580
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.842580906884736
|
| Encrypted: |
false
|
| Ssdeep: |
384:VtYr7zW1hW+Qim0GftpBjOIzpm3Sel4aRGWN:Vmr7W3fVigqpHi
|
| Size: |
23304
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-stdio-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-stdio-l1-1-0.dll.0.dr
|
| ID: |
dr_581
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.792113276202437
|
| Encrypted: |
false
|
| Ssdeep: |
384:cZpFVhHW1hWdam0GftpBjFufm3SOFl4aRGWs:goNViuz/
|
| Size: |
24840
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-string-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-string-l1-1-0.dll.0.dr
|
| ID: |
dr_582
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.781450882014829
|
| Encrypted: |
false
|
| Ssdeep: |
768:L6S5yguNvZ5VQgx3SbwA71IkFhIFViahxeX:Ll5yguNvZ5VQgx3SbwA71I6yVNfy
|
| Size: |
24840
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-time-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-time-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-time-l1-1-0.dll.0.dr
|
| ID: |
dr_583
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.916930865406901
|
| Encrypted: |
false
|
| Ssdeep: |
384:nUW1hW23szm0GftpBjHCm3SVZkl4aRGWe:3N8zVipCxZxz
|
| Size: |
21256
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-utility-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\api-ms-win-crt-utility-l1-1-0.dll
|
| Category: |
dropped
|
| Dump: |
api-ms-win-crt-utility-l1-1-0.dll.0.dr
|
| ID: |
dr_584
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
7.018564704523169
|
| Encrypted: |
false
|
| Ssdeep: |
384:RfVW1hWfFm0GftpBjaDRm3SY6vlgCohaQ:RfsQViklwHj
|
| Size: |
19208
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\base_library.zip
|
Zip archive data, at least v2.0 to extract, compression method=store
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\base_library.zip
|
| Category: |
dropped
|
| Dump: |
base_library.zip.0.dr
|
| ID: |
dr_585
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Zip archive data, at least v2.0 to extract, compression method=store
|
| Entropy: |
5.495177467987459
|
| Encrypted: |
false
|
| Ssdeep: |
24576:uhidIutosQNRs54PK4IM1Vw596fCEkXJR32HX:uhidIutosQNRs54PK4IT9XWX
|
| Size: |
795972
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\core\pe\_block.cp38-win_amd64.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\core\pe\_block.cp38-win_amd64.pyd
|
| Category: |
dropped
|
| Dump: |
_block.cp38-win_amd64.pyd.0.dr
|
| ID: |
dr_458
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.169395986773404
|
| Encrypted: |
false
|
| Ssdeep: |
192:OxdxynEd/l1lNZxmr021ufXJv+zM3qC57qjuEjXU/ZMBC8w:O7xIgNZB+K+zIt5WjuEzcMBC8
|
| Size: |
14336
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\core\pe\_cache.cp38-win_amd64.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\core\pe\_cache.cp38-win_amd64.pyd
|
| Category: |
dropped
|
| Dump: |
_cache.cp38-win_amd64.pyd.0.dr
|
| ID: |
dr_461
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
4.8415729495227895
|
| Encrypted: |
false
|
| Ssdeep: |
192:IdGm9ZajH+otjzmN0YbbI7kGfpsafXU/ZM:SGdpyU71fHvcM
|
| Size: |
11264
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\d3dcompiler_47.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\d3dcompiler_47.dll
|
| Category: |
dropped
|
| Dump: |
d3dcompiler_47.dll.0.dr
|
| ID: |
dr_586
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.329102290474506
|
| Encrypted: |
false
|
| Ssdeep: |
49152:8BfmqCtLI4erBYysLjG/A8McPyCD6hw16JVTW7B3EgvVlQ3LAYmyNOvGJse+aWyb:8eZevVKACOvWYQF
|
| Size: |
4173928
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\dupeguru-win64.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\dupeguru-win64.exe
|
| Category: |
dropped
|
| Dump: |
dupeguru-win64.exe.0.dr
|
| ID: |
dr_587
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Entropy: |
7.96998120270224
|
| Encrypted: |
false
|
| Ssdeep: |
49152:L6TJxTy0Q0jKhHXqYgSfPVHzlG90wrPHW+MY9gc5RUh4EM+hzi+sz3kRkbEN:LsBjKtqNuFzlIDHqQXKLMk83kG
|
| Size: |
3504164
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.buildinfo
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.buildinfo
|
| Category: |
dropped
|
| Dump: |
.buildinfo3.0.dr
|
| ID: |
dr_464
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.803097381136002
|
| Encrypted: |
false
|
| Ssdeep: |
6:S9bTy8x2sQIqeZygjh7e/bJUDBvTj+eCDHXrGZwv:YWS/q4ygV7e/bJUJjTCzrFv
|
| Size: |
234
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\changelog.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\changelog.doctree
|
| Category: |
dropped
|
| Dump: |
changelog.doctree4.0.dr
|
| ID: |
dr_513
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.698914278190345
|
| Encrypted: |
false
|
| Ssdeep: |
1536:xBFSXnVjJcqT8AHOHWd4Zx2SNm00ZXQEKdzf/SXO6/eJQ/GwBz6Az8:xXSXVjJcqT8AHO5xN4ozXSXO6/ZGwx/I
|
| Size: |
236955
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\environment.pickle
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\environment.pickle
|
| Category: |
dropped
|
| Dump: |
environment.pickle4.0.dr
|
| ID: |
dr_516
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.506389502099956
|
| Encrypted: |
false
|
| Ssdeep: |
3072:46WDZjceRRY/P/jeF+oILg7kwTyRvHiZ49Z:PWDZoSRYXEkSyRvHw49Z
|
| Size: |
176548
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\faq.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\faq.doctree
|
| Category: |
dropped
|
| Dump: |
faq.doctree4.0.dr
|
| ID: |
dr_518
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.582267209095052
|
| Encrypted: |
false
|
| Ssdeep: |
768:0oBgEDmT2xjyS8fP/cOrbz5Yc5jc0RgciyRb9glSDWaFP1U4Ca:N+/cOrbz/9g61U4l
|
| Size: |
46591
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\folders.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\folders.doctree
|
| Category: |
dropped
|
| Dump: |
folders.doctree4.0.dr
|
| ID: |
dr_530
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.440058102827892
|
| Encrypted: |
false
|
| Ssdeep: |
192:za8BDY7zY84EIApG9eQ4i48HHTR12SK2p2y2h3kGPtgk6X0L548:u8BDMlGJSSKhVh3kGPmkx68
|
| Size: |
11240
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree8.0.dr
|
| ID: |
dr_532
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.509446176770368
|
| Encrypted: |
false
|
| Ssdeep: |
96:Z5Tr4tHgfwqor9ra2EBtrYtBtrYKqhSHW7VXyQ0YKuDFOnn01DSyts28kNHNKX0m:nlfO5WPYtPYrwKVC6s01PtgkuX0LPF8
|
| Size: |
7113
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\preferences.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\preferences.doctree
|
| Category: |
dropped
|
| Dump: |
preferences.doctree4.0.dr
|
| ID: |
dr_534
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.48566203988194
|
| Encrypted: |
false
|
| Ssdeep: |
768:kPLCrMe9l5t05OSDGTo6ZLx1E/dflJVt2rPgCsNzaNTNGAvMA0yv4YPIx8:uLCrMe9l5t05OUGTo6hE/dflLt2rPgC3
|
| Size: |
41729
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\quick_start.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\quick_start.doctree
|
| Category: |
dropped
|
| Dump: |
quick_start.doctree4.0.dr
|
| ID: |
dr_536
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.481148072924292
|
| Encrypted: |
false
|
| Ssdeep: |
192:2KJdcdpiL7LKrMv7vavdaYKPtgkRX0LzF8:2KJ+WDIdaYKPmky98
|
| Size: |
6950
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\reprioritize.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\reprioritize.doctree
|
| Category: |
dropped
|
| Dump: |
reprioritize.doctree4.0.dr
|
| ID: |
dr_538
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.170270504025081
|
| Encrypted: |
false
|
| Ssdeep: |
96:0OQf9jAy193AwYRO5XOtsg0QTikaXNxscikWVxwLbDSyts28kvHNKX0La+F8:OrQqrxYwPtgkIX0LhF8
|
| Size: |
6327
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\results.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\.doctrees\results.doctree
|
| Category: |
dropped
|
| Dump: |
results.doctree5.0.dr
|
| ID: |
dr_540
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.464651678650665
|
| Encrypted: |
false
|
| Ssdeep: |
768:NL1oSe6vp0kHW2Y8Id9Ie5t8bj3laNdPNHZ6XeH616UbvrPJchr8Ee3PXm8:B1oSe6vaGj3HP4gXm8
|
| Size: |
45374
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\changelog.rst.txt
|
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\changelog.rst.txt
|
| Category: |
dropped
|
| Dump: |
changelog.rst.txt4.0.dr
|
| ID: |
dr_542
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
| Entropy: |
5.193350937099842
|
| Encrypted: |
false
|
| Ssdeep: |
384:RdJ99laEfgahpkDGlKgAV4YMY2NIyEAobsZUok9:Pr9HIWpkDJT2NIyicrk
|
| Size: |
39473
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\faq.rst.txt
|
Unicode text, UTF-8 text, with very long lines (1097), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\faq.rst.txt
|
| Category: |
dropped
|
| Dump: |
faq.rst.txt4.0.dr
|
| ID: |
dr_544
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (1097), with CRLF line terminators
|
| Entropy: |
4.750573803929551
|
| Encrypted: |
false
|
| Ssdeep: |
192:dx3QtPYNXgWPtmlBRL1WhYdk1/ROMkv/aYn3nJqa8oWsbaj3nBniBajJBpIP6eDw:jgtY7tmlBX41SVn8jQDt2
|
| Size: |
9360
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\folders.rst.txt
|
Unicode text, UTF-8 text, with very long lines (606), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\folders.rst.txt
|
| Category: |
dropped
|
| Dump: |
folders.rst.txt4.0.dr
|
| ID: |
dr_546
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (606), with CRLF line terminators
|
| Entropy: |
4.624176845269687
|
| Encrypted: |
false
|
| Ssdeep: |
48:Pe4n9rf/GIwwHk8WCXTtY89aY1yM1t/+8DqyZXUst90EMTq/A2Cwo53RpdWMsQf6:mwznY89CMHHDrpptBAf3R5Av
|
| Size: |
2050
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\index.rst.txt
|
Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt8.0.dr
|
| ID: |
dr_548
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.816297422076337
|
| Encrypted: |
false
|
| Ssdeep: |
24:jr3tGUUmQ+rP4cYsHFRH4aUq71trP9pYa6pEwrg8QOTcLexOGyurw:jr9GU3Q+rA/sLH4aUq71trYpEqg8QD8u
|
| Size: |
1340
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\preferences.rst.txt
|
Unicode text, UTF-8 text, with very long lines (699), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\preferences.rst.txt
|
| Category: |
dropped
|
| Dump: |
preferences.rst.txt4.0.dr
|
| ID: |
dr_560
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (699), with CRLF line terminators
|
| Entropy: |
4.81837628549846
|
| Encrypted: |
false
|
| Ssdeep: |
192:onhsJodl1n6hHvbo7Udqzrdl54kpNXLHDTHDowxMBuYIv1vZEO6j862:onIodl1n692UdGrdl5RpNXQwYKJeO6D2
|
| Size: |
9603
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\quick_start.rst.txt
|
Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\quick_start.rst.txt
|
| Category: |
dropped
|
| Dump: |
quick_start.rst.txt4.0.dr
|
| ID: |
dr_562
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.674368496326099
|
| Encrypted: |
false
|
| Ssdeep: |
24:bLfO9Ql4+Z7nolWywRwLMseRegKu2xzgAVsL5FJbl+QZQHzu5fv:bj5zZ7no0yhLM+gKu2WACLb54HaBv
|
| Size: |
1100
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\reprioritize.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\reprioritize.rst.txt
|
| Category: |
dropped
|
| Dump: |
reprioritize.rst.txt4.0.dr
|
| ID: |
dr_564
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.5156454684088025
|
| Encrypted: |
false
|
| Ssdeep: |
48:kQtW93AUowA68HOkkFKwbvirofAIDOqNxFZFf0:ZA93AtxOkm9rikgqNxh0
|
| Size: |
1785
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\results.rst.txt
|
Unicode text, UTF-8 text, with very long lines (939), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_sources\results.rst.txt
|
| Category: |
dropped
|
| Dump: |
results.rst.txt5.0.dr
|
| ID: |
dr_566
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (939), with CRLF line terminators
|
| Entropy: |
4.7549382699005545
|
| Encrypted: |
false
|
| Ssdeep: |
192:lOEV9byIR3Vn6DlVtNSDZP5QlomzR5pKqRHwTdwOja9Yj0oSVZ6/vbWgQBoZWC8:lB9bysFn4t252VBYwDzZ6XbWkZWt
|
| Size: |
11205
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\_sphinx_javascript_frameworks_compat.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\_sphinx_javascript_frameworks_compat.js
|
| Category: |
dropped
|
| Dump: |
_sphinx_javascript_frameworks_compat.js4.0.dr
|
| ID: |
dr_568
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.685656234416744
|
| Encrypted: |
false
|
| Ssdeep: |
96:y40QiGpiMYersMQLH95nPcnog6fLJ2ZSruogkz5nCyhvQXmiFX/gQlxPZCQ+:qQiGMMYersMQLH95nPcnQfLJ22z5nCyz
|
| Size: |
4418
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\alert_info_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\alert_info_32.png
|
| Category: |
dropped
|
| Dump: |
alert_info_32.png4.0.dr
|
| ID: |
dr_570
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.767283149616434
|
| Encrypted: |
false
|
| Ssdeep: |
24:h3U0gKkG05qOoL3MQJmMu4aK1fW/nB/26CJDlw0hhne:bgKkN5bo7M9ZK1fzDaghne
|
| Size: |
1128
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\alert_warning_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\alert_warning_32.png
|
| Category: |
dropped
|
| Dump: |
alert_warning_32.png4.0.dr
|
| ID: |
dr_572
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.698482624934657
|
| Encrypted: |
false
|
| Ssdeep: |
24:ALyD7nCPeAuBl5A/K/MiRFOyyf9YXXdTDcAKeB8m8:ayDbCe7l51VyCtHcz+8D
|
| Size: |
944
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\base-stemmer.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\base-stemmer.js
|
| Category: |
dropped
|
| Dump: |
base-stemmer.js1.0.dr
|
| ID: |
dr_574
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
3.9846912753599915
|
| Encrypted: |
false
|
| Ssdeep: |
192:Gdgqaz7OekdA4LsTLUDMbDb76ZpB/+6XdfyuClOth+6X/y6e/ClpFkWN:GTz10l/C3ae
|
| Size: |
8133
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\basic.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\basic.css
|
| Category: |
dropped
|
| Dump: |
basic.css4.0.dr
|
| ID: |
dr_576
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.800158358247716
|
| Encrypted: |
false
|
| Ssdeep: |
384:RskgMGN4H775IIb/wO0U9rHtZLpwMnaPkhNHMay4QW:p9lPnaPIf7
|
| Size: |
16130
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\bg-page.png
|
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\bg-page.png
|
| Category: |
dropped
|
| Dump: |
bg-page.png4.0.dr
|
| ID: |
dr_578
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.8652086129533165
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlRtFr/bhkxdkNB0NCLyg/ll/jp:6v/lhPnDhQkN2CWSdp
|
| Size: |
82
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\bullet_orange.png
|
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\bullet_orange.png
|
| Category: |
dropped
|
| Dump: |
bullet_orange.png4.0.dr
|
| ID: |
dr_589
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
| Entropy: |
6.137099555480085
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlHl1ihxBkaEb68SRqTmd3K5ZVUYzo5l43reTokFEtjp:6v/lhPlCxS68iqCdaHCk74Ktjp
|
| Size: |
165
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\doctools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\doctools.js
|
| Category: |
dropped
|
| Dump: |
doctools.js4.0.dr
|
| ID: |
dr_590
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.9734126050249445
|
| Encrypted: |
false
|
| Ssdeep: |
192:ZBHxYsMocPTJlo4Pn3W5VNMpAkgUSafhfO0oiFoi/5Z9j9oiu9H8PedSdD8tlS:ZBHncehctCiuixZRGiuVwenO
|
| Size: |
8171
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\documentation_options.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\documentation_options.js
|
| Category: |
dropped
|
| Dump: |
documentation_options.js4.0.dr
|
| ID: |
dr_591
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.2747198410993335
|
| Encrypted: |
false
|
| Ssdeep: |
12:17DRRZxvkfBjpI+Up/USqJ4VsN+8WDZsq:VRRfsfB11Up/dqJ4VaDW9x
|
| Size: |
434
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\file.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\file.png
|
| Category: |
dropped
|
| Dump: |
file.png4.0.dr
|
| ID: |
dr_592
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
6.982817860477681
|
| Encrypted: |
false
|
| Ssdeep: |
6:6v/lhP5bSiLBXpmOYy8sNrfqC3FfDD5dat7kcqF3pKiYofFtup:6v/7BbBZnfbF3et7kTp7c
|
| Size: |
286
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\german-stemmer.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\german-stemmer.js
|
| Category: |
dropped
|
| Dump: |
german-stemmer.js.0.dr
|
| ID: |
dr_593
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
3.0868310210589067
|
| Encrypted: |
false
|
| Ssdeep: |
192:EtCWtuV4d/ECSuGJ6zADGywc/EC0sBIvlfkxVlfktNlmlfkkslfk5dfALMJvYCL8:EthtmdaowonK
|
| Size: |
17647
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\haiku.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\haiku.css
|
| Category: |
dropped
|
| Dump: |
haiku.css4.0.dr
|
| ID: |
dr_594
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.8572745231860806
|
| Encrypted: |
false
|
| Ssdeep: |
96:r8NvTEiHk/+/Y7kv74f5vC5r/O4KuLgwtUoMHh+r/ceFoHNTkURjeFEo2M/NeFog:KvTg/lPFY4fjM/NJ8d+8jCenn
|
| Size: |
7088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\jquery-3.5.1.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\jquery-3.5.1.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.5.1.js3.0.dr
|
| ID: |
dr_595
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.0658003996173315
|
| Encrypted: |
false
|
| Ssdeep: |
6144:pJChNVls+TCtlFhTzeKR7cYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:xf7cYmD43APx+WI+Y7cFyMyDTPfCAeuH
|
| Size: |
287630
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\jquery-3.6.0.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\jquery-3.6.0.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.6.0.js4.0.dr
|
| ID: |
dr_596
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.066983843372853
|
| Encrypted: |
false
|
| Ssdeep: |
6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
|
| Size: |
288580
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\jquery.js
|
ASCII text, with very long lines (65447)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\jquery.js
|
| Category: |
dropped
|
| Dump: |
jquery.js4.0.dr
|
| ID: |
dr_597
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (65447)
|
| Entropy: |
5.289893677458563
|
| Encrypted: |
false
|
| Ssdeep: |
1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
|
| Size: |
89501
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\language_data.js
|
Unicode text, UTF-8 text, with very long lines (4665), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\language_data.js
|
| Category: |
dropped
|
| Dump: |
language_data.js4.0.dr
|
| ID: |
dr_598
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (4665), with CRLF line terminators
|
| Entropy: |
5.08503019882113
|
| Encrypted: |
false
|
| Ssdeep: |
192:sBNd+W9DkRXJlNPrLJ43/OPJAK3dCKrJW:sBfX9DkRXJLP3J4cOKtLNW
|
| Size: |
10782
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\minus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\minus.png
|
| Category: |
dropped
|
| Dump: |
minus.png4.0.dr
|
| ID: |
dr_609
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
5.021779901931872
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+ByMlE/UtB1p:6v/lhP8CMyfMq8dp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\plus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\plus.png
|
| Category: |
dropped
|
| Dump: |
plus.png4.0.dr
|
| ID: |
dr_610
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.968947818574501
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+w56xiH1p:6v/lhP8CMylPp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\pygments.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\pygments.css
|
| Category: |
dropped
|
| Dump: |
pygments.css4.0.dr
|
| ID: |
dr_611
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.017911484607375
|
| Encrypted: |
false
|
| Ssdeep: |
96:mkJQcV87VgV3VtVVsEVL/jkFs0KkVuwVI9z:mcu7aR/MEZ/aZEw4z
|
| Size: |
4919
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\searchtools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\searchtools.js
|
| Category: |
dropped
|
| Dump: |
searchtools.js4.0.dr
|
| ID: |
dr_612
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.834132235965012
|
| Encrypted: |
false
|
| Ssdeep: |
384:gwr8jktvZIZa8/7aR0l8TK4q+/qKrQJAySBMSZMjGL7Z:iTl8tsHS60j7Z
|
| Size: |
17088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\translations.js
|
HTML document, ASCII text, with very long lines (308)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\translations.js
|
| Category: |
dropped
|
| Dump: |
translations.js1.0.dr
|
| ID: |
dr_613
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with very long lines (308)
|
| Entropy: |
4.6892081424894245
|
| Encrypted: |
false
|
| Ssdeep: |
96:01AezqC5mCwkdqD/2NIL8qNZbDMwVfJumeWw5cFcU:01VL5mCwkUHQ2Dft4meWw5cB
|
| Size: |
3594
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\underscore-1.13.1.js
|
Unicode text, UTF-8 text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\underscore-1.13.1.js
|
| Category: |
dropped
|
| Dump: |
underscore-1.13.1.js4.0.dr
|
| ID: |
dr_614
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text
|
| Entropy: |
4.7888312487578935
|
| Encrypted: |
false
|
| Ssdeep: |
1536:uFgPYMzG1NxVbecjNTUtHAJ3l1rQPYBD9Vf5Cb:TPYMzGDbeUKpAJA+Cb
|
| Size: |
68420
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\underscore.js
|
ASCII text, with very long lines (18996)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\_static\underscore.js
|
| Category: |
dropped
|
| Dump: |
underscore.js4.0.dr
|
| ID: |
dr_615
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (18996)
|
| Entropy: |
5.203574242965945
|
| Encrypted: |
false
|
| Ssdeep: |
384:zeOIhxIEKCfc5uFWT4LRn8jgZOQV72xF7CaNQWB/O9a/RQ0eb:qOI/IE3c5EWT6RcemF7CaNQWm0/RFc
|
| Size: |
19530
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\changelog.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\changelog.html
|
| Category: |
dropped
|
| Dump: |
changelog.html3.0.dr
|
| ID: |
dr_467
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
| Entropy: |
5.1143213153928375
|
| Encrypted: |
false
|
| Ssdeep: |
768:etnyAtCJ5fAFFFpYiuVku16ZaDTMMRNBml:yXtCzaD6u
|
| Size: |
65999
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\faq.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1113), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\faq.html
|
| Category: |
dropped
|
| Dump: |
faq.html4.0.dr
|
| ID: |
dr_470
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1113), with CRLF line terminators
|
| Entropy: |
5.012774995421761
|
| Encrypted: |
false
|
| Ssdeep: |
192:4Cpfvkhf8s09H1P/1WhY0k1/RO0kMZnta:4ikhaH114CS9ata
|
| Size: |
7916
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\folders.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (637), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\folders.html
|
| Category: |
dropped
|
| Dump: |
folders.html4.0.dr
|
| ID: |
dr_473
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (637), with CRLF line terminators
|
| Entropy: |
5.006522901985073
|
| Encrypted: |
false
|
| Ssdeep: |
96:3EhpDDnCU2VjgyoLUi2MnhQ9ClifK2gutBAS0fPeba:3CpfyNMUi2MhQ4lK2Si
|
| Size: |
5064
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\genindex.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\genindex.html
|
| Category: |
dropped
|
| Dump: |
genindex.html4.0.dr
|
| ID: |
dr_476
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with CRLF line terminators
|
| Entropy: |
4.8344293559772336
|
| Encrypted: |
false
|
| Ssdeep: |
24:OosLRWacy+p5ogVMSVMEVMpGVMXVMIWAVMQEE4LqEa+WCgnLirtpXg7R04Ccirtu:LC/cyK2dnb+IWTQj42Eag2cA7R0xfW4k
|
| Size: |
1878
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\index.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\index.html
|
| Category: |
dropped
|
| Dump: |
index.html8.0.dr
|
| ID: |
dr_478
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators
|
| Entropy: |
4.936036217340582
|
| Encrypted: |
false
|
| Ssdeep: |
48:LmK/cyK2dnb+IWTnDjLr6jseENcg21XEqfiGn7IIYYsL8snRYzGwbYj0OYmEBoYI:ZEhpDDnOYe/jBwGnPXQEZZCKg
|
| Size: |
4716
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\objects.inv
|
data
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\objects.inv
|
| Category: |
dropped
|
| Dump: |
objects.inv4.0.dr
|
| ID: |
dr_492
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
data
|
| Entropy: |
7.069088870857255
|
| Encrypted: |
false
|
| Ssdeep: |
6:S988/CDSt2M/wT1nC2qJ+PmQsscdRyfckrP151b0OlfIA525mryMOwiPdYM5ocT:gvt2/oTIPcdYSRUrTFMp
|
| Size: |
397
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\preferences.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (892), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\preferences.html
|
| Category: |
dropped
|
| Dump: |
preferences.html4.0.dr
|
| ID: |
dr_495
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (892), with CRLF line terminators
|
| Entropy: |
5.036139913641201
|
| Encrypted: |
false
|
| Ssdeep: |
192:BCpf7sWKDTNeMD4HKKYxQ6YcU6cfV6jjsY:BWsWJfHKJQYO6fsY
|
| Size: |
6914
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\quick_start.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\quick_start.html
|
| Category: |
dropped
|
| Dump: |
quick_start.html4.0.dr
|
| ID: |
dr_498
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.064595731893013
|
| Encrypted: |
false
|
| Ssdeep: |
48:L5/cyK2dnb+IWTnDjLr922j42EWg2hep0zZqEflGLM+0uu2LCACLpz3BZ7HaHgeP:dEhpDDn42U2bjhe0dILlJu24z77H7eN
|
| Size: |
3830
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\reprioritize.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\reprioritize.html
|
| Category: |
dropped
|
| Dump: |
reprioritize.html4.0.dr
|
| ID: |
dr_501
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.9963428504576575
|
| Encrypted: |
false
|
| Ssdeep: |
96:kEhpDDnlU2JEjkSw9LAfTOoG1tikpAxthP:kCpfqJoPe7
|
| Size: |
4438
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\results.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (985), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\results.html
|
| Category: |
dropped
|
| Dump: |
results.html5.0.dr
|
| ID: |
dr_504
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (985), with CRLF line terminators
|
| Entropy: |
4.987341162328967
|
| Encrypted: |
false
|
| Ssdeep: |
384:fwBFv1QPWEfJ3lyoygHOyHCjl6q/W7DgWiEg:fwXdQOeJ3lyoyguTl6q/4DgZ
|
| Size: |
16234
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\search.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\search.html
|
| Category: |
dropped
|
| Dump: |
search.html4.0.dr
|
| ID: |
dr_507
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with CRLF line terminators
|
| Entropy: |
4.80006646192814
|
| Encrypted: |
false
|
| Ssdeep: |
48:Lz/cyK9dnb+IWTimnDiHj42EPg2caGKoT+qOFKdrbrN6fW4k:nEh2/DmU2wjcNT+qOFaN84
|
| Size: |
2629
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\de\searchindex.js
|
ASCII text, with very long lines (24879), with no line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\de\searchindex.js
|
| Category: |
dropped
|
| Dump: |
searchindex.js4.0.dr
|
| ID: |
dr_510
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (24879), with no line terminators
|
| Entropy: |
4.517278743719602
|
| Encrypted: |
false
|
| Ssdeep: |
384:tNGCWiICjNpxsKbJXjAqXBx9o63EFuw90GAZW92OyNHW0oJ8wozrv:PNbNN79Di0GAZLOyNnf
|
| Size: |
24879
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.buildinfo
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.buildinfo
|
| Category: |
dropped
|
| Dump: |
.buildinfo4.0.dr
|
| ID: |
dr_616
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.785800269974249
|
| Encrypted: |
false
|
| Ssdeep: |
6:S9bTy8x2sQIqeZygjh7e/bJUDBvA3l5mDo4HXrGZwv:YWS/q4ygV7e/bJU0QoMrFv
|
| Size: |
234
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\changelog.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\changelog.doctree
|
| Category: |
dropped
|
| Dump: |
changelog.doctree0.0.dr
|
| ID: |
dr_217
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.698925912866819
|
| Encrypted: |
false
|
| Ssdeep: |
1536:SBFSXnVjJcqT8AHOHWX4Zx2SNzM0ZXQRVdzS/SNO6SY+j1wt2/6Az8:SXSXVjJcqT8AHOTxN9szaSNO6SVwtu/I
|
| Size: |
236955
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\contribute.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\contribute.doctree
|
| Category: |
dropped
|
| Dump: |
contribute.doctree.0.dr
|
| ID: |
dr_221
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.407305401651037
|
| Encrypted: |
false
|
| Ssdeep: |
384:1sUqqiDEZk3uQzSczkqqI1Uxk6Lcxzp8DdrUVlUfPmkh+G8:uUqqiDe/UkqTaxk6Lwt8DdrUfUfPZ+G8
|
| Size: |
22770
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\app.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\app.doctree
|
| Category: |
dropped
|
| Dump: |
app.doctree.0.dr
|
| ID: |
dr_270
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.637227564251311
|
| Encrypted: |
false
|
| Ssdeep: |
768:maVjrYcvcimLmz+fneLIkSpaLNf1Cz63NP7vm8:tAcvcimrhkSp2Gz63B7vm8
|
| Size: |
79338
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\directories.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\directories.doctree
|
| Category: |
dropped
|
| Dump: |
directories.doctree.0.dr
|
| ID: |
dr_275
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.570037574296777
|
| Encrypted: |
false
|
| Ssdeep: |
384:N6gjl8GcN2J+aeJi4/iIzikVnZcI/ROtXJMPmkkhN38:N6gjlTFeUDt5MPchp8
|
| Size: |
38206
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\user.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\user.doctree
|
| Category: |
dropped
|
| Dump: |
user.doctree.0.dr
|
| ID: |
dr_280
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.602836408640799
|
| Encrypted: |
false
|
| Ssdeep: |
1536:wXV8b3KcEzBoDS4wWYlSHBextT+63DXte+MW:wXV8b3KcEzRlSHBextTXx
|
| Size: |
65170
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\fs.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\fs.doctree
|
| Category: |
dropped
|
| Dump: |
fs.doctree.0.dr
|
| ID: |
dr_284
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.582498329687638
|
| Encrypted: |
false
|
| Ssdeep: |
384:JSzHj7rIj2YtmE05bkdNrzTePrqe5PmkO/8:UzHj7/qNriPm/8
|
| Size: |
30577
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\gui\deletion_options.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\gui\deletion_options.doctree
|
| Category: |
dropped
|
| Dump: |
deletion_options.doctree.0.dr
|
| ID: |
dr_300
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.606351521175828
|
| Encrypted: |
false
|
| Ssdeep: |
384:64rUgQjZWD1T8/rdm26kQP4voInqPOyDZQj1ytdMYQL4nWoV3H9gZHTJRVthmPmU:NGjZK8vqVQj1ytdMYQBoe8P9iAE8
|
| Size: |
28681
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\gui\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\gui\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree5.0.dr
|
| ID: |
dr_305
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.496363772857746
|
| Encrypted: |
false
|
| Ssdeep: |
192:eIofhBdfrSYCfDK6zr9tYThMJYPtgkEX0Ly+TF8:eIofhBdfrSl7YThGYPmk/XZ8
|
| Size: |
6930
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree4.0.dr
|
| ID: |
dr_287
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.231127037996087
|
| Encrypted: |
false
|
| Ssdeep: |
48:G9y9JsDhgPk5LCr+DSyts28kgZ7TNPCQmx0oKaNxYLrB8:M2sDaPk5LbDSyts28kKNKX0LaqF8
|
| Size: |
2880
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\results.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\core\results.doctree
|
| Category: |
dropped
|
| Dump: |
results.doctree4.0.dr
|
| ID: |
dr_295
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.585256453710808
|
| Encrypted: |
false
|
| Ssdeep: |
768:aj48FbLhahhsbVnV2z9KiW4wyn4Ab+REIwbcPqU4dE+QcptMePGx/38:a/NbfSnn46bIwAPUZGp38
|
| Size: |
40032
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\build.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\build.doctree
|
| Category: |
dropped
|
| Dump: |
build.doctree.0.dr
|
| ID: |
dr_310
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.539004515867087
|
| Encrypted: |
false
|
| Ssdeep: |
768:PxAZ80iQTm25XVmttbX7A9HetLhyRk9VUv4tZSlPSI8:G5SI8
|
| Size: |
33058
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\conflict.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\conflict.doctree
|
| Category: |
dropped
|
| Dump: |
conflict.doctree.0.dr
|
| ID: |
dr_315
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.538635071186558
|
| Encrypted: |
false
|
| Ssdeep: |
384:VfMjla96jRVbMezD1xdvGCEYeDIQbR3GWQBPmk6p8:VY5jRRzCfpQBPCp8
|
| Size: |
20086
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\desktop.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\desktop.doctree
|
| Category: |
dropped
|
| Dump: |
desktop.doctree.0.dr
|
| ID: |
dr_320
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.566983413807968
|
| Encrypted: |
false
|
| Ssdeep: |
384:djB8v4Df6sKk47fZfJSz3WHsnnN1WPmk3a8:djB8NsD47f5zHk1WPfa8
|
| Size: |
16966
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\base.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\base.doctree
|
| Category: |
dropped
|
| Dump: |
base.doctree.0.dr
|
| ID: |
dr_352
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.63956256516711
|
| Encrypted: |
false
|
| Ssdeep: |
384:9O01US36hbrFK7Hs9wvUQ/Dt5TmimkAt8:9z1UiZ55Tmiot8
|
| Size: |
20675
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\column.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\column.doctree
|
| Category: |
dropped
|
| Dump: |
column.doctree.0.dr
|
| ID: |
dr_356
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.630983882293117
|
| Encrypted: |
false
|
| Ssdeep: |
1536:pFzPoxzL7zwnAtFzvrzmCZdz9NYozvsz88iSMzykWlX8:5AtcCPYJRM
|
| Size: |
113276
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\progress_window.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\progress_window.doctree
|
| Category: |
dropped
|
| Dump: |
progress_window.doctree.0.dr
|
| ID: |
dr_360
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.660948174780822
|
| Encrypted: |
false
|
| Ssdeep: |
768:ZL+207gbzmcFReVa/eSJ0kPkkyD+/x9sh1Id2A6l6fN60gqvPX7+lY8/01vb+Di4:ZWsbcs1vyDi+OLj8
|
| Size: |
50349
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\selectable_list.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\selectable_list.doctree
|
| Category: |
dropped
|
| Dump: |
selectable_list.doctree.0.dr
|
| ID: |
dr_364
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.654095981159285
|
| Encrypted: |
false
|
| Ssdeep: |
384:/90IdU0TsIHhirxRShPTYPNIzOy3+aR2T5wXy/BstJYNwOpgS5hp0gFpG/MCSBLf:/9xdU0/cazN+xT5wGpG0CkPiaWp8
|
| Size: |
52620
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\table.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\table.doctree
|
| Category: |
dropped
|
| Dump: |
table.doctree.0.dr
|
| ID: |
dr_368
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.683870884586752
|
| Encrypted: |
false
|
| Ssdeep: |
1536:rJAzUBdck2ADmZDZXMSYeR9S6CxrGbWxiK07bX8:rJAzlJAiDZXMSbS6CxrGbWxi3M
|
| Size: |
138721
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\text_field.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\text_field.doctree
|
| Category: |
dropped
|
| Dump: |
text_field.doctree.0.dr
|
| ID: |
dr_372
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.688547950062843
|
| Encrypted: |
false
|
| Ssdeep: |
384:eszu4Mai4I/RRs9IIrRuNnxh3CFkKsYVHGY5zimkhd8:eszu4etpcGiiZd8
|
| Size: |
35015
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\tree.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\gui\tree.doctree
|
| Category: |
dropped
|
| Dump: |
tree.doctree.0.dr
|
| ID: |
dr_376
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.645242278635217
|
| Encrypted: |
false
|
| Ssdeep: |
768:xZlMmf7oG0efL2yyWYM1FxAiTVxjJirF98:d7oG0e31UiRxYrT8
|
| Size: |
57149
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree6.0.dr
|
| ID: |
dr_325
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.239000060849049
|
| Encrypted: |
false
|
| Ssdeep: |
48:L9dU9tTB6g/Ir58OAIw6Kx5LCX+DSyts28kgf7TNPCQmx0oKaNxJ2zLrB8:J2TIg/2AJjx5LHDSyts28kQNKX0LaOF8
|
| Size: |
3290
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\jobprogress\job.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\jobprogress\job.doctree
|
| Category: |
dropped
|
| Dump: |
job.doctree.0.dr
|
| ID: |
dr_380
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.575404862524994
|
| Encrypted: |
false
|
| Ssdeep: |
768:MGepL3Wk/dWN66N16VqnwAsI5CINBGmF0l59N3oGozJTwSmie3J8:79k/dWkI5tegre3J8
|
| Size: |
42710
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\jobprogress\performer.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\jobprogress\performer.doctree
|
| Category: |
dropped
|
| Dump: |
performer.doctree.0.dr
|
| ID: |
dr_384
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.529437894938785
|
| Encrypted: |
false
|
| Ssdeep: |
192:qaTPfG9q90W9fiU4/z4jN3DUUhpNoNsa2FbqPV9n8itgkAX0L2F8:qaz02zUUhj298imkD+8
|
| Size: |
9663
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\notify.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\notify.doctree
|
| Category: |
dropped
|
| Dump: |
notify.doctree.0.dr
|
| ID: |
dr_330
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.576226983535082
|
| Encrypted: |
false
|
| Ssdeep: |
192:3whmhkj3BGq91VN7/FW8P8m6Q95Ur0zVhjdU7rZEElNVOVW9xtFyOWP3KWePKWx4:3wo2j3BJN7I66Q9QZvU6ihPmkBS8
|
| Size: |
20876
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\path.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\path.doctree
|
| Category: |
dropped
|
| Dump: |
path.doctree.0.dr
|
| ID: |
dr_334
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.552496429979741
|
| Encrypted: |
false
|
| Ssdeep: |
96:CgwlbNJLswjjjr4g+j+wo2E/PD1ZEi7ej75FqUk4m2jESo8EnrXEpxDSyts28kHg:P6NNjjjrD2Ex17eXlkYJPtgkAX0LRF8
|
| Size: |
7927
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\util.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\hscommon\util.doctree
|
| Category: |
dropped
|
| Dump: |
util.doctree.0.dr
|
| ID: |
dr_337
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.556308769652414
|
| Encrypted: |
false
|
| Ssdeep: |
1536:ZEjSWvz4ZPA8v/EwpetlnxOmxLvUn8fptX1Fw1XgY74mN8:ZaXw1XgFmi
|
| Size: |
94617
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\developer\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree2.0.dr
|
| ID: |
dr_265
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.61010741862142
|
| Encrypted: |
false
|
| Ssdeep: |
384:BAcoJDBGCf5wCDBYkuraaYLHpynMfYmPuSK1eoaPmk9xPF:BAco15f5rvYmPuSK1iPlxPF
|
| Size: |
22229
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\environment.pickle
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\environment.pickle
|
| Category: |
dropped
|
| Dump: |
environment.pickle0.0.dr
|
| ID: |
dr_225
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.573256201022204
|
| Encrypted: |
false
|
| Ssdeep: |
3072:e6WDZjceR/KmD/pHV/NkOKWjoIq/WnP1nRBs0h8balkLCHBj:9WDZoS/KMNlNaLiBj
|
| Size: |
184136
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\faq.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\faq.doctree
|
| Category: |
dropped
|
| Dump: |
faq.doctree0.0.dr
|
| ID: |
dr_229
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.5535710814543755
|
| Encrypted: |
false
|
| Ssdeep: |
768:SEV/+F2ipeNpAgpH0euuZqnKrRZmCv8ebeWYC/rIvnP73Im8:SE9e2nNpDHxeWYC/rIX7Ym8
|
| Size: |
48025
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\folders.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\folders.doctree
|
| Category: |
dropped
|
| Dump: |
folders.doctree1.0.dr
|
| ID: |
dr_233
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.458397879639687
|
| Encrypted: |
false
|
| Ssdeep: |
384:OuPjojQJnMET69esjlwpeKQPtPmk5BS08:OaUUJMn9esjZPBX8
|
| Size: |
16366
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree1.0.dr
|
| ID: |
dr_236
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.564754456484079
|
| Encrypted: |
false
|
| Ssdeep: |
96:QxQ7AndYdMi7cn7cFvGIS9DKuS/PByhPzaxVOCCniUTFw/WCFlFq6DmswDSyts2y:DRMiaEvlSUG0zORwTtqWYPtgkjX0LSF8
|
| Size: |
8797
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\preferences.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\preferences.doctree
|
| Category: |
dropped
|
| Dump: |
preferences.doctree2.0.dr
|
| ID: |
dr_238
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.545214434221074
|
| Encrypted: |
false
|
| Ssdeep: |
384:wMWY881ATsXs073JJL0Es8sfyUez97h4Vv7wMdzW8CYUENY28sY28Y2TNhNTNZzK:wMWY881BXF73LL09v78gUfPKN/
|
| Size: |
24931
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\quick_start.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\quick_start.doctree
|
| Category: |
dropped
|
| Dump: |
quick_start.doctree2.0.dr
|
| ID: |
dr_245
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.463483602574174
|
| Encrypted: |
false
|
| Ssdeep: |
192:SytoFoFvrAd/Dv/u/e/WQ3LQ38IPtgkdX0LzF8:SyYd7vGGH3E38IPmkW98
|
| Size: |
6522
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\reprioritize.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\reprioritize.doctree
|
| Category: |
dropped
|
| Dump: |
reprioritize.doctree2.0.dr
|
| ID: |
dr_250
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.170023509896213
|
| Encrypted: |
false
|
| Ssdeep: |
96:0O8f9jAaF9hA1QRO5XOtsg0MTikaXNxscikWCx1LbDSyts28kzNKX0La+F8:m+QqrVY0PtgkMX0LhF8
|
| Size: |
6327
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\results.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\results.doctree
|
| Category: |
dropped
|
| Dump: |
results.doctree2.0.dr
|
| ID: |
dr_255
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.431558534468918
|
| Encrypted: |
false
|
| Ssdeep: |
768:9OQJHlwJrAeXkIiyIjAk8J32oh9JfpWoPVoV:2JrCIiyIjj8Jp9JhWqVoV
|
| Size: |
53177
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\scan.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\.doctrees\scan.doctree
|
| Category: |
dropped
|
| Dump: |
scan.doctree.0.dr
|
| ID: |
dr_260
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.498758845701546
|
| Encrypted: |
false
|
| Ssdeep: |
768:DQlxOKssm2ay5Wi5NTRyazugEwrFEwuEw0EZHt8agKhE7dPetpL:Essjay5fvAgvM9HFgKqePL
|
| Size: |
39084
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\changelog.rst.txt
|
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\changelog.rst.txt
|
| Category: |
dropped
|
| Dump: |
changelog.rst.txt3.0.dr
|
| ID: |
dr_387
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
| Entropy: |
5.193350937099842
|
| Encrypted: |
false
|
| Ssdeep: |
384:RdJ99laEfgahpkDGlKgAV4YMY2NIyEAobsZUok9:Pr9HIWpkDJT2NIyicrk
|
| Size: |
39473
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\contribute.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\contribute.rst.txt
|
| Category: |
dropped
|
| Dump: |
contribute.rst.txt.0.dr
|
| ID: |
dr_402
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.700716663644699
|
| Encrypted: |
false
|
| Ssdeep: |
96:/5Mt+aFbrPtWKaSARyz7YVH6VNkFGMOYuDzRCl51HxSAn+KC:/53a9tWVSAU4VHzF7ugSA+7
|
| Size: |
5272
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\app.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\app.rst.txt
|
| Category: |
dropped
|
| Dump: |
app.rst.txt.0.dr
|
| ID: |
dr_450
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
3.9994488293074104
|
| Encrypted: |
false
|
| Ssdeep: |
3:xVsY16KTQgsFa1AGAvn:Ts9kxsFaQvn
|
| Size: |
63
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\directories.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\directories.rst.txt
|
| Category: |
dropped
|
| Dump: |
directories.rst.txt.0.dr
|
| ID: |
dr_453
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
3.920653950635333
|
| Encrypted: |
false
|
| Ssdeep: |
3:0WAGUWo9nKTQAAGUWo41AGAvn:0WjokbjRQvn
|
| Size: |
87
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\user.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\user.rst.txt
|
| Category: |
dropped
|
| Dump: |
user.rst.txt.0.dr
|
| ID: |
dr_456
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
4.605978629188718
|
| Encrypted: |
false
|
| Ssdeep: |
24:qbB9QsY2G7/fqrKonA6HBJeEbjDcPddCgFs83HFOOQhrSoraE9:qbHLY2GTyKiV/eEb8lMUHcQoGE9
|
| Size: |
1345
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\fs.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\fs.rst.txt
|
| Category: |
dropped
|
| Dump: |
fs.rst.txt.0.dr
|
| ID: |
dr_459
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
4.002643205799668
|
| Encrypted: |
false
|
| Ssdeep: |
3:2kKTQfFS1AGAvn:2kkCFSQvn
|
| Size: |
60
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\gui\deletion_options.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\gui\deletion_options.rst.txt
|
| Category: |
dropped
|
| Dump: |
deletion_options.rst.txt.0.dr
|
| ID: |
dr_468
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
4.069927780363591
|
| Encrypted: |
false
|
| Ssdeep: |
3:3ZK8DxL9YPKTQ8K8DxL41AGAvn:E8VL9YPkC8VL4Qvn
|
| Size: |
114
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\gui\index.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\gui\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt6.0.dr
|
| ID: |
dr_471
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
4.224778446603297
|
| Encrypted: |
false
|
| Ssdeep: |
3:3Zs/KTQ8p1AGAvnJNS4Eti//Cm1QDxLv:ekhQve4Eti//Cm1QVLv
|
| Size: |
125
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\index.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt5.0.dr
|
| ID: |
dr_462
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
3.9230301099854668
|
| Encrypted: |
false
|
| Ssdeep: |
3:TAbJNS4Eti//CMyNsDqtSWoIZwodFFOaU:TAy4Eti//CMyNsDqtXOodFFlU
|
| Size: |
126
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\results.rst.txt
|
core file (Xenix)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\core\results.rst.txt
|
| Category: |
dropped
|
| Dump: |
results.rst.txt4.0.dr
|
| ID: |
dr_465
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
core file (Xenix)
|
| Entropy: |
3.9236982388742585
|
| Encrypted: |
false
|
| Ssdeep: |
3:i8WoAYKTQAWodFFS1AGAvn:i8WoJkRWodFFSQvn
|
| Size: |
75
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\build.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\build.rst.txt
|
| Category: |
dropped
|
| Dump: |
build.rst.txt.0.dr
|
| ID: |
dr_474
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.080989239532101
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTI9Ie9BK+GMIe41AGAvn:7IGqBkzQvn
|
| Size: |
81
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\conflict.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\conflict.rst.txt
|
| Category: |
dropped
|
| Dump: |
conflict.rst.txt.0.dr
|
| ID: |
dr_477
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.06522272164256
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTIcMGoA1nK+GXMGodFY1AGAvn:7IcxpCxWaQvn
|
| Size: |
90
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\desktop.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\desktop.rst.txt
|
| Category: |
dropped
|
| Dump: |
desktop.rst.txt.0.dr
|
| ID: |
dr_490
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.0623734227360355
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTIeovFK+Gdov/Y1AGAvn:7IeyFgywQvn
|
| Size: |
87
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\base.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\base.rst.txt
|
| Category: |
dropped
|
| Dump: |
base.rst.txt.0.dr
|
| ID: |
dr_505
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.200325380597177
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTIBYY8K+GAoHuEKXBolMbjhuEKe/lUvP1AGAvdXS4AIxWAvn:7IuFgOECBoKpuEj6HQvkNuFvn
|
| Size: |
210
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\column.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\column.rst.txt
|
| Category: |
dropped
|
| Dump: |
column.rst.txt.0.dr
|
| ID: |
dr_508
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.071233414941639
|
| Encrypted: |
false
|
| Ssdeep: |
12:7dBqnECE14h+BEjlQvcuFvnEjdwQvcuFvnEjmQvnEjETh+iQvn:7d4ECX+mrumSummqh+d
|
| Size: |
488
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\progress_window.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\progress_window.rst.txt
|
| Category: |
dropped
|
| Dump: |
progress_window.rst.txt.0.dr
|
| ID: |
dr_511
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.236135624588584
|
| Encrypted: |
false
|
| Ssdeep: |
6:7I7XzHupXzZF8ECBoKQ080dDuEjyXZ8QvkNuFvyuEjyXZdJQvkNuFvi:7ozHu5zZGECpndqEjEZ8QvcuFvnEjEZX
|
| Size: |
378
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\selectable_list.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\selectable_list.rst.txt
|
| Category: |
dropped
|
| Dump: |
selectable_list.rst.txt.0.dr
|
| ID: |
dr_514
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.155361442165188
|
| Encrypted: |
false
|
| Ssdeep: |
12:71QMmECscERCERCERFbvEjGeKQvcuFvnEjGeERJQvcuFvnEjuERJQvcuFvnEjuEf:717RCsc4C4C42xuumx4zumy4zumy4N
|
| Size: |
571
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\table.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\table.rst.txt
|
| Category: |
dropped
|
| Dump: |
table.rst.txt.0.dr
|
| ID: |
dr_517
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.0217586066026865
|
| Encrypted: |
false
|
| Ssdeep: |
12:7j68YvEC59cEj8QvcuFvnEjwbQvcuFv3Ej0oQvcuFvnEj0DQvn:7ZC59HQum0RuWIgumI+
|
| Size: |
473
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\text_field.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\text_field.rst.txt
|
| Category: |
dropped
|
| Dump: |
text_field.rst.txt.0.dr
|
| ID: |
dr_529
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.2535548888087655
|
| Encrypted: |
false
|
| Ssdeep: |
6:7ISkNck0ECBoKVuEj24xQvkNuFv3Ej24KQvn:7nkNck0ECeEjdxQvcuFv3EjdKQvn
|
| Size: |
306
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\tree.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\gui\tree.rst.txt
|
| Category: |
dropped
|
| Dump: |
tree.rst.txt.0.dr
|
| ID: |
dr_531
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
3.9106081081896806
|
| Encrypted: |
false
|
| Ssdeep: |
6:7Ir5n5DuECBoK/Pv/F8uEj2XnQvkNuFvyuEjsaAov/FCQvkNuFvy:7CkECJHPEjwnQvcuFvnEjsLoHoQvcuFa
|
| Size: |
297
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\index.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt7.0.dr
|
| ID: |
dr_493
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.124659984572225
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTIK1YoJNS4Eti//qJv/6oMPuXodF51Vov/WgFekaF/yH/AWNK44:7Id4Eti//qJv/6o8uXWPyugFek+yH/z2
|
| Size: |
174
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\jobprogress\job.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\jobprogress\job.rst.txt
|
| Category: |
dropped
|
| Dump: |
job.rst.txt.0.dr
|
| ID: |
dr_533
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.053739417198164
|
| Encrypted: |
false
|
| Ssdeep: |
6:7IFKUzMHTKUzM9ECBoK6yUxfCuEjohwQvkNuFv3EjsGfwQvy:7upz6TpzIECDU53EjohwQvcuFv3Ejs4u
|
| Size: |
287
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\jobprogress\performer.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\jobprogress\performer.rst.txt
|
| Category: |
dropped
|
| Dump: |
performer.rst.txt.0.dr
|
| ID: |
dr_535
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.184693410154315
|
| Encrypted: |
false
|
| Ssdeep: |
6:7IFKUzMmTKUzMaECBoKDmEyDMEkuEj2NnmEyDMEKQvy:7upzXTpzXECtmdhEjymdCQvy
|
| Size: |
246
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\notify.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\notify.rst.txt
|
| Category: |
dropped
|
| Dump: |
notify.rst.txt.0.dr
|
| ID: |
dr_496
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.115548829347547
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTITRMhYK+GyRM/Fg1AGAvn:7IOug/FgQvn
|
| Size: |
84
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\path.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\path.rst.txt
|
| Category: |
dropped
|
| Dump: |
path.rst.txt.0.dr
|
| ID: |
dr_499
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.067253734805597
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTITlK+GeCY1AGAvn:7IJcYQvn
|
| Size: |
78
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\util.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\hscommon\util.rst.txt
|
| Category: |
dropped
|
| Dump: |
util.rst.txt.0.dr
|
| ID: |
dr_502
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.067253734805596
|
| Encrypted: |
false
|
| Ssdeep: |
3:vTIiJyYSeK+GxJyFF/g1AGAvn:7IjYBBXgQvn
|
| Size: |
78
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\index.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\developer\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt4.0.dr
|
| ID: |
dr_437
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.843588037927573
|
| Encrypted: |
false
|
| Ssdeep: |
96:QSh2Bi+k2ll4WUlOl1Vlve4esKcAlEldtWlr7y5akl+nbtsP:Qo2rfs7/btU
|
| Size: |
3361
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\faq.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\faq.rst.txt
|
| Category: |
dropped
|
| Dump: |
faq.rst.txt3.0.dr
|
| ID: |
dr_406
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.685539617788671
|
| Encrypted: |
false
|
| Ssdeep: |
192:VUD8W7VSk0mRtjyoYUysyoqyyyg7frZFwhoK2:VUD8qpyAysyjyyyg7frHz
|
| Size: |
9279
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\folders.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\folders.rst.txt
|
| Category: |
dropped
|
| Dump: |
folders.rst.txt3.0.dr
|
| ID: |
dr_410
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.587047571053503
|
| Encrypted: |
false
|
| Ssdeep: |
48:4VMHW9H/uWlGt/q8E5YwOZZindAQ3/jTCOjJtQUN9lW4gIg6MfI67Q8V94CF:4K8HxGt/q8HHydAI/nCOjJtQUN2ZfM81
|
| Size: |
2990
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\index.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt3.0.dr
|
| ID: |
dr_414
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.786466623638497
|
| Encrypted: |
false
|
| Ssdeep: |
24:jf5TeuBY1UTqxKceE5mfFveVGEZPLm7OGyurxB0Nlwn2:jfteuSADcdtYEZPOoKx4mn2
|
| Size: |
1241
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\preferences.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\preferences.rst.txt
|
| Category: |
dropped
|
| Dump: |
preferences.rst.txt3.0.dr
|
| ID: |
dr_418
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.729319394984798
|
| Encrypted: |
false
|
| Ssdeep: |
96:qABhaD9IrOCP16Wu57WIu33SzylSucYHL2qNuk2y:ZhaQ16f1WF1fL2qNuk2y
|
| Size: |
3945
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\quick_start.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\quick_start.rst.txt
|
| Category: |
dropped
|
| Dump: |
quick_start.rst.txt3.0.dr
|
| ID: |
dr_422
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.624844616844827
|
| Encrypted: |
false
|
| Ssdeep: |
24:sekKjgy9WunkBwKAvMJbj1i8/l+VJjgb1KVDTLauoql4FZ/n7iECWTmfl:sekKjgokMMDt/lUJjgbM1/aJql4jf7dq
|
| Size: |
952
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\reprioritize.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\reprioritize.rst.txt
|
| Category: |
dropped
|
| Dump: |
reprioritize.rst.txt3.0.dr
|
| ID: |
dr_426
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.5156454684088025
|
| Encrypted: |
false
|
| Ssdeep: |
48:kQtW93AU2qA68HOkkFKwbvirofAIDOqNxFZFf0:ZA93AjPOkm9rikgqNxh0
|
| Size: |
1785
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\results.rst.txt
|
ASCII text, with very long lines (438), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\results.rst.txt
|
| Category: |
dropped
|
| Dump: |
results.rst.txt3.0.dr
|
| ID: |
dr_430
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (438), with CRLF line terminators
|
| Entropy: |
4.6060106881769824
|
| Encrypted: |
false
|
| Ssdeep: |
192:oNoT/1VbIPobH3v2dKmibH7P4PFOPokNPlKykHVB+2KuQzpNth2d:uoTUojf2dFgL4PFOPok9lKjBeuQzpF2d
|
| Size: |
12101
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\scan.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_sources\scan.rst.txt
|
| Category: |
dropped
|
| Dump: |
scan.rst.txt.0.dr
|
| ID: |
dr_434
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.734194445208662
|
| Encrypted: |
false
|
| Ssdeep: |
192:ip+Ghx5feQnjxvRkKPGq/0U3vELBRypu3BLJONTlXUnXSSLqG:i+Ghx52AjxvKKrpELBRypsBLJQjSLqG
|
| Size: |
8963
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\_sphinx_javascript_frameworks_compat.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\_sphinx_javascript_frameworks_compat.js
|
| Category: |
dropped
|
| Dump: |
_sphinx_javascript_frameworks_compat.js3.0.dr
|
| ID: |
dr_537
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.685656234416744
|
| Encrypted: |
false
|
| Ssdeep: |
96:y40QiGpiMYersMQLH95nPcnog6fLJ2ZSruogkz5nCyhvQXmiFX/gQlxPZCQ+:qQiGMMYersMQLH95nPcnQfLJ22z5nCyz
|
| Size: |
4418
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\alert_info_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\alert_info_32.png
|
| Category: |
dropped
|
| Dump: |
alert_info_32.png3.0.dr
|
| ID: |
dr_539
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.767283149616434
|
| Encrypted: |
false
|
| Ssdeep: |
24:h3U0gKkG05qOoL3MQJmMu4aK1fW/nB/26CJDlw0hhne:bgKkN5bo7M9ZK1fzDaghne
|
| Size: |
1128
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\alert_warning_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\alert_warning_32.png
|
| Category: |
dropped
|
| Dump: |
alert_warning_32.png3.0.dr
|
| ID: |
dr_541
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.698482624934657
|
| Encrypted: |
false
|
| Ssdeep: |
24:ALyD7nCPeAuBl5A/K/MiRFOyyf9YXXdTDcAKeB8m8:ayDbCe7l51VyCtHcz+8D
|
| Size: |
944
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\basic.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\basic.css
|
| Category: |
dropped
|
| Dump: |
basic.css3.0.dr
|
| ID: |
dr_543
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.800158358247716
|
| Encrypted: |
false
|
| Ssdeep: |
384:RskgMGN4H775IIb/wO0U9rHtZLpwMnaPkhNHMay4QW:p9lPnaPIf7
|
| Size: |
16130
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\bg-page.png
|
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\bg-page.png
|
| Category: |
dropped
|
| Dump: |
bg-page.png3.0.dr
|
| ID: |
dr_545
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.8652086129533165
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlRtFr/bhkxdkNB0NCLyg/ll/jp:6v/lhPnDhQkN2CWSdp
|
| Size: |
82
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\bullet_orange.png
|
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\bullet_orange.png
|
| Category: |
dropped
|
| Dump: |
bullet_orange.png3.0.dr
|
| ID: |
dr_547
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
| Entropy: |
6.137099555480085
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlHl1ihxBkaEb68SRqTmd3K5ZVUYzo5l43reTokFEtjp:6v/lhPlCxS68iqCdaHCk74Ktjp
|
| Size: |
165
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\doctools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\doctools.js
|
| Category: |
dropped
|
| Dump: |
doctools.js3.0.dr
|
| ID: |
dr_559
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.9734126050249445
|
| Encrypted: |
false
|
| Ssdeep: |
192:ZBHxYsMocPTJlo4Pn3W5VNMpAkgUSafhfO0oiFoi/5Z9j9oiu9H8PedSdD8tlS:ZBHncehctCiuixZRGiuVwenO
|
| Size: |
8171
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\documentation_options.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\documentation_options.js
|
| Category: |
dropped
|
| Dump: |
documentation_options.js3.0.dr
|
| ID: |
dr_561
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.274050499957736
|
| Encrypted: |
false
|
| Ssdeep: |
12:17DRRZxvkf+OpI+Up/USqJ4VsN+8WDZsq:VRRfsf/1Up/dqJ4VaDW9x
|
| Size: |
434
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\file.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\file.png
|
| Category: |
dropped
|
| Dump: |
file.png3.0.dr
|
| ID: |
dr_563
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
6.982817860477681
|
| Encrypted: |
false
|
| Ssdeep: |
6:6v/lhP5bSiLBXpmOYy8sNrfqC3FfDD5dat7kcqF3pKiYofFtup:6v/7BbBZnfbF3et7kTp7c
|
| Size: |
286
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\haiku.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\haiku.css
|
| Category: |
dropped
|
| Dump: |
haiku.css3.0.dr
|
| ID: |
dr_565
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.8572745231860806
|
| Encrypted: |
false
|
| Ssdeep: |
96:r8NvTEiHk/+/Y7kv74f5vC5r/O4KuLgwtUoMHh+r/ceFoHNTkURjeFEo2M/NeFog:KvTg/lPFY4fjM/NJ8d+8jCenn
|
| Size: |
7088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\jquery-3.5.1.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\jquery-3.5.1.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.5.1.js2.0.dr
|
| ID: |
dr_567
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.0658003996173315
|
| Encrypted: |
false
|
| Ssdeep: |
6144:pJChNVls+TCtlFhTzeKR7cYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:xf7cYmD43APx+WI+Y7cFyMyDTPfCAeuH
|
| Size: |
287630
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\jquery-3.6.0.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\jquery-3.6.0.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.6.0.js3.0.dr
|
| ID: |
dr_569
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.066983843372853
|
| Encrypted: |
false
|
| Ssdeep: |
6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
|
| Size: |
288580
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\jquery.js
|
ASCII text, with very long lines (65447)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\jquery.js
|
| Category: |
dropped
|
| Dump: |
jquery.js3.0.dr
|
| ID: |
dr_571
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (65447)
|
| Entropy: |
5.289893677458563
|
| Encrypted: |
false
|
| Ssdeep: |
1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
|
| Size: |
89501
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\language_data.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\language_data.js
|
| Category: |
dropped
|
| Dump: |
language_data.js3.0.dr
|
| ID: |
dr_573
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.706345437342995
|
| Encrypted: |
false
|
| Ssdeep: |
96:g5PdAecUhvJiRJ/kJHNpOK9X809yQ7X8iu9aBD9OHu910Z9bQeo+1J9X9R+NfYg:sXcUhvIRZklNpOK9M09yQ7XJu9GD98ur
|
| Size: |
4957
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\minus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\minus.png
|
| Category: |
dropped
|
| Dump: |
minus.png3.0.dr
|
| ID: |
dr_575
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
5.021779901931872
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+ByMlE/UtB1p:6v/lhP8CMyfMq8dp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\plus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\plus.png
|
| Category: |
dropped
|
| Dump: |
plus.png3.0.dr
|
| ID: |
dr_577
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.968947818574501
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+w56xiH1p:6v/lhP8CMylPp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\pygments.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\pygments.css
|
| Category: |
dropped
|
| Dump: |
pygments.css0.0.dr
|
| ID: |
dr_103
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.017911484607375
|
| Encrypted: |
false
|
| Ssdeep: |
96:mkJQcV87VgV3VtVVsEVL/jkFs0KkVuwVI9z:mcu7aR/MEZ/aZEw4z
|
| Size: |
4919
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\searchtools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\searchtools.js
|
| Category: |
dropped
|
| Dump: |
searchtools.js0.0.dr
|
| ID: |
dr_106
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.834132235965012
|
| Encrypted: |
false
|
| Ssdeep: |
384:gwr8jktvZIZa8/7aR0l8TK4q+/qKrQJAySBMSZMjGL7Z:iTl8tsHS60j7Z
|
| Size: |
17088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\underscore-1.13.1.js
|
Unicode text, UTF-8 text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\underscore-1.13.1.js
|
| Category: |
dropped
|
| Dump: |
underscore-1.13.1.js0.0.dr
|
| ID: |
dr_109
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text
|
| Entropy: |
4.7888312487578935
|
| Encrypted: |
false
|
| Ssdeep: |
1536:uFgPYMzG1NxVbecjNTUtHAJ3l1rQPYBD9Vf5Cb:TPYMzGDbeUKpAJA+Cb
|
| Size: |
68420
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\underscore.js
|
ASCII text, with very long lines (18996)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\_static\underscore.js
|
| Category: |
dropped
|
| Dump: |
underscore.js0.0.dr
|
| ID: |
dr_112
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (18996)
|
| Entropy: |
5.203574242965945
|
| Encrypted: |
false
|
| Ssdeep: |
384:zeOIhxIEKCfc5uFWT4LRn8jgZOQV72xF7CaNQWB/O9a/RQ0eb:qOI/IE3c5EWT6RcemF7CaNQWm0/RFc
|
| Size: |
19530
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\changelog.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\changelog.html
|
| Category: |
dropped
|
| Dump: |
changelog.html4.0.dr
|
| ID: |
dr_617
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
| Entropy: |
5.1124356378934825
|
| Encrypted: |
false
|
| Ssdeep: |
768:GltwtAtCJLfAFYlp/iZskk1AOaDZM45NOJu:NetCJf+2U
|
| Size: |
65987
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\contribute.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\contribute.html
|
| Category: |
dropped
|
| Dump: |
contribute.html.0.dr
|
| ID: |
dr_618
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.922398785846368
|
| Encrypted: |
false
|
| Ssdeep: |
192:ec6CgedjHjZ3tlKv9L146vHKFw1R0yogz:lB91KL1Zn16y7
|
| Size: |
9050
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\app.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (670), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\app.html
|
| Category: |
dropped
|
| Dump: |
app.html.0.dr
|
| ID: |
dr_118
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (670), with CRLF line terminators
|
| Entropy: |
4.841385019739197
|
| Encrypted: |
false
|
| Ssdeep: |
768:SEDatwyYdtqyeLCHSqeHCo156oO9/2P3VwqP6wrO18udvSxTm5gxmv6yAM6VylVU:DatwyYdtqyeuHSqeHCo156oO9/2P3Vw2
|
| Size: |
30075
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\directories.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (614), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\directories.html
|
| Category: |
dropped
|
| Dump: |
directories.html.0.dr
|
| ID: |
dr_121
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (614), with CRLF line terminators
|
| Entropy: |
4.836448816042506
|
| Encrypted: |
false
|
| Ssdeep: |
384:CyeXYKFiNw7yFT7Hob61J6n7Is7MmAN1iAIOT7qQUTW:CyeX5FWw7yFT7Hob61J6n7Is7MmAN1ia
|
| Size: |
14779
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\user.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (948), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\user.html
|
| Category: |
dropped
|
| Dump: |
user.html.0.dr
|
| ID: |
dr_124
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (948), with CRLF line terminators
|
| Entropy: |
4.831565248307562
|
| Encrypted: |
false
|
| Ssdeep: |
768:tX/WofD4j/WIC8Wn0DbRcObrquyFWqza1K6xsofgykyyofgykkCKlEw+O62Suqex:hWofD4j/WIC8Wn0DbRcObrquyFWqza1J
|
| Size: |
25535
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\fs.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (703), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\fs.html
|
| Category: |
dropped
|
| Dump: |
fs.html.0.dr
|
| ID: |
dr_127
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (703), with CRLF line terminators
|
| Entropy: |
4.806649890643391
|
| Encrypted: |
false
|
| Ssdeep: |
384:VS6OBsLyFLMsLyFDesLyFNzsLyF4kqsLyF317d7Zp1CfL7O7qQGgryx:Y6OBsLyFLMsLyFDesLyFNzsLyFfqsLyi
|
| Size: |
12962
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\gui\deletion_options.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (582), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\gui\deletion_options.html
|
| Category: |
dropped
|
| Dump: |
deletion_options.html.0.dr
|
| ID: |
dr_136
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (582), with CRLF line terminators
|
| Entropy: |
4.89644328922236
|
| Encrypted: |
false
|
| Ssdeep: |
192:PWbdup//75cZqeR/p0CLz/GlKeeG/qs2a8bZSX8s+:PIuF76ZqeR/p0CGM292a8bZSX8s+
|
| Size: |
12149
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\gui\index.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\gui\index.html
|
| Category: |
dropped
|
| Dump: |
index.html1.0.dr
|
| ID: |
dr_139
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.987779897730247
|
| Encrypted: |
false
|
| Ssdeep: |
96:eXm+Dza0ruIj+Ys1XgzO7utm0nOadBTzM3:eWbyls1XgzK70dhY
|
| Size: |
4183
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\index.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\index.html
|
| Category: |
dropped
|
| Dump: |
index.html0.0.dr
|
| ID: |
dr_129
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.9560512398622585
|
| Encrypted: |
false
|
| Ssdeep: |
48:LTH2ys/fhVk92DzHZLrub02jCuEcg2e0MJ3kq3pJ4ZYUWYu7Yu1MuNnYztd0MJ3m:nWbDDzVSY2uu9jeDNlpf/WueDNm
|
| Size: |
3522
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\results.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (714), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\core\results.html
|
| Category: |
dropped
|
| Dump: |
results.html.0.dr
|
| ID: |
dr_133
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (714), with CRLF line terminators
|
| Entropy: |
4.837368493718462
|
| Encrypted: |
false
|
| Ssdeep: |
384:L8/JRB/9bYGhTfww51g6th1woOHy2LqImA5qyT1yYBk5qyTKX:L8/JRB/9bYGhIw51g6t7woOHy2LqImAJ
|
| Size: |
15647
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\build.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (2528), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\build.html
|
| Category: |
dropped
|
| Dump: |
build.html.0.dr
|
| ID: |
dr_142
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (2528), with CRLF line terminators
|
| Entropy: |
4.71464541800585
|
| Encrypted: |
false
|
| Ssdeep: |
384:iCEyp078/HeYGf8/V8/G8s482Veds58sdHD82VedsHe6Mv8/r8/HeG8e8KVej8/1:iCEyp078/HeYGf8/V8/G8s482Veds58F
|
| Size: |
13197
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\conflict.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1042), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\conflict.html
|
| Category: |
dropped
|
| Dump: |
conflict.html.0.dr
|
| ID: |
dr_145
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1042), with CRLF line terminators
|
| Entropy: |
4.82472920711192
|
| Encrypted: |
false
|
| Ssdeep: |
192:AehdEChIyQWX8MBVes8sWeS5ymb8sWeBiypb8s9eri8yezD8wh8wHeQLyYD8wh8e:ACEChdQWX8KVes8sWeSkmb8sWeBPpb8v
|
| Size: |
8928
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\desktop.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1205), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\desktop.html
|
| Category: |
dropped
|
| Dump: |
desktop.html.0.dr
|
| ID: |
dr_148
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1205), with CRLF line terminators
|
| Entropy: |
4.8444203165017194
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cehd4UymcP+m578/HeGrmZT8sHemgmC78/HemHm5k8eA8bT5HWeHnXu:CC4U5cPt578/HetZT8sHeaC78/HemG5d
|
| Size: |
7957
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\base.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (783), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\base.html
|
| Category: |
dropped
|
| Dump: |
base.html.0.dr
|
| ID: |
dr_163
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (783), with CRLF line terminators
|
| Entropy: |
4.996831079404403
|
| Encrypted: |
false
|
| Ssdeep: |
192:4Wbdn/ZBXJYirY8bT5H+DWwuyokssex5n5qKz4:4In/ZBXnrY8bdH+DWNyLssexpUKz4
|
| Size: |
9225
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\column.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1722), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\column.html
|
| Category: |
dropped
|
| Dump: |
column.html.0.dr
|
| ID: |
dr_166
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1722), with CRLF line terminators
|
| Entropy: |
4.822761569195724
|
| Encrypted: |
false
|
| Ssdeep: |
768:XIDZy9gyXnnRsu82PyFN82VedsSVL/L+zhse6q8KIVab8s3IDn8sWesn8s9emn81:l1su8oyFN82Vedsmase6q8K5b8swn8st
|
| Size: |
41861
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\progress_window.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (2188), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\progress_window.html
|
| Category: |
dropped
|
| Dump: |
progress_window.html.0.dr
|
| ID: |
dr_170
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (2188), with CRLF line terminators
|
| Entropy: |
4.893472832139966
|
| Encrypted: |
false
|
| Ssdeep: |
384:XIhl6UW/i+H/eLW/Jp4c8eXgVtyRe+828XgVyMy/tedslsAp/j9/b9/0JREH/NnM:XIhl6UW/VH/CW/Jp4c8eXgVtyRe+828g
|
| Size: |
19868
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\selectable_list.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (643), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\selectable_list.html
|
| Category: |
dropped
|
| Dump: |
selectable_list.html.0.dr
|
| ID: |
dr_174
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (643), with CRLF line terminators
|
| Entropy: |
4.898456920260516
|
| Encrypted: |
false
|
| Ssdeep: |
384:mIzoMjFJd5bEVd5/eBa2nFSSfaWu671LeyFrgRbJqc5S4seyFWuJX0+dguKdacb0:mIzoMjL7wL5/e3nFSSfaWPhLeyFrgRb8
|
| Size: |
20782
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\table.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (975), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\table.html
|
| Category: |
dropped
|
| Dump: |
table.html.0.dr
|
| ID: |
dr_178
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (975), with CRLF line terminators
|
| Entropy: |
4.86379343480687
|
| Encrypted: |
false
|
| Ssdeep: |
1536:ztXxWb8deeq8Kc8de3S8deWq8sm8bdHHeYIpcUVIpcyImIpcfI5IpcXvu8wlmewd:zDu2g/RLst
|
| Size: |
52268
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\text_field.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (520), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\text_field.html
|
| Category: |
dropped
|
| Dump: |
text_field.html.0.dr
|
| ID: |
dr_182
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (520), with CRLF line terminators
|
| Entropy: |
4.941199655288563
|
| Encrypted: |
false
|
| Ssdeep: |
384:tI/PoFOGcQn2wWBAJtnPhkuTRR2zYluiCu9ZCqcem6Hy2nZRH:tI/PoFhVn2pBCtnPhkuTRR2zYluiCaZB
|
| Size: |
15086
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\tree.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (529), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\gui\tree.html
|
| Category: |
dropped
|
| Dump: |
tree.html.0.dr
|
| ID: |
dr_186
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (529), with CRLF line terminators
|
| Entropy: |
4.852992738193536
|
| Encrypted: |
false
|
| Ssdeep: |
384:p4Xes4XA+J/WhBJhvZTTdzZNJPPQlxHfb9/EO08VKDMyTZ1DMyTE4+C3cvV+i0W0:p4XesyJJ/WhbhvZTTdzZNJPPQlxHfb9Q
|
| Size: |
21981
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\index.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\index.html
|
| Category: |
dropped
|
| Dump: |
index.html2.0.dr
|
| ID: |
dr_151
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.946960071582658
|
| Encrypted: |
false
|
| Ssdeep: |
48:LAH2ys/fhVk92DzHZLrRWgjCuETg2fua5jZPTzBSLBB8pE2mdbAaTxwAIuh4k:8WbDDzVdtuuOjWdhv
|
| Size: |
4309
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\jobprogress\job.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (2204), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\jobprogress\job.html
|
| Category: |
dropped
|
| Dump: |
job.html.0.dr
|
| ID: |
dr_190
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (2204), with CRLF line terminators
|
| Entropy: |
4.792345549396306
|
| Encrypted: |
false
|
| Ssdeep: |
384:zI+7r3MrOWIN8RMDy8eY8/W2d8sHeXL8Km8sdY9eiCK82VedsE8KdDM82DedslbP:zI+7r3UzIN8RMDy8eY8/Jd8sHeXL8Km4
|
| Size: |
16206
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\jobprogress\performer.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (439), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\jobprogress\performer.html
|
| Category: |
dropped
|
| Dump: |
performer.html.0.dr
|
| ID: |
dr_194
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (439), with CRLF line terminators
|
| Entropy: |
5.04564935081994
|
| Encrypted: |
false
|
| Ssdeep: |
96:OXm+DzadiHruYjG5612lRWIJWmTStWSZUvfpS9STSZmyPh:OWbdidyw2lRpJvetzZUvfYseZmyZ
|
| Size: |
4916
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\notify.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (823), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\notify.html
|
| Category: |
dropped
|
| Dump: |
notify.html.0.dr
|
| ID: |
dr_154
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (823), with CRLF line terminators
|
| Entropy: |
4.847287377807566
|
| Encrypted: |
false
|
| Ssdeep: |
192:rehdA160hzE29Um/nrX3fX8sHearpFq8KxE8sF8/HeA9seDsewrvq8Kc:rCA11BEeZrX3fX8sHeaPq8KxE8sF8/Ha
|
| Size: |
9290
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\path.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (409), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\path.html
|
| Category: |
dropped
|
| Dump: |
path.html.0.dr
|
| ID: |
dr_157
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (409), with CRLF line terminators
|
| Entropy: |
4.950809606256365
|
| Encrypted: |
false
|
| Ssdeep: |
96:NWbDDzVd8/uuTjP6GcSrgSDSTlMxBcSdSJSTKIgPtBtSShMtuagR:Nehd8j5VNORsVM4bUfcKf
|
| Size: |
4932
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\util.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1975), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\hscommon\util.html
|
| Category: |
dropped
|
| Dump: |
util.html.0.dr
|
| ID: |
dr_159
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1975), with CRLF line terminators
|
| Entropy: |
4.603166524015174
|
| Encrypted: |
false
|
| Ssdeep: |
768:+CvMLDo8RaKeM8sdUJt0GFC84Qe9e1bcC84QesQeezAQi78wi8KVed+9eaiIX8st:oDo8RaKeM8sdUz0SC84Qe9e1bcC84Qe1
|
| Size: |
36940
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\index.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (629), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\developer\index.html
|
| Category: |
dropped
|
| Dump: |
index.html.0.dr
|
| ID: |
dr_115
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (629), with CRLF line terminators
|
| Entropy: |
4.894742462197882
|
| Encrypted: |
false
|
| Ssdeep: |
384:+FpdrieoOUzWwPI0HbO/97RP4efIJFrweYZ/3B38ih:+FpdrieoxzWwPI0Hbk97RP4efIJFrweq
|
| Size: |
13678
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\faq.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (325), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\faq.html
|
| Category: |
dropped
|
| Dump: |
faq.html0.0.dr
|
| ID: |
dr_165
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (325), with CRLF line terminators
|
| Entropy: |
4.999974824911574
|
| Encrypted: |
false
|
| Ssdeep: |
384:ohUrk1Dye+xzWjiapwAVrMBiPr3GlvhGDh:ohUraD9GziVrMWGc
|
| Size: |
21265
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\folders.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\folders.html
|
| Category: |
dropped
|
| Dump: |
folders.html0.0.dr
|
| ID: |
dr_169
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.932443686328097
|
| Encrypted: |
false
|
| Ssdeep: |
96:K8hUDz7lUuMj+C4SksHxGlqAHLdBmiXlN/0COcty0/EurIxGx:K6C4N4SksrMtlNcQy0/Euv
|
| Size: |
6611
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\genindex.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\genindex.html
|
| Category: |
dropped
|
| Dump: |
genindex.html0.0.dr
|
| ID: |
dr_173
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with CRLF line terminators
|
| Entropy: |
4.9645770966323735
|
| Encrypted: |
false
|
| Ssdeep: |
384:tflUjQ+wKEhJbMiMOWnYY3Jr6VMuacd/Vhbosya1CKQ7SOYZt7h39RCEU0o7OeJL:tflUDS/hsQx9G4X6Y6fnEQDOU7NROfC
|
| Size: |
57431
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\index.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\index.html
|
| Category: |
dropped
|
| Dump: |
index.html4.0.dr
|
| ID: |
dr_177
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.903320215741631
|
| Encrypted: |
false
|
| Ssdeep: |
192:w6CsrgjpQ8seHvOa4MFex8GJrMNnTXQkN:wEMpvpFexjETXQE
|
| Size: |
11692
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\objects.inv
|
data
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\objects.inv
|
| Category: |
dropped
|
| Dump: |
objects.inv0.0.dr
|
| ID: |
dr_181
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
data
|
| Entropy: |
7.934927818167391
|
| Encrypted: |
false
|
| Ssdeep: |
96:S6jcNur9v/W2abRg56bxN+52muKCVZpx0:FjL9W2aVgKN+MHKAg
|
| Size: |
3435
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\preferences.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (342), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\preferences.html
|
| Category: |
dropped
|
| Dump: |
preferences.html0.0.dr
|
| ID: |
dr_185
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (342), with CRLF line terminators
|
| Entropy: |
4.944562469274555
|
| Encrypted: |
false
|
| Ssdeep: |
96:C8hUDz7VFUuEj9eJp8Mo/Fd6mNgg0Z9QoqPEHqo5uvU79Dpbg5zAhobA/uWw10Uh:C6CS9U8V036EHqoEvW91h81L2KN1shU
|
| Size: |
8310
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\py-modindex.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\py-modindex.html
|
| Category: |
dropped
|
| Dump: |
py-modindex.html.0.dr
|
| ID: |
dr_189
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with CRLF line terminators
|
| Entropy: |
4.800491936707379
|
| Encrypted: |
false
|
| Ssdeep: |
192:j6J5uieQ1+6j0vAIuiHVno6oooKoBo4oAo1ocoef7o+oIoBoVovoo:j65ujQ1+6j0vAIu6Vox/hSv3ebFdfS+b
|
| Size: |
7907
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\quick_start.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\quick_start.html
|
| Category: |
dropped
|
| Dump: |
quick_start.html0.0.dr
|
| ID: |
dr_193
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.014455354554211
|
| Encrypted: |
false
|
| Ssdeep: |
96:X8hUDz7G8UuNjv/vukKYoITJZ/ElI7dNx/vq:X6CGcvHucoa/cQ3xHq
|
| Size: |
3668
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\reprioritize.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\reprioritize.html
|
| Category: |
dropped
|
| Dump: |
reprioritize.html0.0.dr
|
| ID: |
dr_196
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.990683116700443
|
| Encrypted: |
false
|
| Ssdeep: |
96:c8hUDz7OzUuJEjZsjw9vAaVOoGDtikphxS+sO:c6COAKjJPstO
|
| Size: |
4372
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\results.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (458), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\results.html
|
| Category: |
dropped
|
| Dump: |
results.html1.0.dr
|
| ID: |
dr_198
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (458), with CRLF line terminators
|
| Entropy: |
4.901353266220007
|
| Encrypted: |
false
|
| Ssdeep: |
384:KdqRLCGF8//4EBKGa1dF+tF49WBxhuaknUHzyN0fYbNldrZg:KdeBRG50uuSyn+
|
| Size: |
18365
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\scan.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\scan.html
|
| Category: |
dropped
|
| Dump: |
scan.html.0.dr
|
| ID: |
dr_205
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.940280539529691
|
| Encrypted: |
false
|
| Ssdeep: |
384:74OQhmxciWvkvD6ELKEyGDNsmLJI9wHxG:74XhViWsvD6ELKKtSSxG
|
| Size: |
15288
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\search.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\search.html
|
| Category: |
dropped
|
| Dump: |
search.html0.0.dr
|
| ID: |
dr_209
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with CRLF line terminators
|
| Entropy: |
4.776964571776591
|
| Encrypted: |
false
|
| Ssdeep: |
48:LDHcyK9dnb+imGDzHeHj4uECJMg2cywKoTOKdrljNrN6fM4k:X8hnDzaUuxMjcywTO2pN8K
|
| Size: |
2563
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\en\searchindex.js
|
ASCII text, with very long lines (61749), with no line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\en\searchindex.js
|
| Category: |
dropped
|
| Dump: |
searchindex.js0.0.dr
|
| ID: |
dr_213
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (61749), with no line terminators
|
| Entropy: |
4.611252688650383
|
| Encrypted: |
false
|
| Ssdeep: |
384:r0U4tQCsck3bx3ZFgeSqDBESf1lQvE2WsFlSBFKcY9K6BYUc7LPXpCNTWOug1AY7:4F6ClG4ceBV3F99B0hOu/nOlkcF
|
| Size: |
61749
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.buildinfo
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.buildinfo
|
| Category: |
dropped
|
| Dump: |
.buildinfo0.0.dr
|
| ID: |
dr_197
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.801137019434464
|
| Encrypted: |
false
|
| Ssdeep: |
6:S9bTy8x2sQIqeZygjh7e/bJUDBvBwE5wymUBHXrGZwv:YWS/q4ygV7e/bJUsE5TrFv
|
| Size: |
234
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\changelog.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\changelog.doctree
|
| Category: |
dropped
|
| Dump: |
changelog.doctree1.0.dr
|
| ID: |
dr_251
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.701101868084037
|
| Encrypted: |
false
|
| Ssdeep: |
1536:IBFSXnVjJcqT8AHOHWZ4Zx2SNWw0ZXQcAUz9/S8O63JjE52ch46Az8:IXSXVjJcqT8AHOBxNwbz9S8O63I2cu/I
|
| Size: |
237041
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\environment.pickle
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\environment.pickle
|
| Category: |
dropped
|
| Dump: |
environment.pickle1.0.dr
|
| ID: |
dr_256
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.221198016050208
|
| Encrypted: |
false
|
| Ssdeep: |
1536:A6WDZrA1JQRHMGRCyx0Xk9eSxynUPcifW+p2RxCNgXKk4tOlcj+4pPWnkX2mZeDO:A6WDZrceRHMGRCyx0Xk9eSxynUPcifWy
|
| Size: |
66760
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\faq.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\faq.doctree
|
| Category: |
dropped
|
| Dump: |
faq.doctree1.0.dr
|
| ID: |
dr_261
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.624175493270653
|
| Encrypted: |
false
|
| Ssdeep: |
768:uTYvvJ0Lz69lB3TBALo2owoOX7oXpogoEono6EfyUQVjPAa8ta:gQ36hvA9Q
|
| Size: |
48701
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\folders.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\folders.doctree
|
| Category: |
dropped
|
| Dump: |
folders.doctree2.0.dr
|
| ID: |
dr_266
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.4672999052850075
|
| Encrypted: |
false
|
| Ssdeep: |
384:Lyeqb8SPg5k2kOWsWZIwVPVORqpHZPmkLy8:Ly8SP7PDy8
|
| Size: |
13863
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree3.0.dr
|
| ID: |
dr_271
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.469447550955636
|
| Encrypted: |
false
|
| Ssdeep: |
96:L3R0eSjxSESdYNmqq/K4KySo0/gK0/gpl2U6tB2eh6f2U6sd/LsdhqEWUovbOnVQ:LCnjMlyNm1Q1o9KlPtgkbRX0LPF8
|
| Size: |
7581
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\preferences.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\preferences.doctree
|
| Category: |
dropped
|
| Dump: |
preferences.doctree3.0.dr
|
| ID: |
dr_276
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.451662499556175
|
| Encrypted: |
false
|
| Ssdeep: |
384:i7XiEk1uHu1uItyNUejlf1H8uWd1/37Kq7O7fi9+AZAqZ/iiJKJQJXbzj7OPmkub:i7XixiYBoNUezI+qqrigAZAGePWW8
|
| Size: |
38098
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\quick_start.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\quick_start.doctree
|
| Category: |
dropped
|
| Dump: |
quick_start.doctree3.0.dr
|
| ID: |
dr_281
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.5060078117661675
|
| Encrypted: |
false
|
| Ssdeep: |
96:UTVNRMH6xVACHGIriQ6QEQuvUv6v7Po3P3pYDSyts28kRNKX0LaUF8:eNRtVfHGIrPXluvUv87zPtgkqX0LzF8
|
| Size: |
6689
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\reprioritize.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\reprioritize.doctree
|
| Category: |
dropped
|
| Dump: |
reprioritize.doctree3.0.dr
|
| ID: |
dr_285
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.183682177710121
|
| Encrypted: |
false
|
| Ssdeep: |
96:+Obf9jAar9tA2MRO5XOtsgYqTikaXNxs4ikWIxXLbDSyts28kSNKX0La+F8:f9Qq3X8CPtgk7X0LhF8
|
| Size: |
6345
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\results.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\.doctrees\results.doctree
|
| Category: |
dropped
|
| Dump: |
results.doctree3.0.dr
|
| ID: |
dr_292
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.476384335400742
|
| Encrypted: |
false
|
| Ssdeep: |
768:aHCYN2xSB8FiADhrADhS/o4oXB2j1qUFxks/4PCAx8:MCYN2xU0bj1tV/6CG8
|
| Size: |
41213
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\changelog.rst.txt
|
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\changelog.rst.txt
|
| Category: |
dropped
|
| Dump: |
changelog.rst.txt2.0.dr
|
| ID: |
dr_296
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
| Entropy: |
5.193350937099842
|
| Encrypted: |
false
|
| Ssdeep: |
384:RdJ99laEfgahpkDGlKgAV4YMY2NIyEAobsZUok9:Pr9HIWpkDJT2NIyicrk
|
| Size: |
39473
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\faq.rst.txt
|
Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\faq.rst.txt
|
| Category: |
dropped
|
| Dump: |
faq.rst.txt2.0.dr
|
| ID: |
dr_301
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.722081885815014
|
| Encrypted: |
false
|
| Ssdeep: |
192:hhE3preomdobTZo8IQtbchorrWo8hanyqJEYq51YmLY79:hhOpreXo5oItqoWo5yqJEYj79
|
| Size: |
10466
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\folders.rst.txt
|
Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\folders.rst.txt
|
| Category: |
dropped
|
| Dump: |
folders.rst.txt2.0.dr
|
| ID: |
dr_306
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.64062807322594
|
| Encrypted: |
false
|
| Ssdeep: |
96:RDGe01Jnp/kburWPN638ZyxVh1NLavjNnyb8YTr:4d5k4WGtVTlasH
|
| Size: |
3460
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\index.rst.txt
|
Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt2.0.dr
|
| ID: |
dr_311
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.668096748097448
|
| Encrypted: |
false
|
| Ssdeep: |
24:lK/SNMW7GmQa/7KcmcXqH/cxw9ifZgRB20pg66Uh+9rgRynEuPLexOGyurw:uSNhxQaTKyqHU/gRB2U6UY9znvP8oKw
|
| Size: |
1457
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\preferences.rst.txt
|
Unicode text, UTF-8 text, with very long lines (589), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\preferences.rst.txt
|
| Category: |
dropped
|
| Dump: |
preferences.rst.txt2.0.dr
|
| ID: |
dr_316
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (589), with CRLF line terminators
|
| Entropy: |
4.687780278842406
|
| Encrypted: |
false
|
| Ssdeep: |
192:yXoa/40fKHtu12kHYsaxYz9Qubu7KNPi8AmmJQ2:NA4LufY3xYzy7KpAmmJQ2
|
| Size: |
8471
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\quick_start.rst.txt
|
Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\quick_start.rst.txt
|
| Category: |
dropped
|
| Dump: |
quick_start.rst.txt2.0.dr
|
| ID: |
dr_321
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.674012224000975
|
| Encrypted: |
false
|
| Ssdeep: |
24:w0bbS/X2sYlrmyA7x3VWpg7l6thYyVU3fJAcNBF:zbMXJeMx6QlkhNVU3R3NBF
|
| Size: |
981
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\reprioritize.rst.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\reprioritize.rst.txt
|
| Category: |
dropped
|
| Dump: |
reprioritize.rst.txt2.0.dr
|
| ID: |
dr_326
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.5156454684088025
|
| Encrypted: |
false
|
| Ssdeep: |
48:kQtW93AU2qA68HOkkFKwbvirofAIDOqNxFZFf0:ZA93AjPOkm9rikgqNxh0
|
| Size: |
1785
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\results.rst.txt
|
Unicode text, UTF-8 text, with very long lines (368), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_sources\results.rst.txt
|
| Category: |
dropped
|
| Dump: |
results.rst.txt2.0.dr
|
| ID: |
dr_331
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (368), with CRLF line terminators
|
| Entropy: |
4.689116960241138
|
| Encrypted: |
false
|
| Ssdeep: |
192:y4CDj8Mn1dzADh5No4DJYPfcat5X/kknrEocQNBZhSmd:yTDj8Mn1dzADh5NoHcot9rEhQNFSmd
|
| Size: |
10157
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\_sphinx_javascript_frameworks_compat.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\_sphinx_javascript_frameworks_compat.js
|
| Category: |
dropped
|
| Dump: |
_sphinx_javascript_frameworks_compat.js2.0.dr
|
| ID: |
dr_335
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.685656234416744
|
| Encrypted: |
false
|
| Ssdeep: |
96:y40QiGpiMYersMQLH95nPcnog6fLJ2ZSruogkz5nCyhvQXmiFX/gQlxPZCQ+:qQiGMMYersMQLH95nPcnQfLJ22z5nCyz
|
| Size: |
4418
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\alert_info_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\alert_info_32.png
|
| Category: |
dropped
|
| Dump: |
alert_info_32.png2.0.dr
|
| ID: |
dr_350
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.767283149616434
|
| Encrypted: |
false
|
| Ssdeep: |
24:h3U0gKkG05qOoL3MQJmMu4aK1fW/nB/26CJDlw0hhne:bgKkN5bo7M9ZK1fzDaghne
|
| Size: |
1128
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\alert_warning_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\alert_warning_32.png
|
| Category: |
dropped
|
| Dump: |
alert_warning_32.png2.0.dr
|
| ID: |
dr_353
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.698482624934657
|
| Encrypted: |
false
|
| Ssdeep: |
24:ALyD7nCPeAuBl5A/K/MiRFOyyf9YXXdTDcAKeB8m8:ayDbCe7l51VyCtHcz+8D
|
| Size: |
944
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\base-stemmer.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\base-stemmer.js
|
| Category: |
dropped
|
| Dump: |
base-stemmer.js0.0.dr
|
| ID: |
dr_357
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
3.9846912753599915
|
| Encrypted: |
false
|
| Ssdeep: |
192:Gdgqaz7OekdA4LsTLUDMbDb76ZpB/+6XdfyuClOth+6X/y6e/ClpFkWN:GTz10l/C3ae
|
| Size: |
8133
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\basic.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\basic.css
|
| Category: |
dropped
|
| Dump: |
basic.css2.0.dr
|
| ID: |
dr_361
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.800158358247716
|
| Encrypted: |
false
|
| Ssdeep: |
384:RskgMGN4H775IIb/wO0U9rHtZLpwMnaPkhNHMay4QW:p9lPnaPIf7
|
| Size: |
16130
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\bg-page.png
|
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\bg-page.png
|
| Category: |
dropped
|
| Dump: |
bg-page.png2.0.dr
|
| ID: |
dr_365
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.8652086129533165
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlRtFr/bhkxdkNB0NCLyg/ll/jp:6v/lhPnDhQkN2CWSdp
|
| Size: |
82
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\bullet_orange.png
|
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\bullet_orange.png
|
| Category: |
dropped
|
| Dump: |
bullet_orange.png2.0.dr
|
| ID: |
dr_369
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
| Entropy: |
6.137099555480085
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlHl1ihxBkaEb68SRqTmd3K5ZVUYzo5l43reTokFEtjp:6v/lhPlCxS68iqCdaHCk74Ktjp
|
| Size: |
165
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\doctools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\doctools.js
|
| Category: |
dropped
|
| Dump: |
doctools.js2.0.dr
|
| ID: |
dr_373
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.9734126050249445
|
| Encrypted: |
false
|
| Ssdeep: |
192:ZBHxYsMocPTJlo4Pn3W5VNMpAkgUSafhfO0oiFoi/5Z9j9oiu9H8PedSdD8tlS:ZBHncehctCiuixZRGiuVwenO
|
| Size: |
8171
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\documentation_options.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\documentation_options.js
|
| Category: |
dropped
|
| Dump: |
documentation_options.js2.0.dr
|
| ID: |
dr_377
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.277735935232293
|
| Encrypted: |
false
|
| Ssdeep: |
12:17DRRZxvkf0jpI+Up/USqJ4VsN+8WDZsq:VRRfsf011Up/dqJ4VaDW9x
|
| Size: |
434
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\file.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\file.png
|
| Category: |
dropped
|
| Dump: |
file.png2.0.dr
|
| ID: |
dr_381
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
6.982817860477681
|
| Encrypted: |
false
|
| Ssdeep: |
6:6v/lhP5bSiLBXpmOYy8sNrfqC3FfDD5dat7kcqF3pKiYofFtup:6v/7BbBZnfbF3et7kTp7c
|
| Size: |
286
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\french-stemmer.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\french-stemmer.js
|
| Category: |
dropped
|
| Dump: |
french-stemmer.js.0.dr
|
| ID: |
dr_385
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
3.0106523555821934
|
| Encrypted: |
false
|
| Ssdeep: |
192:1kqW7e1tPlSiSv1ZMpDasDGms7wSS+eS+JSStcWSUSMy+i/ECLnN0/6YYCP5TO/F:fW7QPIxv1Zcf8dZQtP6H0K
|
| Size: |
42080
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\haiku.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\haiku.css
|
| Category: |
dropped
|
| Dump: |
haiku.css2.0.dr
|
| ID: |
dr_400
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.8572745231860806
|
| Encrypted: |
false
|
| Ssdeep: |
96:r8NvTEiHk/+/Y7kv74f5vC5r/O4KuLgwtUoMHh+r/ceFoHNTkURjeFEo2M/NeFog:KvTg/lPFY4fjM/NJ8d+8jCenn
|
| Size: |
7088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\jquery-3.5.1.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\jquery-3.5.1.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.5.1.js1.0.dr
|
| ID: |
dr_403
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.0658003996173315
|
| Encrypted: |
false
|
| Ssdeep: |
6144:pJChNVls+TCtlFhTzeKR7cYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:xf7cYmD43APx+WI+Y7cFyMyDTPfCAeuH
|
| Size: |
287630
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\jquery-3.6.0.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\jquery-3.6.0.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.6.0.js2.0.dr
|
| ID: |
dr_407
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.066983843372853
|
| Encrypted: |
false
|
| Ssdeep: |
6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
|
| Size: |
288580
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\jquery.js
|
ASCII text, with very long lines (65447)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\jquery.js
|
| Category: |
dropped
|
| Dump: |
jquery.js2.0.dr
|
| ID: |
dr_411
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (65447)
|
| Entropy: |
5.289893677458563
|
| Encrypted: |
false
|
| Ssdeep: |
1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
|
| Size: |
89501
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\language_data.js
|
Unicode text, UTF-8 text, with very long lines (11547), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\language_data.js
|
| Category: |
dropped
|
| Dump: |
language_data.js2.0.dr
|
| ID: |
dr_415
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (11547), with CRLF line terminators
|
| Entropy: |
5.14515602079624
|
| Encrypted: |
false
|
| Ssdeep: |
192:srzKQPDnVkRXJlNPrLJ43/D9uQ/bxHxH8t2CvYDIzIAEmygTkl2j8:srRVkRXJLP3J4L9uQk2CvYDIzIjmy0kX
|
| Size: |
17035
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\minus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\minus.png
|
| Category: |
dropped
|
| Dump: |
minus.png2.0.dr
|
| ID: |
dr_419
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
5.021779901931872
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+ByMlE/UtB1p:6v/lhP8CMyfMq8dp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\plus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\plus.png
|
| Category: |
dropped
|
| Dump: |
plus.png2.0.dr
|
| ID: |
dr_423
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.968947818574501
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+w56xiH1p:6v/lhP8CMylPp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\pygments.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\pygments.css
|
| Category: |
dropped
|
| Dump: |
pygments.css3.0.dr
|
| ID: |
dr_427
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.017911484607375
|
| Encrypted: |
false
|
| Ssdeep: |
96:mkJQcV87VgV3VtVVsEVL/jkFs0KkVuwVI9z:mcu7aR/MEZ/aZEw4z
|
| Size: |
4919
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\searchtools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\searchtools.js
|
| Category: |
dropped
|
| Dump: |
searchtools.js3.0.dr
|
| ID: |
dr_431
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.834132235965012
|
| Encrypted: |
false
|
| Ssdeep: |
384:gwr8jktvZIZa8/7aR0l8TK4q+/qKrQJAySBMSZMjGL7Z:iTl8tsHS60j7Z
|
| Size: |
17088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\translations.js
|
HTML document, ASCII text, with very long lines (343)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\translations.js
|
| Category: |
dropped
|
| Dump: |
translations.js0.0.dr
|
| ID: |
dr_435
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with very long lines (343)
|
| Entropy: |
4.753047800308493
|
| Encrypted: |
false
|
| Ssdeep: |
96:0vAZICQQK/JbK9T+2pPZIlAi8hnZCuccFMRVt+sSjAAh8Y4f:0vjCU/JbK9CuiQFSudjAAh6
|
| Size: |
4311
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\underscore-1.13.1.js
|
Unicode text, UTF-8 text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\underscore-1.13.1.js
|
| Category: |
dropped
|
| Dump: |
underscore-1.13.1.js3.0.dr
|
| ID: |
dr_449
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text
|
| Entropy: |
4.7888312487578935
|
| Encrypted: |
false
|
| Ssdeep: |
1536:uFgPYMzG1NxVbecjNTUtHAJ3l1rQPYBD9Vf5Cb:TPYMzGDbeUKpAJA+Cb
|
| Size: |
68420
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\underscore.js
|
ASCII text, with very long lines (18996)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\_static\underscore.js
|
| Category: |
dropped
|
| Dump: |
underscore.js3.0.dr
|
| ID: |
dr_451
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (18996)
|
| Entropy: |
5.203574242965945
|
| Encrypted: |
false
|
| Ssdeep: |
384:zeOIhxIEKCfc5uFWT4LRn8jgZOQV72xF7CaNQWB/O9a/RQ0eb:qOI/IE3c5EWT6RcemF7CaNQWm0/RFc
|
| Size: |
19530
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\changelog.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\changelog.html
|
| Category: |
dropped
|
| Dump: |
changelog.html0.0.dr
|
| ID: |
dr_202
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
| Entropy: |
5.111651839353569
|
| Encrypted: |
false
|
| Ssdeep: |
1536:dpuGd0ktClOkdWfx2qqWHmoQBdAtG7oEI+obv9cO04mwsU9kxLW3Qv/MSiUqOurT:zt7N
|
| Size: |
66877
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\faq.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (321), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\faq.html
|
| Category: |
dropped
|
| Dump: |
faq.html1.0.dr
|
| ID: |
dr_206
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (321), with CRLF line terminators
|
| Entropy: |
5.042679477428824
|
| Encrypted: |
false
|
| Ssdeep: |
384:kkHr4PYT9J3GixtuGj5rgc0jHs28hCZJOa48s9:k4d9J3GixNpgLMbie8e
|
| Size: |
13316
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\folders.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\folders.html
|
| Category: |
dropped
|
| Dump: |
folders.html1.0.dr
|
| ID: |
dr_210
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.023022382111391
|
| Encrypted: |
false
|
| Ssdeep: |
48:LNcyK2dnb+IWTGD6Lryzj4ITE1g2LViyeLy24XG541tPqC1kggKDL3BmfnS/5kXB:ahpCDgoUiEjLIyeLkGXkkggkLRlRk8I1
|
| Size: |
4527
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\genindex.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\genindex.html
|
| Category: |
dropped
|
| Dump: |
genindex.html1.0.dr
|
| ID: |
dr_214
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.836074259208466
|
| Encrypted: |
false
|
| Ssdeep: |
24:Oo9L3MHcy+p5ogVMSVMEVMpGVMXVMIWAVMKEE4ITEp+WCgnLirlXlR04Ccirs4rX:LocyK2dnb+IWTKj4ITEpg2czR0xfs4rX
|
| Size: |
1830
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\index.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\index.html
|
| Category: |
dropped
|
| Dump: |
index.html5.0.dr
|
| ID: |
dr_218
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators
|
| Entropy: |
4.950292227255456
|
| Encrypted: |
false
|
| Ssdeep: |
96:jIhpCDgNY64jhI2eh6f8YmqrNXmJPPn9p4s9csg4ZB:jGp9mhtBNXknn/4s/gK
|
| Size: |
6935
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\objects.inv
|
data
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\objects.inv
|
| Category: |
dropped
|
| Dump: |
objects.inv1.0.dr
|
| ID: |
dr_222
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
data
|
| Entropy: |
7.0488601734440275
|
| Encrypted: |
false
|
| Ssdeep: |
6:S988/CDSt2M/wT1ngopPoCzVxX36HADsqGZWFvmBYtxPis6QJL8aieBmdn:gvt2//PXz76HAD/GkwQikJ5ieI
|
| Size: |
402
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\preferences.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (820), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\preferences.html
|
| Category: |
dropped
|
| Dump: |
preferences.html1.0.dr
|
| ID: |
dr_226
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (820), with CRLF line terminators
|
| Entropy: |
4.9696598115997155
|
| Encrypted: |
false
|
| Ssdeep: |
96:8hpCDgfUiAjQQpdw9feI0GplK9duUq417rWlDqdGXDEQ0ABO2U5vZ8J9SsMo:6p9WjpdwtemnK9QUq41747XwABUuJssR
|
| Size: |
6855
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\quick_start.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\quick_start.html
|
| Category: |
dropped
|
| Dump: |
quick_start.html1.0.dr
|
| ID: |
dr_230
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.054791578620861
|
| Encrypted: |
false
|
| Ssdeep: |
48:LPcyK2dnb+IWTGD6Lry2j4ITE3g2hqKYfdiI1ZAC8L4MxWQiUVFn3ZB/gqKQ4rX:QhpCDgO2Ui4jhhwsI/AsDQnx3Yh9
|
| Size: |
3752
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\reprioritize.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\reprioritize.html
|
| Category: |
dropped
|
| Dump: |
reprioritize.html1.0.dr
|
| ID: |
dr_234
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.005456931342594
|
| Encrypted: |
false
|
| Ssdeep: |
96:ghpCDgeUiJEjfMzm91APROoGntikpXxweS:+p9X0zePQv
|
| Size: |
4447
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\results.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (377), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\results.html
|
| Category: |
dropped
|
| Dump: |
results.html2.0.dr
|
| ID: |
dr_237
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (377), with CRLF line terminators
|
| Entropy: |
4.940173275205256
|
| Encrypted: |
false
|
| Ssdeep: |
384:SIMCqIA4fw8Ysh21G3qlADh5moMtndcQRtc+ATFRARJFZfoyKn:SKhA0wdshz3WADh4oMtdcstdATFRMvZ+
|
| Size: |
15246
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\search.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\search.html
|
| Category: |
dropped
|
| Dump: |
search.html1.0.dr
|
| ID: |
dr_242
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.798658585237284
|
| Encrypted: |
false
|
| Ssdeep: |
48:L7cyK9dnb+IWTimGDnHj4ITECJg2cRGKoTu8KKrUrN6fs4rX:sh2eDHUiJJjc4TDYN8Z
|
| Size: |
2645
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\searchindex.js
|
ASCII text, with very long lines (22538), with no line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\fr\searchindex.js
|
| Category: |
dropped
|
| Dump: |
searchindex.js1.0.dr
|
| ID: |
dr_246
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (22538), with no line terminators
|
| Entropy: |
4.482762724076348
|
| Encrypted: |
false
|
| Ssdeep: |
192:my5DKJgV1lceyFIfayL+P2wt6ZbMDXI8yom61NNtkQy+DnNl9cxi68COr2ULNvw5:VDGXFISk+P2D5MLI8tDyoGxi6d/CxoL
|
| Size: |
22538
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.buildinfo
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.buildinfo
|
| Category: |
dropped
|
| Dump: |
.buildinfo2.0.dr
|
| ID: |
dr_454
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.785800269974249
|
| Encrypted: |
false
|
| Ssdeep: |
6:S9bTy8x2sQIqeZygjh7e/bJUDBvA3l5mDo4HXrGZwv:YWS/q4ygV7e/bJU0QoMrFv
|
| Size: |
234
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\changelog.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\changelog.doctree
|
| Category: |
dropped
|
| Dump: |
changelog.doctree3.0.dr
|
| ID: |
dr_503
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.653584868240631
|
| Encrypted: |
false
|
| Ssdeep: |
6144:uIzevRJeRU8ULU+MPVNSej4c9RLDhR9EkgRuk3k2igFaq6odwqpaXKNM7IIxfwAq:u8evRJeRU8ULU+MPeej4c9RLDhR9Ekgt
|
| Size: |
227195
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\environment.pickle
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\environment.pickle
|
| Category: |
dropped
|
| Dump: |
environment.pickle3.0.dr
|
| ID: |
dr_506
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.4934154632458005
|
| Encrypted: |
false
|
| Ssdeep: |
6144:bWDZoS9Q970skuBZUEXH120a2fb20/0hlkBbeJq2+2CQF:kZoSqkuBZ1g
|
| Size: |
209780
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\faq.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\faq.doctree
|
| Category: |
dropped
|
| Dump: |
faq.doctree3.0.dr
|
| ID: |
dr_509
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.300036603180147
|
| Encrypted: |
false
|
| Ssdeep: |
768:X4QH0OXkxIJa+tZynrKieMYeuNaNeumeuWRYTbf5Q0B1ZYJeF9lfAg1C0HJpS2Qr:aqIrKikWQvplrJpHRUGrI7jU2k0zP
|
| Size: |
62744
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\folders.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\folders.doctree
|
| Category: |
dropped
|
| Dump: |
folders.doctree3.0.dr
|
| ID: |
dr_512
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.331765042662172
|
| Encrypted: |
false
|
| Ssdeep: |
192:GYdB5eJ1tkmJlfK1v1aZGhaqi6zNI6HARFg92PBQTMKtPHJFlQKlkzPRkwPwFqbo:9D41o1v1lldlyPiwPwEsNEPmkKDT
|
| Size: |
14466
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree7.0.dr
|
| ID: |
dr_515
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.712450848687826
|
| Encrypted: |
false
|
| Ssdeep: |
192:TzHIXRfeYHbh6qEXCS/vJcI8StzMNPeBpkpPtgkWw0LNqFT:TUF68/GaPmksoT
|
| Size: |
8804
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\preferences.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\preferences.doctree
|
| Category: |
dropped
|
| Dump: |
preferences.doctree0.0.dr
|
| ID: |
dr_61
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.0445233172009365
|
| Encrypted: |
false
|
| Ssdeep: |
768:1HEfSdf2sksYsWPrDrPrLWrKw0r2rVV2Zq8ghcHRFR/RNMLBLkCo1K9pHPQJT:kP3zyW6VV2Zq8ghcxj5GTvQJT
|
| Size: |
60375
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\quick_start.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\quick_start.doctree
|
| Category: |
dropped
|
| Dump: |
quick_start.doctree0.0.dr
|
| ID: |
dr_63
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.6712846429913135
|
| Encrypted: |
false
|
| Ssdeep: |
192:Ztoe3VOP8n1WfyjuY6c1GzH8mlA0IJ3EYZjSBBl3BlUsqkpPtgkBw0LYHT:ZlGzVC0IJqBJBRlPmk/OT
|
| Size: |
7992
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\reprioritize.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\reprioritize.doctree
|
| Category: |
dropped
|
| Dump: |
reprioritize.doctree0.0.dr
|
| ID: |
dr_65
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.240569071264585
|
| Encrypted: |
false
|
| Ssdeep: |
192:jLKilbPKilbrMJ/Urrwrr6RXgsgCIsXgsgCIXpqkpPtgkgw0LoyT:jLKmPKmQJS+ugsg1egsg15lPmkeFT
|
| Size: |
8784
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\results.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\.doctrees\results.doctree
|
| Category: |
dropped
|
| Dump: |
results.doctree0.0.dr
|
| ID: |
dr_67
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.056277205071047
|
| Encrypted: |
false
|
| Ssdeep: |
1536:v52mLGg31EOBkdKeJ4UZUMug+l8kjkJ03/zET:qg31EOBkdKeJ4UZUMug+lfjV3bS
|
| Size: |
62753
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\changelog.rst.txt
|
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\changelog.rst.txt
|
| Category: |
dropped
|
| Dump: |
changelog.rst.txt0.0.dr
|
| ID: |
dr_69
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
| Entropy: |
5.193350937099842
|
| Encrypted: |
false
|
| Ssdeep: |
384:RdJ99laEfgahpkDGlKgAV4YMY2NIyEAobsZUok9:Pr9HIWpkDJT2NIyicrk
|
| Size: |
39473
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\faq.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (1112), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\faq.rst.txt
|
| Category: |
dropped
|
| Dump: |
faq.rst.txt0.0.dr
|
| ID: |
dr_71
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (1112), with CRLF line terminators
|
| Entropy: |
4.400342388112667
|
| Encrypted: |
false
|
| Ssdeep: |
384:mHQkDojKQrY0i+ucPKABsSXqL+B9qJUtXg2uAjbWZHQh1:mHfQYeucPKABsSaL+B9qJUt1u6yo1
|
| Size: |
15241
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\folders.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (510), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\folders.rst.txt
|
| Category: |
dropped
|
| Dump: |
folders.rst.txt0.0.dr
|
| ID: |
dr_73
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (510), with CRLF line terminators
|
| Entropy: |
4.100910261121261
|
| Encrypted: |
false
|
| Ssdeep: |
48:RerA6SxWJgXr2UvWJPz4WJ6BWJ4lWJLPFWJ6D7PJDreRRTrALr6Fh6SIYLgWo3Eg:R9GJf6w4EjkiXoo6/nNL/lEHw6v
|
| Size: |
3324
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\index.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt0.0.dr
|
| ID: |
dr_75
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.765243823753163
|
| Encrypted: |
false
|
| Ssdeep: |
48:VXIQ+rq+KMRrGq6qR6rAYrLeXr71tH6YW8oKw:V4AUbRv2ejvW8oKw
|
| Size: |
2081
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\preferences.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (794), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\preferences.rst.txt
|
| Category: |
dropped
|
| Dump: |
preferences.rst.txt0.0.dr
|
| ID: |
dr_77
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (794), with CRLF line terminators
|
| Entropy: |
4.296930613185449
|
| Encrypted: |
false
|
| Ssdeep: |
192:rVYyB7yj/fqi74tUrtJSkTYSaTD2o2h3eVGCkt0VxV/JRmIPOWKG7k6x5xwh7c9Q:riuWps6rtJjWrGOVK0VJRzJpk4zwR+Z2
|
| Size: |
16162
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\quick_start.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\quick_start.rst.txt
|
| Category: |
dropped
|
| Dump: |
quick_start.rst.txt0.0.dr
|
| ID: |
dr_79
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.206149840451956
|
| Encrypted: |
false
|
| Ssdeep: |
48:BPwFLzWJeJbBrYr1rLEUrYcJpTDr9r5L2P3UhVgrR3ls:BPYeWxCp5AvUYBls
|
| Size: |
1617
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\reprioritize.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\reprioritize.rst.txt
|
| Category: |
dropped
|
| Dump: |
reprioritize.rst.txt0.0.dr
|
| ID: |
dr_81
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.071381288409216
|
| Encrypted: |
false
|
| Ssdeep: |
48:JmrqQlfr3iYvhXWJcwbP+DqU2IwvrCSWJ+RGWWJLC3kosm0o6BI4B:Il/+NbgbH8mdYO2kosA6BIc
|
| Size: |
3063
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\results.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (820), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_sources\results.rst.txt
|
| Category: |
dropped
|
| Dump: |
results.rst.txt0.0.dr
|
| ID: |
dr_83
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (820), with CRLF line terminators
|
| Entropy: |
4.219835271446819
|
| Encrypted: |
false
|
| Ssdeep: |
384:9VqoEy8Fsd+SyG5sHimfHnNdqlCEIec+seoXLAhlwhcySICcXLWE8Dd6wB:9VqoEy8Fsd+SyG5sHimFdZEIeJsewLar
|
| Size: |
18214
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\_sphinx_javascript_frameworks_compat.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\_sphinx_javascript_frameworks_compat.js
|
| Category: |
dropped
|
| Dump: |
_sphinx_javascript_frameworks_compat.js0.0.dr
|
| ID: |
dr_85
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.685656234416744
|
| Encrypted: |
false
|
| Ssdeep: |
96:y40QiGpiMYersMQLH95nPcnog6fLJ2ZSruogkz5nCyhvQXmiFX/gQlxPZCQ+:qQiGMMYersMQLH95nPcnQfLJ22z5nCyz
|
| Size: |
4418
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\alert_info_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\alert_info_32.png
|
| Category: |
dropped
|
| Dump: |
alert_info_32.png0.0.dr
|
| ID: |
dr_87
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.767283149616434
|
| Encrypted: |
false
|
| Ssdeep: |
24:h3U0gKkG05qOoL3MQJmMu4aK1fW/nB/26CJDlw0hhne:bgKkN5bo7M9ZK1fzDaghne
|
| Size: |
1128
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\alert_warning_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\alert_warning_32.png
|
| Category: |
dropped
|
| Dump: |
alert_warning_32.png0.0.dr
|
| ID: |
dr_89
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.698482624934657
|
| Encrypted: |
false
|
| Ssdeep: |
24:ALyD7nCPeAuBl5A/K/MiRFOyyf9YXXdTDcAKeB8m8:ayDbCe7l51VyCtHcz+8D
|
| Size: |
944
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\basic.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\basic.css
|
| Category: |
dropped
|
| Dump: |
basic.css0.0.dr
|
| ID: |
dr_91
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.800158358247716
|
| Encrypted: |
false
|
| Ssdeep: |
384:RskgMGN4H775IIb/wO0U9rHtZLpwMnaPkhNHMay4QW:p9lPnaPIf7
|
| Size: |
16130
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\bg-page.png
|
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\bg-page.png
|
| Category: |
dropped
|
| Dump: |
bg-page.png0.0.dr
|
| ID: |
dr_93
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.8652086129533165
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlRtFr/bhkxdkNB0NCLyg/ll/jp:6v/lhPnDhQkN2CWSdp
|
| Size: |
82
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\bullet_orange.png
|
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\bullet_orange.png
|
| Category: |
dropped
|
| Dump: |
bullet_orange.png0.0.dr
|
| ID: |
dr_95
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
| Entropy: |
6.137099555480085
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlHl1ihxBkaEb68SRqTmd3K5ZVUYzo5l43reTokFEtjp:6v/lhPlCxS68iqCdaHCk74Ktjp
|
| Size: |
165
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\doctools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\doctools.js
|
| Category: |
dropped
|
| Dump: |
doctools.js0.0.dr
|
| ID: |
dr_97
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.9734126050249445
|
| Encrypted: |
false
|
| Ssdeep: |
192:ZBHxYsMocPTJlo4Pn3W5VNMpAkgUSafhfO0oiFoi/5Z9j9oiu9H8PedSdD8tlS:ZBHncehctCiuixZRGiuVwenO
|
| Size: |
8171
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\documentation_options.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\documentation_options.js
|
| Category: |
dropped
|
| Dump: |
documentation_options.js0.0.dr
|
| ID: |
dr_99
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.282670749633391
|
| Encrypted: |
false
|
| Ssdeep: |
12:17DRRZxvkf5jpI+Up/USqJ4VsN+8WDZsq:VRRfsfD1Up/dqJ4VaDW9x
|
| Size: |
434
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\file.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\file.png
|
| Category: |
dropped
|
| Dump: |
file.png0.0.dr
|
| ID: |
dr_101
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
6.982817860477681
|
| Encrypted: |
false
|
| Ssdeep: |
6:6v/lhP5bSiLBXpmOYy8sNrfqC3FfDD5dat7kcqF3pKiYofFtup:6v/7BbBZnfbF3et7kTp7c
|
| Size: |
286
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\haiku.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\haiku.css
|
| Category: |
dropped
|
| Dump: |
haiku.css0.0.dr
|
| ID: |
dr_104
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.8572745231860806
|
| Encrypted: |
false
|
| Ssdeep: |
96:r8NvTEiHk/+/Y7kv74f5vC5r/O4KuLgwtUoMHh+r/ceFoHNTkURjeFEo2M/NeFog:KvTg/lPFY4fjM/NJ8d+8jCenn
|
| Size: |
7088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\jquery-3.5.1.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\jquery-3.5.1.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.5.1.js0.0.dr
|
| ID: |
dr_107
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.0658003996173315
|
| Encrypted: |
false
|
| Ssdeep: |
6144:pJChNVls+TCtlFhTzeKR7cYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:xf7cYmD43APx+WI+Y7cFyMyDTPfCAeuH
|
| Size: |
287630
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\jquery-3.6.0.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\jquery-3.6.0.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.6.0.js0.0.dr
|
| ID: |
dr_110
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.066983843372853
|
| Encrypted: |
false
|
| Ssdeep: |
6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
|
| Size: |
288580
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\jquery.js
|
ASCII text, with very long lines (65447)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\jquery.js
|
| Category: |
dropped
|
| Dump: |
jquery.js0.0.dr
|
| ID: |
dr_113
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (65447)
|
| Entropy: |
5.289893677458563
|
| Encrypted: |
false
|
| Ssdeep: |
1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
|
| Size: |
89501
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\language_data.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\language_data.js
|
| Category: |
dropped
|
| Dump: |
language_data.js0.0.dr
|
| ID: |
dr_116
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.706345437342995
|
| Encrypted: |
false
|
| Ssdeep: |
96:g5PdAecUhvJiRJ/kJHNpOK9X809yQ7X8iu9aBD9OHu910Z9bQeo+1J9X9R+NfYg:sXcUhvIRZklNpOK9M09yQ7XJu9GD98ur
|
| Size: |
4957
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\minus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\minus.png
|
| Category: |
dropped
|
| Dump: |
minus.png0.0.dr
|
| ID: |
dr_119
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
5.021779901931872
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+ByMlE/UtB1p:6v/lhP8CMyfMq8dp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\plus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\plus.png
|
| Category: |
dropped
|
| Dump: |
plus.png0.0.dr
|
| ID: |
dr_122
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.968947818574501
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+w56xiH1p:6v/lhP8CMylPp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\pygments.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\pygments.css
|
| Category: |
dropped
|
| Dump: |
pygments.css1.0.dr
|
| ID: |
dr_125
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.017911484607375
|
| Encrypted: |
false
|
| Ssdeep: |
96:mkJQcV87VgV3VtVVsEVL/jkFs0KkVuwVI9z:mcu7aR/MEZ/aZEw4z
|
| Size: |
4919
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\searchtools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\searchtools.js
|
| Category: |
dropped
|
| Dump: |
searchtools.js1.0.dr
|
| ID: |
dr_128
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.834132235965012
|
| Encrypted: |
false
|
| Ssdeep: |
384:gwr8jktvZIZa8/7aR0l8TK4q+/qKrQJAySBMSZMjGL7Z:iTl8tsHS60j7Z
|
| Size: |
17088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\underscore-1.13.1.js
|
Unicode text, UTF-8 text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\underscore-1.13.1.js
|
| Category: |
dropped
|
| Dump: |
underscore-1.13.1.js1.0.dr
|
| ID: |
dr_131
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text
|
| Entropy: |
4.7888312487578935
|
| Encrypted: |
false
|
| Ssdeep: |
1536:uFgPYMzG1NxVbecjNTUtHAJ3l1rQPYBD9Vf5Cb:TPYMzGDbeUKpAJA+Cb
|
| Size: |
68420
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\underscore.js
|
ASCII text, with very long lines (18996)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\_static\underscore.js
|
| Category: |
dropped
|
| Dump: |
underscore.js1.0.dr
|
| ID: |
dr_134
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (18996)
|
| Entropy: |
5.203574242965945
|
| Encrypted: |
false
|
| Ssdeep: |
384:zeOIhxIEKCfc5uFWT4LRn8jgZOQV72xF7CaNQWB/O9a/RQ0eb:qOI/IE3c5EWT6RcemF7CaNQWm0/RFc
|
| Size: |
19530
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\changelog.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\changelog.html
|
| Category: |
dropped
|
| Dump: |
changelog.html2.0.dr
|
| ID: |
dr_457
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
| Entropy: |
5.1163259256057865
|
| Encrypted: |
false
|
| Ssdeep: |
768:28DUAtCxEfAFbuKPpiibFkO1edaDz8UtNJgJ:tJtCGCuKH38
|
| Size: |
66186
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\faq.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1128), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\faq.html
|
| Category: |
dropped
|
| Dump: |
faq.html3.0.dr
|
| ID: |
dr_460
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1128), with CRLF line terminators
|
| Entropy: |
5.181471044125973
|
| Encrypted: |
false
|
| Ssdeep: |
192:y6C/5ejyxgDlXDXn2ucnLs8b25+gXkRIIyUjhdP:yL84gDlTJ0i+u2IIyUjhF
|
| Size: |
10247
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\folders.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (543), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\folders.html
|
| Category: |
dropped
|
| Dump: |
folders.html3.0.dr
|
| ID: |
dr_463
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (543), with CRLF line terminators
|
| Entropy: |
5.2508085634647745
|
| Encrypted: |
false
|
| Ssdeep: |
96:j8hUDz7bUuxjiFnGMa2w4EBkIKjcSjc2NL380mHwUfP:j6Cz6p1tgSjlY0Ywm
|
| Size: |
6349
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\genindex.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\genindex.html
|
| Category: |
dropped
|
| Dump: |
genindex.html3.0.dr
|
| ID: |
dr_466
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with CRLF line terminators
|
| Entropy: |
4.821086728463708
|
| Encrypted: |
false
|
| Ssdeep: |
24:Oo0LIHcy+p5ogVMSVMEVMpGVMXVMGHgEE4uEp+WCgnLirFXlR04CcirM4/d9bO1:LxHcyK2dnb+GHgj4uEpg2cTR0xfM4k
|
| Size: |
1770
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\index.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (347), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\index.html
|
| Category: |
dropped
|
| Dump: |
index.html7.0.dr
|
| ID: |
dr_469
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (347), with CRLF line terminators
|
| Entropy: |
5.37992383614434
|
| Encrypted: |
false
|
| Ssdeep: |
48:LhCHcyK2dnb+GDzHXLrIjsmElg2ueXr71Z7gH6b+wJAYAXsijgxYp4rKYggY5gzQ:lC8hUDz7UYmqjuebgWGqu5tGsn3
|
| Size: |
5174
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\objects.inv
|
data
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\objects.inv
|
| Category: |
dropped
|
| Dump: |
objects.inv3.0.dr
|
| ID: |
dr_472
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
data
|
| Entropy: |
7.269790492317941
|
| Encrypted: |
false
|
| Ssdeep: |
12:gvt2/eo3SIixvoXnZ8cwubJf/6u7y7RBUK4Jn89KMQ:ctEeBIGvAZffYFC9nwQ
|
| Size: |
475
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\preferences.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (808), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\preferences.html
|
| Category: |
dropped
|
| Dump: |
preferences.html3.0.dr
|
| ID: |
dr_475
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (808), with CRLF line terminators
|
| Entropy: |
5.321550237756191
|
| Encrypted: |
false
|
| Ssdeep: |
192:Q6Cxn5yMn57t3xwXYHm8iKDtLTV8j5AosdZ:Qdn5yMZtBHHm8z1UTsdZ
|
| Size: |
8687
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\quick_start.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\quick_start.html
|
| Category: |
dropped
|
| Dump: |
quick_start.html3.0.dr
|
| ID: |
dr_489
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.448633993682848
|
| Encrypted: |
false
|
| Ssdeep: |
96:j8hUDz7H2UuxjhX+YWWqarhpBXUYBl8Xz:j6Cu4larLBFBlw
|
| Size: |
4366
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\reprioritize.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\reprioritize.html
|
| Category: |
dropped
|
| Dump: |
reprioritize.html3.0.dr
|
| ID: |
dr_491
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.251547847545848
|
| Encrypted: |
false
|
| Ssdeep: |
96:Q8hUDz74jUu6jbrif57id5gHfaedmO2vsA6BISrf:Q6C4AbuU5gHfaeghvsPBIST
|
| Size: |
5779
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\results.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (866), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\results.html
|
| Category: |
dropped
|
| Dump: |
results.html4.0.dr
|
| ID: |
dr_494
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (866), with CRLF line terminators
|
| Entropy: |
4.90110825285257
|
| Encrypted: |
false
|
| Ssdeep: |
384:bQKS2dqnomZBGAdqSRvaZE1IfouNdqNCEkLo+4CMDXLgb7HocSc+oc3WloDw66xz:bQKS2dqnomZBGAdqSRvaZE1IfddTEkLJ
|
| Size: |
23142
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\search.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\search.html
|
| Category: |
dropped
|
| Dump: |
search.html3.0.dr
|
| ID: |
dr_497
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with CRLF line terminators
|
| Entropy: |
4.778384673110291
|
| Encrypted: |
false
|
| Ssdeep: |
48:LzHcyK9dnb+imGDzHeHj4uECJMg2cywKoTOKdrljNrN6fM4k:H8hnDzaUuxMjcywTO2pN8K
|
| Size: |
2563
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\searchindex.js
|
ASCII text, with very long lines (62443), with no line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\hy\searchindex.js
|
| Category: |
dropped
|
| Dump: |
searchindex.js3.0.dr
|
| ID: |
dr_500
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (62443), with no line terminators
|
| Entropy: |
4.119813734098182
|
| Encrypted: |
false
|
| Ssdeep: |
384:RvptCPIImSTJdtRBOy6EFF1qxz/C6bO6+oHliAfyeyOy9sEjm7tHmLB63TXBhp6f:PU56Iv
|
| Size: |
62443
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.buildinfo
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.buildinfo
|
| Category: |
dropped
|
| Dump: |
.buildinfo.0.dr
|
| ID: |
dr_137
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.854059452786023
|
| Encrypted: |
false
|
| Ssdeep: |
6:S9bTy8x2sQIqeZygjh7e/bJUDBvJ5En8UHMHXrGZwv:YWS/q4ygV7e/bJUxy8UHQrFv
|
| Size: |
234
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\changelog.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\changelog.doctree
|
| Category: |
dropped
|
| Dump: |
changelog.doctree.0.dr
|
| ID: |
dr_179
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.697021131039753
|
| Encrypted: |
false
|
| Ssdeep: |
1536:zBFSXnVjJcqT8AHOHWr4Zx2SNxi0ZXQ0I8zV/S9O6X5Lgl6MdJ6Az8:zXSXVjJcqT8AHOjxNR7z1S9O6XM6Mn/I
|
| Size: |
236869
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\environment.pickle
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\environment.pickle
|
| Category: |
dropped
|
| Dump: |
environment.pickle.0.dr
|
| ID: |
dr_183
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.491605381330942
|
| Encrypted: |
false
|
| Ssdeep: |
6144:nWDZoSOSaHDnC99bDAsBYRuFiP3GnV8i02HZvBRapvd7pVp2Vsp:IZoS/aHDnC99fAsBYRuFiP3GnV8i02HE
|
| Size: |
215041
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\faq.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\faq.doctree
|
| Category: |
dropped
|
| Dump: |
faq.doctree.0.dr
|
| ID: |
dr_187
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.352065269344095
|
| Encrypted: |
false
|
| Ssdeep: |
768:GJnOS9VGraA2Ru3JRu3+D9R+kuCtTFIQ1EC0EdEScNAy3exOfHE0DWSOPHeJa:q9VKaA20v6q2LAXOfHE0DWSsHeE
|
| Size: |
61052
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\folders.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\folders.doctree
|
| Category: |
dropped
|
| Dump: |
folders.doctree0.0.dr
|
| ID: |
dr_191
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.404117464546424
|
| Encrypted: |
false
|
| Ssdeep: |
384:yoWB6BPzPwPy4PXEXzXPeoaFOTxx79llPmkWm8:LEkjPpTxxRPum8
|
| Size: |
14896
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree0.0.dr
|
| ID: |
dr_195
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.731388648367559
|
| Encrypted: |
false
|
| Ssdeep: |
192:Lsd4zCqdZgUrVEcV4J8TJ8VF182/TiPtgkGX0LrF8:LO4zCYpaVJ8TJ8VFK2/TiPmklF8
|
| Size: |
9156
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\preferences.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\preferences.doctree
|
| Category: |
dropped
|
| Dump: |
preferences.doctree1.0.dr
|
| ID: |
dr_200
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.157857482863867
|
| Encrypted: |
false
|
| Ssdeep: |
768:C5xAu0trFCGomugq6prHE0oWETCYuSoJW2TXPqu8:o0trFCGomd5prHE0oWETCYuSoJW2Dqu8
|
| Size: |
61131
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\quick_start.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\quick_start.doctree
|
| Category: |
dropped
|
| Dump: |
quick_start.doctree1.0.dr
|
| ID: |
dr_203
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.6406424133304744
|
| Encrypted: |
false
|
| Ssdeep: |
96:rc+h+ES+vbvhMQp7GrXESJJy89ajtS2sS2Ru3DSyts28kCNKX0LaUH8:9qm73GrXEAJNajPtgkrX0LzH8
|
| Size: |
8545
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\reprioritize.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\reprioritize.doctree
|
| Category: |
dropped
|
| Dump: |
reprioritize.doctree1.0.dr
|
| ID: |
dr_207
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.243180954975616
|
| Encrypted: |
false
|
| Ssdeep: |
96:deCFlMmxDlfPmglMmOBeoskEWMzlzzlSy70qcT7gqPLZfpRI4puRLZQCI4pucDSo:z97PzNkEGD5hYQ4PtgkKX0Lhy8
|
| Size: |
9149
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\results.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\.doctrees\results.doctree
|
| Category: |
dropped
|
| Dump: |
results.doctree1.0.dr
|
| ID: |
dr_211
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.110802575128125
|
| Encrypted: |
false
|
| Ssdeep: |
1536:s5a8MU/cgabRqBJTZ/HTkOwN73FVEth4S8:s5a8MU/SRqBJTFza73wf4
|
| Size: |
66037
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\changelog.rst.txt
|
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\changelog.rst.txt
|
| Category: |
dropped
|
| Dump: |
changelog.rst.txt1.0.dr
|
| ID: |
dr_215
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
| Entropy: |
5.193350937099842
|
| Encrypted: |
false
|
| Ssdeep: |
384:RdJ99laEfgahpkDGlKgAV4YMY2NIyEAobsZUok9:Pr9HIWpkDJT2NIyicrk
|
| Size: |
39473
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\faq.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (1118), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\faq.rst.txt
|
| Category: |
dropped
|
| Dump: |
faq.rst.txt1.0.dr
|
| ID: |
dr_219
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (1118), with CRLF line terminators
|
| Entropy: |
4.39233817703993
|
| Encrypted: |
false
|
| Ssdeep: |
384:NzJ8IQxwCwlRu3BSTfyKfHmnbIobqE+krJNxU8:h9yWRu3kb3ErxU8
|
| Size: |
15289
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\folders.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (514), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\folders.rst.txt
|
| Category: |
dropped
|
| Dump: |
folders.rst.txt1.0.dr
|
| ID: |
dr_223
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (514), with CRLF line terminators
|
| Entropy: |
4.188975898187622
|
| Encrypted: |
false
|
| Ssdeep: |
96:oOrkPrI9rpcO1pa1fgzdXdRMgdaAa9na3un+v:rr4IvPhdXdRFQRaQM
|
| Size: |
3373
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\index.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt1.0.dr
|
| ID: |
dr_227
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.806755540834582
|
| Encrypted: |
false
|
| Ssdeep: |
48:5AdxQHHLKcUVPs5EqZmfHL6V4Zdw06qkojsKRFP8oKw:qdxU+VMZmfZU8NFP8oKw
|
| Size: |
2148
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\preferences.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (724), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\preferences.rst.txt
|
| Category: |
dropped
|
| Dump: |
preferences.rst.txt1.0.dr
|
| ID: |
dr_231
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (724), with CRLF line terminators
|
| Entropy: |
4.373336091750142
|
| Encrypted: |
false
|
| Ssdeep: |
384:WYGstH/JpHuS81j8B+iqywEkzj+HZd052:FGstBpOGFX
|
| Size: |
16259
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\quick_start.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\quick_start.rst.txt
|
| Category: |
dropped
|
| Dump: |
quick_start.rst.txt1.0.dr
|
| ID: |
dr_235
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.172812020378258
|
| Encrypted: |
false
|
| Ssdeep: |
24:dOAofQLXdZSlT3MxdlAOjadl2pwMEMGpL4UoFiGNWUNlMQI8T4jekm:dDvDXUynKLBSsS28TH
|
| Size: |
1781
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\reprioritize.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\reprioritize.rst.txt
|
| Category: |
dropped
|
| Dump: |
reprioritize.rst.txt1.0.dr
|
| ID: |
dr_240
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.111050515390778
|
| Encrypted: |
false
|
| Ssdeep: |
48:NdQY1AFTzkjmUD3iGMfWnD0LmmOLg77z56pecGDdoy652qaZvnxx7FyB9r3ILzNQ:0YGMmUDlhPmHzofy60qSIyf8RIopx9
|
| Size: |
3207
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\results.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (911), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_sources\results.rst.txt
|
| Category: |
dropped
|
| Dump: |
results.rst.txt1.0.dr
|
| ID: |
dr_243
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (911), with CRLF line terminators
|
| Entropy: |
4.26991507636958
|
| Encrypted: |
false
|
| Ssdeep: |
384:aUQlCQwelC3ORiVGmEFqdXysK5/TjNUOwt+CaeF7nZmqahNx1OEQlz:Fb3OgdyR//GkHDC
|
| Size: |
18905
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\_sphinx_javascript_frameworks_compat.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\_sphinx_javascript_frameworks_compat.js
|
| Category: |
dropped
|
| Dump: |
_sphinx_javascript_frameworks_compat.js1.0.dr
|
| ID: |
dr_247
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.685656234416744
|
| Encrypted: |
false
|
| Ssdeep: |
96:y40QiGpiMYersMQLH95nPcnog6fLJ2ZSruogkz5nCyhvQXmiFX/gQlxPZCQ+:qQiGMMYersMQLH95nPcnQfLJ22z5nCyz
|
| Size: |
4418
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\alert_info_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\alert_info_32.png
|
| Category: |
dropped
|
| Dump: |
alert_info_32.png1.0.dr
|
| ID: |
dr_252
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.767283149616434
|
| Encrypted: |
false
|
| Ssdeep: |
24:h3U0gKkG05qOoL3MQJmMu4aK1fW/nB/26CJDlw0hhne:bgKkN5bo7M9ZK1fzDaghne
|
| Size: |
1128
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\alert_warning_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\alert_warning_32.png
|
| Category: |
dropped
|
| Dump: |
alert_warning_32.png1.0.dr
|
| ID: |
dr_257
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.698482624934657
|
| Encrypted: |
false
|
| Ssdeep: |
24:ALyD7nCPeAuBl5A/K/MiRFOyyf9YXXdTDcAKeB8m8:ayDbCe7l51VyCtHcz+8D
|
| Size: |
944
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\base-stemmer.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\base-stemmer.js
|
| Category: |
dropped
|
| Dump: |
base-stemmer.js.0.dr
|
| ID: |
dr_262
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
3.9846912753599915
|
| Encrypted: |
false
|
| Ssdeep: |
192:Gdgqaz7OekdA4LsTLUDMbDb76ZpB/+6XdfyuClOth+6X/y6e/ClpFkWN:GTz10l/C3ae
|
| Size: |
8133
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\basic.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\basic.css
|
| Category: |
dropped
|
| Dump: |
basic.css1.0.dr
|
| ID: |
dr_267
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.800158358247716
|
| Encrypted: |
false
|
| Ssdeep: |
384:RskgMGN4H775IIb/wO0U9rHtZLpwMnaPkhNHMay4QW:p9lPnaPIf7
|
| Size: |
16130
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\bg-page.png
|
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\bg-page.png
|
| Category: |
dropped
|
| Dump: |
bg-page.png1.0.dr
|
| ID: |
dr_272
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.8652086129533165
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlRtFr/bhkxdkNB0NCLyg/ll/jp:6v/lhPnDhQkN2CWSdp
|
| Size: |
82
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\bullet_orange.png
|
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\bullet_orange.png
|
| Category: |
dropped
|
| Dump: |
bullet_orange.png1.0.dr
|
| ID: |
dr_277
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
| Entropy: |
6.137099555480085
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlHl1ihxBkaEb68SRqTmd3K5ZVUYzo5l43reTokFEtjp:6v/lhPlCxS68iqCdaHCk74Ktjp
|
| Size: |
165
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\doctools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\doctools.js
|
| Category: |
dropped
|
| Dump: |
doctools.js1.0.dr
|
| ID: |
dr_282
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.9734126050249445
|
| Encrypted: |
false
|
| Ssdeep: |
192:ZBHxYsMocPTJlo4Pn3W5VNMpAkgUSafhfO0oiFoi/5Z9j9oiu9H8PedSdD8tlS:ZBHncehctCiuixZRGiuVwenO
|
| Size: |
8171
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\documentation_options.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\documentation_options.js
|
| Category: |
dropped
|
| Dump: |
documentation_options.js1.0.dr
|
| ID: |
dr_290
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.2756700436372705
|
| Encrypted: |
false
|
| Ssdeep: |
6:qOppyXBXzibDRd7HyLmx5wBx2kf8QWspIdQUp/UqjqJ4VsX5as+8W2avpfsq:17DRRZxvkf/pI+Up/USqJ4VsN+8WDZsq
|
| Size: |
434
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\file.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\file.png
|
| Category: |
dropped
|
| Dump: |
file.png1.0.dr
|
| ID: |
dr_293
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
6.982817860477681
|
| Encrypted: |
false
|
| Ssdeep: |
6:6v/lhP5bSiLBXpmOYy8sNrfqC3FfDD5dat7kcqF3pKiYofFtup:6v/7BbBZnfbF3et7kTp7c
|
| Size: |
286
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\haiku.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\haiku.css
|
| Category: |
dropped
|
| Dump: |
haiku.css1.0.dr
|
| ID: |
dr_297
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.8572745231860806
|
| Encrypted: |
false
|
| Ssdeep: |
96:r8NvTEiHk/+/Y7kv74f5vC5r/O4KuLgwtUoMHh+r/ceFoHNTkURjeFEo2M/NeFog:KvTg/lPFY4fjM/NJ8d+8jCenn
|
| Size: |
7088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\jquery-3.6.0.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\jquery-3.6.0.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.6.0.js1.0.dr
|
| ID: |
dr_302
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.066983843372853
|
| Encrypted: |
false
|
| Ssdeep: |
6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
|
| Size: |
288580
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\jquery.js
|
ASCII text, with very long lines (65447)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\jquery.js
|
| Category: |
dropped
|
| Dump: |
jquery.js1.0.dr
|
| ID: |
dr_307
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (65447)
|
| Entropy: |
5.289893677458563
|
| Encrypted: |
false
|
| Ssdeep: |
1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
|
| Size: |
89501
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\language_data.js
|
Unicode text, UTF-8 text, with very long lines (5413), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\language_data.js
|
| Category: |
dropped
|
| Dump: |
language_data.js1.0.dr
|
| ID: |
dr_312
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (5413), with CRLF line terminators
|
| Entropy: |
5.38913437378569
|
| Encrypted: |
false
|
| Ssdeep: |
192:sEN0qhXtkRXJlNPrLJ43/OTKrhgxuHSg1e:scXtkRXJLP3J4mTKl1e
|
| Size: |
13981
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\minus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\minus.png
|
| Category: |
dropped
|
| Dump: |
minus.png1.0.dr
|
| ID: |
dr_317
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
5.021779901931872
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+ByMlE/UtB1p:6v/lhP8CMyfMq8dp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\plus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\plus.png
|
| Category: |
dropped
|
| Dump: |
plus.png1.0.dr
|
| ID: |
dr_322
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.968947818574501
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+w56xiH1p:6v/lhP8CMylPp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\pygments.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\pygments.css
|
| Category: |
dropped
|
| Dump: |
pygments.css2.0.dr
|
| ID: |
dr_327
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.017911484607375
|
| Encrypted: |
false
|
| Ssdeep: |
96:mkJQcV87VgV3VtVVsEVL/jkFs0KkVuwVI9z:mcu7aR/MEZ/aZEw4z
|
| Size: |
4919
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\russian-stemmer.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\russian-stemmer.js
|
| Category: |
dropped
|
| Dump: |
russian-stemmer.js.0.dr
|
| ID: |
dr_332
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
3.815016617015695
|
| Encrypted: |
false
|
| Ssdeep: |
192:Y0ntugG5eXqaQTCSePUHYePUnmePUoMePUfGp9m11ZnSIyGulHnl1YYoi4iGy9lh:i5gbUmVrURZK
|
| Size: |
17996
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\searchtools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\searchtools.js
|
| Category: |
dropped
|
| Dump: |
searchtools.js2.0.dr
|
| ID: |
dr_349
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.834132235965012
|
| Encrypted: |
false
|
| Ssdeep: |
384:gwr8jktvZIZa8/7aR0l8TK4q+/qKrQJAySBMSZMjGL7Z:iTl8tsHS60j7Z
|
| Size: |
17088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\translations.js
|
HTML document, ASCII text, with very long lines (831)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\translations.js
|
| Category: |
dropped
|
| Dump: |
translations.js.0.dr
|
| ID: |
dr_351
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, ASCII text, with very long lines (831)
|
| Entropy: |
4.330713082792913
|
| Encrypted: |
false
|
| Ssdeep: |
192:0IAShg2xMHPNUv9SiCR5feKy9t6IRYA010g6:pjSiCjfeHam
|
| Size: |
8313
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\underscore-1.13.1.js
|
Unicode text, UTF-8 text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\underscore-1.13.1.js
|
| Category: |
dropped
|
| Dump: |
underscore-1.13.1.js2.0.dr
|
| ID: |
dr_354
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text
|
| Entropy: |
4.7888312487578935
|
| Encrypted: |
false
|
| Ssdeep: |
1536:uFgPYMzG1NxVbecjNTUtHAJ3l1rQPYBD9Vf5Cb:TPYMzGDbeUKpAJA+Cb
|
| Size: |
68420
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\underscore.js
|
ASCII text, with very long lines (18996)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\_static\underscore.js
|
| Category: |
dropped
|
| Dump: |
underscore.js2.0.dr
|
| ID: |
dr_358
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (18996)
|
| Entropy: |
5.203574242965945
|
| Encrypted: |
false
|
| Ssdeep: |
384:zeOIhxIEKCfc5uFWT4LRn8jgZOQV72xF7CaNQWB/O9a/RQ0eb:qOI/IE3c5EWT6RcemF7CaNQWm0/RFc
|
| Size: |
19530
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\changelog.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\changelog.html
|
| Category: |
dropped
|
| Dump: |
changelog.html.0.dr
|
| ID: |
dr_140
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
| Entropy: |
5.135854821016412
|
| Encrypted: |
false
|
| Ssdeep: |
768:LNqAtCJXfAFZ/pYicrkO1AnaDNMEJNnYj:B/tCtexKe
|
| Size: |
66053
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\faq.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1121), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\faq.html
|
| Category: |
dropped
|
| Dump: |
faq.html.0.dr
|
| ID: |
dr_143
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1121), with CRLF line terminators
|
| Entropy: |
5.128958147170357
|
| Encrypted: |
false
|
| Ssdeep: |
192:+pfY6XsZDA9/vYAfRu3BInaRBTDcsZR7Nyff:jKeE9/AAfRu3BfTDFJNyff
|
| Size: |
11128
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\folders.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (545), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\folders.html
|
| Category: |
dropped
|
| Dump: |
folders.html.0.dr
|
| ID: |
dr_146
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (545), with CRLF line terminators
|
| Entropy: |
5.279131835603422
|
| Encrypted: |
false
|
| Ssdeep: |
96:jhp+DU32UeOjaecZRrkPFI9MpcO1pEKfMzSXiwSUgdaAaYerGTufk6BecZp:9pfda7jr8IMPuSXiwS9QRrGWL7D
|
| Size: |
6497
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\genindex.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\genindex.html
|
| Category: |
dropped
|
| Dump: |
genindex.html.0.dr
|
| ID: |
dr_149
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.177274408572758
|
| Encrypted: |
false
|
| Ssdeep: |
24:OoSLuqMHcy+p5ogVMSVMEVMpGVMXVMIWAVMkSuVEE4cTEhD+WCgnLirVcXZfR04C:L1cyK2dnb+IWTz4j4cTEBg2cwR0xfp4k
|
| Size: |
2009
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\index.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (322), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\index.html
|
| Category: |
dropped
|
| Dump: |
index.html3.0.dr
|
| ID: |
dr_152
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (322), with CRLF line terminators
|
| Entropy: |
5.387823191767877
|
| Encrypted: |
false
|
| Ssdeep: |
96:f3hp+DUZ2YmqjWecA5rKx4wecpcJ6G2Omecj:ZpfnW7A5rKyw7p3z7j
|
| Size: |
5575
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\objects.inv
|
data
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\objects.inv
|
| Category: |
dropped
|
| Dump: |
objects.inv.0.dr
|
| ID: |
dr_155
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
data
|
| Entropy: |
7.386274947275582
|
| Encrypted: |
false
|
| Ssdeep: |
12:gvt2/Jflir0aSc2YAtbx9xPZ8p/q4flAdRG:ctEJQr92dbx/R8pDlAdRG
|
| Size: |
511
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\preferences.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (881), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\preferences.html
|
| Category: |
dropped
|
| Dump: |
preferences.html.0.dr
|
| ID: |
dr_158
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (881), with CRLF line terminators
|
| Entropy: |
5.312004615748274
|
| Encrypted: |
false
|
| Ssdeep: |
192:Kpfr5jOWGm1tezNHKa5jMPQ7CL01jCngPF1MUUdNgxD:ehTGm25HKa5jpwgPF1MZ3gd
|
| Size: |
8777
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\quick_start.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\quick_start.html
|
| Category: |
dropped
|
| Dump: |
quick_start.html.0.dr
|
| ID: |
dr_161
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.413444054088687
|
| Encrypted: |
false
|
| Ssdeep: |
48:LR9cyK2dnb+IWTiD4fLrm52j4cTEUcMg2hXabZnQ2vD2jkoFvsuQpDHTLbhpsS28:dWhp+DUW2Ue3cMjhX+nFvgG3QS2wX+2
|
| Size: |
4607
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\reprioritize.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\reprioritize.html
|
| Category: |
dropped
|
| Dump: |
reprioritize.html.0.dr
|
| ID: |
dr_164
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.213300910681325
|
| Encrypted: |
false
|
| Ssdeep: |
96:3hp+DUbUeWjtNGMmfBeo2kE4zosT6gqEIyHCIopxn3:RpfSEKkEehHk
|
| Size: |
6015
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\results.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (957), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\results.html
|
| Category: |
dropped
|
| Dump: |
results.html0.0.dr
|
| ID: |
dr_167
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (957), with CRLF line terminators
|
| Entropy: |
4.912833713274576
|
| Encrypted: |
false
|
| Ssdeep: |
384:SVa8QLb+QZeW+tLOcs3Y86jqdpysN5nTneL8hsEJtTDogFxKFJsHtN/1OD+PUWL6:SViZatLOD5y8nTeLSt5yYp6
|
| Size: |
23905
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\search.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\search.html
|
| Category: |
dropped
|
| Dump: |
search.html.0.dr
|
| ID: |
dr_171
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.091995365715156
|
| Encrypted: |
false
|
| Ssdeep: |
48:LKNcyK9dnb+IWTimiD4GHj4cTEihg2cX5KoT3RKdrRrN6fp4k:jh2qDLUedjcpTBIN8X
|
| Size: |
2732
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\searchindex.js
|
ASCII text, with very long lines (47028), with no line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\ru\searchindex.js
|
| Category: |
dropped
|
| Dump: |
searchindex.js.0.dr
|
| ID: |
dr_175
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (47028), with no line terminators
|
| Entropy: |
4.285721764300082
|
| Encrypted: |
false
|
| Ssdeep: |
384:AdNwlG78IDNAJRyiSUuZUrjveNmCVcwZfOO84ozfLgzkKPyG6z+LjlqGJA0FwU1E:hWhmWLfx22SI+
|
| Size: |
47028
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.buildinfo
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.buildinfo
|
| Category: |
dropped
|
| Dump: |
.buildinfo1.0.dr
|
| ID: |
dr_362
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.785800269974249
|
| Encrypted: |
false
|
| Ssdeep: |
6:S9bTy8x2sQIqeZygjh7e/bJUDBvA3l5mDo4HXrGZwv:YWS/q4ygV7e/bJU0QoMrFv
|
| Size: |
234
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\changelog.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\changelog.doctree
|
| Category: |
dropped
|
| Dump: |
changelog.doctree2.0.dr
|
| ID: |
dr_424
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.697054714307431
|
| Encrypted: |
false
|
| Ssdeep: |
1536:gBFSXnVjJcqT8AHOHWr4Zx2SNxi0ZXQ0I8zV/S9O6X5Lgl6Md06Az8:gXSXVjJcqT8AHOjxNR7z1S9O6XM6MK/I
|
| Size: |
236869
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\environment.pickle
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\environment.pickle
|
| Category: |
dropped
|
| Dump: |
environment.pickle2.0.dr
|
| ID: |
dr_428
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.524048687330097
|
| Encrypted: |
false
|
| Ssdeep: |
3072:w6WDZjceRjIixSloGLm0TLcBAB6BnvvKRG:XWDZoSj3Wo3C8MRG
|
| Size: |
211486
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\faq.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\faq.doctree
|
| Category: |
dropped
|
| Dump: |
faq.doctree2.0.dr
|
| ID: |
dr_432
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.4503906002564975
|
| Encrypted: |
false
|
| Ssdeep: |
768:HgJ9k6ulwL38CBAsXe+fy614v6YIbjrDXdfW2P/Nea:AJewLtD/NZ
|
| Size: |
59964
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\folders.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\folders.doctree
|
| Category: |
dropped
|
| Dump: |
folders.doctree.0.dr
|
| ID: |
dr_28
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.409387743437568
|
| Encrypted: |
false
|
| Ssdeep: |
384:SY8zBEz8zV8zAIhE28dPD4BKDKSK6p/i/UPJPmkIRg8:SK8d8BmlLSEPgq8
|
| Size: |
14289
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\index.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\index.doctree
|
| Category: |
dropped
|
| Dump: |
index.doctree.0.dr
|
| ID: |
dr_30
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.804725486315274
|
| Encrypted: |
false
|
| Ssdeep: |
192:6iqXoGOEWV7ZGV7ZruHuSWSWjWJImJvOdPtgkhX0LvF8:6iqXoGOE96pWSWjWJIiOdPmkix8
|
| Size: |
9083
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\preferences.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\preferences.doctree
|
| Category: |
dropped
|
| Dump: |
preferences.doctree.0.dr
|
| ID: |
dr_32
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.23797326240846
|
| Encrypted: |
false
|
| Ssdeep: |
768:6ow4wxwKUUBNJrHQlnON7sqQahXN6xcSHUStsxqnXpSwdg5HuqdxqdCM2wxhBphi:bDkzUUBNJrHQlnON7sqQm6x9mo3wG8
|
| Size: |
59341
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\quick_start.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\quick_start.doctree
|
| Category: |
dropped
|
| Dump: |
quick_start.doctree.0.dr
|
| ID: |
dr_34
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.6571782941430655
|
| Encrypted: |
false
|
| Ssdeep: |
96:99+M+EJQuJ1GiJ1GlCijXCiXCitiEXERE0E9CRNPgReRNPgRVc3DSyts28koNKXI:C8fJ1PJ1zUS7EU6zjhSPtgkBX0LptM8
|
| Size: |
8314
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\reprioritize.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\reprioritize.doctree
|
| Category: |
dropped
|
| Dump: |
reprioritize.doctree.0.dr
|
| ID: |
dr_36
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.29809261349922
|
| Encrypted: |
false
|
| Ssdeep: |
192:qZobAa0txwbAa5eb6k2i57biJ+PtgkfX0Lhy8:0oIwMPmkcQ8
|
| Size: |
9031
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\results.doctree
|
XENIX 8086 relocatable or 80286 small model
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\.doctrees\results.doctree
|
| Category: |
dropped
|
| Dump: |
results.doctree.0.dr
|
| ID: |
dr_38
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
XENIX 8086 relocatable or 80286 small model
|
| Entropy: |
5.149539969773274
|
| Encrypted: |
false
|
| Ssdeep: |
768:ZGBLYlqLmbBMAs7jfjABwnzO8YgQ5mTQ5mnQ5mXG5mUG5mCG5mMzJO9AvmYEBiPv:8BLYZdT87c8ZfDXBUBCBMzJMDBAFQ8
|
| Size: |
64353
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\changelog.rst.txt
|
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\changelog.rst.txt
|
| Category: |
dropped
|
| Dump: |
changelog.rst.txt.0.dr
|
| ID: |
dr_40
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text, with very long lines (466), with CRLF line terminators
|
| Entropy: |
5.193350937099842
|
| Encrypted: |
false
|
| Ssdeep: |
384:RdJ99laEfgahpkDGlKgAV4YMY2NIyEAobsZUok9:Pr9HIWpkDJT2NIyicrk
|
| Size: |
39473
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\faq.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (1053), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\faq.rst.txt
|
| Category: |
dropped
|
| Dump: |
faq.rst.txt.0.dr
|
| ID: |
dr_42
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (1053), with CRLF line terminators
|
| Entropy: |
4.485216004928769
|
| Encrypted: |
false
|
| Ssdeep: |
192:sqV7Zi4VFlyuhsxkaqB5kP8qWzTFuKljSldAHO8avQpGfiZ3v82T14a/9iH/F:cEdDh1/nPC+08iH/F
|
| Size: |
14628
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\folders.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (647), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\folders.rst.txt
|
| Category: |
dropped
|
| Dump: |
folders.rst.txt.0.dr
|
| ID: |
dr_44
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (647), with CRLF line terminators
|
| Entropy: |
4.21267163153484
|
| Encrypted: |
false
|
| Ssdeep: |
96:DM8zGwaaYIk8ekyO9G2Ohj5tR22U44ZC5zMqpfZkKeF0YS0/1FDv:w8zG0HEdc4mzKen/3
|
| Size: |
3306
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\index.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\index.rst.txt
|
| Category: |
dropped
|
| Dump: |
index.rst.txt.0.dr
|
| ID: |
dr_46
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.94159214360751
|
| Encrypted: |
false
|
| Ssdeep: |
48:JqxQtUD13V7SBIRPquGUDiL8eJKU7mIprNv1MWYP8oKw:JqxWiV7S4yuG1la+N48oKw
|
| Size: |
2088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\preferences.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (719), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\preferences.rst.txt
|
| Category: |
dropped
|
| Dump: |
preferences.rst.txt.0.dr
|
| ID: |
dr_48
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (719), with CRLF line terminators
|
| Entropy: |
4.490851265055261
|
| Encrypted: |
false
|
| Ssdeep: |
384:xFPYOtAzd9SAva08cltgfZtwIS0FNtxqnktvydDpfLRhC08gN2:zwdB/ibZ1SkxqnwqdDpyB
|
| Size: |
15584
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\quick_start.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\quick_start.rst.txt
|
| Category: |
dropped
|
| Dump: |
quick_start.rst.txt.0.dr
|
| ID: |
dr_50
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.194104982316177
|
| Encrypted: |
false
|
| Ssdeep: |
48:ASaQI0yKfx1NjvIZ67C9MCE990pyKbNPgRa:AgJ1GQCiCEeRNPgRa
|
| Size: |
1736
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\reprioritize.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\reprioritize.rst.txt
|
| Category: |
dropped
|
| Dump: |
reprioritize.rst.txt.0.dr
|
| ID: |
dr_52
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
| Entropy: |
4.182893567035882
|
| Encrypted: |
false
|
| Ssdeep: |
96:OpIZAA43aDonxumHNlClXn3K2umOAdbsC4E5:ObAdDpEu62Zmy
|
| Size: |
3147
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\results.rst.txt
|
Unicode text, UTF-8 (with BOM) text, with very long lines (891), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_sources\results.rst.txt
|
| Category: |
dropped
|
| Dump: |
results.rst.txt.0.dr
|
| ID: |
dr_53
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 (with BOM) text, with very long lines (891), with CRLF line terminators
|
| Entropy: |
4.325349957543378
|
| Encrypted: |
false
|
| Ssdeep: |
384:IPDT43uqTjpmCqwdZTdkgMQOimPmsGOimPK1hW5D5:GHyjNpteQ5mVG5mijI1
|
| Size: |
18343
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\_sphinx_javascript_frameworks_compat.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\_sphinx_javascript_frameworks_compat.js
|
| Category: |
dropped
|
| Dump: |
_sphinx_javascript_frameworks_compat.js.0.dr
|
| ID: |
dr_54
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.685656234416744
|
| Encrypted: |
false
|
| Ssdeep: |
96:y40QiGpiMYersMQLH95nPcnog6fLJ2ZSruogkz5nCyhvQXmiFX/gQlxPZCQ+:qQiGMMYersMQLH95nPcnQfLJ22z5nCyz
|
| Size: |
4418
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\alert_info_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\alert_info_32.png
|
| Category: |
dropped
|
| Dump: |
alert_info_32.png.0.dr
|
| ID: |
dr_55
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.767283149616434
|
| Encrypted: |
false
|
| Ssdeep: |
24:h3U0gKkG05qOoL3MQJmMu4aK1fW/nB/26CJDlw0hhne:bgKkN5bo7M9ZK1fzDaghne
|
| Size: |
1128
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\alert_warning_32.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\alert_warning_32.png
|
| Category: |
dropped
|
| Dump: |
alert_warning_32.png.0.dr
|
| ID: |
dr_56
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
7.698482624934657
|
| Encrypted: |
false
|
| Ssdeep: |
24:ALyD7nCPeAuBl5A/K/MiRFOyyf9YXXdTDcAKeB8m8:ayDbCe7l51VyCtHcz+8D
|
| Size: |
944
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\basic.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\basic.css
|
| Category: |
dropped
|
| Dump: |
basic.css.0.dr
|
| ID: |
dr_57
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.800158358247716
|
| Encrypted: |
false
|
| Ssdeep: |
384:RskgMGN4H775IIb/wO0U9rHtZLpwMnaPkhNHMay4QW:p9lPnaPIf7
|
| Size: |
16130
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\bg-page.png
|
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\bg-page.png
|
| Category: |
dropped
|
| Dump: |
bg-page.png.0.dr
|
| ID: |
dr_58
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 12 x 104, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.8652086129533165
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlRtFr/bhkxdkNB0NCLyg/ll/jp:6v/lhPnDhQkN2CWSdp
|
| Size: |
82
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\bullet_orange.png
|
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\bullet_orange.png
|
| Category: |
dropped
|
| Dump: |
bullet_orange.png.0.dr
|
| ID: |
dr_59
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
|
| Entropy: |
6.137099555480085
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPlHl1ihxBkaEb68SRqTmd3K5ZVUYzo5l43reTokFEtjp:6v/lhPlCxS68iqCdaHCk74Ktjp
|
| Size: |
165
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\doctools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\doctools.js
|
| Category: |
dropped
|
| Dump: |
doctools.js.0.dr
|
| ID: |
dr_60
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.9734126050249445
|
| Encrypted: |
false
|
| Ssdeep: |
192:ZBHxYsMocPTJlo4Pn3W5VNMpAkgUSafhfO0oiFoi/5Z9j9oiu9H8PedSdD8tlS:ZBHncehctCiuixZRGiuVwenO
|
| Size: |
8171
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\documentation_options.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\documentation_options.js
|
| Category: |
dropped
|
| Dump: |
documentation_options.js.0.dr
|
| ID: |
dr_62
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.285213152969243
|
| Encrypted: |
false
|
| Ssdeep: |
12:17DRRZxvkfuPpI+Up/USqJ4VsN+8WDZsq:VRRfsfG1Up/dqJ4VaDW9x
|
| Size: |
434
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\file.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\file.png
|
| Category: |
dropped
|
| Dump: |
file.png.0.dr
|
| ID: |
dr_64
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
| Entropy: |
6.982817860477681
|
| Encrypted: |
false
|
| Ssdeep: |
6:6v/lhP5bSiLBXpmOYy8sNrfqC3FfDD5dat7kcqF3pKiYofFtup:6v/7BbBZnfbF3et7kTp7c
|
| Size: |
286
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\haiku.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\haiku.css
|
| Category: |
dropped
|
| Dump: |
haiku.css.0.dr
|
| ID: |
dr_66
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.8572745231860806
|
| Encrypted: |
false
|
| Ssdeep: |
96:r8NvTEiHk/+/Y7kv74f5vC5r/O4KuLgwtUoMHh+r/ceFoHNTkURjeFEo2M/NeFog:KvTg/lPFY4fjM/NJ8d+8jCenn
|
| Size: |
7088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\jquery-3.5.1.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\jquery-3.5.1.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.5.1.js.0.dr
|
| ID: |
dr_68
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.0658003996173315
|
| Encrypted: |
false
|
| Ssdeep: |
6144:pJChNVls+TCtlFhTzeKR7cYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:xf7cYmD43APx+WI+Y7cFyMyDTPfCAeuH
|
| Size: |
287630
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\jquery-3.6.0.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\jquery-3.6.0.js
|
| Category: |
dropped
|
| Dump: |
jquery-3.6.0.js.0.dr
|
| ID: |
dr_70
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.066983843372853
|
| Encrypted: |
false
|
| Ssdeep: |
6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
|
| Size: |
288580
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\jquery.js
|
ASCII text, with very long lines (65447)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\jquery.js
|
| Category: |
dropped
|
| Dump: |
jquery.js.0.dr
|
| ID: |
dr_72
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (65447)
|
| Entropy: |
5.289893677458563
|
| Encrypted: |
false
|
| Ssdeep: |
1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
|
| Size: |
89501
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\language_data.js
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\language_data.js
|
| Category: |
dropped
|
| Dump: |
language_data.js.0.dr
|
| ID: |
dr_74
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.706345437342995
|
| Encrypted: |
false
|
| Ssdeep: |
96:g5PdAecUhvJiRJ/kJHNpOK9X809yQ7X8iu9aBD9OHu910Z9bQeo+1J9X9R+NfYg:sXcUhvIRZklNpOK9M09yQ7XJu9GD98ur
|
| Size: |
4957
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\minus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\minus.png
|
| Category: |
dropped
|
| Dump: |
minus.png.0.dr
|
| ID: |
dr_76
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
5.021779901931872
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+ByMlE/UtB1p:6v/lhP8CMyfMq8dp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\plus.png
|
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\plus.png
|
| Category: |
dropped
|
| Dump: |
plus.png.0.dr
|
| ID: |
dr_78
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
|
| Entropy: |
4.968947818574501
|
| Encrypted: |
false
|
| Ssdeep: |
3:yionv//thPl6Cpuy+w56xiH1p:6v/lhP8CMylPp
|
| Size: |
90
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\pygments.css
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\pygments.css
|
| Category: |
dropped
|
| Dump: |
pygments.css.0.dr
|
| ID: |
dr_80
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
5.017911484607375
|
| Encrypted: |
false
|
| Ssdeep: |
96:mkJQcV87VgV3VtVVsEVL/jkFs0KkVuwVI9z:mcu7aR/MEZ/aZEw4z
|
| Size: |
4919
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\searchtools.js
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\searchtools.js
|
| Category: |
dropped
|
| Dump: |
searchtools.js.0.dr
|
| ID: |
dr_82
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.834132235965012
|
| Encrypted: |
false
|
| Ssdeep: |
384:gwr8jktvZIZa8/7aR0l8TK4q+/qKrQJAySBMSZMjGL7Z:iTl8tsHS60j7Z
|
| Size: |
17088
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\underscore-1.13.1.js
|
Unicode text, UTF-8 text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\underscore-1.13.1.js
|
| Category: |
dropped
|
| Dump: |
underscore-1.13.1.js.0.dr
|
| ID: |
dr_84
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text
|
| Entropy: |
4.7888312487578935
|
| Encrypted: |
false
|
| Ssdeep: |
1536:uFgPYMzG1NxVbecjNTUtHAJ3l1rQPYBD9Vf5Cb:TPYMzGDbeUKpAJA+Cb
|
| Size: |
68420
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\underscore.js
|
ASCII text, with very long lines (18996)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\_static\underscore.js
|
| Category: |
dropped
|
| Dump: |
underscore.js.0.dr
|
| ID: |
dr_86
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (18996)
|
| Entropy: |
5.203574242965945
|
| Encrypted: |
false
|
| Ssdeep: |
384:zeOIhxIEKCfc5uFWT4LRn8jgZOQV72xF7CaNQWB/O9a/RQ0eb:qOI/IE3c5EWT6RcemF7CaNQWm0/RFc
|
| Size: |
19530
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\changelog.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\changelog.html
|
| Category: |
dropped
|
| Dump: |
changelog.html1.0.dr
|
| ID: |
dr_366
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (725), with CRLF line terminators
|
| Entropy: |
5.118032351662477
|
| Encrypted: |
false
|
| Ssdeep: |
768:j9OqAtCJXfAFZ/pYicrkO1AnaDNMEJNnYE:8/tCtexKr
|
| Size: |
65864
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\faq.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (1056), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\faq.html
|
| Category: |
dropped
|
| Dump: |
faq.html2.0.dr
|
| ID: |
dr_370
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (1056), with CRLF line terminators
|
| Entropy: |
5.199971667770977
|
| Encrypted: |
false
|
| Ssdeep: |
192:y6YAQqxIcqB5pBM2liTFub2sfTKZ3v8JXsmdlln:yUQjDM2eX0C03Pt
|
| Size: |
10636
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\folders.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (691), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\folders.html
|
| Category: |
dropped
|
| Dump: |
folders.html2.0.dr
|
| ID: |
dr_374
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (691), with CRLF line terminators
|
| Entropy: |
5.3087150946261845
|
| Encrypted: |
false
|
| Ssdeep: |
96:C8hiDzO2UuQ4jkcZYc8zGwa7yIj8ykTO9q2OmQj8tRl7UE2CAC5zMqBfZxKTs0YK:C6YvVGc8zGQ6IJlEkQKT8/3A
|
| Size: |
6276
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\genindex.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\genindex.html
|
| Category: |
dropped
|
| Dump: |
genindex.html2.0.dr
|
| ID: |
dr_378
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
4.945815784690048
|
| Encrypted: |
false
|
| Ssdeep: |
24:Oo5LeHcy+p5ogVMSVMEVMpGVMXVMmmVEE4uE6g+WCgnLirFXxR04CcirM4/d9bO1:LQHcyK2dnb+mgj4uE6gg2cfR0xfM4k
|
| Size: |
1802
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\index.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\index.html
|
| Category: |
dropped
|
| Dump: |
index.html6.0.dr
|
| ID: |
dr_382
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.372964896168326
|
| Encrypted: |
false
|
| Ssdeep: |
96:uC8hiDzk2Ymqjfcw+NrkJcwcqoaKRHiKEc7cj:J6YkkwWBwcVJEHj
|
| Size: |
4976
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\objects.inv
|
data
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\objects.inv
|
| Category: |
dropped
|
| Dump: |
objects.inv2.0.dr
|
| ID: |
dr_399
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
data
|
| Entropy: |
7.25727243232053
|
| Encrypted: |
false
|
| Ssdeep: |
6:S988/CDSt2M/wT1nTfy+XngnenL6yVB9AH+YGPNB1g/Fr+tRTAboOyJMo2gi2SX0:gvt2/R6+3g6YYB14atRGy3i7A2bKQV0
|
| Size: |
487
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\preferences.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (889), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\preferences.html
|
| Category: |
dropped
|
| Dump: |
preferences.html2.0.dr
|
| ID: |
dr_401
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (889), with CRLF line terminators
|
| Entropy: |
5.3793929738903286
|
| Encrypted: |
false
|
| Ssdeep: |
192:I6YqTgwjDL8iem5JKHilV0BH06vt1QpHHstv+tpRYRjIVq5VU2h0+7xqiONs80:IoVjDolAJKCbO06vt10nstv+feRjIVqH
|
| Size: |
8818
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\quick_start.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\quick_start.html
|
| Category: |
dropped
|
| Dump: |
quick_start.html2.0.dr
|
| ID: |
dr_404
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.430855129820842
|
| Encrypted: |
false
|
| Ssdeep: |
96:Hj8hiDzr2Uu+cMjhXGulLuJ1GirCi1rE21yRNPgRaXG2:D6YeEgmyJ1F2OQ2jb2
|
| Size: |
4422
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\reprioritize.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\reprioritize.html
|
| Category: |
dropped
|
| Dump: |
reprioritize.html2.0.dr
|
| ID: |
dr_408
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.286379454776832
|
| Encrypted: |
false
|
| Ssdeep: |
96:B8hiDzTUuAjNbIZAA43aAoMxQQ5lUlXn3xbumOAdfse4E/0:B6YqpbAdAS08hbZmP
|
| Size: |
5766
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\results.html
|
HTML document, Unicode text, UTF-8 text, with very long lines (937), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\results.html
|
| Category: |
dropped
|
| Dump: |
results.html3.0.dr
|
| ID: |
dr_412
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with very long lines (937), with CRLF line terminators
|
| Entropy: |
4.964577428950629
|
| Encrypted: |
false
|
| Ssdeep: |
384:V2uZ27TD3DxzTjr1h67kJfJvpIkQOimPHkGOimPfPoWIgGh:V2c2//5j5h6ujQ5msG5mnANh
|
| Size: |
23188
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\search.html
|
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\search.html
|
| Category: |
dropped
|
| Dump: |
search.html2.0.dr
|
| ID: |
dr_416
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
|
| Entropy: |
5.008503879940128
|
| Encrypted: |
false
|
| Ssdeep: |
48:LuHcyK9dnb+immzD2Hj4uEbzg2c/LKoTvaTJoKdrjrN6fM4k:i8hjDyUuqzjc/LTy62N8K
|
| Size: |
2635
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\searchindex.js
|
ASCII text, with very long lines (64997), with no line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\help\uk\searchindex.js
|
| Category: |
dropped
|
| Dump: |
searchindex.js2.0.dr
|
| ID: |
dr_420
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text, with very long lines (64997), with no line terminators
|
| Entropy: |
4.035352850612115
|
| Encrypted: |
false
|
| Ssdeep: |
384:LvzoCPIImSTIB2RBOy6kFF1e5uGcm5mBAKSOmAZ/Pv2plXLNzyBgBsrIEuSV4qjl:XHl6oeR8ZuxZQwkkQa2P
|
| Size: |
64997
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\libEGL.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\libEGL.dll
|
| Category: |
dropped
|
| Dump: |
libEGL.dll.0.dr
|
| ID: |
dr_588
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.961464514165753
|
| Encrypted: |
false
|
| Ssdeep: |
384:KEyYvsyDQrjwgut4Maw+XZndDGg7Dgf2hU:RvszjwgocwOhdDGEUf2hU
|
| Size: |
25072
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\libGLESv2.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\libGLESv2.dll
|
| Category: |
dropped
|
| Dump: |
libGLESv2.dll.0.dr
|
| ID: |
dr_599
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.382356347494905
|
| Encrypted: |
false
|
| Ssdeep: |
49152:sU0O89Onk/cNTgO/WSLqfTPnK+9eaOiY95ZEQryD1pPG3L:MaHUKt3L
|
| Size: |
3385328
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\libcrypto-1_1.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\libcrypto-1_1.dll
|
| Category: |
dropped
|
| Dump: |
libcrypto-1_1.dll.0.dr
|
| ID: |
dr_600
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.096012359425593
|
| Encrypted: |
false
|
| Ssdeep: |
98304:kw+jlHDGV+EafwAlViBksm1CPwDv3uFfJ1:1slHDG2fwAriXm1CPwDv3uFfJ1
|
| Size: |
3439512
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\libffi-7.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\libffi-7.dll
|
| Category: |
dropped
|
| Dump: |
libffi-7.dll.0.dr
|
| ID: |
dr_601
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.3566777719925565
|
| Encrypted: |
false
|
| Ssdeep: |
384:2nypDwZH1XYEMXvdQOsNFYzsQDELCvURDa7qscTHstU0NsICwHLZxXYIoBneEAR8:2l0Vn5Q28J8qsqMttktDxOpWDG4yKRF
|
| Size: |
32792
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\libssl-1_1.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\libssl-1_1.dll
|
| Category: |
dropped
|
| Dump: |
libssl-1_1.dll.0.dr
|
| ID: |
dr_602
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.533720236597082
|
| Encrypted: |
false
|
| Ssdeep: |
12288:waXWJ978LddzAPcWTWxYx2OCf2QmAr39Zu+DIpEpXKWRq0qwMUxQU2lvz:dddzAjKnD/QGXKzpwMUCU2lvz
|
| Size: |
698784
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo3.0.dr
|
| ID: |
dr_88
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
| Entropy: |
5.23297451651376
|
| Encrypted: |
false
|
| Ssdeep: |
6:ilij9l+AFwyRR8OLuAI1T0koGy2Q8KMW0YEUlq1INwN2tvk6EmVb1DxTzLFPb2zD:i491wyRR8jAI1Tyv2QWUhWGvLnLFPWD
|
| Size: |
338
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo4.0.dr
|
| ID: |
dr_90
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
| Entropy: |
5.23297451651376
|
| Encrypted: |
false
|
| Ssdeep: |
6:ilij9l+AFwyRR8OLuAI1T0koGy2Q8KMW0YEUlq1INwN2tvk6EmVb1DxTzLFPb2zD:i491wyRR8jAI1Tyv2QWUhWGvLnLFPWD
|
| Size: |
338
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo4.0.dr
|
| ID: |
dr_92
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
| Entropy: |
5.23297451651376
|
| Encrypted: |
false
|
| Ssdeep: |
6:ilij9l+AFwyRR8OLuAI1T0koGy2Q8KMW0YEUlq1INwN2tvk6EmVb1DxTzLFPb2zD:i491wyRR8jAI1Tyv2QWUhWGvLnLFPWD
|
| Size: |
338
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ar\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo4.0.dr
|
| ID: |
dr_94
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Arabic (https://www.transifex.com/voltaicideas/teams/116153/ar/)
|
| Entropy: |
5.23297451651376
|
| Encrypted: |
false
|
| Ssdeep: |
6:ilij9l+AFwyRR8OLuAI1T0koGy2Q8KMW0YEUlq1INwN2tvk6EmVb1DxTzLFPb2zD:i491wyRR8jAI1Tyv2QWUhWGvLnLFPWD
|
| Size: |
338
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo4.0.dr
|
| ID: |
dr_96
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 'Album'
|
| Entropy: |
5.287292630615562
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwa67mOx8IjTbWTDOl+Zk2jRLahWpiKik+4bwc8FK:KSnx67P8InbWWT2jRexcOK
|
| Size: |
1325
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtr: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo5.0.dr
|
| ID: |
dr_98
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtr: %s'
|
| Entropy: |
5.41317960796082
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XAb51DxGlZNZrxxUld9cjziaP2DeepZLlryWyxydcYR1KnUCVabrrcxR5:BydVEVcHsVxxxUf94qbp4Y0Uea/ahDo0
|
| Size: |
5053
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'O {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo5.0.dr
|
| ID: |
dr_100
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'O {}'
|
| Entropy: |
5.349396373578744
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUg2OMCuImuve2qFmDx2NjzAG2jRetCorYNKwuD7BvkhtHfnC:GUxv7UCIotceE5NuD7BvkhtHfC
|
| Size: |
2743
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 ' (nepodporovan\303\275)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\cs\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo5.0.dr
|
| ID: |
dr_102
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 ' (nepodporovan\303\275)'
|
| Entropy: |
5.423407195804332
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqBUo7d4rxHCMqD5ECPzf24CHbIsbWGeltFpVmT6g6fNtegmVH:vMw5inON7UpVI6F1dQH
|
| Size: |
21224
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo5.0.dr
|
| ID: |
dr_105
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'Album'
|
| Entropy: |
5.043751108247799
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwM6uFbHTbWTDOl+9c0jjRPgfhW6vXS78HZeO+0SeE:KSnt1F3bWWIjjRPwfWYYeE
|
| Size: |
1237
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Robert M, 2021 ' Filter: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo6.0.dr
|
| ID: |
dr_108
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Robert M, 2021 ' Filter: %s'
|
| Entropy: |
5.126243958714876
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqqsQaBrxxmUl/9cjziaP2DjtVrrsPMC92ODIc2Xyuy4LfFshuX4/AhNOz:gYpvNExRpxxmU594qRVfsPhYsSfNX4Ig
|
| Size: |
5332
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\303\234ber {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo6.0.dr
|
| ID: |
dr_111
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\303\234ber {}'
|
| Entropy: |
5.057058532729029
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgRpMTFBuImuve2qFmDx2NjzAWjRPWrI++u+IWQhFIdYMUSNz+:GUWYKUCIot5+M++tIJFIdYMUSl+
|
| Size: |
2823
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 249 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(nicht unterst\303\274tzt)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\de\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo6.0.dr
|
| ID: |
dr_114
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 249 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(nicht unterst\303\274tzt)'
|
| Entropy: |
5.145687807109028
|
| Encrypted: |
false
|
| Ssdeep: |
384:/f197u28kbirxHXpMqD5ECPzf24CHbDsb3jkeTyeY72/egFkVbYY/92F/92dl+6E:imw3pnOK5gqmOkVD92B92j+6E
|
| Size: |
22393
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\316\221\316\273\316\274\317\200\316\277\317\205\316\274'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo6.0.dr
|
| ID: |
dr_117
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\316\221\316\273\316\274\317\200\316\277\317\205\316\274'
|
| Entropy: |
5.435704580953387
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwP32RJhJzkrKXrV9VI/3sTbWTDOl+ZIjRaJhWhfZzKRhVomisborFBn:KSnvJhNkrKXB9Vk2bWW1jRvfoJV2FF
|
| Size: |
1558
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' \317\206\316\257\316\273\317\204\317\201\316\277:
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo7.0.dr
|
| ID: |
dr_120
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' \317\206\316\257\316\273\317\204\317\201\316\277:
%s'
|
| Entropy: |
5.366591837045616
|
| Encrypted: |
false
|
| Ssdeep: |
192:BydVEV6vxxUf94dP7m2+JLngM9+Dp79GJ:czEcPa2+JTf9+DCJ
|
| Size: |
6525
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\316\243\317\207\316\265\317\204\316\271\316\272\316\254 {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo7.0.dr
|
| ID: |
dr_123
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\316\243\317\207\316\265\317\204\316\271\316\272\316\254 {}'
|
| Entropy: |
5.381734538768853
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgmPW/DIlImuve2qFmDx2NjzAKjRrJ7+0SgSektrVU/wC4a0VyWpdXuuzcQfi:GUBblUCIot/r7tTkFeoCX0Vyye/wTO
|
| Size: |
3660
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
' (\316\264\316\265\316\275 \317\205\317\200\316\277\317\203\317\204\316\267\317\201\316\257\316\266\316\265\317\204\316\261\316\271)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\el\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo7.0.dr
|
| ID: |
dr_126
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
' (\316\264\316\265\316\275 \317\205\317\200\316\277\317\203\317\204\316\267\317\201\316\257\316\266\316\265\317\204\316\261\316\271)'
|
| Entropy: |
5.3546504558011945
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqBOwwafvyrxHCMqD5ECPzf24CHbIsbwuTx2tJSD3pCeP8lzrCjSei6LTaIAI:vMKwwovUinON/TOJSDZpoCjSsTaImi
|
| Size: |
30229
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Content-Type: text/plain; charset=utf-8 'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo7.0.dr
|
| ID: |
dr_130
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Content-Type: text/plain; charset=utf-8 'Album'
|
| Entropy: |
4.668951161985161
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwb4G43bvNk2gtbTbWTDOlWrkTbWTDOla:KSno4G6bO2gt/bWWvbWWY
|
| Size: |
1005
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 59 messages, Content-Type: text/plain; charset=utf-8 ' filter: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo8.0.dr
|
| ID: |
dr_132
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 59 messages, Content-Type: text/plain; charset=utf-8 ' filter: %s'
|
| Entropy: |
4.980997866580964
|
| Encrypted: |
false
|
| Ssdeep: |
96:T7vQLQcDv/b69wKlrxxUld9cjziaP2irxxUld9cjziaP2r:T7i89wExxUf94DxxUf94C
|
| Size: |
4603
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 28 messages, Content-Type: text/plain; charset=utf-8 'About {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo8.0.dr
|
| ID: |
dr_135
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 28 messages, Content-Type: text/plain; charset=utf-8 'About {}'
|
| Entropy: |
4.893494090638729
|
| Encrypted: |
false
|
| Ssdeep: |
48:EeRV8+Imuve2qFmDx2NjzcImuve2qFmDx2NjzA:EevUCIo5cUCIo5A
|
| Size: |
2313
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 216 messages, Content-Type: text/plain; charset=utf-8 ' (unsupported)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\en\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo8.0.dr
|
| ID: |
dr_138
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 216 messages, Content-Type: text/plain; charset=utf-8 ' (unsupported)'
|
| Entropy: |
5.063762303342805
|
| Encrypted: |
false
|
| Ssdeep: |
384:TCihrrbyJcjMrxsHND5EePzf24CH3EbqrxsHND5EePzf24CH3Ebd:mKnyJRs1Qmss1Qmd
|
| Size: |
17573
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'\303\201lbum'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo8.0.dr
|
| ID: |
dr_141
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'\303\201lbum'
|
| Entropy: |
5.061798655471477
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwku0IEhTbWTDOl+9c0C6jRJy1hWQ/gM4tG4Htd+8:KSnbupibWWIhjRktgM4jHtd+8
|
| Size: |
1286
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: IlluminatiWave, 2022 'filtro: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo9.0.dr
|
| ID: |
dr_144
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: IlluminatiWave, 2022 'filtro: %s'
|
| Entropy: |
5.034021158859398
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqqhR3td0TFHBrxxmUl/9cjziaP26kxEIL6QWSlkOw78N88kReQHziaT1n:gYpvNEI1tGpxxmU594hkxENOw78N8AED
|
| Size: |
5438
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Acerca de {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo9.0.dr
|
| ID: |
dr_147
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Acerca de {}'
|
| Entropy: |
5.069805918349969
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgA+em8uImuve2qFmDx2NjzAqjRkkRp5UisQkrUK9WFNFh3XgqD:GUjNuUCIotbkk3Wi3kYoWFxwW
|
| Size: |
2677
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 260 messages, Last-Translator: IlluminatiWave, 2022 '(no soportado)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\es\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo9.0.dr
|
| ID: |
dr_150
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 260 messages, Last-Translator: IlluminatiWave, 2022 '(no soportado)'
|
| Entropy: |
5.10168482055611
|
| Encrypted: |
false
|
| Ssdeep: |
384:N98k5VN7lG4gF+rxQ6n0qD5ECPzf24CHb1sbE1vPVGRQkfk+Z:78k5V3G4HZPOE+ifPZ
|
| Size: |
23108
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo9.0.dr
|
| ID: |
dr_153
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 'Album'
|
| Entropy: |
5.012908196240364
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwP+oeTrs93Xar5TbWTDOl+ZjajRBAhW0COBWDBBBl:KSnt3Tg9GbWWeajR2BWxl
|
| Size: |
1213
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtre: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo10.0.dr
|
| ID: |
dr_156
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtre: %s'
|
| Entropy: |
5.122167178842676
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XAn0BDCrxxUld9cjziaP2OlfL2l/g/j/wYis4esHXKLnNS7fxBeX8unqb:BydVEV+01YxxUf94B12BOjwkMfA8uqlZ
|
| Size: |
4959
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'A propos de {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo10.0.dr
|
| ID: |
dr_160
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'A propos de {}'
|
| Entropy: |
5.0761959700462524
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgmkWdzePuImuve2qFmDx2NjzANajRN2bMv4CMJF7CLD0MH:GUB1UCIotjNfSJF7Gv
|
| Size: |
2708
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(non pris
en charge)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\fr\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo10.0.dr
|
| ID: |
dr_162
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(non pris
en charge)'
|
| Entropy: |
5.1357869954777815
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqBf25b2qADBXrxHCMqD5ECPzf24CHbIsbl83l50gSqMF8bgqtjKdb2lt0t4S:vML28dinONZJ8EqY2t0tlUO
|
| Size: |
21609
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\324\261\325\254\325\242\325\270\325\264\325\250'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo10.0.dr
|
| ID: |
dr_168
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\324\261\325\254\325\242\325\270\325\264\325\250'
|
| Entropy: |
5.394808447305233
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwOGt+9ObTbWTDOl+ZZjRIPhWfoMlveZ5GKoEX+IoSp6kp:KSn25bWW+jRmk7KoqBoShp
|
| Size: |
1446
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\326\206\325\253\325\254\325\277\326\200.
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo11.0.dr
|
| ID: |
dr_172
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\326\206\325\253\325\254\325\277\326\200.
%s'
|
| Entropy: |
5.376774131199475
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XA4dHrxxUld9cjziaP2djzpFo7FsdG56ovoSocbgenv1y:BydVEV5xxUf94aRahscwNcI
|
| Size: |
6376
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'{}- \325\253 \325\264\325\241\325\275\325\253\325\266'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo11.0.dr
|
| ID: |
dr_176
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'{}- \325\253 \325\264\325\241\325\275\325\253\325\266'
|
| Entropy: |
5.358485527856443
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgzTWjvJImuve2qFmDx2NjzAvjRUqWUZ+RvkKzmGev5exfAEukUuovPn:GUwTWDJUCIotIUe+lBNev2fHuXhf
|
| Size: |
3454
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 217 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 ' (\325\271\325\241\325\273\325\241\325\257\326\201\325\276\325\270\325\262)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\hy\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo11.0.dr
|
| ID: |
dr_180
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 217 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 ' (\325\271\325\241\325\273\325\241\325\257\326\201\325\276\325\270\325\262)'
|
| Entropy: |
5.374197217754182
|
| Encrypted: |
false
|
| Ssdeep: |
384:qs+MuBerxOuqxE5bm56+2+HxbguS5SyssiNZEmWY8c5XuzMAynXxOFR:qj9BY/IIUbguSQyssiNZEmWY8c5XuzMe
|
| Size: |
17770
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo11.0.dr
|
| ID: |
dr_184
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'Album'
|
| Entropy: |
4.968881059314447
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnw3djhTbWTDOl+9c0hjRloNhWFmGRcVX5oha:KSnkVbWWIhjRl0mOGY
|
| Size: |
1261
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Emanuele, 2021 ' filtro: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo12.0.dr
|
| ID: |
dr_188
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Emanuele, 2021 ' filtro: %s'
|
| Entropy: |
4.998334156858319
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqqBbIdaBrxxmUl/9cjziaP2clo8NEktpt0rtqUN5XAu23yKZ1Qs8x84s4:gYpvNEWBpxxmU594zlrXtM5Qmx8zqd
|
| Size: |
5392
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'A proposito di {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo12.0.dr
|
| ID: |
dr_192
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'A proposito di {}'
|
| Entropy: |
4.997166295801509
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgAq/BHjuImuve2qFmDx2NjzAKjRl8AqdYsN76mBqXqlIC84kD:GUjOBHqUCIotLlgdYgkXoIC84w
|
| Size: |
2724
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 260 messages, Last-Translator: Giovanni, 2022 ' (non supportato)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\it\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo12.0.dr
|
| ID: |
dr_199
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 260 messages, Last-Translator: Giovanni, 2022 ' (non supportato)'
|
| Entropy: |
5.04013999224077
|
| Encrypted: |
false
|
| Ssdeep: |
384:N98k5scK3ZcHrxQ6n0qD5ECPzf24CHb1sb4NzK5xtXIasTCKvwvcpb+pqLqqLVr:78k5N5ZPOEmK5xvsTsvcf3Vr
|
| Size: |
23439
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\343\202\242\343\203\253\343\203\220\343\203\240'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo12.0.dr
|
| ID: |
dr_201
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\343\202\242\343\203\253\343\203\220\343\203\240'
|
| Entropy: |
5.470657951631479
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwNoTbWTDOl+ZhjRKZhWzFM4fr9tKsjNzO7Pl:KSne6bWWujR5S4z9MsFI
|
| Size: |
1363
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 58 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '\343\203\225\343\202\243\343\203\253\343\202\277:
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo13.0.dr
|
| ID: |
dr_204
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 58 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '\343\203\225\343\202\243\343\203\253\343\202\277:
%s'
|
| Entropy: |
5.837215959434185
|
| Encrypted: |
false
|
| Ssdeep: |
96:0zhXxXJi7rxxmUld9cjziaP2o5uacg8EbNYa/veG2yohGiCUE69ey:0zh2xxmUf94DpVLbm62JMiCM
|
| Size: |
5779
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'{}\343\201\253\343\201\244\343\201\204\343\201\246\343\200\202'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo13.0.dr
|
| ID: |
dr_208
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'{}\343\201\253\343\201\244\343\201\204\343\201\246\343\200\202'
|
| Entropy: |
5.8451379679979985
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgSnlL9wImuve2qFmDx2NjzAXjR5yfJuGuIasLbxY2Zui74x6DsbnBoca:GUdnlL6UCIotY5yfsvkUq4SanBoh
|
| Size: |
3053
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(\351\235\236\345\257\276\345\277\234)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ja\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo13.0.dr
|
| ID: |
dr_212
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(\351\235\236\345\257\276\345\277\234)'
|
| Entropy: |
5.956488178318933
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqBEM9OHF2B34rxHCMqD5ECPzf24CHbIsbWhkgvboOQI0VgONCXL:vMwh2B3KinON8kFZc
|
| Size: |
23331
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Sangdon Lim, 2022 '\354\225\250\353\262\224'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo13.0.dr
|
| ID: |
dr_216
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Sangdon Lim, 2022 '\354\225\250\353\262\224'
|
| Entropy: |
5.542532915486564
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwjW9B1J0TbWTDOl+eOjR3mhWz6Tskn2tnFV+JLg5:KSn/pJ+bWW2jRfIX2tFV15
|
| Size: |
1238
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Sangdon Lim, 2022 '\355\225\204\355\204\260:
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo14.0.dr
|
| ID: |
dr_220
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Sangdon Lim, 2022 '\355\225\204\355\204\260:
%s'
|
| Entropy: |
5.891818104032797
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqq4A4bjqQPBrxxmUl/9cjziaP25fdU0hgDpYPeSTnZDa0qQCih7cVJ:gYpvNE1q6pxxmU594O5wfwZO0qQCAg
|
| Size: |
5541
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'{} \354\227\220 \353\214\200\355\225\234\354\240\225\353\263\264'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo14.0.dr
|
| ID: |
dr_224
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'{} \354\227\220 \353\214\200\355\225\234\354\240\225\353\263\264'
|
| Entropy: |
5.875794748367167
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgk3BJIImuve2qFmDx2NjzAkjRf4EHC9nRzX6+ea5aJCI08FhAVrJ:GUj34UCIot3fFi9nRzxZGZGJ
|
| Size: |
2835
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 257 messages, Last-Translator: Sangdon Lim, 2022 '(\353\257\270\354\247\200\354\233\220)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ko\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo14.0.dr
|
| ID: |
dr_228
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 257 messages, Last-Translator: Sangdon Lim, 2022 '(\353\257\270\354\247\200\354\233\220)'
|
| Entropy: |
5.959579531777258
|
| Encrypted: |
false
|
| Ssdeep: |
384:sUZ9BM8L4frxQ6XCMqD5ECPzf24CHb1sbHIwRuWRohRsmZH:FBM8LYhCnOEoGrohRNH
|
| Size: |
22691
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Yaya - Nurul Azeera Hidayah @ Muhammad Nur
Hidayat Yasuyoshi (MNH48) <admin@mnh48.moe>, 2021 'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo14.0.dr
|
| ID: |
dr_232
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Yaya - Nurul Azeera Hidayah @ Muhammad Nur
Hidayat Yasuyoshi (MNH48) <admin@mnh48.moe>, 2021 'Album'
|
| Entropy: |
5.044342164576316
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwinOll7lemtW/MTbWTDOl+YdFHKRXjRRQhWzLrLwaJZBEN6:KSn5nO/7leiWubWWJFqRXjRzPh1EN6
|
| Size: |
1258
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Yaya - Nurul Azeera Hidayah @ Muhammad Nur
Hidayat Yasuyoshi (MNH48) <admin@mnh48.moe>, 2021 'penapis: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo15.0.dr
|
| ID: |
dr_239
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Yaya - Nurul Azeera Hidayah @ Muhammad Nur
Hidayat Yasuyoshi (MNH48) <admin@mnh48.moe>, 2021 'penapis: %s'
|
| Entropy: |
5.048422304840256
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqqWLjIBrxxmUl/9cjziaP2M0zFkV9XPUA4SBbm6DoUmC:gYpvNE1UpxxmU594qRQXPUANBbcC
|
| Size: |
5344
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Mengenai {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo15.0.dr
|
| ID: |
dr_241
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Mengenai {}'
|
| Entropy: |
4.992345155452616
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgZqnpDuImuve2qFmDx2NjzAyjRzyLEC4vLZ9PnHjaVUjFml:GUe48UCIotPzyz6LHUUj4
|
| Size: |
2630
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 260 messages, Last-Translator: Yaya - Nurul Azeera Hidayah @ Muhammad Nur
Hidayat Yasuyoshi (MNH48) <admin@mnh48.moe>, 2022 ' (tidak disokong)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ms\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo15.0.dr
|
| ID: |
dr_244
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 260 messages, Last-Translator: Yaya - Nurul Azeera Hidayah @ Muhammad Nur
Hidayat Yasuyoshi (MNH48) <admin@mnh48.moe>, 2022 ' (tidak disokong)'
|
| Entropy: |
5.099628828249167
|
| Encrypted: |
false
|
| Ssdeep: |
384:N98k5iRcDrxQ6n0qD5ECPzf24CHb1sbU2myFiLHUGNJdEzzSEvmCaAcCzxmguTuL:78k5iqhZPOEYoanEzzSEv0Ac6WTntP8
|
| Size: |
22356
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Bas <duvel3@gmail.com>, 2021 'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo15.0.dr
|
| ID: |
dr_248
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Bas <duvel3@gmail.com>, 2021 'Album'
|
| Entropy: |
5.021161440050359
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwVNDWAHTbWTDOl+CjR3MYKDhWXn45kfC9/dUt:KSneWcbWWrjRkk69/dA
|
| Size: |
1226
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Bas <duvel3@gmail.com>, 2021 'filter: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo16.0.dr
|
| ID: |
dr_253
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Bas <duvel3@gmail.com>, 2021 'filter: %s'
|
| Entropy: |
5.0026855461519135
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XAMvE03OrxxUld9cjziaP2g/9YqXySDvOZ0P39i8yC2KXo38M9oV3Zw5u:BydVEVvE03ExxUf94PqqDOZ0P39yoKu
|
| Size: |
5179
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Over {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo16.0.dr
|
| ID: |
dr_258
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Over {}'
|
| Entropy: |
5.009513859572473
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgmyf+h1aQuImuve2qFmDx2NjzAMjRrmJFX9pt8SzNwdMbgKAjLd/5YMk:GUByf+yVUCIotxrmztp+SzNwCbDAjLdO
|
| Size: |
2686
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(niet ondersteund)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\nl\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo16.0.dr
|
| ID: |
dr_263
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(niet ondersteund)'
|
| Entropy: |
5.031864777916691
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqB49+ZX1xUrxHCMqD5ECPzf24CHbIsb7WWECb8LDYFHQPXSlivPwt:vMs9+TUinONCWd+qQfSlin2
|
| Size: |
21409
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo16.0.dr
|
| ID: |
dr_268
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 'Album'
|
| Entropy: |
5.379148695822231
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwcaJAm+e+TbWTDOl+ZsxjRelhW/VnYdilPwcHVkMFwNTQeSxV2VqNrFn:KSnNxmnsbWWXxjRDVYdgocSMFwN0eSdn
|
| Size: |
1428
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtr: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo17.0.dr
|
| ID: |
dr_273
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtr: %s'
|
| Entropy: |
5.3710395389184695
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XAwlYEsWCrxxUld9cjziaP2oDVnEhieHYwXTr4k7+PTMMiqj:BydVEVl+xxUf949+TTEkaPTd
|
| Size: |
5141
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'O {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo17.0.dr
|
| ID: |
dr_278
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'O {}'
|
| Entropy: |
5.413902823957434
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUggxMuImuve2qFmDx2NjzAqxjRDVYdgIwmp16rtHu/Mi6pxot5l7C3:GUDxlUCIotDDVnIt7KxojBE
|
| Size: |
2846
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(niepodparta)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pl_PL\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo17.0.dr
|
| ID: |
dr_289
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(niepodparta)'
|
| Entropy: |
5.381622788859436
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqB8dB22y9SJarxHCMqD5ECPzf24CHbIsbRpZ2+u41+m7IFa3nJLJqK:vMojo+cinON4++maK
|
| Size: |
21396
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'\303\201lbum'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo17.0.dr
|
| ID: |
dr_291
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'\303\201lbum'
|
| Entropy: |
5.061119985460719
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwKF/ALsbvTO0RZTbWTDOl+9c0xZjR6hhW0z75egbba:KSnhNAgbC0fbWWIjjRksf
|
| Size: |
1260
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtro: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo18.0.dr
|
| ID: |
dr_294
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' filtro: %s'
|
| Entropy: |
5.128579466752242
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XA0ou/dKKW+IrxxUld9cjziaP2WakMUhsBxUcQNy4R:BydVEVtYKW3xxUf94/akMUhsBvQN9R
|
| Size: |
4919
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Sobre o {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo18.0.dr
|
| ID: |
dr_298
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'Sobre o {}'
|
| Entropy: |
5.1136578751533355
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgDv/JJFuImuve2qFmDx2NjzAQjRXYsEl9Q0XmN7rou0/h8lkF4nUMeTD:GUgv/JiUCIotpoQ02lnaWiFdMeH
|
| Size: |
2725
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'(incompat\303\255vel)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\pt_BR\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo18.0.dr
|
| ID: |
dr_303
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'(incompat\303\255vel)'
|
| Entropy: |
5.170354928835116
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqBuGoyvcrxHCMqD5ECPzf24CHbIsbadbXIfzoqoqoK+1TLFdnFdLhU8:vML+inONccfz55fQL37hN
|
| Size: |
21236
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'\320\220\320\273\321\214\320\261\320\276\320\274'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo18.0.dr
|
| ID: |
dr_308
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'\320\220\320\273\321\214\320\261\320\276\320\274'
|
| Entropy: |
5.54527425788437
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwzB/JpN/TSufTbWTDOl+9c0ojR+NhW7WnYsiGPS5da6imZmRqQzM7MK:KSn2PNbSuLbWWIojRAYs7YdagQY7p
|
| Size: |
1675
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\321\204\320\270\320\273\321\214\321\202\321\200:
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo19.0.dr
|
| ID: |
dr_313
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\321\204\320\270\320\273\321\214\321\202\321\200:
%s'
|
| Entropy: |
5.4352676877353865
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XAvjOVrxxUld9cjziaP2RAn7sFwr1IevRcmGRXqjLxcPhP2qSRZ4yvHVB:BydVEVBxxUf944c+sRFxjLWhe9RZvB
|
| Size: |
6608
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\320\236 {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo19.0.dr
|
| ID: |
dr_318
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\320\236 {}'
|
| Entropy: |
5.492199239412472
|
| Encrypted: |
false
|
| Ssdeep: |
96:GUNmC9yUCIoteAns5zpGAoDj7uZuZB8CjQ1tzCDu9uYfSuU:GsmAQIoteLzpGAoDnuZ6jQ1tGDukYfSp
|
| Size: |
3667
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'(\320\275\320\265 \320\277\320\276\320\264\320\264\320\265\321\200\320\266\320\270\320\262\320\260\320\265\321\202\321\201\321\217)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\ru\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo19.0.dr
|
| ID: |
dr_323
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'(\320\275\320\265 \320\277\320\276\320\264\320\264\320\265\321\200\320\266\320\270\320\262\320\260\320\265\321\202\321\201\321\217)'
|
| Entropy: |
5.400693733116622
|
| Encrypted: |
false
|
| Ssdeep: |
768:vMUzdFinON+4br7zKak3TAPOm3TAPOX2R:v5xNlbr7zKt3TST3TSoA
|
| Size: |
28716
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Emin Tufan \303\207etin <etcetin@gmail.com>,
2021 'Alb\303\274m'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo19.0.dr
|
| ID: |
dr_328
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Emin Tufan \303\207etin <etcetin@gmail.com>,
2021 'Alb\303\274m'
|
| Entropy: |
5.191883943198183
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwhllTFxvJFvH52TbWTDOl+8u6jRb6hhW0ZZ9kgUjrxQfxI:KSnUTFxTHObWWXjRuJZ9kHcI
|
| Size: |
1251
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Emin Tufan \303\207etin <etcetin@gmail.com>,
2021 's\303\274z: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo.0.dr
|
| ID: |
dr_7
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Emin Tufan \303\207etin <etcetin@gmail.com>,
2021 's\303\274z: %s'
|
| Entropy: |
5.278717540272886
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqq7C4Nj8fZBrxxmUl/9cjziaP2qJw61F2Qb717I6R:gYpvNEyNwxpxxmU594XJj7X17vR
|
| Size: |
5144
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Emin Tufan \303\207etin <etcetin@gmail.com>,
2022 '{} Hakk\304\261nda'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo.0.dr
|
| ID: |
dr_8
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Emin Tufan \303\207etin <etcetin@gmail.com>,
2022 '{} Hakk\304\261nda'
|
| Entropy: |
5.230783827602119
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgAIthI0ruImuve2qFmDx2NjzUjRuEdMavrLVbnsoeNCOvbJzp:GUjdUCIotaJvhnhACSP
|
| Size: |
2727
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 253 messages, Last-Translator: Ahmet Haydar I\305\237\304\261k <itsahmthydr@gmail.com>,
2022 '(desteklenmiyor)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\tr\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo.0.dr
|
| ID: |
dr_9
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 253 messages, Last-Translator: Ahmet Haydar I\305\237\304\261k <itsahmthydr@gmail.com>,
2022 '(desteklenmiyor)'
|
| Entropy: |
5.319667603875159
|
| Encrypted: |
false
|
| Ssdeep: |
384:ILfA+Xec+Drxs6XpMqD5ECPzf24CHb1sbQA0TZ9ROGOcLJz0gSmRdIseU:I7etNpnOEr0lOGOcSgSmRAU
|
| Size: |
22237
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\320\220\320\273\321\214\320\261\320\276\320\274'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo.0.dr
|
| ID: |
dr_10
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\320\220\320\273\321\214\320\261\320\276\320\274'
|
| Entropy: |
5.556112257128076
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwaX8gwKqTbWTDOl+ZGjRh61hWT061X0QiuWgi2u95d0ZlSu86XOuMUq18Y+:KSnBB7AbWWDjRB8Du86ZcCYP5KF
|
| Size: |
1735
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\321\204\321\226\320\273\321\214\321\202\321\200:
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo0.0.dr
|
| ID: |
dr_11
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 '\321\204\321\226\320\273\321\214\321\202\321\200:
%s'
|
| Entropy: |
5.467026709697536
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XALEIFrxxUld9cjziaP2aBX5/E2TyWPsd4SoyR0FypDQ0AM:BydVEVAEItxxUf94bbVPDCpDVd
|
| Size: |
6562
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\320\237\321\200\320\276 {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo0.0.dr
|
| ID: |
dr_12
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\320\237\321\200\320\276 {}'
|
| Entropy: |
5.510292338986452
|
| Encrypted: |
false
|
| Ssdeep: |
96:GUD36rUCIotBB02+yBK9FV534RIRxdMSPHv:GGKrIotB5+yBEFV5oRIRxdbHv
|
| Size: |
3708
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(\320\275\320\265
\320\277\321\226\320\264\321\202\321\200\320\270\320\274\321\203\321\224\321\202\321\214\321\201\321\217)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\uk\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo0.0.dr
|
| ID: |
dr_13
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 '(\320\275\320\265
\320\277\321\226\320\264\321\202\321\200\320\270\320\274\321\203\321\224\321\202\321\214\321\201\321\217)'
|
| Entropy: |
5.427460366154025
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqBe6Q1rxHCMqD5ECPzf24CHbIsbne89tn+yBkcyxdRz59Oa15KCmDmjUh5p0:vMxQTinONfa2o4a
|
| Size: |
28418
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'Album'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo0.0.dr
|
| ID: |
dr_14
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2021
'Album'
|
| Entropy: |
5.350159334248793
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwi/dd41YpVTbWTDOl+9c0mzbjRudhWzsXvOpIAknh8WTDOl:KSnz/3ASbWWImzbjRZs+IAkh8WWl
|
| Size: |
1319
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' b\341\273\231
l\341\273\215c: %s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo1.0.dr
|
| ID: |
dr_15
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 57 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2021 ' b\341\273\231
l\341\273\215c: %s'
|
| Entropy: |
5.548041100056907
|
| Encrypted: |
false
|
| Ssdeep: |
96:ByGcVE1XA6cwrxxUld9cjziaP2TJZwgyyt+ZEykMpZIxqy4U89NzkCg7:BydVEVVc6xxUf94oJbyytnyZIxwUANIT
|
| Size: |
5755
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'V\341\273\201 {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo1.0.dr
|
| ID: |
dr_16
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'V\341\273\201 {}'
|
| Entropy: |
5.53006043062044
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgcyNf4cImuve2qFmDx2NjzA/zbjRZRNijW+yVQCAWHlC+GT51LgBGcNsvzf3:GU/yZUCIoteJZxVQCVw5TvcNsLuT7h6n
|
| Size: |
3008
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 ' (ch\306\260a
\304\221\306\260\341\273\243c h\341\273\227 tr\341\273\243)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\vi\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo1.0.dr
|
| ID: |
dr_17
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 244 messages, Last-Translator: Fuan <jcfrt@posteo.net>, 2022 ' (ch\306\260a
\304\221\306\260\341\273\243c h\341\273\227 tr\341\273\243)'
|
| Entropy: |
5.599594446189566
|
| Encrypted: |
false
|
| Ssdeep: |
384:3fMuqB98/pf6rxHCMqD5ECPzf24CHbIsbcJjjrU/Jf1zEk9AteaNdgddgEjtqEe:vMe/pf8inONVf1IMnxtO
|
| Size: |
24037
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Chris Ocelot, 2021 '\344\270\223\350\276\221'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo1.0.dr
|
| ID: |
dr_18
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Chris Ocelot, 2021 '\344\270\223\350\276\221'
|
| Entropy: |
5.5867408573266175
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnw4PAYw+TbWTDOl+RD6jRXmhWzmhoD5KaRwqKR9E:KSnLPAYrbWWAD6jRfIC5KtTE
|
| Size: |
1227
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: YaNing Lu, 2021 ' \350\277\207\346\273\244:
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo2.0.dr
|
| ID: |
dr_19
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: YaNing Lu, 2021 ' \350\277\207\346\273\244:
%s'
|
| Entropy: |
6.1162889782108945
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqqefy8uBBrxxmUl/9cjziaP2fMfzObBm++Pp7izTPHEyMxq:gYpvNEOBpxxmU594FqbBm++MzTPeo
|
| Size: |
5055
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\345\205\263\344\272\216 {}'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo2.0.dr
|
| ID: |
dr_20
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 31 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\345\205\263\344\272\216 {}'
|
| Entropy: |
6.078403957153527
|
| Encrypted: |
false
|
| Ssdeep: |
48:8WaUgpa7LMvuImuve2qFmDx2NjzAA6jRfadeyTv5E2hy5tqf1z1L6UT:GUOa74WUCIottMfhHdsp6Q
|
| Size: |
2652
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 247 messages, Last-Translator: Chris Ocelot, 2022 ' (\344\270\215\346\224\257\346\214\201)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_CN\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo2.0.dr
|
| ID: |
dr_21
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 247 messages, Last-Translator: Chris Ocelot, 2022 ' (\344\270\215\346\224\257\346\214\201)'
|
| Entropy: |
6.183044017189897
|
| Encrypted: |
false
|
| Ssdeep: |
384:aMyV/Z77hs7bYb4DKrxH7MqD5ECPzf24CHbDsbfniLSndqXicx0A55jxVTpFmpJG:MVRP+Y0DMbnOK/igdncHVTpFm+
|
| Size: |
20186
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\columns.mo
|
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\344\270\223\350\276\221'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\columns.mo
|
| Category: |
dropped
|
| Dump: |
columns.mo2.0.dr
|
| ID: |
dr_22
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 27 messages, Last-Translator: Andrew Senetar <arsenetar@gmail.com>, 2022
'\344\270\223\350\276\221'
|
| Entropy: |
5.5965551478780915
|
| Encrypted: |
false
|
| Ssdeep: |
24:H+VSnwFFbpbITbWTDOl+9c072jRP2hWzmho5KaRwqKR9E:KSnFbWWI72jRnIuKtTE
|
| Size: |
1249
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\core.mo
|
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Chris Ocelot, 2022 ' \350\277\207\346\273\244:
%s'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\core.mo
|
| Category: |
dropped
|
| Dump: |
core.mo3.0.dr
|
| ID: |
dr_23
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 61 messages, Last-Translator: Chris Ocelot, 2022 ' \350\277\207\346\273\244:
%s'
|
| Entropy: |
6.114684312347381
|
| Encrypted: |
false
|
| Ssdeep: |
96:ngYpvNFqq3beAjJlwBrxxmUl/9cjziaP2dZwnzObBm++Pp7izTPHEyMxq:gYpvNEea6SpxxmU594xSbBm++MzTPeo
|
| Size: |
5059
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\qtlib.mo
|
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Chinese (Taiwan) (https://www.transifex.com/voltaicideas/teams/116153/zh_TW/)
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\qtlib.mo
|
| Category: |
dropped
|
| Dump: |
qtlib.mo3.0.dr
|
| ID: |
dr_24
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 1 message, Language-Team: Chinese (Taiwan) (https://www.transifex.com/voltaicideas/teams/116153/zh_TW/)
|
| Entropy: |
5.150180165184489
|
| Encrypted: |
false
|
| Ssdeep: |
6:ilijLAF0AN2OLuAI1T0mqpGGpeQ8KMW0YEUlq1INwN2Mvl:i4Md2jAI1T9qgdQWUhWzl
|
| Size: |
264
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\ui.mo
|
GNU message catalog (little endian), revision 0.0, 247 messages, Last-Translator: Chris Ocelot, 2022 ' (\344\270\215\346\224\257\346\214\201)'
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\locale\zh_TW\LC_MESSAGES\ui.mo
|
| Category: |
dropped
|
| Dump: |
ui.mo3.0.dr
|
| ID: |
dr_25
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
GNU message catalog (little endian), revision 0.0, 247 messages, Last-Translator: Chris Ocelot, 2022 ' (\344\270\215\346\224\257\346\214\201)'
|
| Entropy: |
6.184078946820405
|
| Encrypted: |
false
|
| Ssdeep: |
384:aMyV/Z77hBybzh3GsrxH7MqD5ECPzf24CHbDsbifiLSOdqXicx0A55jxVTpFmpJG:MVRPYFDbnOKSihdncHVTpFm+
|
| Size: |
20193
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\markupsafe\_speedups.cp38-win_amd64.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\markupsafe\_speedups.cp38-win_amd64.pyd
|
| Category: |
dropped
|
| Dump: |
_speedups.cp38-win_amd64.pyd.0.dr
|
| ID: |
dr_26
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.4156054942565355
|
| Encrypted: |
false
|
| Ssdeep: |
192:AEt1pN7kVbEkL56UNgUW3wEaC53ewEAVr7owEwrlD+H3E/TNrpwQxggRSeFvERU9:hpezNgUr6VNrlDX/TnwQx7vERU
|
| Size: |
15360
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\mfc140u.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\mfc140u.dll
|
| Category: |
dropped
|
| Dump: |
mfc140u.dll.0.dr
|
| ID: |
dr_603
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.634038330942045
|
| Encrypted: |
false
|
| Ssdeep: |
49152:sGeFUHwMdKH3fVL7u8dFLP0OwuXJ7ahucFeXGGjzAjRptGu3n+CF9ZhIuSwIbFL4:jg9DoRaFLOAkGkzdnEVomFHKnPFT
|
| Size: |
5821208
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\opengl32sw.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\opengl32sw.dll
|
| Category: |
dropped
|
| Dump: |
opengl32sw.dll.0.dr
|
| ID: |
dr_604
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.255903817217008
|
| Encrypted: |
false
|
| Ssdeep: |
393216:LIckHor5uLnn83wAP5hxOZEa7/LzRuDFqILn5LgcKyZyQXt+8M:yEZbv
|
| Size: |
20923392
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\pyexpat.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\pyexpat.pyd
|
| Category: |
dropped
|
| Dump: |
pyexpat.pyd.0.dr
|
| ID: |
dr_605
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.194992111607613
|
| Encrypted: |
false
|
| Ssdeep: |
6144:Rt98c6QhEtnzlzwi6uqAzxhuubViyOjxg5D+qdVf:RPF6oEtnuuqN2VivSUqv
|
| Size: |
214016
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\python3.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\python3.dll
|
| Category: |
dropped
|
| Dump: |
python3.dll.0.dr
|
| ID: |
dr_606
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.447272275621965
|
| Encrypted: |
false
|
| Ssdeep: |
768:oS99q+0o22ByfbEap+VCBQ53gUiT5pLFdBk4/yFi1nuVwWBjChtFyrUdmd9RSxDE:79xiEAnUvd4RIRQ0
|
| Size: |
52224
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\python38.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\python38.dll
|
| Category: |
dropped
|
| Dump: |
python38.dll.0.dr
|
| ID: |
dr_607
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.423211291686035
|
| Encrypted: |
false
|
| Ssdeep: |
98304:f1h2kzjRNMBXf/QfsqYUERgQsgPcHyM1XNO1:fPjRNM9/QfsqYUEOQu1
|
| Size: |
5026304
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\pythoncom38.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\pythoncom38.dll
|
| Category: |
dropped
|
| Dump: |
pythoncom38.dll.0.dr
|
| ID: |
dr_608
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.022523943558969
|
| Encrypted: |
false
|
| Ssdeep: |
6144:JOZxZ1+5DzHXzqcqnPbZovB5faKtY7C/wvpW9ldeffQnvZqcAZh0AcyaONtdbUbE:Jo1+5f3ecD5rtYeovNeypdPJa6
|
| Size: |
716288
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\pywintypes38.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\pywintypes38.dll
|
| Category: |
dropped
|
| Dump: |
pywintypes38.dll.0.dr
|
| ID: |
dr_619
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.014127736250603
|
| Encrypted: |
false
|
| Ssdeep: |
3072:uNQ5J8g8dKuii+9BcYrrC0vEM6zcMKo8Nz7onQp:uN4QKuCqYrrC05YcMKDNz7on
|
| Size: |
150016
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\qt\pe\_block_qt.cp38-win_amd64.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\qt\pe\_block_qt.cp38-win_amd64.pyd
|
| Category: |
dropped
|
| Dump: |
_block_qt.cp38-win_amd64.pyd.0.dr
|
| ID: |
dr_27
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
4.657593426724691
|
| Encrypted: |
false
|
| Ssdeep: |
192:BJyRU7dev7UGQoo30RAtAzVevcPr0FUvUxXU/ZMG++:WRb7h9RIAQEJM9cMG++
|
| Size: |
12800
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\select.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\select.pyd
|
| Category: |
dropped
|
| Dump: |
select.pyd.0.dr
|
| ID: |
dr_620
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.41954729627675
|
| Encrypted: |
false
|
| Ssdeep: |
384:wnJi1LGcOJ1Gu3hlIrHqD79POXtPe0cEcPqRIR7G:CJiufG6hWrHqlOXtmxqRIR7G
|
| Size: |
21504
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\INSTALLER
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\INSTALLER
|
| Category: |
dropped
|
| Dump: |
INSTALLER.0.dr
|
| ID: |
dr_29
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
1.5
|
| Encrypted: |
false
|
| Ssdeep: |
3:Mn:M
|
| Size: |
4
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\LICENSE
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\LICENSE
|
| Category: |
dropped
|
| Dump: |
LICENSE.0.dr
|
| ID: |
dr_31
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
5.108257018561881
|
| Encrypted: |
false
|
| Ssdeep: |
24:QWgUnoo3bOOrXIFTS4JPFTzTf796432s4EOkUTKQROJ32s3yxsITfq3t1olTHv:DOOrXIJ5JzN6432svv32s3EsIm3tYHv
|
| Size: |
1317
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\METADATA
|
Unicode text, UTF-8 text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\METADATA
|
| Category: |
dropped
|
| Dump: |
METADATA.0.dr
|
| ID: |
dr_33
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
Unicode text, UTF-8 text
|
| Entropy: |
5.0724021265408314
|
| Encrypted: |
false
|
| Ssdeep: |
192:fC3yiRFzuJTlDxtLgy/gz26COEvrgod+fXolj/v:fCfiDEy/u23O2rgod+fXotX
|
| Size: |
9687
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\RECORD
|
CSV text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\RECORD
|
| Category: |
dropped
|
| Dump: |
RECORD.0.dr
|
| ID: |
dr_35
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
CSV text
|
| Entropy: |
5.7788238697026
|
| Encrypted: |
false
|
| Ssdeep: |
24:+xn/2zD9xvHbec6xJrx+xEsJoxgFsuxlEdQFxqhwdT3n:+xnuX9x/d6x1x+x5JoxgWuxlCWEhwdTn
|
| Size: |
1066
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\WHEEL
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\WHEEL
|
| Category: |
dropped
|
| Dump: |
WHEEL.0.dr
|
| ID: |
dr_37
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
4.816968543485036
|
| Encrypted: |
false
|
| Ssdeep: |
3:RtEeX7MWcSlViHoKKjP+tPCCf7irO5S:RtBMwlViQWBBwt
|
| Size: |
110
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\top_level.txt
|
ASCII text
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\semantic_version-2.10.0.dist-info\top_level.txt
|
| Category: |
dropped
|
| Dump: |
top_level.txt.0.dr
|
| ID: |
dr_39
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
ASCII text
|
| Entropy: |
3.6168746059562227
|
| Encrypted: |
false
|
| Ssdeep: |
3:b4AGn:b4n
|
| Size: |
17
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\sqlite3.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\sqlite3.dll
|
| Category: |
dropped
|
| Dump: |
sqlite3.dll.0.dr
|
| ID: |
dr_621
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.5585271750775975
|
| Encrypted: |
false
|
| Ssdeep: |
24576:qGcnTz07eKXKUxK9hiOpnZ7Dh1rGWEp2cak2eFLloz2tN4C5ZuH:qGGz07eKXKUxK9hiOLhlGWzk2kL
|
| Size: |
1498624
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\ucrtbase.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\ucrtbase.dll
|
| Category: |
dropped
|
| Dump: |
ucrtbase.dll.0.dr
|
| ID: |
dr_622
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
| Entropy: |
6.669319438805479
|
| Encrypted: |
false
|
| Ssdeep: |
24576:VkmZDEMHhp9v1Ikbn3ND0TNVOsIut8P4zmxvSZX0yplkA:mmZFHhp9v1Io3h0TN3pvkA
|
| Size: |
1016584
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\unicodedata.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\unicodedata.pyd
|
| Category: |
dropped
|
| Dump: |
unicodedata.pyd.0.dr
|
| ID: |
dr_623
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.326399845135112
|
| Encrypted: |
false
|
| Ssdeep: |
12288:snI5XQ191SnFRcotduNjqQOZ6QBjCmN/X4myCAx9++bBlhJk93cgewrxEeLC:snKXKlo+GfhCc/4j9nbDhG2wr7C
|
| Size: |
1093120
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\win32api.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\win32api.pyd
|
| Category: |
dropped
|
| Dump: |
win32api.pyd.0.dr
|
| ID: |
dr_624
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.889442361235446
|
| Encrypted: |
false
|
| Ssdeep: |
3072:Y4SNosSqdu8cJi7YjbINlRVyELa8BoXgqsT3E2ygmJQLWJoe:i1SqU8H7gkNlRVusT02y8LI
|
| Size: |
140800
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\win32com\shell\shell.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\win32com\shell\shell.pyd
|
| Category: |
dropped
|
| Dump: |
shell.pyd.0.dr
|
| ID: |
dr_41
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.183098882803845
|
| Encrypted: |
false
|
| Ssdeep: |
6144:2w6iTDJjhAmGleKKsueJC/olS+8twnMkV/OPVycnAFDRrSVY59IXZuyKY8ecqLs:HTNjh7qxpueJC/olX+OfVSVY5YK9
|
| Size: |
616448
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\win32trace.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\win32trace.pyd
|
| Category: |
dropped
|
| Dump: |
win32trace.pyd.0.dr
|
| ID: |
dr_625
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.2874734308716045
|
| Encrypted: |
false
|
| Ssdeep: |
384:ntSpxrXg0e6z0ET+QPvgZDUV+0g83L4rJePq9waCcE9Us1BB:nncjnaDcCJeC8tB
|
| Size: |
23552
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\win32ui.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\win32ui.pyd
|
| Category: |
dropped
|
| Dump: |
win32ui.pyd.0.dr
|
| ID: |
dr_626
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.499654646970948
|
| Encrypted: |
false
|
| Ssdeep: |
12288:U/H36JD2icmQtEgRdQGJ/QiWxJXfRbCsMjrjQDrn/4Jz5Sti8:Uv6JD2icjRQiWjXlS0fGj
|
| Size: |
1620480
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\win32wnet.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\win32wnet.pyd
|
| Category: |
dropped
|
| Dump: |
win32wnet.pyd.0.dr
|
| ID: |
dr_627
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
5.50397576701013
|
| Encrypted: |
false
|
| Ssdeep: |
768:QKQIjQZtexa6Wcu+CgJLcpf3sdtOGY2LW/s2V:QKljQZtey4lcpfcw2LW/s2
|
| Size: |
38400
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Creates a directory in C:\Program Files |
Compliance, System Summary |
|
|
|
C:\Program Files\Hardcoded Software\dupeGuru\xxhash\_xxhash.cp38-win_amd64.pyd
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files\Hardcoded Software\dupeGuru\xxhash\_xxhash.cp38-win_amd64.pyd
|
| Category: |
dropped
|
| Dump: |
_xxhash.cp38-win_amd64.pyd.0.dr
|
| ID: |
dr_43
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| Entropy: |
6.154617459814964
|
| Encrypted: |
false
|
| Ssdeep: |
768:xJjZGQEhfCRPkYp4i7TOf+ZfIEFvcaQsF8gwKHP2YZdjVoX31Mzu0CN7:xJjQaPkYlO+ZQEWfsr2Y3ZoX3Iu0Y
|
| Size: |
60928
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru\Uninstall.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
|
|
|
| File: |
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru\Uninstall.lnk
|
| Category: |
dropped
|
| Dump: |
Uninstall.lnk.0.dr
|
| ID: |
dr_47
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
| Entropy: |
2.9687622017453537
|
| Encrypted: |
false
|
| Ssdeep: |
12:8wl080kXXdpCXasEQ0XKJleKrfGqobdpLsEEU/KNhGPbdpLsEEU/Kg:8wPHd6EQ036fAdKE/Oh8dKE/X
|
| Size: |
785
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Stores files to the Windows start menu directory |
Boot Survival |
Registry Run Keys / Startup Folder
|
|
|
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru\dupeGuru.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive,
ctime=Fri Jul 8 02:15:48 2022, mtime=Tue Apr 23 22:26:24 2024, atime=Fri Jul 8 02:15:48 2022, length=3504164, window=hide
|
dropped
|
|
|
|
| File: |
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru\dupeGuru.lnk
|
| Category: |
dropped
|
| Dump: |
dupeGuru.lnk.0.dr
|
| ID: |
dr_45
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive,
ctime=Fri Jul 8 02:15:48 2022, mtime=Tue Apr 23 22:26:24 2024, atime=Fri Jul 8 02:15:48 2022, length=3504164, window=hide
|
| Entropy: |
4.532094149834444
|
| Encrypted: |
false
|
| Ssdeep: |
24:8myw1dRSdBEQuwgVAG8dKE/fqsdKE/epm:8mndRSwQBG8dfJdfy
|
| Size: |
1106
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Stores files to the Windows start menu directory |
Boot Survival |
Registry Run Keys / Startup Folder
|
|
|
C:\Users\user\AppData\Local\Temp\nsq2C95.tmp
|
data
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nsq2C95.tmp
|
| Category: |
dropped
|
| Dump: |
nsq2C95.tmp.0.dr
|
| ID: |
dr_51
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
data
|
| Entropy: |
6.625497648184761
|
| Encrypted: |
false
|
| Ssdeep: |
786432:ewLF5hA8Ei5qLo3nYEZbvn/QfsqYUEpQtGDyHFQZuFAHbwSTZkfZoSI4ZoSeZAS3:zLF5htFqk3JjXTZBB
|
| Size: |
114878326
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\LangDLL.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\LangDLL.dll
|
| Category: |
dropped
|
| Dump: |
LangDLL.dll.0.dr
|
| ID: |
dr_2
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
3.8173457986066226
|
| Encrypted: |
false
|
| Ssdeep: |
48:S46+/iTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mMofjLl:zsuPbOBtWZBV8jAWiAJCdv2CmfL
|
| Size: |
5632
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\StartMenu.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\StartMenu.dll
|
| Category: |
dropped
|
| Dump: |
StartMenu.dll.0.dr
|
| ID: |
dr_5
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
4.644878327226602
|
| Encrypted: |
false
|
| Ssdeep: |
96:d8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/b3lkCTcaqHCI:eZIKXgk+cx6QYFkALlncviI
|
| Size: |
7680
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\System.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\System.dll
|
| Category: |
dropped
|
| Dump: |
System.dll.0.dr
|
| ID: |
dr_0
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
5.737874809466366
|
| Encrypted: |
false
|
| Ssdeep: |
192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
|
| Size: |
12288
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\UserInfo.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\UserInfo.dll
|
| Category: |
dropped
|
| Dump: |
UserInfo.dll.0.dr
|
| ID: |
dr_1
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
3.346742380227412
|
| Encrypted: |
false
|
| Ssdeep: |
48:qKMQE7F4aBr1wH8l9QIXTZShMmj3jkRTbGr7X:5bkFZruHSXTH6jkRnGr7X
|
| Size: |
4096
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\modern-wizard.bmp
|
PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\modern-wizard.bmp
|
| Category: |
dropped
|
| Dump: |
modern-wizard.bmp.0.dr
|
| ID: |
dr_3
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
|
| Entropy: |
1.9568109962493656
|
| Encrypted: |
false
|
| Ssdeep: |
24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
|
| Size: |
26494
|
| Whitelisted: |
true
|
| Reputation: |
timeout
|
|
|
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\nsDialogs.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nsw2CB6.tmp\nsDialogs.dll
|
| Category: |
dropped
|
| Dump: |
nsDialogs.dll.0.dr
|
| ID: |
dr_4
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\dupeGuru_win64_4.3.1.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
5.159679239959507
|
| Encrypted: |
false
|
| Ssdeep: |
96:oFsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YuNqkzfS:oFsvWyNO81b8pCHFcM0PuAgkOywIFc
|
| Size: |
9728
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
