Analysis

  • user interaction
    yes
  • max time kernel
    168s
  • max time network
    183s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/07/2026, 04:33

General

  • Target
    Full_Webpack-63.8.6459-SJ0001_Full_Webpack.exe
  • Size 436.2MB
  • Sample260723-e6shyswtfz
  • SHA256 620068045902345004931235f980d18321eb73b2b9e83672a905b17b6e823677
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Badlisted process makes network request 1 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops autorun.inf file 1 TTPs 2 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 32 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 32 IoCs
  • Suspicious use of WriteProcessMemory 17 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Full_Webpack-63.8.6459-SJ0001_Full_Webpack.exe
    "C:\Users\Admin\AppData\Local\Temp\Full_Webpack-63.8.6459-SJ0001_Full_Webpack.exe"
    1⤵
    • Drops autorun.inf file
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:5656
    • C:\Users\Admin\AppData\Local\Temp\7zS7D41\Setup.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS7D41\Setup.exe" /webpack
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3776
      • C:\Users\Admin\AppData\Local\Temp\7zS7D41\HP-DQEX5.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS7D41\HP-DQEX5.exe" /user "USJNCXJL\Admin" /webpack
        3⤵
        • Enumerates connected drives
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2140
        • C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\x64\dpinst.exe
          C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\x64\dpinst.exe /q /d /u "C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\RetiredUnusedScanStubDrivers\54_0_5269_0\UnusedScanStub.inf"
          4⤵
          • Executes dropped EXE
          PID:2668
        • C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\x64\dpinst.exe
          C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\x64\dpinst.exe /q /d /u "C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\RetiredUnusedScanStubDrivers\54_0_5319_0\UnusedScanStub.inf"
          4⤵
          • Executes dropped EXE
          PID:4400
        • C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x64.exe
          C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x64.exe -passive
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4260
          • C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x64.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x64.exe" -passive -burn.unelevated BurnPipe.{395932E1-AAE6-4595-98B2-215F07CE3491} {227565E9-8B24-4BD6-9FE2-CE64433FFF49} 4260
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:1104
        • C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x86.exe
          C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x86.exe -passive
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4708
          • C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x86.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\vcredist_VS2017_x86.exe" -passive -burn.unelevated BurnPipe.{2FDA113C-33FF-423B-92FE-ECA94BE80400} {62AEA41C-A5DF-4EA2-A5A3-AAC30C7F3EEE} 4708
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:5788
        • C:\Program Files\HP\HP Scan\Bin\DeviceSetup.exe
          "C:\Program Files\HP\HP Scan\Bin\DeviceSetup.exe" /Install /log "C:\Users\Admin\AppData\Local\HP\AtInstall\001" /SessionId "{112C1551-465A-4BA1-B671-E101EDC3FCC5}" /WebRegAutoYes /UsageTrackingNo /EPrintOptInNo /FWAutoUpdateNever /user "USJNCXJL\Admin"
          4⤵
          • Executes dropped EXE
          • Checks SCSI registry key(s)
          • Suspicious use of SetWindowsHookEx
          PID:5844
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Badlisted process makes network request
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3528
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding A51ED43EF2B071FAAA66357EE6FA220B
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:2180
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 2D0BB1006B79208091B3D3FDDC75AF70
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:2604
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 71133B3B8C6BA148CFA41B566B9F8D0B E Global\MSI0000
      2⤵
      • Drops file in System32 directory
      • Loads dropped DLL
      • Checks SCSI registry key(s)
      • Suspicious use of SetWindowsHookEx
      PID:5544
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding BADD8EDB4AE13F0E7AC77E4ED3A53CFB E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:2156
    • C:\Windows\syswow64\MsiExec.exe
      "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Program Files (x86)\HP\HP Scan\bin\hpgscnsv.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4172
    • C:\Windows\System32\MsiExec.exe
      "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files\HP\HP Scan\Bin\hpgscnsv.dll"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3936
    • C:\Program Files (x86)\HP\HP Scan\bin\HPScan.exe
      "C:\Program Files (x86)\HP\HP Scan\bin\HPScan.exe" /RegButtons
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:5928
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding CAA7F00AF1C179A396369A90918AE8BB
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:3520
  • C:\Windows\system32\DrvInst.exe
    DrvInst.exe "4" "1" "C:\Program Files\HP\HP Scan\DriverStore\NGScanDriver\HPeSCLScan.INF" "9" "4237216cb" "0000000000000180" "WinSta0\Default" "0000000000000170" "208" "C:\Program Files\HP\HP Scan\DriverStore\NGScanDriver"
    1⤵
    • Drops file in System32 directory
    • Checks SCSI registry key(s)
    • Modifies data under HKEY_USERS
    PID:4624
  • C:\Windows\system32\DrvInst.exe
    DrvInst.exe "4" "1" "C:\Program Files\HP\HP Scan\DriverStore\NGScanDriver\ScanToPCActivation.inf" "9" "478690e6f" "0000000000000170" "WinSta0\Default" "0000000000000194" "208" "C:\Program Files\HP\HP Scan\DriverStore\NGScanDriver"
    1⤵
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Modifies data under HKEY_USERS
    PID:5644
  • C:\Windows\system32\DrvInst.exe
    DrvInst.exe "4" "1" "C:\Program Files\HP\HP Scan\DriverStore\NGScanDriver\PAYCGWinUSB.inf" "9" "467adc10f" "0000000000000194" "WinSta0\Default" "0000000000000184" "208" "C:\Program Files\HP\HP Scan\DriverStore\NGScanDriver"
    1⤵
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Modifies data under HKEY_USERS
    PID:1380
  • C:\Windows\system32\DrvInst.exe
    DrvInst.exe "4" "1" "C:\Program Files\HP\HP Scan\DriverStore\HPScanUnusedStubDriver\UnusedScanStub.inf" "9" "4e34a2fcf" "0000000000000184" "WinSta0\Default" "0000000000000198" "208" "C:\Program Files\HP\HP Scan\DriverStore\HPScanUnusedStubDriver"
    1⤵
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Modifies data under HKEY_USERS
    PID:2600
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:5860
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
      1⤵
      • Checks SCSI registry key(s)
      PID:5304
    • C:\PROGRA~1\HP\HPSCAN~1\Bin\HPNETW~1.EXE
      "C:\Program Files\HP\HP Scan\Bin\HPNetworkCommunicatorCom.exe" -Embedding
      1⤵
      • Executes dropped EXE
      PID:4868
    • C:\PROGRA~1\HP\HPSCAN~1\Bin\HPNETW~1.EXE
      "C:\Program Files\HP\HP Scan\Bin\HPNetworkCommunicatorCom.exe" -Embedding
      1⤵
      • Executes dropped EXE
      PID:1276

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          e5abd2a.rbs

          • Path C:\Config.Msi\e5abd2a.rbs
          • Size 1.3MB
          • SHA256 09ddf0c5768dbb246f4d994aa475b7e9d737f1882c22c32b7ba9f7cef7c3a1ea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e5abd2b.rbf

          • Path C:\Config.Msi\e5abd2b.rbf
          • Size 1KB
          • SHA256 5dc40f3ca9d327303ccbbf608467a9942302f02b54388853bb4e16d1d9930717
          • MD5 SHA1 SHA512 TLSH

          e5abd2c.rbf

          • Path C:\Config.Msi\e5abd2c.rbf
          • Size 1KB
          • SHA256 a1ce68263fd4379d340a21a2accf4b51da22d3db1536b2bebdf75363e4283ad6
          • MD5 SHA1 SHA512 TLSH

          e5abd31.rbs

          • Path C:\Config.Msi\e5abd31.rbs
          • Size 7KB
          • SHA256 45480b2a3603e8274e81b4f30dda560b1a9689f0f2324c58c5cf949caa0a93dd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e5abd36.rbs

          • Path C:\Config.Msi\e5abd36.rbs
          • Size 21KB
          • SHA256 9acab1bca006f60707422c0403b4275b11693d4477d0ad59e6fae85f363be28c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e5abd3b.rbs

          • Path C:\Config.Msi\e5abd3b.rbs
          • Size 10KB
          • SHA256 d4ad84819fa36a6f9ef181edc7ef028a2fbc6e5f59740a6d165387ee827577e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e5abd40.rbs

          • Path C:\Config.Msi\e5abd40.rbs
          • Size 7KB
          • SHA256 79a00a641760e471b81578c716d6169c105bc97a7c2d1971c0f3981eded5139e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e5abd45.rbs

          • Path C:\Config.Msi\e5abd45.rbs
          • Size 16KB
          • SHA256 40a2c4bdf4d6d110f80152c099f6e66bb2024b43ca5774ee5dc6cc0e9fc2231f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPScan.exe

          • Path C:\Program Files (x86)\HP\HP Scan\bin\HPScan.exe
          • Size 36.1MB
          • SHA256 22db38eff2358d3bafde9e89b0abe35baecebd0eb4a81d5deb70249ae4bd79af
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HP Scan Assistant.exe

          • Path C:\Program Files\HP\HP Scan\Bin\HP Scan Assistant.exe
          • Size 7.9MB
          • SHA256 32ce85cd21e5102aef9ef0b23e08f1111d70ef9ea8bce4ffe6a9e638b8b4c02f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPScan.exe

          • Path C:\Program Files\HP\HP Scan\Bin\HPScan.exe
          • Size 43.4MB
          • SHA256 0b7aaea8acc00966fca99a4ef663309a6c5b409609457f6eff30cc01486dcf48
          • MD5 SHA1 SHA512 SSDEEP TLSH

          config.ini

          • Path C:\Program Files\HP\HP Scan\config.ini
          • Size 987B
          • SHA256 512301669648c33bba524fb3c9d4c1f1e498c74ce585a83638dc8d249f0623bb
          • MD5 SHA1 SHA512 TLSH

          config.ini

          • Path C:\Program Files\HP\HP Scan\config.ini
          • Size 2KB
          • SHA256 480fd4322e16387571f2afa2f4895acaba9c95b606fd03e35602eb27c1cd4cd3
          • MD5 SHA1 SHA512 TLSH

          config.ini

          • Path C:\Program Files\HP\HP Scan\config.ini
          • Size 2KB
          • SHA256 01273c6c341d8e2fcf1cfa3f125a440f8973649e13a0e3f31e34e2217034f5d9
          • MD5 SHA1 SHA512 TLSH

          settings.ini

          • Path C:\ProgramData\HP\HP Scan\settings.ini
          • Size 369B
          • SHA256 4a2bdebba0e54f9281058990895dcd8d7c99239d4c962561dd5eff2ab547c72d
          • MD5 SHA1 SHA512 TLSH

          SJ001x64.log

          • Path C:\Users\Admin\AppData\Local\HP\AtInstall\001\SJ001x64.log
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512

          devicesetup.log

          • Path C:\Users\Admin\AppData\Local\HP\AtInstall\001\devicesetup.log
          • Size 4KB
          • SHA256 fd833419b5e5d951893377600b799ae0ab0130d47a75f8350f156e882948bc7b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hp-dqex5.log

          • Path C:\Users\Admin\AppData\Local\HP\AtInstall\001\hp-dqex5.log
          • Size 3KB
          • SHA256 aa590a82cdb9f96cfa8919fdbcbc1a8b9d28361b2cd918297de4047c00fd702a
          • MD5 SHA1 SHA512 TLSH

          hp-dqex5.log

          • Path C:\Users\Admin\AppData\Local\HP\AtInstall\001\hp-dqex5.log
          • Size 5KB
          • SHA256 676c29835fa76979c2025ab324405049d75c36ab047ba93d285ae42f34a9b787
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HP-DQEX5.exe

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\HP-DQEX5.exe
          • Size 32.1MB
          • SHA256 4740af8018b2bbf4c30eda6686fda9fd42b88830b8c6c9e793bf9e79346872de
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPScanDrvConfig.XML

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\HPScanDrvConfig.XML
          • Size 3KB
          • SHA256 30260c25f5334e8a6da21b61c9d38f55d289b97dc0e4ed292c1fa23fc212b845
          • MD5 SHA1 SHA512 TLSH

          HPeSCLScan.INF

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\HPeSCLScan.INF
          • Size 154KB
          • SHA256 b7d6b24da714dfc81dfeccf749fd37bc11f6702048bc9740398116d21bcb1290
          • MD5 SHA1 SHA512 SSDEEP TLSH

          f4fd4a38-2f64-425e-a7aa-c5b25c119de9.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\ar\f4fd4a38-2f64-425e-a7aa-c5b25c119de9.devicemetadata-ms
          • Size 227KB
          • SHA256 abe29ddcf533d343194bc51c605ec2f23b6275952d72384fd65fbd5774c57917
          • MD5 SHA1 SHA512 SSDEEP TLSH

          c023c859-26df-476a-b08a-9289a322f142.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\cs\c023c859-26df-476a-b08a-9289a322f142.devicemetadata-ms
          • Size 227KB
          • SHA256 1223b3bee1494e62f3969d8be50069ae518b441c32c4ccad757e34112edf9895
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bf6568f1-e223-4e48-945f-5a635178c656.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\da\bf6568f1-e223-4e48-945f-5a635178c656.devicemetadata-ms
          • Size 227KB
          • SHA256 5a6ed86c82ce42a66ec38aa3c659018124219e15e4bfd88be3f729afb79d86a1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          456dc529-cdc2-4ec5-a30d-5f670d6b74b2.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\de\456dc529-cdc2-4ec5-a30d-5f670d6b74b2.devicemetadata-ms
          • Size 227KB
          • SHA256 e85c100cc9ba9d21eeca943d836d8ff000888f2b5b88c76eafcc7864bf0a3383
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e25377c6-2248-4f57-9322-2013e280d0ec.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\el\e25377c6-2248-4f57-9322-2013e280d0ec.devicemetadata-ms
          • Size 227KB
          • SHA256 0bbe706423bf5b5e16ecd7e8095959ce35369041802efff8bca5fb78b320eb7a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          5a1613a2-5a2d-49ec-883d-786804a9c7f1.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\en-US\5a1613a2-5a2d-49ec-883d-786804a9c7f1.devicemetadata-ms
          • Size 227KB
          • SHA256 e5d3fe1d9fda6caa1547ec81c7b0a183d1eefaab2edae5206592e15a5eff9d74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          9bc8ac61-61e4-412d-b95e-f9c888b6a5b1.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\en\9bc8ac61-61e4-412d-b95e-f9c888b6a5b1.devicemetadata-ms
          • Size 404KB
          • SHA256 db5a95b3558a5a858b44d1b9024203135576ed9f0400ed3f2ef9993e1d5719e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          0f396f01-243c-49fa-8a4c-021071804ae8.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\es\0f396f01-243c-49fa-8a4c-021071804ae8.devicemetadata-ms
          • Size 227KB
          • SHA256 f193bbfe4a9a1cdba3a5bc0f1097a47febb60de4ca2396ab978ff182103ce4c7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ec0245d6-4c51-4be1-ad68-c7b8ccd0cf7c.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\fi\ec0245d6-4c51-4be1-ad68-c7b8ccd0cf7c.devicemetadata-ms
          • Size 227KB
          • SHA256 2188c9e67f515a8e1602dc7edfaa0cebfa3aa21027caa6611db3a9795a413827
          • MD5 SHA1 SHA512 SSDEEP TLSH

          f5444339-4bdb-4348-aac6-b0264e8714d1.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\fr\f5444339-4bdb-4348-aac6-b0264e8714d1.devicemetadata-ms
          • Size 227KB
          • SHA256 ec23a9b9cae44c1da6cf936b1ca01e567dce509cc36ef0b970c242dfcd754ad9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          14333f1d-cd4a-4cf3-b430-4fbf468fbce0.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\he\14333f1d-cd4a-4cf3-b430-4fbf468fbce0.devicemetadata-ms
          • Size 227KB
          • SHA256 cac610c40d8b07adb44fc90d751cb860bba09ebb9ef1239532da771d10905fd5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          a7d8ddd9-6b69-41f2-9642-a593f8560a88.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\hu\a7d8ddd9-6b69-41f2-9642-a593f8560a88.devicemetadata-ms
          • Size 227KB
          • SHA256 94c091de6053e532a326d6740c062b2dfe2c685143949a64c00ba439b2d5d548
          • MD5 SHA1 SHA512 SSDEEP TLSH

          debbd86c-2af8-4d5e-b030-b8b561a7a671.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\id\debbd86c-2af8-4d5e-b030-b8b561a7a671.devicemetadata-ms
          • Size 227KB
          • SHA256 fd44f88c2a2d425eebb232453c7752c604b0e6668c2e759010df352580d900e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          7f133401-581b-4cf7-9d1d-ce8d7d06e9fe.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\it\7f133401-581b-4cf7-9d1d-ce8d7d06e9fe.devicemetadata-ms
          • Size 227KB
          • SHA256 d41d12b2a4861e170d75728e5a76766201a1bb649c454bb1dee0cdfb6076b90e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d489de2a-74b4-49bc-9139-bb41b4fcac12.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\ja\d489de2a-74b4-49bc-9139-bb41b4fcac12.devicemetadata-ms
          • Size 227KB
          • SHA256 7361fa60b7f7956d6cf83cc3dfb487ec269e9710f296fc375eab0c2d794afef7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          a86ca2b9-5ff0-4a36-99ab-428d7373183e.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\ko\a86ca2b9-5ff0-4a36-99ab-428d7373183e.devicemetadata-ms
          • Size 227KB
          • SHA256 07ed1bc9162544fb9ffe661057a8b7abebec1628602879c37252096b44d52cee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e2cbe6f8-14ae-485e-af27-51fe1986a88f.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\nb\e2cbe6f8-14ae-485e-af27-51fe1986a88f.devicemetadata-ms
          • Size 227KB
          • SHA256 fdf96476a73547297f6736229a9f6a9bd3ce857386f69195a70ea5164b475231
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bf374340-74f4-4c77-af04-15f63189072c.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\nl\bf374340-74f4-4c77-af04-15f63189072c.devicemetadata-ms
          • Size 227KB
          • SHA256 6a8391b8ec8c831bbbca899531ed45012ad094bf1f9ba3958a06a5f7740e4e1d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          b01bb93f-187c-4124-8c1b-6fea9273a19b.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\pl\b01bb93f-187c-4124-8c1b-6fea9273a19b.devicemetadata-ms
          • Size 227KB
          • SHA256 5443f36c6a07af6a3ff6a7f9680038a7e13a949718b1a7b4b78c80baa113a4cc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cbfa8822-03eb-44e5-9428-f85f42d1ffa7.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\pt\cbfa8822-03eb-44e5-9428-f85f42d1ffa7.devicemetadata-ms
          • Size 227KB
          • SHA256 f7acb0ed00d8323f3f0ac2e8ed1d6bba033999c2cfc322f756901bf76a85cd57
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d2f3dbe3-22dc-4164-bf52-7c655791d244.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\ro\d2f3dbe3-22dc-4164-bf52-7c655791d244.devicemetadata-ms
          • Size 227KB
          • SHA256 7a7227a723372211692ad391fec7aee67688a253671af4133a2b39e8e1f0a3ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d846ff91-d6aa-4634-a881-693a9e301faa.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\ru\d846ff91-d6aa-4634-a881-693a9e301faa.devicemetadata-ms
          • Size 227KB
          • SHA256 554cf181b4877acdc0d0557b64144d2f4504956aa385e7ce40ad3b39d6fef4bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cf80a47f-89c8-45f1-8811-9d11c512bc74.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\sv\cf80a47f-89c8-45f1-8811-9d11c512bc74.devicemetadata-ms
          • Size 227KB
          • SHA256 4f3d268d345c337698bedb0116c39446513bf3f7b71b0028f4e2a6a1a7c90d8e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          e9b749e2-e220-4c61-aa2f-309c841f1b52.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\th\e9b749e2-e220-4c61-aa2f-309c841f1b52.devicemetadata-ms
          • Size 227KB
          • SHA256 ae6a9cc05c451e68b7bfe8efd96c4666d98670ee791425c02e328bc45b82554c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          c7562a5e-baa4-4866-938d-fe98603dbe18.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\tr\c7562a5e-baa4-4866-938d-fe98603dbe18.devicemetadata-ms
          • Size 227KB
          • SHA256 97f7643513941727cfe84cd9913326813cae512e1aa39758e2344a507cc7d1fe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          beac4c2f-8865-40e9-becf-a8d97f8a80e6.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\uk\beac4c2f-8865-40e9-becf-a8d97f8a80e6.devicemetadata-ms
          • Size 227KB
          • SHA256 6241bda7b192273eb49a256c9dc6a962ac4da615701576e4382edee98b9e9cae
          • MD5 SHA1 SHA512 SSDEEP TLSH

          be2753be-11d5-4125-b429-25e70f812c43.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\vi\be2753be-11d5-4125-b429-25e70f812c43.devicemetadata-ms
          • Size 227KB
          • SHA256 46cad9a0e654aac40d598d302379ec7abb8b3b84bf248b4e9d475aea29e531d6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          79897f1c-3319-426b-b091-9b51dd5f2249.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\zh-CN\79897f1c-3319-426b-b091-9b51dd5f2249.devicemetadata-ms
          • Size 227KB
          • SHA256 7b83939b9974ef29c756ac307988ae44e454c59241af84dff9a97e5c8bcf89ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          db013583-cbf6-4c9d-90d1-3508a23c464d.devicemetadata-ms

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Microsoft\Windows\DeviceMetadataStore\zh-TW\db013583-cbf6-4c9d-90d1-3508a23c464d.devicemetadata-ms
          • Size 227KB
          • SHA256 9df2658bfe234d6e07c4aafb5a9235a6b75212bdb0c7e79ec78d96bd0f0a469d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PAYCGWinUSB.cat

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\PAYCGWinUSB.cat
          • Size 66KB
          • SHA256 ba02863017b490b6997c4b3960b0868d01c4dce540430e6f28dae9396be563c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PAYCGWinUSB.inf

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\PAYCGWinUSB.inf
          • Size 1KB
          • SHA256 d6455d66b4d697839dc69845e5220a7f304d38de69892d0d7bc43624157f3e72
          • MD5 SHA1 SHA512 TLSH

          HPEmailSMTPPluginx64.msi

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\HPEmailSMTPPluginx64.msi
          • Size 4.1MB
          • SHA256 5e45f0e53dde410f0ea1c6bdb0ede51ea01b24974179d990f630b92916ad8481
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPSFTPPluginx64.msi

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\HPSFTPPluginx64.msi
          • Size 12.2MB
          • SHA256 00d14e15c29532c4b33ada082977e6b639dd3af80bcdcb0042db6da45f4cf4be
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPSharePointPluginx64.msi

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\HPSharePointPluginx64.msi
          • Size 4.0MB
          • SHA256 16d96b42b47abccd9f3d8fabe09f4d2ba4fd471a7dadfb9f27fc347420839db3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPSharePointPluginx86.msi

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\HPSharePointPluginx86.msi
          • Size 2.0MB
          • SHA256 47e05c4b994df92252bbc4a4ae4516a2b07942506c99fe8254eae476afc1e985
          • MD5 SHA1 SHA512 SSDEEP TLSH

          IRISSoftwareDownloadUtility.msi

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Required\IRISSoftwareDownloadUtility.msi
          • Size 284KB
          • SHA256 1d22ca15c7dfc9deebf361b60e3c141efa460624c3c753632b3628001d735c56
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SJ001x64.msi

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\SJ001x64.msi
          • Size 3.6MB
          • SHA256 23fd3637043e4b6165a994f4c2a3f5e62bf25d45a54477e69f58d8341cf35324
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SJ001x64_1036.mst

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\SJ001x64_1036.mst
          • Size 60KB
          • SHA256 c3f04379a509f7fe3567944dd5ec6089f22f3091289064763c6e5f48553d5ec9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SJ001x64_1038.mst

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\SJ001x64_1038.mst
          • Size 56KB
          • SHA256 22cbe1b63b868ce174ce3467edcbe5eed193f186425ae007c7dfbe2b023b40b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SJ001x64_1042.mst

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\SJ001x64_1042.mst
          • Size 52KB
          • SHA256 db84ce70acd074475005658c1297dccf04b2849617578788e43d0a7137641067
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SJ001x64_1048.mst

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\SJ001x64_1048.mst
          • Size 44KB
          • SHA256 c99ceba61ac4b7f81cb85cec2b4647b494a5cb6ce38c60c13b2f886494996d37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SJ001x86_1028.mst

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\SJ001x86_1028.mst
          • Size 44KB
          • SHA256 783d90e1071a69e0d91a11386965232abcb5ffa3070dd0dcf583105777867883
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ScanToPCActivation.inf

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\ScanToPCActivation.inf
          • Size 2KB
          • SHA256 89cb938e477373662164d649b096b393177a661d03ae0873af92b9691c934a5c
          • MD5 SHA1 SHA512 TLSH

          Setup.exe

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\Setup.exe
          • Size 2.1MB
          • SHA256 d4ab3614c90b8b3787dbeaf7bbaa216f0adca3b1a1e9b53069df10a1e779c9db
          • MD5 SHA1 SHA512 SSDEEP TLSH

          config.ini

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\config.ini
          • Size 50B
          • SHA256 e81ab4de000bc6608e8cd0403075bf4592bb50ad15865f1a8d3f1e49dc00421c
          • MD5 SHA1 SHA512 TLSH

          HPScanTEDrv.dll

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\drivers\scanner\x32\HPScanTEDrv.dll
          • Size 5.6MB
          • SHA256 48fb1e5f972286185280d8749dbe532d74b34f19f843ba9369993dc8b90fcec3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPScanTEDrv_x64.dll

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\drivers\scanner\x64\HPScanTEDrv_x64.dll
          • Size 8.0MB
          • SHA256 0d8c8a731aff12fa956a8990b21d3e62c30e06980c61c6a0d12aad3062452096
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPScanTEDrv_x64_DiscoveryLibDyn.dll

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\drivers\scanner\x64\HPScanTEDrv_x64_DiscoveryLibDyn.dll
          • Size 1.3MB
          • SHA256 867dbdc9843c3b2df8672d3661b5c2c0fec4361933cc1576b7b817cbf13862a7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPWIAExtensionUI.dll

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\drivers\scanner\x64\HPWIAExtensionUI.dll
          • Size 184KB
          • SHA256 5e685caafa1eafddae2ad465301ff79c747a758a90571069a1d4ff3b8776a9c0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPWia2Drv.dll

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\drivers\scanner\x64\HPWia2Drv.dll
          • Size 702KB
          • SHA256 ca5f048eba35a3152d8b1da13a53f2db3e0b8064591a0f9103b2073f325f9cbc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hpesclscan.CAT

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\hpesclscan.CAT
          • Size 70KB
          • SHA256 eaf873ca2e6c5d02ffc8a41ff0cc57ff3f2e6b3acb2059e420767771f54499ad
          • MD5 SHA1 SHA512 SSDEEP TLSH

          scantopcactivation.cat

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\scantopcactivation.cat
          • Size 66KB
          • SHA256 661b7a9c2b5de22ee0fe68403c002299d5bdc5d0c46c09dcc6ec15d6598fc43d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UnusedScanStub.inf

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\RetiredUnusedScanStubDrivers\54_0_5269_0\UnusedScanStub.inf
          • Size 2KB
          • SHA256 2064e45b77fca5c66c0873eee5c06fb5120797e01bfcbfd7fc3872addc82c483
          • MD5 SHA1 SHA512 TLSH

          UnusedScanStub.inf

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\RetiredUnusedScanStubDrivers\54_0_5319_0\UnusedScanStub.inf
          • Size 21KB
          • SHA256 0583bc9b26cb75e557d79c7c8a9b9b6e169a7dc1bc734176395fad43d31edf56
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dpinst.exe

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\x64\dpinst.exe
          • Size 1.0MB
          • SHA256 181bf85d3b5900ff8abed34bc415afc37fc322d9d7702e14d144f96a908f5cab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Scrubber.json

          • Path C:\Users\Admin\AppData\Local\Temp\7zS7D41\utils\x86\Scrubber.json
          • Size 5KB
          • SHA256 8b608a9f8451adeed286cf876d63dbf6ed6b48ab24fa426d1031e895daf0bbab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPTempIcon.ico

          • Path C:\Users\Admin\AppData\Local\Temp\HPTempIcon.ico
          • Size 107KB
          • SHA256 325b66deaab9732c8680dfc1f299919cd517c5cb5fe4a7adada81a6a5d33307f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPTempIcon.ico

          • Path C:\Users\Admin\AppData\Local\Temp\HPTempIcon.ico
          • Size 24KB
          • SHA256 a7d1f0dc9bb366c77c12e0d8bfb556d26868ac869c70b9a4c41f3b6a1b63da0b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          HPTempIcon.ico

          • Path C:\Users\Admin\AppData\Local\Temp\HPTempIcon.ico
          • Size 15KB
          • SHA256 46069d95e343223ec9179871f149a5a60b7764ef705f5c6a56f081ef1715e80c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          license.rtf

          • Path C:\Users\Admin\AppData\Local\Temp\{404c9c27-8377-4fd1-b607-7ca635db4e49}\.ba1\1055\license.rtf
          • Size 177KB
          • SHA256 f79108a254f876e0f6bbcb05a9effbe25dc252e7ea256bfe3fd28ceb79737f25
          • MD5 SHA1 SHA512 SSDEEP TLSH

          wixstdba.dll

          • Path C:\Users\Admin\AppData\Local\Temp\{404c9c27-8377-4fd1-b607-7ca635db4e49}\.ba1\wixstdba.dll
          • Size 126KB
          • SHA256 25ee85c14c9be619b4f0bf783963ace1dc0af0e802014728c2a2ca8da213d31d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          license.rtf

          • Path C:\Users\Admin\AppData\Local\Temp\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}\.ba1\1049\license.rtf
          • Size 173KB
          • SHA256 d050dce48fb874c777e08a90f85e00a174752e2d060b9e0e3ebc800bbfb59708
          • MD5 SHA1 SHA512 SSDEEP TLSH

          logo.png

          • Path C:\Users\Admin\AppData\Local\Temp\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}\.ba1\logo.png
          • Size 1KB
          • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
          • MD5 SHA1 SHA512 TLSH

          DPINST.LOG

          • Path C:\Windows\DPINST.LOG
          • Size 5KB
          • SHA256 2c54e265c8887e3d96fe3c74123ede9e7af959e62d0f3a1dc304f01a7513f415
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MSIBECD.tmp

          • Path C:\Windows\Installer\MSIBECD.tmp
          • Size 1.0MB
          • SHA256 00878f887a9cde38df6e521ac263a99ef91fe59110948c8a89fb55b28eed6763
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MSID3B8.tmp

          • Path C:\Windows\Installer\MSID3B8.tmp
          • Size 202KB
          • SHA256 e0db1804cf53ed4819ed70cb35c67680ce1a77573efded86e6dac81010ce55e7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MSIF0E7.tmp

          • Path C:\Windows\Installer\MSIF0E7.tmp
          • Size 118KB
          • SHA256 bf93de4755822425f3fd3928b52d2a6e6c91ab069213aaaa95695ed3e17e72e9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ProductIcon_1053

          • Path C:\Windows\Installer\{CD55D0F5-B06C-41DB-B56F-7666E95396EA}\ProductIcon_1053
          • Size 61KB
          • SHA256 1ee3e42b4a885a618b868d1c6cfaee07be73c328bc6908e63d53683ae986fa4a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hpesclscan.inf_amd64_d2e72d1f0a54b3b0.ini

          • Path C:\Windows\System32\DriverStore\FileRepository\hpesclscan.inf_amd64_d2e72d1f0a54b3b0.ini
          • Size 1KB
          • SHA256 0394d753ed348393817c5e0321dc4c1a0dd12be24fe67d19ac447b2e340dbdea
          • MD5 SHA1 SHA512 TLSH

          paycgwinusb.inf_amd64_72bf8a5f64fdf2f4.ini

          • Path C:\Windows\System32\DriverStore\FileRepository\paycgwinusb.inf_amd64_72bf8a5f64fdf2f4.ini
          • Size 315B
          • SHA256 519adb07e6d14cdf6e1b70cf13a598aea94af3c0513371bb693da6a2d3e46a4a
          • MD5 SHA1 SHA512 TLSH

          scantopcactivation.inf_amd64_60ec432dba1ef831.ini

          • Path C:\Windows\System32\DriverStore\FileRepository\scantopcactivation.inf_amd64_60ec432dba1ef831.ini
          • Size 336B
          • SHA256 931b226cc044a45090e377cb54c2c00ecce688d915ecb9f16f2244e0842039a2
          • MD5 SHA1 SHA512 TLSH

          unusedscanstub.inf_amd64_0e4ad97026ea5878.ini

          • Path C:\Windows\System32\DriverStore\FileRepository\unusedscanstub.inf_amd64_0e4ad97026ea5878.ini
          • Size 324B
          • SHA256 e2fcd3da621e3a862d5ef60902f1e26c70da193cd9c2a8fb1cf8ae6482082e3c
          • MD5 SHA1 SHA512 TLSH

          dberr.txt

          • Path C:\Windows\System32\catroot2\dberr.txt
          • Size 64KB
          • SHA256 9d9e53f5917cd75b067e4ee6fea691a8dfadd1a596c70207407fc7ad26d6cab0
          • MD5 SHA1 SHA512 SSDEEP TLSH