Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/08/2026, 16:36

General

  • Target
    QuickLook-4.5.0.msi
  • Size 90.1MB
  • Sample260822-t4e76swfph
  • SHA256 130f601eab7c388025351312f949749adebc6429b1042bd2001ac32a17a2748c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Creates a file in the Startup directory 1 TTPs 1 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 3 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Costura .NET executable packer 1 IoCs

    Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.

  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Windows\system32\msiexec.exe
    msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\QuickLook-4.5.0.msi
    1⤵
    • Enumerates connected drives
    • Event Triggered Execution: Installer Packages
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4412
    • C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.exe
      "C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.exe" /first
      2⤵
      • Creates a file in the Startup directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:2436
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3728
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 02B3FEC34C515FF988C0C7AC966E33AB C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:1516
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      2⤵
        PID:4636
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Checks SCSI registry key(s)
      PID:2516

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          e58d379.rbs

          • Path C:\Config.Msi\e58d379.rbs
          • Size 432KB
          • SHA256 bc6a86f67f442de09ff98178d416ad562e6b1db3deb28cc95a690325541ad16c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Common.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Common.dll
          • Size 100KB
          • SHA256 a1971635913f89968e9b5a55eb05ca28b06881caefbda9e3a0eee8b33c979576
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Native64.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Native64.dll
          • Size 182KB
          • SHA256 fe00028ec98cdc8f088da8d8a05cacb6f1b658fc7f40babd22c2d95717eabd4f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.AppViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\QuickLook.Plugin.AppViewer.dll
          • Size 304KB
          • SHA256 9528067fe9de388955fcef3aa03f8958c02418f1fada631f917ad6a84e5c6ed8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Collections.Specialized.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Collections.Specialized.dll
          • Size 20KB
          • SHA256 938da38561da54793944e95e94b6e11cf83aacd667487297d428fbce1c06dc9c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Console.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Console.dll
          • Size 20KB
          • SHA256 b537313413f80105f143cc144feeae2ac93f44747727de309a71d57d2650034a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.NetworkInformation.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Net.NetworkInformation.dll
          • Size 21KB
          • SHA256 2e2d28a0802d8c8c08c0d422f48733ad8bf1dfae75f5682a4a3df8898e7e819f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.Security.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Net.Security.dll
          • Size 21KB
          • SHA256 d0d90152136a0acf340fb345098f2e5c718bb13f3b5a809d7be4d9948b8574d4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.InteropServices.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Runtime.InteropServices.dll
          • Size 23KB
          • SHA256 383a1f9dac655c6805c24d4a03bc5fbeb9abd1536de5510f5756259eefcb4871
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.Serialization.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Runtime.Serialization.Primitives.dll
          • Size 26KB
          • SHA256 575e26a455892f1fd77b730e6928f70b760e76094afe5bcb677d854daf869ac5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.Claims.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Security.Claims.dll
          • Size 20KB
          • SHA256 8270d1248950ee8aee5c2ac2e321df07e65c7a94004ae03c857deacd231a5542
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.SecureString.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Security.SecureString.dll
          • Size 21KB
          • SHA256 18032d190d0d599823e59c8dd8b588909bef8888b8bf304723a138b61f1b911f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Threading.ThreadPool.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Threading.ThreadPool.dll
          • Size 20KB
          • SHA256 3d9ebc81b1bd3234666c8ce403a5f17a726867c68ffa5de4ec8ee92599335658
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Xml.XmlSerializer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.AppViewer\System.Xml.XmlSerializer.dll
          • Size 21KB
          • SHA256 21493f7f615a099e795f7fae7ecce6082414d1d427790bdf4b103623a3ab34eb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.ArchiveViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\QuickLook.Plugin.ArchiveViewer.dll
          • Size 66KB
          • SHA256 4a617d6a1b05a0a3922992ad896866b5b35c8ba2ca06bb25e3b414fcf5724a6b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.MemoryMappedFiles.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.IO.MemoryMappedFiles.dll
          • Size 20KB
          • SHA256 81b6527ac2d18782ac24ae463c11dd1d70ab1bc89f626b7347a592229b371a1d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Net.Primitives.dll
          • Size 21KB
          • SHA256 9a8ba725f8e953c933285065228a9409036f9137d03016b127ccea8a19452466
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.Sockets.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Net.Sockets.dll
          • Size 29KB
          • SHA256 694f4c61b6bae0aefac07a1e861c12c03cb6002f30091e4c8b05bb9c8ccf0d3d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Reflection.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Reflection.dll
          • Size 21KB
          • SHA256 63aaf632ee7f3bc852c4d71c742cf1d26f18f784f6c89113e056b2599ba8f514
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Resources.ResourceManager.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Resources.ResourceManager.dll
          • Size 20KB
          • SHA256 62dce4679e33c079e11f41b096bc803b30b1d963a1ea79efa84187cebbc06afe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.Extensions.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Runtime.Extensions.dll
          • Size 21KB
          • SHA256 f9feb277f86241f55425182a26decf50a210675d4f040ec542af3fb3dd287de6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.Serialization.Xml.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Runtime.Serialization.Xml.dll
          • Size 24KB
          • SHA256 557858e44a51a74646ad07a85cba56af1da13ad26ac2f74ee5d8c3e8a171c221
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Threading.Thread.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Threading.Thread.dll
          • Size 20KB
          • SHA256 9d4faea9892d4ecfabf61986687fc6cb30f5f51a6b62819b9571ff58e04c4dd5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Threading.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Threading.dll
          • Size 21KB
          • SHA256 4dc8d588ec63641c28422d648e8de5e2c030eb7afec2071a99dd3bd9a204557f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Xml.XPath.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ArchiveViewer\System.Xml.XPath.dll
          • Size 20KB
          • SHA256 24daa1faee0478ba58febe8ee789eb88be0a14d350b57ad8b10690c55976b2e1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.CLSIDViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CLSIDViewer\QuickLook.Plugin.CLSIDViewer.dll
          • Size 20KB
          • SHA256 60a2b45fcfd1cd2cdfcf5ed3dacc87914526f7e6a365d866bd8ac956680a3c46
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.CertViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CertViewer\QuickLook.Plugin.CertViewer.dll
          • Size 16KB
          • SHA256 4cfc4edb8cb7d7e84575781ce44c11252ad40b566d8d6f0737f514646ab2901c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.CsvViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\QuickLook.Plugin.CsvViewer.dll
          • Size 18KB
          • SHA256 eebad8a44f11f34b04df6e96ad12a15634ba712fde8a2cd04260459f51b3375a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.ComponentModel.TypeConverter.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.ComponentModel.TypeConverter.dll
          • Size 22KB
          • SHA256 0dbb92ecd5dfa7fc258bc6deed4cecf1b37f895457fd06976496926abdb317bb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.Contracts.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Diagnostics.Contracts.dll
          • Size 21KB
          • SHA256 9c4ae61e0e8365762efe3d34c5595029f2c12e0079e6070720e2cef0882c84e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.Debug.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Diagnostics.Debug.dll
          • Size 20KB
          • SHA256 55a30d92d163cf1807bea6dc13b4c13e70aebbb034dc77eaef4f4394730dcd8e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.Tracing.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Diagnostics.Tracing.dll
          • Size 30KB
          • SHA256 b84b93be455cc7d14ec0c88ce08dafac7b6aac2e549c969e7126eb48c31f8b1c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.FileSystem.Watcher.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.IO.FileSystem.Watcher.dll
          • Size 20KB
          • SHA256 c9e2562f1a1b86acdb6957cf916aced9c4f8b71ebb16dfa0050252146205ad37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.IsolatedStorage.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.IO.IsolatedStorage.dll
          • Size 20KB
          • SHA256 0e80a2e256d16e487bc847d1857ed7cd088f176254ba2a385d675338b836b0fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Linq.Queryable.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Linq.Queryable.dll
          • Size 20KB
          • SHA256 719ac73bb261e0a13574f5a198126ccf40352264958defb555280d005134c704
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.Http.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Net.Http.dll
          • Size 193KB
          • SHA256 b5d20736f84f335ef4c918a5ba41c3a0d7189397c71b166ccc6c342427a94ece
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.Requests.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Net.Requests.dll
          • Size 20KB
          • SHA256 f2e74a3ec2dc753c9a48fa9a677775f949eb1e02fc1bb8bf38c39e8d2ab147eb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.Principal.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Security.Principal.dll
          • Size 20KB
          • SHA256 02416bc542be82002b8b81adbbbcdcc8d098104020d09b571dc674b5bc19a177
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Threading.Overlapped.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Threading.Overlapped.dll
          • Size 36KB
          • SHA256 f17ff442b77a6cfe9c118d2f8fae1ab6c814a0d4f35c5844996be84f3fcc8592
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Threading.Tasks.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\System.Threading.Tasks.dll
          • Size 21KB
          • SHA256 0110616dfe870b8bcf25df8f6ce38ef5aac39e728ddaa3420ea199f5a7e80a16
          • MD5 SHA1 SHA512 SSDEEP TLSH

          netstandard.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.CsvViewer\netstandard.dll
          • Size 96KB
          • SHA256 8be4a2270f8b2bea40f33f79869fdcca34e07bb764e63b81ded49d90d2b720dd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.ELFViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\QuickLook.Plugin.ELFViewer.dll
          • Size 55KB
          • SHA256 8d8e3d524d5f11ec08f299641831f616bb0eee9dffafb0502a188b3899822ae8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.ComponentModel.EventBasedAsync.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.ComponentModel.EventBasedAsync.dll
          • Size 21KB
          • SHA256 22108e32e0b6e42f5f52a4cb17b9b6fa3dfd547ecd9eef9c67226dbec54d23e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Drawing.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.Drawing.Primitives.dll
          • Size 20KB
          • SHA256 2805a18724a24034ad6acb315dac516e479cecc5f3753204052657e560932d5d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.Pipes.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.IO.Pipes.dll
          • Size 20KB
          • SHA256 80a229b2917fc3a5d941ff9745a6be0065028afdf9509300410d2721c71f1198
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.Serialization.Formatters.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.Runtime.Serialization.Formatters.dll
          • Size 20KB
          • SHA256 c343f7bf08a4c97a90ba607a492c721533333173fa63f65f6e5de9ceee65fc16
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.Serialization.Json.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.Runtime.Serialization.Json.dll
          • Size 20KB
          • SHA256 e8d531f0aaa674f794b7f43ec76e4e32ad93f3c136020cf4b6e3433832f9c0df
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.Cryptography.Algorithms.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.Security.Cryptography.Algorithms.dll
          • Size 45KB
          • SHA256 967dddbfe7f1ceb933b5875d65c59cdb835bb063f287a361e8b35dd814a9b14d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.Cryptography.X509Certificates.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.Security.Cryptography.X509Certificates.dll
          • Size 22KB
          • SHA256 3c8630acb43c12a6a317227ff2922056ecd991fe945464fdf7ea81f1293a479f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Xml.ReaderWriter.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ELFViewer\System.Xml.ReaderWriter.dll
          • Size 21KB
          • SHA256 5f560e1dd529bb2529d7052e04008449f58d0439c2bb43437d7b5d39f84f949f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Microsoft.Web.WebView2.Core.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\Microsoft.Web.WebView2.Core.dll
          • Size 635KB
          • SHA256 bb397d03342c76bd308ade82f5b7e8ced00df59459799ffc93a38c3a882b3398
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.FontViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\QuickLook.Plugin.FontViewer.dll
          • Size 19KB
          • SHA256 92af1b1cae91c6c7e59087b01113b565772e61732d0d5584bdc6cddcc2d4cbfe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Collections.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Collections.dll
          • Size 21KB
          • SHA256 c2250e9e51b44d8ab8c5b892592766925f6580ee00b95026621d0afb037c2707
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Globalization.Calendars.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Globalization.Calendars.dll
          • Size 21KB
          • SHA256 b56ffb65b842daae13f3020b0b04646db92f89801d2a2f89087d145a996d43f7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.FileSystem.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.IO.FileSystem.Primitives.dll
          • Size 20KB
          • SHA256 5c84dd40d67c0e59906511d2b09da8e28c454b5979eb5fde74213f9d4bdbc564
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Linq.Parallel.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Linq.Parallel.dll
          • Size 20KB
          • SHA256 30a49d16436e3a05569c99a0c2d21755c2fa323c5b925f9f21c10287cc97d9c9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Resources.Reader.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Resources.Reader.dll
          • Size 20KB
          • SHA256 e3036362506d96c9c00ed6393a2afcacd9f2e71cd2a35c1d638a61e85d2fb040
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.Cryptography.Csp.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Security.Cryptography.Csp.dll
          • Size 20KB
          • SHA256 566775f5502c3c1fa70acade145293df5d02c1a9f031820d429605e9b4584b44
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Text.RegularExpressions.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Text.RegularExpressions.dll
          • Size 20KB
          • SHA256 c98a52bd017df01aea7b955e6f219537d391a62c2c2b976684da282f9cd7cacf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.ValueTuple.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.ValueTuple.dll
          • Size 77KB
          • SHA256 efd8155cec6f3683b701fe94f555d225332d283126bb36b36d9a20ea9d7fc724
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Xml.XDocument.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Xml.XDocument.dll
          • Size 21KB
          • SHA256 4f6a14e4ba2a2b26b8b8433d5f82f75a96af5a4f036d9447373b07271493917b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Xml.XmlDocument.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\System.Xml.XmlDocument.dll
          • Size 21KB
          • SHA256 8957f0bcea6ab8a011a53ae62466505199f11a228f87f3809931d974f87078ce
          • MD5 SHA1 SHA512 SSDEEP TLSH

          WebView2Loader.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.FontViewer\runtimes\win-x86\native\WebView2Loader.dll
          • Size 118KB
          • SHA256 14e83e8d1d19d0138ce6be5f59f912d576fc27e839203a94d0a15ec30bae0c1a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.HelixViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HelixViewer\QuickLook.Plugin.HelixViewer.dll
          • Size 19KB
          • SHA256 e2904897f325b7538e9951f3395ae5516ed4b0befdf59b267e9f6c437d6e73d6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Collections.Concurrent.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HelixViewer\System.Collections.Concurrent.dll
          • Size 20KB
          • SHA256 cc62f3b867d50083c2932061f20662c698d2e1a741c4d2f9df1fd2d435e3ef3c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.Tools.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HelixViewer\System.Diagnostics.Tools.dll
          • Size 20KB
          • SHA256 260c6250ef9b57dca99b4cecc533f9a34857b5a32b5351202f776163841200aa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Globalization.Extensions.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HelixViewer\System.Globalization.Extensions.dll
          • Size 25KB
          • SHA256 c7e91bd148ed22ee1ff8ebd3e58b199a30af90aa37499bcf8da34409672f2ed9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.FileSystem.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HelixViewer\System.IO.FileSystem.dll
          • Size 20KB
          • SHA256 9a4595dbb128e2d8f373b3ac45478e7131f4d181b50ec821ec8cb88bd46bd5b8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Reflection.Extensions.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HelixViewer\System.Reflection.Extensions.dll
          • Size 20KB
          • SHA256 3d2551d6458b84566025fddfe5dad479cab5785428efd6814860d36ad1811c9a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Text.Encoding.Extensions.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HelixViewer\System.Text.Encoding.Extensions.dll
          • Size 20KB
          • SHA256 cbe29672cd2b6a0ea97b55f3844fbede3e591996f39c3aa1f829f2fa50551fa9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.HtmlViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.HtmlViewer\QuickLook.Plugin.HtmlViewer.dll
          • Size 20KB
          • SHA256 6b6fb8e0f0f9ca21671db1d1d4053fb15f8d6a09508217f2a9323ac846a2f319
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Google.Protobuf.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\Google.Protobuf.dll
          • Size 486KB
          • SHA256 80d1af038ac3d884a4ec8a3529297cfaad7fac5186172a6375f2db896d7c96bc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.ImageViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\QuickLook.Plugin.ImageViewer.dll
          • Size 673KB
          • SHA256 12bc8984cc1f7c945a47488330f30a7f6f7515e98a85b124821665c0a0947072
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.ComponentModel.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.ComponentModel.dll
          • Size 20KB
          • SHA256 5e61d755616cb10524f5f31e9b70c65a7fff8e30e25ce711ac8b354d657ab479
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.TraceSource.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.Diagnostics.TraceSource.dll
          • Size 21KB
          • SHA256 c81a57d0634c462a6cf49844059e9b170f650ccdf0789519ffd4ae7d28e2718d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Globalization.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.Globalization.dll
          • Size 20KB
          • SHA256 56bd0c02c734abf4d7fd1ef2e8b6a9e4bf5e4bab4e606cd1023d63b02852fa61
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.Compression.ZipFile.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.IO.Compression.ZipFile.dll
          • Size 20KB
          • SHA256 7720ee13405ea8a3c204703a181e67dc6d66835e9df263c09d04d8b48b41eb26
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.FileSystem.DriveInfo.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.IO.FileSystem.DriveInfo.dll
          • Size 20KB
          • SHA256 984575c44cab17d46587af6cc8c22c409b79bec280fd771e6af93a0a0c20e5b0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.ObjectModel.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.ObjectModel.dll
          • Size 21KB
          • SHA256 870ee1141cb61abfce44507e39bfdd734f2335e34d89ecfffb13838195a6b936
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Reflection.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.Reflection.Primitives.dll
          • Size 21KB
          • SHA256 0383dc02fdf0b5d4612d8caaad13d594cac1609c8240b73dfd6ea5803f5e17ea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.CompilerServices.Unsafe.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.Runtime.CompilerServices.Unsafe.dll
          • Size 18KB
          • SHA256 08cbd7278b66f1e68425a82d4b97181a4130d93e3dd91831407aba7212ccdacf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.Cryptography.Encoding.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.Security.Cryptography.Encoding.dll
          • Size 20KB
          • SHA256 1f5c1abe1b2720680170388569354d8cda9d558b53aff7caf175ce0f7e3733e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Security.Cryptography.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.Security.Cryptography.Primitives.dll
          • Size 21KB
          • SHA256 b755d0b55a465d07c9dd3fc11822487d1e649b684aef91a4ce9b935b416a01b9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Threading.Tasks.Parallel.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ImageViewer\System.Threading.Tasks.Parallel.dll
          • Size 20KB
          • SHA256 3468e0c875db94a8f45d56ab76bbcc677b942ca51a23649ba3c5ad1b20e391f1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.MailViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\QuickLook.Plugin.MailViewer.dll
          • Size 7KB
          • SHA256 91f5e322fd839b989069531c9fe9029ffeff339bb86fc88d95686e11a6848946
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Data.Common.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Data.Common.dll
          • Size 150KB
          • SHA256 1c7bff6f16bb618648e699b723aeafe511515cd6aad699c25faae2a507e22811
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.StackTrace.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Diagnostics.StackTrace.dll
          • Size 23KB
          • SHA256 cae99f910874288afbf810968d13b79d755cd4b2006609ec036ea4934181cba5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Dynamic.Runtime.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Dynamic.Runtime.dll
          • Size 21KB
          • SHA256 f600acc811720183c639cebe5618baf9c8135b85b9cbdc0758bc9b2dcc6dd7a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.UnmanagedMemoryStream.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.IO.UnmanagedMemoryStream.dll
          • Size 20KB
          • SHA256 86f1f12e47f260985b08bb966598123578eb5e48bef9bb086f04e16e9d53bb32
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Linq.Expressions.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Linq.Expressions.dll
          • Size 21KB
          • SHA256 bf97f67165231c2a42b95f11d80337b082e2b2be54351da44c8a10c06194b369
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Linq.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Linq.dll
          • Size 20KB
          • SHA256 349c7fbe9ae2b78c2f90239bddfcea5b16a0faac1fe83553a816c50c3e9089b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.NameResolution.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Net.NameResolution.dll
          • Size 20KB
          • SHA256 222bd77c5692c2961e8c3638f6511d6f7cbeb9e0977e2d5c3bca6739a5311f37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.WebHeaderCollection.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Net.WebHeaderCollection.dll
          • Size 20KB
          • SHA256 69b48ff8e6f40b84cdddb95bcdbb34e1184a2e29cb4ccc0fc9f1a2493648ee37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.Numerics.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Runtime.Numerics.dll
          • Size 20KB
          • SHA256 16e7efd6c19b2e3e516ae1bc7b3175d0e22f1ad357701f229e353da348eee182
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Threading.Timer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MailViewer\System.Threading.Timer.dll
          • Size 20KB
          • SHA256 04b9235f64c9c846f8a767230714895da87c7ae2cd0105e9d14835ae46f0fed8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Microsoft.Win32.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\Microsoft.Win32.Primitives.dll
          • Size 20KB
          • SHA256 5eaa2e82a26b0b302280d08f54dc9da25165dd0e286be52440a271285d63f695
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.MarkdownViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\QuickLook.Plugin.MarkdownViewer.dll
          • Size 5.2MB
          • SHA256 d98d5f131e536fef49839a8e3ede8ac92e9ef49d79b877b543133d10747a1d09
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.FileVersionInfo.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\System.Diagnostics.FileVersionInfo.dll
          • Size 20KB
          • SHA256 7c25a74772e135257235640a0264ddc05235e14f3627896cfe735e9955155f83
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.Process.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\System.Diagnostics.Process.dll
          • Size 21KB
          • SHA256 28b165cddb82a2507114394ae398995ef8a50c549214f8678aa66054f6927754
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Diagnostics.TextWriterTraceListener.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\System.Diagnostics.TextWriterTraceListener.dll
          • Size 20KB
          • SHA256 63eab38ee9f4dcd686c8e6a4f01e1e2a9bb91e52b20ab4dde0c28061e9261860
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.Ping.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\System.Net.Ping.dll
          • Size 20KB
          • SHA256 4d97e8481b9a27042bb903245625735d82ff627c66797de619303c1e705d0d6a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.WebSockets.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\System.Net.WebSockets.dll
          • Size 20KB
          • SHA256 99920ce34a01a0c07efd86d6e134bb401993515d001b7567a4116ad222993a63
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Resources.Writer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\System.Resources.Writer.dll
          • Size 20KB
          • SHA256 daaabd07f1b94be19d72913360286e469f454886850afcc603506eaab03150e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Text.Encoding.CodePages.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\System.Text.Encoding.CodePages.dll
          • Size 737KB
          • SHA256 06b8a67517ca56b503cd0f2d2e55d00d64ff721da77689133317fe5e159ed91f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          WebView2Loader.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\runtimes\win-arm64\native\WebView2Loader.dll
          • Size 144KB
          • SHA256 0ea44c3541466b302867d8021363260bcc3272f3dc29d92d54123b96d2628425
          • MD5 SHA1 SHA512 SSDEEP TLSH

          WebView2Loader.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MarkdownViewer\runtimes\win-x64\native\WebView2Loader.dll
          • Size 155KB
          • SHA256 1ac87267e52ccdf5621678697f948030307a650ca56f38f69e74c7cfaf9605c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.MediaInfoViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.MediaInfoViewer\QuickLook.Plugin.MediaInfoViewer.dll
          • Size 12KB
          • SHA256 0aecceb41e0fa54cb0628a9a606cd4a6fd15b3065186bffe0f7565400687f878
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.OfficeViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.OfficeViewer\QuickLook.Plugin.OfficeViewer.dll
          • Size 15KB
          • SHA256 b016c0f237dea21bec8dfec64ab948d30b781119bd7a7221f22b1121bf59ce88
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.PDFViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.PDFViewer\QuickLook.Plugin.PDFViewer.dll
          • Size 33KB
          • SHA256 56431688ad61680e9d59bab0315bdf03868a1041d389e87ab7dbeca4b2e4e631
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.PEViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.PEViewer\QuickLook.Plugin.PEViewer.dll
          • Size 47KB
          • SHA256 433cdd082dbaba739c664bbdc7347ac83c91af993b18697f81eabddea5602607
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.PluginInstaller.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.PluginInstaller\QuickLook.Plugin.PluginInstaller.dll
          • Size 15KB
          • SHA256 a6b202b6d316c871c8e83f8098b2230bfde7fbdcae2cc1dbb3701a70af1acfa3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ICSharpCode.AvalonEdit.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\ICSharpCode.AvalonEdit.dll
          • Size 606KB
          • SHA256 b0032716709359f7361d5a2ddc8e2ad457a1448a093fb4900e0336312b0a10c7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.TextViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\QuickLook.Plugin.TextViewer.dll
          • Size 2.4MB
          • SHA256 0eaa6e3698029a43aedbe2638cdf5a905a393536576d207a4d7d54b56cb1ddac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.Compression.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\System.IO.Compression.dll
          • Size 108KB
          • SHA256 da18d61bb6b7d35c56cb4f392fae0844cca73f72a043a08994beccb531ff3b77
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.IO.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\System.IO.dll
          • Size 20KB
          • SHA256 c191a43029edd4eb8eee003356f1fe79aa45071c25433a7a3589590e9089eed9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Net.WebSockets.Client.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\System.Net.WebSockets.Client.dll
          • Size 20KB
          • SHA256 19766a20b62b038abc3e863f2d6e7b55fabee4d9cbcad3eb1d7bd3ebfe8d023a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\System.Runtime.dll
          • Size 28KB
          • SHA256 50ad612d4cf6113de26b2870da099c4817f59e64a2da98f05803b4a2e2304919
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Xml.XPath.XDocument.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\System.Xml.XPath.XDocument.dll
          • Size 22KB
          • SHA256 b33d08149a756a401628d11bfddfeeaca1f03c0578395bb061dae44f8a12ce5d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UtfUnknown.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.TextViewer\UtfUnknown.dll
          • Size 249KB
          • SHA256 ca556c15e6e34ae637283ef02a0e7370bea973d3a4f2ac1ab94bb5eeca16f076
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.ThumbnailViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.ThumbnailViewer\QuickLook.Plugin.ThumbnailViewer.dll
          • Size 16KB
          • SHA256 ec6ac3e82e2312f1428a95ee5a32ba6316e966ce853b9ead2acf9b4d5d7d4479
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MediaInfo.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\MediaInfo-x64\MediaInfo.dll
          • Size 7.9MB
          • SHA256 cafebf97e7e57de75e2bbd67621c6eeb88ce7f6bed496f8b9397a56a570776a3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MediaInfo.Wrapper.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\MediaInfo.Wrapper.dll
          • Size 226KB
          • SHA256 bdf4b25d4a7863a84c0f00bdfaba204f7485cefc308d62f1526a38ca0119e567
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.Plugin.VideoViewer.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\QuickLook.Plugin.VideoViewer.dll
          • Size 99KB
          • SHA256 f69b6ff362dd8656d4443453d2696610f3eaad4b198b06709ca0f8cb64665c3c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.AppContext.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\System.AppContext.dll
          • Size 20KB
          • SHA256 9dc115ac4aadd6a94d87c7a8a3f61803cc25a3d73501d7534867df6b0d8a0d39
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Collections.NonGeneric.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\System.Collections.NonGeneric.dll
          • Size 20KB
          • SHA256 529943c0cdf24f57e94bf03fac5f40b94a638625027a02df79e1e8cb5d9bc696
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.ComponentModel.Primitives.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\System.ComponentModel.Primitives.dll
          • Size 21KB
          • SHA256 bfcd867f71c887429dfe008d7ec5d1853d15b3932d4ce8991694293477b5be37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.CompilerServices.VisualC.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\System.Runtime.CompilerServices.VisualC.dll
          • Size 21KB
          • SHA256 18a610b8bad43cf784cde4d4902a238f2281c2a677daae790cab55f6da915979
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.Handles.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\System.Runtime.Handles.dll
          • Size 20KB
          • SHA256 7a81d2a001b543b2a55c9affc845a5df7edab1fd308c6979bbd982b1b826b57c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Runtime.InteropServices.RuntimeInformation.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\System.Runtime.InteropServices.RuntimeInformation.dll
          • Size 27KB
          • SHA256 8bb9d52ba5c67f05c8f632deb1e7e98a909318b10e1388b47e919515fdd42cbf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.Text.Encoding.dll

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.Plugin\QuickLook.Plugin.VideoViewer\System.Text.Encoding.dll
          • Size 21KB
          • SHA256 0ab1f7f87b7c2afca57d394e4f4e262c82ba3209cb0a750cd66401fb33f21eca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.exe

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.exe
          • Size 11.9MB
          • SHA256 93ce82d48a2755864aa10d66ed3dcb10b8ac35fddbef4cc9b72c136720100b6f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QuickLook.exe.config

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\QuickLook.exe.config
          • Size 18KB
          • SHA256 f37e605b784e2d0f2bade6c90ca17411eec8a90bd7b15ec5b8bc3b0721065f48
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Translations.config

          • Path C:\Users\Admin\AppData\Local\Programs\QuickLook\Translations.config
          • Size 63KB
          • SHA256 20c570246efe5ef3495cd390991b0f181be9bb20c0f9d9e10a737604f396b716
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MSI8911.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\MSI8911.tmp
          • Size 132KB
          • SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          metadata-2

          • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
          • Size 24.1MB
          • SHA256 773b2f2931101f2e27be0bd1e80f2ff9c8ce6b0610b3198a7c24803fde4964ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          {fc7817d0-1ba9-4096-8810-9a5845c3ed9a}_OnDiskSnapshotProp

          • Path \??\Volume{4588d6e0-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{fc7817d0-1ba9-4096-8810-9a5845c3ed9a}_OnDiskSnapshotProp
          • Size 6KB
          • SHA256 b0dcb62f3e2700f25a740c5538fe5d28a9e4baf31429c95728ed667500c3d5fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/2436-1365-0x000001CC1E6F0000-0x000001CC1E7AA000-memory.dmp

          memory/2436-1377-0x000001CC1E6B0000-0x000001CC1E6BA000-memory.dmp

          memory/2436-1379-0x000001CC1E6E0000-0x000001CC1E6EC000-memory.dmp

          memory/2436-1395-0x000001CC1ECF0000-0x000001CC1ED6E000-memory.dmp

          memory/2436-1381-0x000001CC1EB40000-0x000001CC1EB4A000-memory.dmp

          memory/2436-1383-0x000001CC1EB70000-0x000001CC1EB84000-memory.dmp

          memory/2436-1389-0x000001CC1EC40000-0x000001CC1ECE2000-memory.dmp

          memory/2436-1397-0x000001CC1EBA0000-0x000001CC1EBA8000-memory.dmp

          memory/2436-1404-0x000001CC1EBF0000-0x000001CC1EC0C000-memory.dmp

          memory/2436-1421-0x000001CC1EEB0000-0x000001CC1EEEE000-memory.dmp

          memory/2436-1391-0x000001CC1EB90000-0x000001CC1EB9C000-memory.dmp

          memory/2436-1393-0x000001CC1EDA0000-0x000001CC1EE4E000-memory.dmp

          memory/2436-1419-0x000001CC1EE50000-0x000001CC1EE70000-memory.dmp

          memory/2436-1387-0x000001CC1EB60000-0x000001CC1EB6C000-memory.dmp

          memory/2436-1417-0x000001CC1EC10000-0x000001CC1EC1A000-memory.dmp

          memory/2436-1427-0x000001CC1EC30000-0x000001CC1EC38000-memory.dmp

          memory/2436-1428-0x000001CC1F090000-0x000001CC1F0B8000-memory.dmp

          memory/2436-1426-0x000001CC1F330000-0x000001CC1F356000-memory.dmp

          memory/2436-1385-0x000001CC1EB50000-0x000001CC1EB5C000-memory.dmp

          memory/2436-1429-0x000001CC200F0000-0x000001CC20360000-memory.dmp

          memory/2436-1415-0x000001CC1EEF0000-0x000001CC1EF8E000-memory.dmp

          memory/2436-1375-0x000001CC1E6C0000-0x000001CC1E6D6000-memory.dmp

          memory/2436-1431-0x000001CC1F360000-0x000001CC1F36A000-memory.dmp

          memory/2436-1432-0x000001CC1F920000-0x000001CC1F93A000-memory.dmp

          memory/2436-1430-0x000001CC1EEA0000-0x000001CC1EEA6000-memory.dmp

          memory/2436-1433-0x000001CC1F370000-0x000001CC1F376000-memory.dmp

          memory/2436-1413-0x000001CC1F0C0000-0x000001CC1F32A000-memory.dmp

          memory/2436-1373-0x000001CC1EAE0000-0x000001CC1EB32000-memory.dmp

          memory/2436-1411-0x000001CC1EBE0000-0x000001CC1EBEA000-memory.dmp

          memory/2436-1371-0x000001CC1E670000-0x000001CC1E686000-memory.dmp

          memory/2436-1409-0x000001CC1ED70000-0x000001CC1ED82000-memory.dmp

          memory/2436-1366-0x000001CC1E9B0000-0x000001CC1EAD8000-memory.dmp

          memory/2436-1407-0x000001CC1EBD0000-0x000001CC1EBDE000-memory.dmp

          memory/2436-1364-0x000001CC1DEB0000-0x000001CC1E4FA000-memory.dmp

          memory/2436-1403-0x000001CC1EBC0000-0x000001CC1EBCA000-memory.dmp

          memory/2436-1361-0x000001CC1D010000-0x000001CC1D030000-memory.dmp

          memory/2436-1401-0x000001CC1EBB0000-0x000001CC1EBBA000-memory.dmp

          memory/2436-1359-0x000001CC020A0000-0x000001CC02C90000-memory.dmp

          memory/2436-1399-0x000001CC1F380000-0x000001CC1F8B0000-memory.dmp

          memory/2436-1435-0x000001CC1FE10000-0x000001CC1FFB9000-memory.dmp