RemoveWindowsAI-EXE-Bundle.zip
- SHA256 3b2410286a75005a46cfe2a349f995fe8824858c80439989deb64bf282c4ba66
Overview
overview
3Static
static
3ClassicApp...nt.exe
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1ClassicApp...xe.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ClassicApps\paint\mspaint.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ClassicApps\paint\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ClassicApps\paint\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
ClassicApps\paint\paint_lang_files\ar-SA\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
ClassicApps\paint\paint_lang_files\bg-BG\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
ClassicApps\paint\paint_lang_files\cs-CZ\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
ClassicApps\paint\paint_lang_files\da-DK\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
ClassicApps\paint\paint_lang_files\de-DE\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
ClassicApps\paint\paint_lang_files\el-GR\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
ClassicApps\paint\paint_lang_files\en-GB\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
ClassicApps\paint\paint_lang_files\es-ES\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
ClassicApps\paint\paint_lang_files\es-MX\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
ClassicApps\paint\paint_lang_files\et-EE\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
ClassicApps\paint\paint_lang_files\fi-FI\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
ClassicApps\paint\paint_lang_files\fr-CA\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
ClassicApps\paint\paint_lang_files\fr-FR\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
ClassicApps\paint\paint_lang_files\he-IL\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
ClassicApps\paint\paint_lang_files\hr-HR\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
ClassicApps\paint\paint_lang_files\hu-HU\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
ClassicApps\paint\paint_lang_files\it-IT\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
ClassicApps\paint\paint_lang_files\ja-JP\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
ClassicApps\paint\paint_lang_files\ko-KR\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
ClassicApps\paint\paint_lang_files\lt-LT\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
ClassicApps\paint\paint_lang_files\lv-LV\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
ClassicApps\paint\paint_lang_files\nb-NO\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
ClassicApps\paint\paint_lang_files\nl-NL\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
ClassicApps\paint\paint_lang_files\pl-PL\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
ClassicApps\paint\paint_lang_files\pt-BR\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
ClassicApps\paint\paint_lang_files\pt-PT\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
ClassicApps\paint\paint_lang_files\ro-RO\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
ClassicApps\paint\paint_lang_files\ru-RU\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
ClassicApps\paint\paint_lang_files\sk-SK\mspaint.exe.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target RemoveWindowsAI-EXE-Bundle.zip
- Size 3.6MB
- Sample261104-vceb8sys4r
- SHA256 3b2410286a75005a46cfe2a349f995fe8824858c80439989deb64bf282c4ba66
- MD5 3a9f9b67aae096cde7dc13bbe0a26e5e
- SHA1 efd2d9185488d77404d6257d204ec835d7b37768
- SHA512 71095d107a4e52069fad2d513cf3f22b076211841808ec536cde2e4a2d0101453b19361e4bb00658a5af172ed505e87e5717215ac63346564ed6923f457ada98
- SSDEEP 98304:TFblWbjBMT4YFBxTcW0y//0C8PgMns5Qyu0rTIhX:TFblWbje4YFBxTuy/8CQgT5Y
- TLSH T1650633086A981FE6CD4FD4B567381D84EBB41218E60612EBEA32C0D5F6393EDDCF10A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 80 IoCs
Checks for missing Authenticode signature.
resource unpack001/ClassicApps\paint\mspaint.exe unpack001/ClassicApps\paint\mspaint.exe.mui unpack001/ClassicApps\paint\mspaint.exe.mun unpack001/ClassicApps\paint\paint_lang_files\ar-SA\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\bg-BG\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\cs-CZ\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\da-DK\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\de-DE\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\el-GR\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\en-GB\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\es-ES\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\es-MX\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\et-EE\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\fi-FI\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\fr-CA\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\fr-FR\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\he-IL\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\hr-HR\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\hu-HU\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\it-IT\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\ja-JP\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\ko-KR\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\lt-LT\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\lv-LV\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\nb-NO\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\nl-NL\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\pl-PL\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\pt-BR\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\pt-PT\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\ro-RO\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\ru-RU\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\sk-SK\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\sl-SI\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\sr-Latn-RS\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\sv-SE\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\th-TH\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\tr-TR\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\uk-UA\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\zh-CN\mspaint.exe.mui unpack001/ClassicApps\paint\paint_lang_files\zh-TW\mspaint.exe.mui unpack001/ClassicApps\snipping\SnippingTool.exe unpack001/ClassicApps\snipping\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\ar-SA\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\bg-BG\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\cs-CZ\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\da-DK\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\de-DE\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\el-GR\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\en-GB\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\es-ES\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\es-MX\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\et-EE\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\fi-FI\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\fr-CA\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\fr-FR\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\he-IL\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\hr-HR\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\hu-HU\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\it-IT\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\ja-JP\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\ko-KR\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\lt-LT\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\lv-LV\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\nb-NO\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\nl-NL\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\pl-PL\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\pt-BR\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\pt-PT\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\ro-RO\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\ru-RU\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\sk-SK\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\sl-SI\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\sr-Latn-RS\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\sv-SE\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\th-TH\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\tr-TR\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\uk-UA\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\zh-CN\SnippingTool.exe.mui unpack001/ClassicApps\snipping\snipping_lang_files\zh-TW\SnippingTool.exe.mui unpack001/RemoveWindowsAI-GUI.exe
File Explorer
-
RemoveWindowsAI-EXE-Bundle.zip.zip 3.6MB
-
ClassicApps\paint\Paint.reg44KB
-
ClassicApps\paint\mspaint.exe.exe 856KB
-
ClassicApps\paint\mspaint.exe.mui.dll 55KB
-
ClassicApps\paint\mspaint.exe.mun.dll 2.4MB
-
ClassicApps\paint\paint_lang_files\ar-SA\mspaint.exe.mui.dll 53KB
-
ClassicApps\paint\paint_lang_files\bg-BG\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\cs-CZ\mspaint.exe.mui.dll 57KB
-
ClassicApps\paint\paint_lang_files\da-DK\mspaint.exe.mui.dll 57KB
-
ClassicApps\paint\paint_lang_files\de-DE\mspaint.exe.mui.dll 61KB
-
ClassicApps\paint\paint_lang_files\el-GR\mspaint.exe.mui.dll 63KB
-
ClassicApps\paint\paint_lang_files\en-GB\mspaint.exe.mui.dll 55KB
-
ClassicApps\paint\paint_lang_files\es-ES\mspaint.exe.mui.dll 61KB
-
ClassicApps\paint\paint_lang_files\es-MX\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\et-EE\mspaint.exe.mui.dll 57KB
-
ClassicApps\paint\paint_lang_files\fi-FI\mspaint.exe.mui.dll 57KB
-
ClassicApps\paint\paint_lang_files\fr-CA\mspaint.exe.mui.dll 62KB
-
ClassicApps\paint\paint_lang_files\fr-FR\mspaint.exe.mui.dll 63KB
-
ClassicApps\paint\paint_lang_files\he-IL\mspaint.exe.mui.dll 52KB
-
ClassicApps\paint\paint_lang_files\hr-HR\mspaint.exe.mui.dll 59KB
-
ClassicApps\paint\paint_lang_files\hu-HU\mspaint.exe.mui.dll 59KB
-
ClassicApps\paint\paint_lang_files\it-IT\mspaint.exe.mui.dll 61KB
-
ClassicApps\paint\paint_lang_files\ja-JP\mspaint.exe.mui.dll 43KB
-
ClassicApps\paint\paint_lang_files\ko-KR\mspaint.exe.mui.dll 43KB
-
ClassicApps\paint\paint_lang_files\lt-LT\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\lv-LV\mspaint.exe.mui.dll 58KB
-
ClassicApps\paint\paint_lang_files\nb-NO\mspaint.exe.mui.dll 56KB
-
ClassicApps\paint\paint_lang_files\nl-NL\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\pl-PL\mspaint.exe.mui.dll 59KB
-
ClassicApps\paint\paint_lang_files\pt-BR\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\pt-PT\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\ro-RO\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\ru-RU\mspaint.exe.mui.dll 60KB
-
ClassicApps\paint\paint_lang_files\sk-SK\mspaint.exe.mui.dll 58KB
-
ClassicApps\paint\paint_lang_files\sl-SI\mspaint.exe.mui.dll 57KB
-
ClassicApps\paint\paint_lang_files\sr-Latn-RS\mspaint.exe.mui.dll 58KB
-
ClassicApps\paint\paint_lang_files\sv-SE\mspaint.exe.mui.dll 56KB
-
ClassicApps\paint\paint_lang_files\th-TH\mspaint.exe.mui.dll 53KB
-
ClassicApps\paint\paint_lang_files\tr-TR\mspaint.exe.mui.dll 57KB
-
ClassicApps\paint\paint_lang_files\uk-UA\mspaint.exe.mui.dll 59KB
-
ClassicApps\paint\paint_lang_files\zh-CN\mspaint.exe.mui.dll 38KB
-
ClassicApps\paint\paint_lang_files\zh-TW\mspaint.exe.mui.dll 38KB
-
ClassicApps\snipping\SnippingTool.exe.exe 3.2MB
-
ClassicApps\snipping\SnippingTool.exe.mui.dll 11KB
-
ClassicApps\snipping\snipping_lang_files\ar-SA\SnippingTool.exe.mui.dll 11KB
-
ClassicApps\snipping\snipping_lang_files\bg-BG\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\cs-CZ\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\da-DK\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\de-DE\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\el-GR\SnippingTool.exe.mui.dll 14KB
-
ClassicApps\snipping\snipping_lang_files\en-GB\SnippingTool.exe.mui.dll 11KB
-
ClassicApps\snipping\snipping_lang_files\es-ES\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\es-MX\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\et-EE\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\fi-FI\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\fr-CA\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\fr-FR\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\he-IL\SnippingTool.exe.mui.dll 11KB
-
ClassicApps\snipping\snipping_lang_files\hr-HR\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\hu-HU\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\it-IT\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\ja-JP\SnippingTool.exe.mui.dll 10KB
-
ClassicApps\snipping\snipping_lang_files\ko-KR\SnippingTool.exe.mui.dll 9KB
-
ClassicApps\snipping\snipping_lang_files\lt-LT\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\lv-LV\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\nb-NO\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\nl-NL\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\pl-PL\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\pt-BR\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\pt-PT\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\ro-RO\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\ru-RU\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\sk-SK\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\sl-SI\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\sr-Latn-RS\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\sv-SE\SnippingTool.exe.mui.dll 12KB
-
ClassicApps\snipping\snipping_lang_files\th-TH\SnippingTool.exe.mui.dll 11KB
-
ClassicApps\snipping\snipping_lang_files\tr-TR\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\uk-UA\SnippingTool.exe.mui.dll 13KB
-
ClassicApps\snipping\snipping_lang_files\zh-CN\SnippingTool.exe.mui.dll 8KB
-
ClassicApps\snipping\snipping_lang_files\zh-TW\SnippingTool.exe.mui.dll 8KB
-
LICENSE1KB
-
README.md8KB
-
RemoveWindowsAI-GUI.exe.exe .ps1 1.2MB
-
RemoveWindowsAIPackage\amd64\ZoicwareRemoveWindowsAI-amd641.0.0.1.cab.cab 11KB
-
amd64_11e802062ad41dc9ff8bb5ea6753ff90fda76fb8_31bf3856ad364e35_38655.38527.65535.65535_none_121f898c7b99b89d.manifest.xml 753B
-
amd64_1672635dc8faec0740936c3c0f2cba350733c9c9_31bf3856ad364e35_38655.38527.65535.65535_none_c2a85002b039a09e.manifest.xml 757B
-
amd64_26886f55a03ad1bc4debe5a7304f3911a99ad01f_31bf3856ad364e35_38655.38527.65535.65535_none_a97c360a032c50dd.manifest.xml 765B
-
amd64_26d9a6e844b8509091450bf2ffc9bc3fca5ff0d8_31bf3856ad364e35_38655.38527.65535.65535_none_b9de4e233b31b234.manifest.xml 776B
-
amd64_362d3b36598149c4655f6218febd9eafb3248b0c_31bf3856ad364e35_38655.38527.65535.65535_none_5b9aa682dab50d7a.manifest.xml 762B
-
amd64_391580f2fa19f274d4a39e091e51f33628a2aa7b_31bf3856ad364e35_38655.38527.65535.65535_none_a84559756daa1246.manifest.xml 778B
-
amd64_4a81eb0cd812ce6e67ff46c19da83b7ee58afa5a_31bf3856ad364e35_38655.38527.65535.65535_none_8757fbb290c1aa8d.manifest.xml 770B
-
amd64_63b3e2a9103050c7729dfef49a25d315cb514c76_31bf3856ad364e35_38655.38527.65535.65535_none_fdc644cd4af312a3.manifest.xml 784B
-
amd64_89b748aade066363a5e0127d2bb24875b248bdb5_31bf3856ad364e35_38655.38527.65535.65535_none_71389aa9d5f40482.manifest.xml 779B
-
amd64_950c4e370ddecf4f726b80720f6a4e7bd59ef967_31bf3856ad364e35_38655.38527.65535.65535_none_2fe2fc9b9b97482b.manifest.xml 764B
-
amd64_9cbd88ba7abc475f4b2dfa0d0ea7ffbd157c8758_31bf3856ad364e35_38655.38527.65535.65535_none_dc0a74736ac4985b.manifest.xml 769B
-
amd64_aedd22f668f4731b866c643e1e9c3de34f241722_31bf3856ad364e35_38655.38527.65535.65535_none_c5ac24321b2a99a8.manifest.xml 777B
-
amd64_ba299a8cf4b207f5e08c4518f76bcdf3129429da_31bf3856ad364e35_38655.38527.65535.65535_none_9efd476fce95774f.manifest.xml 766B
-
amd64_ba7ee049da5a7edf2933fd82891caafe6242582f_31bf3856ad364e35_38655.38527.65535.65535_none_4bb2f7daad31ab33.manifest.xml 794B
-
amd64_cd29b6d92d07bc1fcb59512bab53dae8adb1087e_31bf3856ad364e35_38655.38527.65535.65535_none_8be532283da3a19b.manifest.xml 754B
-
amd64_d51e7f69c874616c9c84ef1867f683704d27f47c_31bf3856ad364e35_38655.38527.65535.65535_none_1f8273cd05549a74.manifest.xml 769B
-
amd64_d7e8127c309f21713d91fa8c4c2265305335e169_31bf3856ad364e35_38655.38527.65535.65535_none_2a70661c7d0370ce.manifest.xml 793B
-
amd64_df21856b5f14db06026d6b7b0011e19e9f676039_31bf3856ad364e35_38655.38527.65535.65535_none_c3cfc6b502bc5bb8.manifest.xml 768B
-
amd64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108d7945a2e7e9d.manifest.xml 373B
-
amd64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea620d27c4484e.manifest.xml 388B
-
amd64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2268220c2a52.manifest.xml 375B
-
amd64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a35da8a335eb56.manifest.xml 364B
-
amd64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c063d96a4febe.manifest.xml 380B
-
amd64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_581701dc439f7087.manifest.xml 395B
-
amd64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059ce1049764b18.manifest.xml 405B
-
amd64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e0e212ed2bec.manifest.xml 387B
-
amd64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dba882e933eb9.manifest.xml 377B
-
amd64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7dd83d154563f2.manifest.xml 379B
-
amd64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf38ed71491164.manifest.xml 381B
-
amd64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be2bce1dc49ffc.manifest.xml 380B
-
amd64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa25d273863ca66.manifest.xml 390B
-
amd64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b80f068ad03a6.manifest.xml 404B
-
amd64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248d65324b38d81.manifest.xml 389B
-
amd64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba7e3535b8898d.manifest.xml 376B
-
amd64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_293807153aa35c79.manifest.xml 365B
-
amd64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c3d913b2d96b4.manifest.xml 368B
-
update.cat8KB
-
update.mum.xml 5KB
-
RemoveWindowsAIPackage\amd64\amd64_11e802062ad41dc9ff8bb5ea6753ff90fda76fb8_31bf3856ad364e35_38655.38527.65535.65535_none_121f898c7b99b89d.manifest.xml 753B
-
RemoveWindowsAIPackage\amd64\amd64_1672635dc8faec0740936c3c0f2cba350733c9c9_31bf3856ad364e35_38655.38527.65535.65535_none_c2a85002b039a09e.manifest.xml 757B
-
RemoveWindowsAIPackage\amd64\amd64_26886f55a03ad1bc4debe5a7304f3911a99ad01f_31bf3856ad364e35_38655.38527.65535.65535_none_a97c360a032c50dd.manifest.xml 765B
-
RemoveWindowsAIPackage\amd64\amd64_26d9a6e844b8509091450bf2ffc9bc3fca5ff0d8_31bf3856ad364e35_38655.38527.65535.65535_none_b9de4e233b31b234.manifest.xml 776B
-
RemoveWindowsAIPackage\amd64\amd64_362d3b36598149c4655f6218febd9eafb3248b0c_31bf3856ad364e35_38655.38527.65535.65535_none_5b9aa682dab50d7a.manifest.xml 762B
-
RemoveWindowsAIPackage\amd64\amd64_391580f2fa19f274d4a39e091e51f33628a2aa7b_31bf3856ad364e35_38655.38527.65535.65535_none_a84559756daa1246.manifest.xml 778B
-
RemoveWindowsAIPackage\amd64\amd64_4a81eb0cd812ce6e67ff46c19da83b7ee58afa5a_31bf3856ad364e35_38655.38527.65535.65535_none_8757fbb290c1aa8d.manifest.xml 770B
-
RemoveWindowsAIPackage\amd64\amd64_63b3e2a9103050c7729dfef49a25d315cb514c76_31bf3856ad364e35_38655.38527.65535.65535_none_fdc644cd4af312a3.manifest.xml 784B
-
RemoveWindowsAIPackage\amd64\amd64_89b748aade066363a5e0127d2bb24875b248bdb5_31bf3856ad364e35_38655.38527.65535.65535_none_71389aa9d5f40482.manifest.xml 779B
-
RemoveWindowsAIPackage\amd64\amd64_950c4e370ddecf4f726b80720f6a4e7bd59ef967_31bf3856ad364e35_38655.38527.65535.65535_none_2fe2fc9b9b97482b.manifest.xml 764B
-
RemoveWindowsAIPackage\amd64\amd64_9cbd88ba7abc475f4b2dfa0d0ea7ffbd157c8758_31bf3856ad364e35_38655.38527.65535.65535_none_dc0a74736ac4985b.manifest.xml 769B
-
RemoveWindowsAIPackage\amd64\amd64_aedd22f668f4731b866c643e1e9c3de34f241722_31bf3856ad364e35_38655.38527.65535.65535_none_c5ac24321b2a99a8.manifest.xml 777B
-
RemoveWindowsAIPackage\amd64\amd64_ba299a8cf4b207f5e08c4518f76bcdf3129429da_31bf3856ad364e35_38655.38527.65535.65535_none_9efd476fce95774f.manifest.xml 766B
-
RemoveWindowsAIPackage\amd64\amd64_ba7ee049da5a7edf2933fd82891caafe6242582f_31bf3856ad364e35_38655.38527.65535.65535_none_4bb2f7daad31ab33.manifest.xml 794B
-
RemoveWindowsAIPackage\amd64\amd64_cd29b6d92d07bc1fcb59512bab53dae8adb1087e_31bf3856ad364e35_38655.38527.65535.65535_none_8be532283da3a19b.manifest.xml 754B
-
RemoveWindowsAIPackage\amd64\amd64_d51e7f69c874616c9c84ef1867f683704d27f47c_31bf3856ad364e35_38655.38527.65535.65535_none_1f8273cd05549a74.manifest.xml 769B
-
RemoveWindowsAIPackage\amd64\amd64_d7e8127c309f21713d91fa8c4c2265305335e169_31bf3856ad364e35_38655.38527.65535.65535_none_2a70661c7d0370ce.manifest.xml 793B
-
RemoveWindowsAIPackage\amd64\amd64_df21856b5f14db06026d6b7b0011e19e9f676039_31bf3856ad364e35_38655.38527.65535.65535_none_c3cfc6b502bc5bb8.manifest.xml 768B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108d7945a2e7e9d.manifest.xml 373B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea620d27c4484e.manifest.xml 388B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2268220c2a52.manifest.xml 375B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a35da8a335eb56.manifest.xml 364B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c063d96a4febe.manifest.xml 380B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_581701dc439f7087.manifest.xml 395B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059ce1049764b18.manifest.xml 405B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e0e212ed2bec.manifest.xml 387B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dba882e933eb9.manifest.xml 377B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7dd83d154563f2.manifest.xml 379B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf38ed71491164.manifest.xml 381B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be2bce1dc49ffc.manifest.xml 380B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa25d273863ca66.manifest.xml 390B
-
RemoveWindowsAIPackage\amd64\amd64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b80f068ad03a6.manifest.xml 404B
-
RemoveWindowsAIPackage\amd64\amd64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248d65324b38d81.manifest.xml 389B
-
RemoveWindowsAIPackage\amd64\amd64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba7e3535b8898d.manifest.xml 376B
-
RemoveWindowsAIPackage\amd64\amd64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_293807153aa35c79.manifest.xml 365B
-
RemoveWindowsAIPackage\amd64\amd64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c3d913b2d96b4.manifest.xml 368B
-
RemoveWindowsAIPackage\amd64\update.cat8KB
-
RemoveWindowsAIPackage\amd64\update.cdf4KB
-
RemoveWindowsAIPackage\amd64\update.mum.xml 5KB
-
RemoveWindowsAIPackage\arm64\ZoicwareRemoveWindowsAI-arm641.0.0.1.cab.cab 11KB
-
arm64_0876948bdd6a88ab2d6f027d32289129ac6ddc3b_31bf3856ad364e35_38655.38527.65535.65535_none_68581de951596534.manifest.xml 779B
-
arm64_126596911e4fa4ff2129c7dfceb6bc1b9bb083b5_31bf3856ad364e35_38655.38527.65535.65535_none_e698cdc1173b0568.manifest.xml 778B
-
arm64_1656476bd2f2c9d58e480fd5c9bf3982146d5fa2_31bf3856ad364e35_38655.38527.65535.65535_none_f57c036c149984be.manifest.xml 757B
-
arm64_1726caf21580ee7b91f2463f7ef2eacdc6d108b4_31bf3856ad364e35_38655.38527.65535.65535_none_12ed7239d451f890.manifest.xml 769B
-
arm64_183f71d9473c2dfeb4c49a1be811fdbaf9c29a6c_31bf3856ad364e35_38655.38527.65535.65535_none_bcc52580a95fa839.manifest.xml 764B
-
arm64_246a76d150f54f9fcb9c4c89ca80f5c30b0b7e01_31bf3856ad364e35_38655.38527.65535.65535_none_08bfae8de1fa0b4a.manifest.xml 753B
-
arm64_31251456d87a6fefa74ab7c6d1a48be2add49419_31bf3856ad364e35_38655.38527.65535.65535_none_08254cbe41dc26bd.manifest.xml 794B
-
arm64_37162d79ecc887f06f0e83ede79ccf6e16ea516a_31bf3856ad364e35_38655.38527.65535.65535_none_33af92df21707c9d.manifest.xml 769B
-
arm64_3b6e601dc9a0538d216bfd084a9ebe36bc7d0996_31bf3856ad364e35_38655.38527.65535.65535_none_95814d1eb952b1c7.manifest.xml 777B
-
arm64_613d2ba8b95c00f19b7535e5d6cb475f9255695b_31bf3856ad364e35_38655.38527.65535.65535_none_fc203dcb716d6e81.manifest.xml 776B
-
arm64_7789327b3d2947e595587f19c2a115f0441121db_31bf3856ad364e35_38655.38527.65535.65535_none_4a9f7012aeae5cbb.manifest.xml 766B
-
arm64_8e277ff241ede8cae0ba406d92b3a9a7bc0e5374_31bf3856ad364e35_38655.38527.65535.65535_none_9e23c16a47b48622.manifest.xml 762B
-
arm64_a4207268bba4bd2ea2a0a20204642dfd46a532f7_31bf3856ad364e35_38655.38527.65535.65535_none_b6f81a626516f554.manifest.xml 754B
-
arm64_d4f8e3d2e02eb4df654660f9ee83d6dad7dd6d5b_31bf3856ad364e35_38655.38527.65535.65535_none_6ad167aff214c713.manifest.xml 765B
-
arm64_da9eef33d1fce725817119aaac8789390681c980_31bf3856ad364e35_38655.38527.65535.65535_none_3c8e65e13c867e58.manifest.xml 768B
-
arm64_e00be72c39effb5deb56ca662fcf41245b3c9869_31bf3856ad364e35_38655.38527.65535.65535_none_9170f724b3706a22.manifest.xml 770B
-
arm64_e4ee5f67fb27349a3d4be3afdda980b4f2640030_31bf3856ad364e35_38655.38527.65535.65535_none_a2337873ec78cf1f.manifest.xml 784B
-
arm64_ee6220582211b482e90fe395fd191b19b50995f3_31bf3856ad364e35_38655.38527.65535.65535_none_b791c7de01e4c34c.manifest.xml 793B
-
arm64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108dfce5a2e7339.manifest.xml 373B
-
arm64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea6a4727c43cea.manifest.xml 388B
-
arm64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2aa2220c1eee.manifest.xml 375B
-
arm64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a365e2a335dff2.manifest.xml 364B
-
arm64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c0e7796a4f35a.manifest.xml 380B
-
arm64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_58170a16439f6523.manifest.xml 395B
-
arm64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059d64a49763fb4.manifest.xml 405B
-
arm64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e91c12ed2088.manifest.xml 387B
-
arm64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dc2c22e933355.manifest.xml 377B
-
arm64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7de0771545588e.manifest.xml 379B
-
arm64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf412771490600.manifest.xml 381B
-
arm64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be34081dc49498.manifest.xml 380B
-
arm64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa265613863bf02.manifest.xml 390B
-
arm64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b892a68acf842.manifest.xml 404B
-
arm64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248de8d24b3821d.manifest.xml 389B
-
arm64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba866f35b87e29.manifest.xml 376B
-
arm64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_29380f4f3aa35115.manifest.xml 365B
-
arm64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c45cb3b2d8b50.manifest.xml 368B
-
update.cat8KB
-
update.mum.xml 5KB
-
RemoveWindowsAIPackage\arm64\arm64_0876948bdd6a88ab2d6f027d32289129ac6ddc3b_31bf3856ad364e35_38655.38527.65535.65535_none_68581de951596534.manifest.xml 779B
-
RemoveWindowsAIPackage\arm64\arm64_126596911e4fa4ff2129c7dfceb6bc1b9bb083b5_31bf3856ad364e35_38655.38527.65535.65535_none_e698cdc1173b0568.manifest.xml 778B
-
RemoveWindowsAIPackage\arm64\arm64_1656476bd2f2c9d58e480fd5c9bf3982146d5fa2_31bf3856ad364e35_38655.38527.65535.65535_none_f57c036c149984be.manifest.xml 757B
-
RemoveWindowsAIPackage\arm64\arm64_1726caf21580ee7b91f2463f7ef2eacdc6d108b4_31bf3856ad364e35_38655.38527.65535.65535_none_12ed7239d451f890.manifest.xml 769B
-
RemoveWindowsAIPackage\arm64\arm64_183f71d9473c2dfeb4c49a1be811fdbaf9c29a6c_31bf3856ad364e35_38655.38527.65535.65535_none_bcc52580a95fa839.manifest.xml 764B
-
RemoveWindowsAIPackage\arm64\arm64_246a76d150f54f9fcb9c4c89ca80f5c30b0b7e01_31bf3856ad364e35_38655.38527.65535.65535_none_08bfae8de1fa0b4a.manifest.xml 753B
-
RemoveWindowsAIPackage\arm64\arm64_31251456d87a6fefa74ab7c6d1a48be2add49419_31bf3856ad364e35_38655.38527.65535.65535_none_08254cbe41dc26bd.manifest.xml 794B
-
RemoveWindowsAIPackage\arm64\arm64_37162d79ecc887f06f0e83ede79ccf6e16ea516a_31bf3856ad364e35_38655.38527.65535.65535_none_33af92df21707c9d.manifest.xml 769B
-
RemoveWindowsAIPackage\arm64\arm64_3b6e601dc9a0538d216bfd084a9ebe36bc7d0996_31bf3856ad364e35_38655.38527.65535.65535_none_95814d1eb952b1c7.manifest.xml 777B
-
RemoveWindowsAIPackage\arm64\arm64_613d2ba8b95c00f19b7535e5d6cb475f9255695b_31bf3856ad364e35_38655.38527.65535.65535_none_fc203dcb716d6e81.manifest.xml 776B
-
RemoveWindowsAIPackage\arm64\arm64_7789327b3d2947e595587f19c2a115f0441121db_31bf3856ad364e35_38655.38527.65535.65535_none_4a9f7012aeae5cbb.manifest.xml 766B
-
RemoveWindowsAIPackage\arm64\arm64_8e277ff241ede8cae0ba406d92b3a9a7bc0e5374_31bf3856ad364e35_38655.38527.65535.65535_none_9e23c16a47b48622.manifest.xml 762B
-
RemoveWindowsAIPackage\arm64\arm64_a4207268bba4bd2ea2a0a20204642dfd46a532f7_31bf3856ad364e35_38655.38527.65535.65535_none_b6f81a626516f554.manifest.xml 754B
-
RemoveWindowsAIPackage\arm64\arm64_d4f8e3d2e02eb4df654660f9ee83d6dad7dd6d5b_31bf3856ad364e35_38655.38527.65535.65535_none_6ad167aff214c713.manifest.xml 765B
-
RemoveWindowsAIPackage\arm64\arm64_da9eef33d1fce725817119aaac8789390681c980_31bf3856ad364e35_38655.38527.65535.65535_none_3c8e65e13c867e58.manifest.xml 768B
-
RemoveWindowsAIPackage\arm64\arm64_e00be72c39effb5deb56ca662fcf41245b3c9869_31bf3856ad364e35_38655.38527.65535.65535_none_9170f724b3706a22.manifest.xml 770B
-
RemoveWindowsAIPackage\arm64\arm64_e4ee5f67fb27349a3d4be3afdda980b4f2640030_31bf3856ad364e35_38655.38527.65535.65535_none_a2337873ec78cf1f.manifest.xml 784B
-
RemoveWindowsAIPackage\arm64\arm64_ee6220582211b482e90fe395fd191b19b50995f3_31bf3856ad364e35_38655.38527.65535.65535_none_b791c7de01e4c34c.manifest.xml 793B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108dfce5a2e7339.manifest.xml 373B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea6a4727c43cea.manifest.xml 388B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2aa2220c1eee.manifest.xml 375B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a365e2a335dff2.manifest.xml 364B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c0e7796a4f35a.manifest.xml 380B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_58170a16439f6523.manifest.xml 395B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059d64a49763fb4.manifest.xml 405B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e91c12ed2088.manifest.xml 387B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dc2c22e933355.manifest.xml 377B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7de0771545588e.manifest.xml 379B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf412771490600.manifest.xml 381B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be34081dc49498.manifest.xml 380B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa265613863bf02.manifest.xml 390B
-
RemoveWindowsAIPackage\arm64\arm64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b892a68acf842.manifest.xml 404B
-
RemoveWindowsAIPackage\arm64\arm64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248de8d24b3821d.manifest.xml 389B
-
RemoveWindowsAIPackage\arm64\arm64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba866f35b87e29.manifest.xml 376B
-
RemoveWindowsAIPackage\arm64\arm64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_29380f4f3aa35115.manifest.xml 365B
-
RemoveWindowsAIPackage\arm64\arm64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c45cb3b2d8b50.manifest.xml 368B
-
RemoveWindowsAIPackage\arm64\update.cat8KB
-
RemoveWindowsAIPackage\arm64\update.cdf4KB
-
RemoveWindowsAIPackage\arm64\update.mum.xml 5KB
ClassicApps\paint\Paint.reg
- SHA256 1fe5f500e916e636fe47662ecf33a732e853fdaba5b5da9d9bbb0fa9366cd0bd
- MD5 e4cb8b13e0899f4812b1f1d4fcb1fd4a
- SHA1 0cdb7ab7627f3e91e341e33ef61747939773a205
- SHA512 c1792aa06e6f6a4f91fa6aba1f4de28315343a88e534ba176f3ccf229f7f7d8d783c2d7fe8fb21f0525546c4df94f0d22212a027c9b1fee80fb5908a658a2bcd
- SSDEEP 384:RSR5/nlSYnF5/nd5/ntSiSy5/nZ5/n/5nSvSPScSz5HZzbSXSgnlSnSuSlSHSMS3:g
- TLSH T1BF13063AE7E530165373ED91DFE39423E74AB5A6281EDC5C00D2174902E1A51E8B2BBF
- MD5 SHA1 SHA512 SSDEEP TLSH
ClassicApps\paint\mspaint.exe
- IMPHASH 4ba3e8263329367e738847b070f4c7e7
- SHA256 e2088af0374934362f6d966cbcab770d2c7ad828f90163fb3331906f012faca0
- MD5 795e38078b528d9533a548c4a3226199
- SHA1 7dccae6618543d0fcdd14e33628ab95775610ef2
- SHA512 c3e80f92e47526d4facf1b7a850c526942540da89146a29f45a23b00c0ecd6939892935c4d7da90edb182fa9e6d86c1a72c3fa91306b45de2c6e507d03e49ea7
- SSDEEP 12288:+0GBfTUvZwMGdZ9Cv4+NByaHhiRZ7VOawJkx35ueXq0hZwnqVk5wUzLU9+:+0hgdI4kBPERZZO3k5560hZwnqbUzLU
- TLSH T109153A5E7BBC01E6C17AD07CC942464AE6B2B435075267CB1670C27EEF2BAE41D39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
34080
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mspaint.pdb
advapi32
EncryptFileW
DecryptFileW
EventWriteTransfer
DuplicateEncryptionInfoFile
EventUnregister
EventRegister
GetNamedSecurityInfoW
SetNamedSecurityInfoW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
OpenThreadToken
OpenProcessToken
GetSecurityInfo
GetAclInformation
GetAce
GetSidSubAuthorityCount
GetSidSubAuthority
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegDeleteKeyW
kernel32
GetModuleFileNameW
K32GetModuleFileNameExW
CompareStringOrdinal
GetCurrentProcess
GetCurrentThread
GetACP
CopyFileW
MoveFileExW
DeleteFileW
GetModuleHandleA
FreeLibrary
LoadLibraryW
HeapSetInformation
GetCommandLineW
DeleteCriticalSection
GetThreadLocale
QueryFullProcessImageNameW
OpenProcess
GetTempPath2W
lstrcmpiW
SetEndOfFile
FindFirstFileW
GetFullPathNameW
GetTickCount
GlobalDeleteAtom
GlobalAddAtomW
SetErrorMode
LocalFree
LocalAlloc
RaiseException
GlobalSize
GetExitCodeThread
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSize
lstrlenW
GetLocaleInfoW
MulDiv
DeviceIoControl
SetFileTime
SetFileAttributesW
GetFileTime
GetFileAttributesW
FindClose
WriteFile
ReadFile
FindNextStreamW
FindFirstStreamW
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetFileSizeEx
CreateFileW
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
GetModuleHandleW
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetCurrentProcessId
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
lstrcmpW
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
RegisterApplicationRecoveryCallback
RegisterApplicationRestart
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
VirtualProtect
LoadLibraryExA
GetSystemInfo
VirtualQuery
GetProcessHeap
gdi32
EnumFontFamiliesExW
GetTextFaceW
GdiGradientFill
GetTextMetricsW
Polyline
SetROP2
CreatePolygonRgn
TranslateCharsetInfo
GetTextExtentPoint32W
CreateFontW
StretchDIBits
CreateDCW
CreateFontIndirectW
SetStretchBltMode
GetBrushOrgEx
GetRgnBox
CombineRgn
CreateRectRgn
ExtSelectClipRgn
ExtFloodFill
GetPixel
UnrealizeObject
SetBrushOrgEx
StretchBlt
Polygon
OffsetRgn
SetPixel
LineTo
MoveToEx
CreatePen
SetDIBitsToDevice
GetNearestColor
CreateDIBitmap
GetDIBits
SetBkColor
CreateDIBSection
PlayMetaFile
SetViewportExtEx
RestoreDC
LPtoDP
SetMapMode
SaveDC
CreatePalette
Rectangle
GdiAlphaBlend
SetTextColor
CreateHalftonePalette
GetObjectW
GetCurrentObject
SetDIBColorTable
GetDIBColorTable
CreateRectRgnIndirect
GetStockObject
FillRgn
PatBlt
CreateSolidBrush
CreatePatternBrush
SetPaletteEntries
ResizePalette
GetDeviceCaps
SelectObject
SelectPalette
RealizePalette
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
DeleteObject
CreateBitmap
SetDIBits
GetPaletteEntries
GetNearestPaletteIndex
user32
OffsetRect
FillRect
GetCursorPos
ScreenToClient
UnionRect
IntersectRect
WindowFromPoint
PtInRect
GetCapture
SetRectEmpty
SetTimer
KillTimer
IsRectEmpty
EqualRect
SetCursor
SetCapture
GetAsyncKeyState
SetPropW
CopyRect
InflateRect
GetParent
GetWindowLongW
LoadCursorW
GetKeyboardLayout
CheckDlgButton
IsClipboardFormatAvailable
LoadImageW
BringWindowToTop
GetFocus
SetActiveWindow
GetTouchInputInfo
ShowCursor
PeekMessageW
GetMessageExtraInfo
ReleaseCapture
ClientToScreen
TrackMouseEvent
GetSystemMenu
RemoveMenu
DestroyWindow
DestroyCursor
SystemParametersInfoW
GetWindowLongPtrW
GetWindowThreadProcessId
DestroyMenu
MonitorFromRect
GetMonitorInfoW
GetClassInfoW
LoadIconW
GetDlgItem
GetDlgItemInt
RegisterClipboardFormatW
PostMessageW
NotifyWinEvent
ReleaseDC
GetDC
MsgWaitForMultipleObjectsEx
SetWindowTextW
GetKeyState
MessageBoxW
MessageBeep
SetRect
EnableWindow
UpdateWindow
IsWindow
InvalidateRect
LoadBitmapW
GetWindowDC
EnableScrollBar
GetUpdateRect
ValidateRect
RedrawWindow
LoadMenuW
GetSubMenu
GetCaretPos
GetSystemMetrics
GetWindowRect
GetClientRect
GetSysColor
DestroyIcon
SetDlgItemInt
SendDlgItemMessageW
SendMessageW
CloseTouchInputHandle
RegisterWindowMessageW
SetClassLongPtrW
LoadStringW
SendInput
IsChild
GetForegroundWindow
SetCursorPos
IsWindowVisible
CheckMenuItem
SetGestureConfig
PostQuitMessage
RegisterTouchWindow
UnregisterTouchWindow
SetWindowLongPtrW
SetWindowLongW
GetMenu
IsMenu
mfc42u
ord3889
ord1035
ord3894
ord1055
ord650
ord1931
ord613
ord2133
ord6379
ord3639
ord1036
ord1726
ord4589
ord1029
ord2132
ord2129
ord2138
ord1387
ord4609
ord5700
ord4860
ord6216
ord4741
ord3743
ord822
ord408
ord904
ord2105
ord2087
ord311
ord827
ord4295
ord4294
ord312
ord1859
ord1945
ord321
ord837
ord1719
ord3748
ord3753
ord5670
ord4705
ord6050
ord1584
ord4554
ord6162
ord3744
ord4238
ord1353
ord4234
ord2793
ord6540
ord823
ord307
ord4952
ord4436
ord6691
ord1650
ord2449
ord3820
ord2595
ord4544
ord2258
ord6817
ord4612
ord6818
ord6542
ord6886
ord6887
ord620
ord1040
ord626
ord525
ord984
ord3638
ord6455
ord6457
ord286
ord1574
ord4473
ord2629
ord624
ord6102
ord4623
ord5467
ord6632
ord4770
ord4988
ord4371
ord3164
ord4077
ord4083
ord4082
ord3046
ord3166
ord3052
ord3366
ord3231
ord4815
ord3362
ord3243
ord3049
ord5699
ord2140
ord2455
ord5680
ord1736
ord5484
ord3933
ord6814
ord2060
ord2670
ord4789
ord5229
ord4017
ord5701
ord4694
ord6806
ord5586
ord2399
ord5656
ord4749
ord1778
ord4365
ord6440
ord1723
ord1716
ord5506
ord2404
ord4422
ord5838
ord4345
ord4706
ord2535
ord6556
ord2596
ord2408
ord2427
ord3830
ord3790
ord3740
ord1869
ord445
ord940
ord2779
ord1379
ord6880
ord1483
ord5933
ord1463
ord371
ord877
ord1126
ord5986
ord3222
ord3780
ord367
ord5602
ord6762
ord336
ord851
ord1646
ord1647
ord6127
ord2461
ord6135
ord2420
ord1677
ord2676
ord1471
ord4548
ord1566
ord6021
ord1122
ord4602
ord2846
ord1428
ord1838
ord2925
ord1561
ord1425
ord314
ord2516
ord852
ord3742
ord5949
ord337
ord2379
ord2319
ord2381
ord2315
ord2384
ord2311
ord2781
ord2975
ord2979
ord5887
ord4557
ord3177
ord6614
ord5077
ord1787
ord5245
ord3003
ord6767
ord2318
ord2376
ord4344
ord3180
ord1781
ord3761
ord4771
ord2457
ord5683
ord5702
ord6812
ord5663
ord4752
ord1777
ord6437
ord2517
ord5406
ord4721
ord5687
ord6018
ord5730
ord2857
ord5712
ord3535
ord3867
ord1067
ord665
ord996
ord3408
ord2122
ord2898
ord3879
ord2900
ord6559
ord6238
ord2463
ord4127
ord3861
ord2084
ord4375
ord310
ord826
ord4650
ord660
ord1064
ord2906
ord6130
ord6131
ord303
ord6123
ord6609
ord4297
ord6138
ord6511
ord1950
ord4599
ord1537
ord2393
ord6577
ord4187
ord4014
ord6520
ord3936
ord6351
ord3099
ord3647
ord1441
ord2394
ord3440
ord5807
ord1977
ord4565
ord387
ord890
ord2100
ord2903
ord4806
ord4784
ord5468
ord5175
ord4774
ord5674
ord1674
ord2671
ord5704
ord5659
ord4364
ord4461
ord2919
ord2920
ord3536
ord5839
ord1316
ord5420
ord3481
ord4633
ord4817
ord5524
ord5521
ord3141
ord2405
ord2750
ord3920
ord4580
ord540
ord992
ord5232
ord1903
ord4690
ord6474
ord994
ord2802
ord4780
ord5682
ord1734
ord3932
ord5662
ord4405
ord5366
ord5369
ord4879
ord4884
ord4881
ord4899
ord4901
ord4886
ord5282
ord5090
ord4682
ord5496
ord4891
ord5288
ord4712
ord5297
ord4945
ord4946
ord1730
ord5649
ord4867
ord528
ord3862
ord1893
ord4578
ord4979
ord5519
ord4288
ord504
ord977
ord5215
ord5252
ord5362
ord5894
ord5989
ord1753
ord1442
ord6777
ord6078
ord1498
ord2513
ord2801
ord1284
ord5905
ord6465
ord5021
ord1559
ord287
ord2756
ord2754
ord2757
ord506
ord979
ord2272
ord292
ord815
ord1972
ord1992
ord6828
ord1301
ord2015
ord1296
ord5622
ord2417
ord3282
ord3601
ord5431
ord6612
ord4844
ord4982
ord4977
ord4981
ord4777
ord4984
ord3365
ord6586
ord4732
ord4769
ord5666
ord6769
ord3147
ord3142
ord5064
ord3353
ord3994
ord3595
ord1361
ord5956
ord3672
ord5436
ord3556
ord3059
ord4989
ord5871
ord4762
ord5408
ord4964
ord3191
ord5432
ord4841
ord5410
ord5317
ord5001
ord4870
ord2195
ord2448
ord5354
ord3270
ord5216
ord5253
ord5363
ord5047
ord5052
ord4797
ord1536
ord5037
ord4849
ord4124
ord5441
ord5402
ord5269
ord5309
ord4862
ord5582
ord6610
ord4759
ord5093
ord524
ord3675
ord2530
ord6136
ord5068
ord5306
ord4947
ord4703
ord4598
ord4976
ord659
ord1063
ord507
ord3783
ord971
ord1447
ord6510
ord1505
ord598
ord6538
ord1337
ord2036
ord6056
ord6055
ord5870
ord1287
ord2565
ord2752
ord6813
ord4368
ord5065
ord3468
ord1499
ord4970
ord3280
ord3593
ord1264
ord1286
ord4521
ord1388
ord6888
ord2939
ord3916
ord4983
ord6053
ord5711
ord5724
ord5722
ord2412
ord4191
ord6071
ord2515
ord2559
ord4836
ord4273
ord542
ord5690
ord1575
ord1472
ord5654
ord6661
ord1904
ord1946
ord4597
ord657
ord1061
ord1898
ord2540
ord2542
ord2261
ord5285
ord4813
ord4859
ord1259
ord2644
ord4974
ord544
ord2543
ord2661
ord1735
ord5367
ord5370
ord3516
ord5244
ord4720
ord1665
ord3432
ord4663
ord4621
ord4442
ord6076
ord6015
ord6243
ord6575
ord6398
ord6823
ord4472
ord3681
ord3682
ord6841
ord6842
ord1966
ord1894
ord505
ord978
ord2402
ord2401
ord5016
ord2561
ord5400
ord5249
ord5055
ord465
ord3030
ord5341
ord5336
ord4987
ord3484
ord3387
ord4320
ord5495
ord4893
ord4875
ord5386
ord5008
ord5312
ord5529
ord5084
ord5331
ord5397
ord3540
ord5364
ord443
ord938
ord6222
ord1562
msvcrt
atan2
sinf
sqrtf
tanf
cosf
atan2f
__RTDynamicCast
??1type_info@@UEAA@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_commode
_fmode
_wcmdln
_initterm
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
memcmp
isdigit
isalnum
__crtLCMapStringW
memset
abort
memchr
tolower
isspace
__uncaught_exception
calloc
__pctype_func
_ismbblead
___lc_codepage_func
___lc_handle_func
_errno
___mb_cur_max_func
_unlock
_lock
setlocale
malloc
memmove
memcpy
__CxxFrameHandler3
_CxxThrowException
??0exception@@QEAA@AEBQEBDH@Z
_wsetlocale
_wcsdup
__wargv
__argc
_wcsicmp
__C_specific_handler
rand
_beginthreadex
_wtoi
_wsplitpath_s
strcspn
ldexp
localeconv
sprintf_s
free
??0bad_cast@@QEAA@PEBD@Z
??1bad_cast@@UEAA@XZ
??0bad_cast@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBD@Z
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
_purecall
memcpy_s
_vsnwprintf
??_V@YAXPEAX@Z
__CxxFrameHandler4
swprintf_s
wcscpy_s
wcstoul
vsprintf_s
wcscmp
oleaut32
SysFreeString
VariantInit
VarDecFromI4
SafeArrayCopy
SafeArrayDestroy
SafeArrayPutElement
VariantClear
SysAllocString
VarR8FromDec
VarDecFromR8
SafeArrayCreateVector
api-ms-win-core-com-l1-1-0
CoTaskMemFree
CoInitializeEx
CLSIDFromString
FreePropVariantArray
CreateStreamOnHGlobal
CoUninitialize
CoGetInterfaceAndReleaseStream
CoReleaseMarshalData
CoMarshalInterThreadInterfaceInStream
CoCreateGuid
CoCreateInstance
PropVariantCopy
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
PropVariantClear
CoWaitForMultipleHandles
api-ms-win-core-com-l1-1-1
RoGetAgileReference
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
api-ms-win-core-winrt-error-l1-1-1
RoGetMatchingRestrictedErrorInfo
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
GetStringTypeW
api-ms-win-core-util-l1-1-0
EncodePointer
DecodePointer
api-ms-win-core-synch-l1-1-0
AcquireSRWLockExclusive
SetEvent
EnterCriticalSection
CreateEventExW
InitializeCriticalSection
LeaveCriticalSection
CreateMutexW
ReleaseSRWLockExclusive
InitializeCriticalSectionEx
api-ms-win-core-synch-l1-2-0
WakeAllConditionVariable
SleepConditionVariableSRW
Sleep
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
CreateThread
GetStartupInfoW
api-ms-win-core-rtlsupport-l1-1-0
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTime
GetSystemTimeAsFileTime
api-ms-win-core-localization-l2-1-0
GetNumberFormatEx
api-ms-win-core-localization-l1-2-0
GetLocaleInfoEx
api-ms-win-core-libraryloader-l1-2-0
LockResource
LoadResource
SizeofResource
FindResourceExW
api-ms-win-core-file-l1-1-0
CompareFileTime
GetTempFileNameW
api-ms-win-core-registry-l1-1-0
RegEnumValueW
RegEnumKeyExW
RegGetValueW
RegQueryInfoKeyW
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
api-ms-win-core-timezone-l1-1-0
SystemTimeToFileTime
api-ms-win-eventing-provider-l1-1-0
EventSetInformation
comctl32
ord345
ImageList_GetImageCount
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Draw
ord381
comdlg32
GetOpenFileNameW
GetFileTitleW
ole32
WriteClassStg
OleGetClipboard
ReleaseStgMedium
CoInitialize
WriteFmtUserTypeStg
propsys
PropVariantToString
PropVariantToStringVectorAlloc
PropVariantToUInt32WithDefault
PropVariantToUInt32
PSGetPropertyDescriptionListFromString
shell32
SHAddToRecentDocs
ShellAboutW
SHGetKnownFolderPath
SHCreateItemFromParsingName
DragFinish
SHChangeNotify
SHBindToParent
SHCreateShellItem
SHParseDisplayName
ord155
ord75
CommandLineToArgvW
ShellExecuteExW
ord165
SHGetSpecialFolderPathW
DragQueryFileW
shlwapi
PathFindFileNameW
PathFileExistsW
PathStripPathW
ord12
winmm
timeGetTime
dismapi
DismOpenSession
DismRemoveCapability
DismCloseSession
DismShutdown
DismInitialize
Name
.text
Size
584KB
Virtual Size
582KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
192KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
4KB
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=50, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, productName=Unmarked objects (old),
count=5, id=259, version=33145,
count=75, id=260, version=33145,
count=26, id=261, version=33145,
count=29, id=257, version=33145,
count=1289, id=1, productName=Unmarked objects,
count=128, id=264, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
ClassicApps\paint\mspaint.exe.mui
- SHA256 b28239f1c5faec138ea6359cdf3d890750d2b9f27a8838ec67928459da1d134a
- MD5 481c6c4fb866a9e90bd3a22b33f9440f
- SHA1 a2b8da137c4df364775274bccb4ad26ef54c29e0
- SHA512 cd89538e24957a1bc3860c8a1ade1aba9de832391ec442957bbbedf239523baf35488cee381ba5a2b0e6fd741fcb29148c7e001ac7c0265174b2b65dcb429789
- SSDEEP 768:Bs6vtS1dZVSxw2n3fej2UifcNzuuIWfDYc0E5z:BV4dZVSxw23mj8CuuMcr5z
- TLSH T19C433505A3F94E14F2F77B7069725AA40E7A7DA2ED38DB4D1202440F56B2E50EC64BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\mspaint.exe.mun
- SHA256 2ef253b65c4f263e1d2a1df59669afd01f1967738c434af7e6f6ad738e993664
- MD5 be90c38bcd769ebfae32fc8acf1b4068
- SHA1 345fd42d06d923d77de411ce96678a560ec74669
- SHA512 4c59f20d8cc4f6b40cd217851acb0b6e3f79977dbe6b8df794adace484070d34eb6c6c7d2f96ca2aed7937399bbf9ee6f0aec78f48d5d08ff39fb6ff5d13bf12
- SSDEEP 49152:209VmFjOgWpTyR6/agFJXNBbUXaSbUgcJfDP9Ph8PYbWCG:2oOjOgOTyGFJXfgXohJfDP9PhsC
- TLSH T156B5E0A3B361DC69C41D0232CC7AC5BC5821BD53AE51270B36E2FF6FB9B2782245564B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33140,
count=1, id=258, version=33140,
ClassicApps\paint\paint_lang_files\ar-SA\mspaint.exe.mui
- SHA256 6a3c5ca3bf7fa183fccff32d0e00182bbe3957d24449441d59e47359467196c9
- MD5 5eb6e046c92107072adf187dfa5b8a87
- SHA1 787f54bde7c99744c3b72b3e70f94884b46078e3
- SHA512 d5f4dcec5784c4321dba88e7c89bacbb7308ceba99267788828548467b44a3370ba32548beb9df5e8cb5fa13e91ed07712a45aee1d19dff014a1b24ec36d6c2f
- SSDEEP 384:hAR7WSXo5JE0X1IfZI/O4qsGpb7UjmsX+XuAPV4HCX41BEjjNIU1t/ger60VRrD8:I8E06k6omR4HCX26jNIs/5r67xznME5v
- TLSH T1A033FE162A49CE38F05B4374D203DED3169D716BCDE93B3A573A8E0756D2034AA5EAF0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\bg-BG\mspaint.exe.mui
- SHA256 51a4831aff364e09e4f982b22f0b509c2954b3bb8fcef64a4e41b41aa7af692a
- MD5 598125b2c1dd0284845c122cec816c15
- SHA1 46d2b360a45dc0c0008749ce77bb522c9657c1f3
- SHA512 811e4b6a9fb3cfbd5b09159ea59dede232937d5442d6e83a10c77108b170be13e7abfeb8bdc84cd00fa78c51716bdc79c8a0fe3e05acf90b546580239141b542
- SSDEEP 384:GMHfIxEAbEjVhyXo5R5cRfdjsbmSjgUopmCJvseYRJ5WlCQLE451ImV9AvL+ozRR:0EjVAX6R5xiSvs2ulE5x
- TLSH T1BF53664FF9798E14F654D3301F528AE72AFE775067285AC6930F7C1AA09A53033286D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\cs-CZ\mspaint.exe.mui
- SHA256 ee294a3428807fd969853fd66073d3db232badfc8e477006221265c36683eeb7
- MD5 4dc054feabac171ac5aa5d0b4ea8f7b1
- SHA1 d1fcf04fe226aa332b0424c902d97a176735ae4d
- SHA512 faf4661bd5bf179716e0de3df7c2a9cdf708b4c24b295a04bddc8c60ce8fe2b20d7acdc9961b331fad7df5d6003c78c9889f6d77192863feb0fdb82a9f4efcd8
- SSDEEP 768:p2vp6JWnOkzuSK8Bvu+9gJXp76hKl/KtFxqRyX3qmvKE5M:Mp6eOkzuSK8BvfaJp7lcYyX6mvB5M
- TLSH T1FA43AB0573F90E55F1F65B30B9B20AE55ABF3C92BA34DA4F9212064F49B25C0B4A47B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\da-DK\mspaint.exe.mui
- SHA256 82ad17461d72b70688f9704232f41a9ff5e0547c704547c5cbb1278258150ddc
- MD5 0f5f3536f4a7a320d03e817668409ec7
- SHA1 56b264dc3ec66472b7fa00310b10da55820e4a87
- SHA512 65c3dc971526e05be52de28de9040faab8bb2b82cfc42286e508ed4c8752fb71a5a614a1e0a8bbbdf9f3e7690b7bcb576cf5ce2e7956644a50a9bee532b358d8
- SSDEEP 384:islN/Ouaj81Q6m+XSWTrFAiDY77Rxv5Og5pVFV9OWsY8zAVyjjZ5VX1EASFhJFWL:N/un6PSd7Fxv5+rzAVy3VXOA0BKE5Y
- TLSH T18F43CE1463E54E1DF2F61B307DB64ED40EAABDE2EE34DA0D1302551F4CB27A095A4BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\de-DE\mspaint.exe.mui
- SHA256 177b724aaf2cb5cc728bb7786bb65a4ab28e7c9159b33f92e759972aed6dd6ac
- MD5 1db14a5f88901921d4ac157bfbfad755
- SHA1 6eb70af049c0a02fff0b580d2f46f80661b52dca
- SHA512 4fadf130b471cbc7baf1ff289d49976032ab579ef7d5a988b23d79ec6d59367c883aec755962393c2d9b6220d58646e46b2ff099a44e4c047c3da78fd734212e
- SSDEEP 1536:zlcPhJmpxKBtA+jg8lPlITdI7yRLjLszdViRC+dq0T04YHAi+7asqDNSICHatIl5:zlcPfmpxKBtA+jg8lPlITdI7yRLjLsza
- TLSH T1E253CC1453E64F18F2F62B307EB65BA02F66BDD2EE74DE0D1701544F58B2A10E924BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\el-GR\mspaint.exe.mui
- SHA256 9a37133c8c1beffd9cb0f65fe0ac091564d806d335ac3c3be5d88d3c8d5eff07
- MD5 7c42f87f77cebf5a394011d67673107f
- SHA1 8ba00d509989aa1187edd3212c439e65ba87f3e6
- SHA512 89b3ba16740cd8f67494db2180a99f2368645481e2b3f5a26405c3b03fb0822bba43a40a3ee8e12b0b9a897ef7835b548e880ea6aa018642703d615a53765629
- SSDEEP 384:+4hgzAzIpZ7sGuFh8nr5+3XduSxlY0FqLV6/6b9FyTZ+HVesFCw2/Q5D1pK/El3m:SZfwlkKq9FyoIsmQ5DScHDrE5Z
- TLSH T1C453E04E5EBB0F21EAE445F1A03389B51F9FF6920524DE6B73E2700AE99F8115CC1E52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\en-GB\mspaint.exe.mui
- SHA256 fb3726829d99857e185e37c0f055cf92ba8d4e5cf1926f637d779bdde2e34cc9
- MD5 55878aab907847909307cb8c3d65d5ac
- SHA1 4db8f640e964d7e4c49510968e1a44b5e4251c8a
- SHA512 181d19094f911d023c159fc1fda1dd813032c23bf0b9fbaaacb0ca84f39b1516a0e70327c9809555d7d4697d0705dcb4ecdb0f4f3bbeae3aee00767a8337d5b2
- SSDEEP 768:GNx7vPs1vXVSI2nqeC640ZaNuEVmNIQE5q:0XWvXVSI27Cs5EVKIv5q
- TLSH T180433405A3F94E18F2F67B7069725AA40E7A7DA2DE38DB4D1202440F56B2F50EC64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\es-ES\mspaint.exe.mui
- SHA256 879b9bcd42b4f40437df5e10d73ce0cbcf43fa2c236db1ff469f137ed065b2b1
- MD5 a6f3ca3eb6be6cab4d2b91ddff1b7b28
- SHA1 17bce5b194a9f26f987b57529b0ac47d960e77fb
- SHA512 131749784700b87995235ca64162b7e4a340b5b23397564d24212d586871d2deb1b5eec4d81c89e6343024222faaf10df5ed8693a59d3c6251da8d42afe41bcd
- SSDEEP 1536:8HG4yc3P5rD1/HMzFRh6rGmYj2+yPE2yquwi4nFAroOfVtU/ebExLmm5T:8HG4yc3P5rD1/HMzFRh6rGmYj2+cy7wr
- TLSH T17453540467FE4E19F2F36B34B9765A980E7BBD92D938CA0E5302151F09B2E409D64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\es-MX\mspaint.exe.mui
- SHA256 a41171f544d5869c2cbfef31382e1e607e5b0b372755079667715ed1b4593d2b
- MD5 8dea13c854bf963c7bc1ad895a8cb591
- SHA1 6fb483e5c86bcdca73f5a0c43e66daeba301ea1b
- SHA512 1bdbbd7db6042b31b133b1d34095ff0857894b85d43882ea37cf6d7e78441249494f8a5ef459763d924c251d9d4326c22ea7c7ab1fa1af922ada0749d47ed933
- SSDEEP 1536:OfHG4yc3P5rD1/HMzFRh6rGmY72NyPE2yquwi4nBhFr9xmANLEDS5L:CHG4yc3P5rD1/HMzFRh6rGmY72Ncy7w3
- TLSH T16053750467FA4E19F2F36B34B9765A980E7BBD92D938CA0E5302151F0DB2E509D24B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\et-EE\mspaint.exe.mui
- SHA256 1a03be232ec955045b17273c46aa7e48a4ce4a9fbd3397aca6032e645952dff8
- MD5 90a133c64aad66723712535695d1912e
- SHA1 03b2116367dd10d2ec452d087292f4e1e497bdd2
- SHA512 cbedefd9cafa5c4466229e8cbf06eb9db169b10df579dc731fc0fb7e5e56abf2c40c06db977a65da9a1dd82b7b3ad854c1d7ae06f7534d0156bbe46c28a400c1
- SSDEEP 384:CrsA1h2S44NqLCQI1IqQv3MgLkfZIUpd4SQ3sWm2q+G4uhG9JO2fQOGalO5rXPGD:gne3uzW3sH+LpGzHEpcLdeE5A
- TLSH T13C43EF59A3E84E14F3F76E307DB12B941E6B7A93EE70DA0D1701444F98B2690E474BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\fi-FI\mspaint.exe.mui
- SHA256 e7a71295e5894f247034228d163f1d58af29bd9abb23aa8b0f69cd0949bade6e
- MD5 e91da4a33cfddf38c328b83c32d61859
- SHA1 b5a35e14c7ee9db72f579917d1d3d4b08f9e5184
- SHA512 b3519d79cf5035bd49ce327cf81f14f436f5268850a32cdbc0ee94cd145a3341cd287407300e16f61848c8ff7526e233ccd424891a218f670432e4b15c046f4c
- SSDEEP 1536:mhaNAHDRZetdKxshHIx8Vkz4/gj62oyS5JDINbzqDRDfhLiL0qU13xNw7Ww5W:mhaNmDRZetdKxshHIx8Vkz4/gj62oySZ
- TLSH T17643795993FD4E34F2F35F347DB15A940EAB7E93AEF4DA1D1B02140E9572090A8A07B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\fr-CA\mspaint.exe.mui
- SHA256 3d62c850e014b4e1f7e50e1bf343551c102fe7cb4b4e40be0135a73a9d95a113
- MD5 02597fbf8c54bf94f35ad2e75ad228be
- SHA1 5992ebfab2439e02e1fae65b06d2f058d8f4fb0d
- SHA512 6afb15b95c9b0287afa9fd8d5f869deb9c90eb8c3cda722734628dcdac974c8c859a5d52855d2402c974ac17bc526babe4bc32e165580db9937cec68aac4407c
- SSDEEP 768:CLKuyOtjy9N/Ij2wUnRxn5A0TSCQ3uzD7fE5D:2yOt2AyJnDnu0R785D
- TLSH T1B9534114B3E94E15F2F37B30B9BA5A940E7B7C97CD38DA0D1602145E58B2E5098B8B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\fr-FR\mspaint.exe.mui
- SHA256 74652a0bc8bd2ca9d39e80b8a437318bb4f6a1e8e8760a940ca4196685e6bf37
- MD5 b9185f3ee04fea15604900b3e65ad8f4
- SHA1 31f346250ef51f7ce0b9493ff4f181d7e911494a
- SHA512 8b5e02b7a2af63427742aaa0af24255a1ef429cf2a37e0a75ac0a9f1c07cf8aea711b1b5a060bc7ac6616a8bc82ec38ec1847cc920aa197de43dfd8d7e3bc2b8
- SSDEEP 768:QkfvOtny9NPEj2wUn8nPH405gagKXu4i5fS3E5L:BvOt6MyJn8n/40eS05L
- TLSH T11C533114B3E94E15F2F23B30B9BA5A940E7B7C93CD38DA0D1602145F58B2E54D968B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\he-IL\mspaint.exe.mui
- SHA256 ddee99fc635b164dc800ad341c49c5dfc01217df926d8737900b3c44bb1cf955
- MD5 5e2c5dfd2499ab3ea9914877daad548f
- SHA1 a4317fedb2923c524691c512c62be4df947d5acb
- SHA512 0f425f1c363f44348482a1b819ea8540f88e1dcf58c8f6addb70de0a83179dcfce5071c62a44cf9e3fd56cafb5cdb30c1afb80863c6cc72135a8a0ae7bed787e
- SSDEEP 384:kQsGpKSGYlz90UgDl1m0heDis1nKTycCzRTVAocOVOpNdoMEk8JDWouWpQLE451h:L08l8eBITCz772oMEkW4E5+
- TLSH T1C33332492B42CEF8F514CF33A21F2EBD0A98F74485787F03564A09562AAF750979CB78
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\hr-HR\mspaint.exe.mui
- SHA256 16e736cc887d436da9b31bfdda6eed5d1951bb3ea7c3fe2586205824b9cc844e
- MD5 0587dfd81788b89fd9138c2c8e1c56f3
- SHA1 0cfe8db7f8bf4733cb7e65304f3ab6b47c201974
- SHA512 d619751b389c5c8be2e2274bcdd3acb1570bd2fb30720cb8b6443d27107a2e105afe592c9d74496f94a281acb6719b2eca7ffa4715b1590e1f01e4ba839d1ad3
- SSDEEP 384:Y8Vbf19+nFYdYV22+dgyFsX/xeiGPydTmVyNui/DDmb8O5p+elMJvQfeQAhWLWc2:3DIF37DDmwbeAh2Tbnro25NE5n
- TLSH T187437909A3F90E15F6F36F3066B61BA44E7F7D72FA34CA0E1202154E4EB259099A4773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\hu-HU\mspaint.exe.mui
- SHA256 4f90eae0832bb5c045b19416d025f3123ad31cf490fa0b434a5b046d2ba68104
- MD5 3313a50c2d0fae540327d253bd7806d7
- SHA1 4b08c6cb67f14a41a29a55929acb2a9898193537
- SHA512 ac82de6f842e76ca8a266d39b2036502cd3f0586135858bbb26980bbdbaf8262976f251f8dfc3892638b93cf7ad1fe94007772ea9dcda5a6c8898a1529975afc
- SSDEEP 1536:TYHAnNQTANVcqf26U8zyyNeKwlKYkMxfiol8CLE/8w85T:MHYNQTANVcqf26U8zyywKwlKYkMxfio1
- TLSH T1EA43EE0563ED0D1AF1B78F313EF14BD40A69BDA1BD38DA0E9742564E5DA2480D8B4FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\it-IT\mspaint.exe.mui
- SHA256 fc0dbd593c1f5dc68360c43a0b1aebfd2ea3f45d67aca0e8227e6e93713b9548
- MD5 f7749ff651f0c39a3c816236c90c56e6
- SHA1 4e54de8cf430fc77057220c15671ba16f565362b
- SHA512 ddc4e98a51037b9bf1cf691a6a9a40b1802401028c5961dd61f9181eab3da06bd60c2d16c57451cf1150eb5d0485c8c49e59de186127fc3383fd79a0a97de5fc
- SSDEEP 768:PJYr6RoNXrRmrz1x76a7V8WRGpfxakGjzE5g:PJo8oNX8319GpVGj45g
- TLSH T1C453471573FD0E18F1F77B307A3A5A940E7ABE62ED78DA0E1302144E58B2A609960773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\ja-JP\mspaint.exe.mui
- SHA256 d53397f7061d4e1f7a351a9e882c0ac0781f5e9b309c9ef0d57f19cf917314b3
- MD5 ea112d926285aa22beacc9a72fffecd8
- SHA1 925fd3fa72b126e9f25aaf718ee7b9223f7512e1
- SHA512 bb869fd0a29fbd221f70dc2f088c95b42d8e9356dd47a16f4f388b1afcd894473add72b9dc970b7bf1ca5ecaa6d0d42f4eae1883f4e9abf0a9296ec86d7a5713
- SSDEEP 384:dAthaefjyLTKaSphjxLFBOVy7xTIoaaKdRVEToh4OxkxlxzA51vJxvVAJLWTuWdY:pefjyfSrxLv7bSdyEuDcHtFcE5c
- TLSH T15113B54D77D24E19F1B482346183BEF82EAEB360C6B14E46A707990BA1D3464379CBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\ko-KR\mspaint.exe.mui
- SHA256 c45c9e1f966f9165421e4eabad76864bc838853eff3b64c9302938e56ce69971
- MD5 e9c03ed6df6ac2fee3a5743129251b29
- SHA1 e402a7ff68e7bf74ecf98a6d77fa7558f9a21f0d
- SHA512 50997baec8d3fd6cd3d91ef65a56e2487a3e6148d330da9b3cea00c55e329c689a4b754de239f27d4513d61c575a4291019c5ee15697ad2dba30c3c507700902
- SSDEEP 384:IQHhzyWK4NFwTaZ8Fy6nL4/t0cc7epFiuIcUgYF+IJUWCuWyQLE451ImV9AvL+o0:HlyWvgTaZcnGt0r7ktFE5a
- TLSH T1B313A25EA292CE10F154073462938FF93F6E3252CB720E06F707A51BA1E3A707998BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\lt-LT\mspaint.exe.mui
- SHA256 274131d5d0ab8a4e7dba77f923f3ffbf813e9e252a33de57ae24fc2a6dc0cd40
- MD5 bd461e25ecd37e7bc425908c8cf29434
- SHA1 e06c246de2be769578bbd2d874dfbddc4fbdc545
- SHA512 ce857316c9d2a87bfaedfc36d4f5cf6bc5f787c0904208d05fe6af90b7741328ceac82eab5e48d0257ee93d19091abe9bf297a031659b6724079876f5b6df4d5
- SSDEEP 768:bRDNumOJH+RJLcojhaWEffY75spd60v3DnsRIMo9SSWXmcNmjn7IIcMFpXcfX3Mh:NQmSU5rWx08i9AIRJ5k
- TLSH T18E53CD49A3F90D54F2F30F30B5F95A961BAF7996AE30DA0F6601400F58B26E0E5B4763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\lv-LV\mspaint.exe.mui
- SHA256 bf51d7f1c691513cad31cb36c816fe64f2d1bc7f9b052fa062d7c6220c7460f0
- MD5 87855ee398bbd09845df00b49f3fd0b7
- SHA1 68751356202c61875eb66ec8e74dfcca3a20ae40
- SHA512 21e927fdb3748e8feb9dc7dcc782662b8b25c889d7771614225c37e19a589f8f62f7220263dcf45f7617a9505dfbd5ab2d18092aebb36826ce6d4aa3ce2b55e2
- SSDEEP 768:o5tc9M0mPLsTRdLNSyXMXfK4LrOZB8PWe7caE5f:oX90mPLsTRdwyXMXHLrO78N705f
- TLSH T18943BE8963E90E25F2F30E34AAB25B911F7F7993AE38EA1F1701055F44B25A0D474F62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\nb-NO\mspaint.exe.mui
- SHA256 a2c3f71f917dcd1108dd5e5da854cf228053dbba0827f01d742300d171441890
- MD5 6ad706d5e731ed9ea52e9084cf0e6e6f
- SHA1 99eaea9e7df4d039acdf5b64b34c1acad2944451
- SHA512 8d67b98594bdfb6513c027197caf5b4f2cf7183ce54bb060e7b522cdcbc1d7eef189054e774945df38735deb88a06fb08003fc1cf61288e48eba8e0517e29132
- SSDEEP 1536:X0VgQID2cZmO59kf/DJfXetKp4HvcgAti9H7daI+fsny5u:WPID2cZmO59kf/DJfXetKp4HvEi9HxaI
- TLSH T1CF43CD0463E54E1DF1F62B347CB64AD41EAABDE1EF34DA0D1302650E49B36E0A5A4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\nl-NL\mspaint.exe.mui
- SHA256 c0dc1832e827949df4673c08a97a4dcb76cb4fdb0c523581cea55059f50c1cd2
- MD5 821ec47ee21a43bf3f8ca96efa06d7fc
- SHA1 685903e0a06f527c9ca38e008d614e6ed6ebba4c
- SHA512 e411ebccfd7d30ce4b0b64d2d152cdcbee57486095683da97d975fbdbeb53c2b007dc13be1963d9a0af90d80c4ea2a3060d59f0ed14c78027fece22600c39c9a
- SSDEEP 1536:qEzByp/CvLjt3kIAOdc38bq4nY8oFSv0rg7gNS6qG0TS95NuwpSLZii5g:qEzByp/CvLjt3kIAOdc38bq4nY8oFs0r
- TLSH T1C053BC1563F58E08F1F72B347EB65AE01EBABDD2E971CA0D5302251F48B2A80D964773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\pl-PL\mspaint.exe.mui
- SHA256 8af61f10a2ac79340aeb93aea9b19f60801a0e7d046748b8e91d3fa5cf007c2a
- MD5 79c372208839f49b5216a62c15e40af2
- SHA1 a47d7c26005c865bfbbd25360a47d6971c6d7af9
- SHA512 257c727db0f7dc05dc7ca7c0369b216dd6b5995cb9fd232c3f222c136c9002b59dce1ef080afc55d61d9fb26298194b1042c6a1f6d6d3ecd69773171138c35e9
- SSDEEP 768:Wzj6ib/kt6IkYXqG2jfjjMlsfgc8hxnvShc+tNZiCE5v:KjVb/kt6cWfjpgKxZiZ5v
- TLSH T14743BC0473F40E55F2F35F74A5B66AE44F7FBD22BA30868F6642510B4AF2590A824B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\pt-BR\mspaint.exe.mui
- SHA256 0e5180a743406b0b50e65ca9c1684eba27e085912364597b2b69578d18f3bafe
- MD5 dcb146e4768dd41822dd8894ae6c075b
- SHA1 b0faf53cd1e13281f4f18c014713dfd1dfe6dfaf
- SHA512 522a4528dab501c9bd73ac564a36a8556b596dfa0d1a865b7bae9ae7cd5344f31de10a2cff73ae592c61d993ed4f56c6232236140d7c912f4a51efcff12018c2
- SSDEEP 768:vAJ0uGn/n0kk1Hweqo6WFOvGlCktOFE5c:vAgnEHL6SOvqCktOS5c
- TLSH T1E9537655A3FD0E18F2F36F34A6366AA50E7B7D92DD3C8A0D0212510F59B2E409D68B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\pt-PT\mspaint.exe.mui
- SHA256 3b6240440c9e027c8cfb92df82b436d29a47c1224da525c5471586ca3109b45b
- MD5 d199765546a2dddb4a02cd9af6cc21ff
- SHA1 e0b7fb1a6075299bd47850b220a1e23967f19286
- SHA512 bc160e0fcf3153e557861a3a2924826cb0b3637182ee666df17def3337e0a8618a7b28771e03a0358a0e1f84646cf27bc97807468f08280c6479c22388a40f72
- SSDEEP 768:W4EBsw0dnHVp0lesJmHO2bqngRjRkpQxE5p:XgsLDrJO2bqgRGpQW5p
- TLSH T12C538554A3FD0E18F2F76F34A5766AA40E7B7DA2DD3C8A0E1212150B1DB2E509D28773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\ro-RO\mspaint.exe.mui
- SHA256 20856da4009c8176f2cf62b1a3b4e2cc82af54b6bddec4aac5706feda1d34684
- MD5 0e7def77b8ca04349aaf0fb3f2bc58fa
- SHA1 d2ce0c0291c19b2e0afe01c6f46f9f81d2afea70
- SHA512 8329d284ae39b60b8a3b94169d9ab99199662b4e8260b7393e41c5d00bcad48eded79aa2603bf09f32823823de3a32988b1e0168fc5a4aa85f388d37fb75fedf
- SSDEEP 768:g7qiydc4u+dBK7BKcUrYk7U43ie1ueE5s:FiB4V7cyU7e1ud5s
- TLSH T19F536755B3E90E14F2F33B3079765A981E7B7E53D935DA0E2606140E5BB3E809C24BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\ru-RU\mspaint.exe.mui
- SHA256 f2740cf2f679f8f16eab4ebdf81d1d53322de47effae6bec666b37058b4c7848
- MD5 fa3b9d0bd58c5d9c8cb5a526662b3c0f
- SHA1 8680373892c88e5602c7424eee2b0a51b363c805
- SHA512 de9ce76caf31c3f2f6a0d685f9d3dabdd24f73a66626e7925360bf43fdbcf8e69d4442cf297ea8b308399b4ec3fd78cfd110ec2824f798efb6c35d72c061de4b
- SSDEEP 384:XA6L7B3RhTmfL1xovcoRyEpvi1aspXwFZNa8Nylxj23ZQ9vJ7WbdQLE451ImV9A9:jZmj1uvcV/aa5l2Q9asE5p
- TLSH T1F6539A0FF67D8E14F458C2701B528DE729AEB75067286AC6D74F7C6AA09E13433286D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\sk-SK\mspaint.exe.mui
- SHA256 053127c334fa4274a0206eb95b94b2340f2740219e963b7a152524e6ab00a9f8
- MD5 2a408fd57aec129e30cbe15a1b25912a
- SHA1 aa413a5c357da8f548557df7789672950082031e
- SHA512 17c9c1f25005099bfd1134e3ad89cfc135ceb8c908e5985d8a7f7869dc028116738b8eeac36f80ad0068d974034346604d3357b078e5ff535b82f500f89dd6c6
- SSDEEP 768:Q/+0MEGI5b8zVN1BjS3VaRbQq/lVaDNkOPuNAluaiiE5F:Q/+0NGe8zVM3o84wDvPi5ai55F
- TLSH T15743B11563FD0E51F1F76B7475B24AE40FBF78A2BB34D60F6702420A45B2990A4A4BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\sl-SI\mspaint.exe.mui
- SHA256 871a681bd6c8bbb07864768fdbff6f45ed78a579cdfb9c95706fbaff71871fda
- MD5 778b7ef968aae3f3246d26f874683e17
- SHA1 18073cf229539fb16b3565b20fb30a80bc984a86
- SHA512 bd978c1e5f57a6601ea6ee2395af9c3d5d17af1ddc9a4e54ecce043b5a29024abeb130686ad8dd081060035a0079c1e23aa917b4fd9f13ca3a0c8239126d3c26
- SSDEEP 384:a40HZmPEWSU70ud5idyfhuRun16i1mHAvYnS6FQ1wP/O/vzQJvSZJpWgXQLE4511:YZWMRun160RvYnStSPm/vkUNmE5u
- TLSH T11343AC0AA3F80F45F4F76B3069B65AE44E7E7DB1FE34861E5242010F46B25D0A5A47B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\sr-Latn-RS\mspaint.exe.mui
- SHA256 0de05b039384d1a5ce20a771b82ccc2e390ff3358a2c5c28e2393f41decf0fc3
- MD5 a4fff5bb0a7e36c73384100efae0eff6
- SHA1 7818cb5a8ae4f5eb2a243fe27ff15d075b23e88f
- SHA512 d8ef61eefa8df0dde16bf730b0c4e13d77e14ac740a0281bc236231960f5ec1802c7b706d8ebbdb9bf548c9cfd5067402184b5d722f792d17ec8826eca991beb
- SSDEEP 384:H87ZXh7cqDb64+jiCFW53ppSjwXCeHB5sJsAwKrmJ90G1SXHdbtTtKeWJtW83QLf:pqDbRCFc3ppSjYrDsJsKSq9JMeyGE5q
- TLSH T1B043BF06A3F90E15F6F76B3465B61BA40EBF7DB2FA34CA0E1201154F4AB25D098A4773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\sv-SE\mspaint.exe.mui
- SHA256 842d8d497cf4be27f29e0ceaa737325b9cf311b9cf6558b97450974854420a63
- MD5 efa0292803bac03d5e425b917bf37166
- SHA1 34c3d0a2f4804e831c50fe130972214105c5a0ae
- SHA512 ec64b459d2aead7559bafc0f0b1a0bdbf96d6df5bee8a8f383ae12d24a46daf2910eb59a8d56ed5854189f4dae329e28b5fc23d182a47f46017e1cfad9733822
- SSDEEP 1536:/ycLTyBhsdBdCTAhDCS6Ne6J0Q7rWjZ5x:luBhsdBdCTAhDCS6Ne6J00rWjZ5x
- TLSH T15D43F10563D94E1CF1F74B707DB25EE01EBABCE1EA78DA0D1702451F4CB2690A5A4BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\th-TH\mspaint.exe.mui
- SHA256 fd717e5b3292b7026d4856c1caa63d662912eedbf60503e3b42c1164d5c289fe
- MD5 2f48539ec3256dbbb233f781283d2437
- SHA1 3df9f77d8f732fc8e91f7320d97b07b68633779a
- SHA512 044b498c393a52244b8b8c405327ad6e2b7986caffeceba20ed1e72561f87da1ac13cb7943f07b6c748c47440795b0013e915ddf3a16cc2997165c43fe66912f
- SSDEEP 768:KbDoscMNJdRC+Niv2V4B1BHzMhbvfYwE5n:KvoscMzdRo+V4B1BHMb3YP5n
- TLSH T1D833123DB7F20F11E00981F0E2D28FF53C69B511C5669A06D22FEE1BA1A257536B8D78
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\tr-TR\mspaint.exe.mui
- SHA256 1c7a06452f00c6231e47cc4df8e32a69937cc1710d78e03ffc70eab8eb4aabbe
- MD5 7afe82ddf5771bb641860a589f185006
- SHA1 effc9260119f6d71eff0bd09d4fc64a8df766468
- SHA512 360d98c795a3fd1441146a56108385b4bff1c47904144dbf4f6ede16fcb2c28582db7ff4c0ce7aa28f89c7f189fe3bdd75c84333ea07c09b5f83e25d78c8677a
- SSDEEP 1536:x6/7rZ37esLftzvletoPGUgB746G6VHtyx8aG5lSDzXVWBTvCEe0uA5o3g6O5P:x6/7rZLkBUgB746G6Vty45luzMBTvCEZ
- TLSH T1CF439E0453DD0E16F5F30B357DB699A50FEA7EB1BE348A4F6702145B48B3590A828BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\uk-UA\mspaint.exe.mui
- SHA256 5247dd89b28b947c4cf8d6ca3d72eed0ba96056987fb06a5abd2e32b7088e126
- MD5 7acd52d6aaea41d6aeebec681caba834
- SHA1 be8c1dc130a290abdf4c792255141968c7c0ad70
- SHA512 ddab8f2c651cb36ff3f63aa4e4a77a1674e3fda936ddfb79c2891c205fe92fa60860d9660ea17d7744e6263ec5a19889bbcc5509ef31af9b38ffd1a733882109
- SSDEEP 768:PJ626Qd1+v8G1TtT6JCt32NQtQeJ7FNESE5r:PJMQ/BG7TjmNQlEJ5r
- TLSH T16753CD1FBA788E28F958C2705F438EE715AD735057A49AC5F34F7D2A60AA23433246D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\zh-CN\mspaint.exe.mui
- SHA256 025fad88ad37efdcdf6fba75ae523524b4a817fbd795f88c84581392e3b48075
- MD5 63dec2c9da9477001ddd650153cbc7a9
- SHA1 c30a4aace325e5bb72f670c446e46cc82cf37d68
- SHA512 bcd1454b878f1108c2e322b0dafcdf379f6af6b9665f83dafd927802ecd95e2079fd5b7e567ad1879dd9505eb5c4d036d20e22f4d2bac3f72ded639577fd653a
- SSDEEP 384:To7BhY7PuvEzbXp+GlRrwojczYTkm4WCEf9isXYYqQIJHW/iuWMQLE451ImV9AvC:KhjE3UwC3zYTkavtoHE5m
- TLSH T12903850DB7914E29F2280334A1939EE92EBD7755CB725F0AAB07594FA1E34303958BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\paint\paint_lang_files\zh-TW\mspaint.exe.mui
- SHA256 0aaa26e171dc820d2d4269a1f87d436df1e370369fa64fa8a14193db89ef91f6
- MD5 71c8a9a9a17ef22979469874e910e94c
- SHA1 10c9160ffce7ccfe2bf85c2e34b32ce660d2d1e5
- SHA512 6c1c4f78b2217b8f8bdffc6277d24d36a09da92ffa264c4154ad0738fe1dc742810049f91905cc78c1adf378e4cba453f65b6c9ea4d4db32da6631f15909ddec
- SSDEEP 384:z4slE/NtILpgDCWOnflTjfg3fJrWVuWm3QLE451ImV9AvL+ozRu/dfIByDN7C3bW:O/NZVOn1wE2GE5w
- TLSH T1E303930DB7924E14F1640634B2939EFA2EAE73A58B705F4AA707990FA5E34207C5C7F1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\SnippingTool.exe
- IMPHASH fa952d285b3acb7de8fcbddcced52f68
- SHA256 e62ac0f09aeb7028c9fd55d3308c4632548adaf2badc677e572eb0ebefbd31f4
- MD5 825bcbe584a86f008c96a9404ef9422a
- SHA1 ebba4058584952b9b50cb0df43f1ff6e95b64f97
- SHA512 aed4d7e011de504642bcf3c0f8a0c01b72443dbc5c03dd95657f31663f8fd1b9d8a6ee96f2387ff788c06cbad62787ebb8eceb0c3b914f19985403e15dffc29e
- SSDEEP 12288:51R8ADkhuyQsejYnOWi1/PDvf+YKfTvlWFdVVbbyZbn3Iu0pGoV:98A1r5+YMTvlcZbbAbn3ItpG
- TLSH T1E1F54EEEE21354EDD41B4971FA6DD87856011E76835B00EF92AA7E2F48731C23837D2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
6032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
SnippingTool.pdb
advapi32
TraceMessage
OpenThreadToken
OpenProcessToken
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
GetSecurityInfo
GetAclInformation
GetAce
GetSidSubAuthorityCount
GetSidSubAuthority
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
TraceEvent
EventSetInformation
EventRegister
EventUnregister
EventWriteTransfer
kernel32
lstrlenA
GlobalFree
GetVersionExW
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
GetSystemDefaultUILanguage
Sleep
SetThreadpoolTimer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WriteFile
MultiByteToWideChar
FindResourceExW
LoadResource
LockResource
SizeofResource
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetModuleFileNameW
K32GetModuleFileNameExW
WaitForSingleObjectEx
CreateSemaphoreExW
ReleaseMutex
CreateMutexExW
GetCurrentProcessId
MulDiv
CreateFileW
GlobalDeleteAtom
CompareStringA
GetCommandLineW
HeapSetInformation
CompareStringOrdinal
GetCurrentProcess
GetModuleFileNameA
HeapFree
GetModuleHandleExW
GetCurrentThreadId
FormatMessageW
HeapAlloc
GetProcAddress
GetProcessHeap
GetModuleHandleW
WideCharToMultiByte
DebugBreak
GetLastError
GlobalAddAtomW
GetCurrentThread
LocalFree
OpenSemaphoreW
ReleaseSemaphore
WaitForSingleObject
SetLastError
IsDebuggerPresent
OutputDebugStringW
CloseHandle
DeleteFileW
GetTempPath2W
FreeLibrary
LoadLibraryW
ExpandEnvironmentStringsW
lstrlenW
gdi32
CreatePen
CreateSolidBrush
StartDocW
CreateDIBSection
CreateCompatibleBitmap
BitBlt
PatBlt
EndDoc
EndPage
CreateCompatibleDC
StretchBlt
StartPage
SetStretchBltMode
SetBrushOrgEx
DeleteDC
FillRgn
OffsetRgn
CreatePolygonRgn
GetTextMetricsW
SelectClipRgn
GetClipRgn
GetLayout
SetBkMode
SetTextColor
GetObjectW
GetDeviceCaps
DeleteObject
SelectObject
Rectangle
GetStockObject
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
SetLayout
user32
PeekMessageW
DestroyMenu
GetWindowLongW
DestroyIcon
UnregisterHotKey
GetWindowRgnBox
OffsetRect
DrawIconEx
CallWindowProcW
GetIconInfo
SetCursor
GetSystemMetricsForDpi
MonitorFromRect
GetMonitorInfoW
CopyRect
EqualRect
BeginDeferWindowPos
CheckMenuRadioItem
EndDeferWindowPos
LoadMenuW
RemoveMenu
SetFocus
SetThreadDpiAwarenessContext
GetKeyState
GetScrollInfo
SetScrollInfo
SetTimer
KillTimer
GetCursorPos
WindowFromPoint
ScreenToClient
SetCursorPos
DialogBoxParamW
IsDlgButtonChecked
GetComboBoxInfo
GetClientRect
DeferWindowPos
TranslateAcceleratorW
DrawFocusRect
DrawTextW
InflateRect
FillRect
SendMessageW
EndDialog
GetDlgItem
GetWindowRect
GetCursorInfo
GetDC
SetForegroundWindow
GetProcessDefaultLayout
OpenIcon
TrackPopupMenuEx
MonitorFromWindow
GetSubMenu
MapWindowPoints
LoadIconW
SystemParametersInfoW
LoadImageW
MessageBoxW
UnregisterClassA
GetSysColor
PostMessageW
GetDpiForWindow
GetDpiForSystem
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
LoadAcceleratorsW
GetParent
GetClassNameW
SetClipboardData
EmptyClipboard
OpenClipboard
CloseClipboard
SetRect
LogicalToPhysicalPoint
IsIconic
GetWindow
PtInRect
DestroyCursor
EnumDisplayMonitors
IntersectRect
SetPropW
GetPropW
InvalidateRect
UnionRect
ReleaseCapture
SetCapture
EndPaint
BeginPaint
DefWindowProcW
SetWindowLongPtrW
GetWindowLongPtrW
RegisterClassW
SetClassLongPtrW
LoadStringW
CreateWindowExW
AdjustWindowRectExForDpi
RegisterHotKey
DestroyWindow
IsZoomed
GetDesktopWindow
LoadCursorW
ReleaseDC
ShowWindow
IsWindowVisible
FindWindowW
GetSystemMetrics
CheckDlgButton
SetWindowPos
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
abort
_crt_atexit
_invalid_parameter_noinfo
_seh_filter_exe
terminate
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_errno
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_cexit
_c_exit
_resetstkoflw
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_register_onexit_function
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__stdio_common_vswprintf_s
__stdio_common_vswprintf
__p__commode
api-ms-win-crt-heap-l1-1-0
_calloc_base
_callnewh
_recalloc
malloc
_set_new_mode
free
_free_base
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcsspn
wmemcpy_s
wcscspn
wcscmp
strcpy_s
ntdll
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
gdiplus
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipSaveImageToFile
GdipFillEllipseI
GdipSetSmoothingMode
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics
GdipFillRectangleI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipDeleteFont
GdipDeleteStringFormat
GdipCreateBitmapFromScan0
GdipCreateStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatFlags
GdipMeasureString
GdipSaveImageToStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawString
GdipCreateFontFromLogfontW
GdipCreateLineBrushFromRect
GdipFillRectangle
GdipDisposeImage
comctl32
InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ord381
ImageList_Add
ord345
comdlg32
PrintDlgExW
shlwapi
UrlCreateFromPathW
PathFindExtensionW
PathIsURLW
StrChrW
ord487
PathFindFileNameW
PathRemoveExtensionW
shell32
ShellAboutW
ShellExecuteExW
CommandLineToArgvW
ord75
SHCreateItemInKnownFolder
ole32
CoUninitialize
CoInitializeEx
CoInitialize
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CoCreateGuid
CoCreateInstance
oleaut32
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
SysStringLen
VarBstrCat
uxtheme
GetThemeSysFont
GetThemeSysColor
oleacc
AccessibleObjectFromWindow
dwmapi
DwmGetWindowAttribute
slc
SLGetWindowsInformationDWORD
msdrm
DRMIsWindowProtected
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
api-ms-win-core-synch-l1-1-0
ResetEvent
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
CreateMutexW
InitializeCriticalSectionAndSpinCount
SetEvent
InitializeCriticalSectionEx
api-ms-win-core-heap-l1-1-0
HeapDestroy
HeapSize
HeapReAlloc
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
GetStartupInfoW
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
api-ms-win-core-fibers-l1-1-0
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
api-ms-win-core-util-l1-1-0
EncodePointer
api-ms-win-core-registry-l1-1-0
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
api-ms-win-core-featurestaging-l1-1-0
GetFeatureEnabledState
UnsubscribeFeatureStateChangeNotification
SubscribeFeatureStateChangeNotification
RecordFeatureUsage
dismapi
DismOpenSession
DismRemoveCapability
DismCloseSession
DismShutdown
DismInitialize
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
floorf
fmodf
Name
.text
Size
184KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
552B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=21, id=260, version=33145,
count=9, id=259, version=33145,
count=58, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=48, id=261, version=33145,
count=37, id=257, version=33145,
count=476, id=1, productName=Unmarked objects,
count=28, id=264, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
ClassicApps\snipping\SnippingTool.exe.mui
- SHA256 b557f6a50ec875701b8f095ccfa352d0ea04d067366e69a9efd04bd69ed951eb
- MD5 62db1b8f89c017c336c6c160d823ae48
- SHA1 7d8829c15c431092c213703f2514c23fc0663211
- SHA512 fe81304ed29738cb936202e8969bc99c01c841266b7e035a5d20d56bc3a8ddd3a156f2566b90db2687f34f0849c372028c52c058d0939e15c05724c922f783c3
- SSDEEP 192:2OnnnSQ0tWSUIrPJ4bSAjDDTu6284Rzr7w8n/Afjc8V0WX+Wf:2OnSxtWSbMtjDDTudBRzr08Af4XWX+Wf
- TLSH T1B3324212B3F84509F1F77FB469B616950A7EBD52AA39C30E5A00210E6871F54EDB4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\ar-SA\SnippingTool.exe.mui
- SHA256 37f8c65b3044931ca4facf39140610ea421e3d0787b68b3b6727184901289596
- MD5 63daa81c2a847cec23b544a00d13c2ab
- SHA1 18076f4bfaa57d52a0e623eb2b313c8b051f0285
- SHA512 97ccf527fabf82e0946d3fc52d4949223caf7ef1dcc00aa5f1ff3453ee32daeef4748896a3332d1f607889493216cd27799fcc41b0bedbd54b9d0c55c5e541d4
- SSDEEP 192:kp6oVkodVm1YfqoNsW2D2ZWrPUzJrG8VgWv+WK:k4oV9Vm1YqsGDEk4G7Wv+WK
- TLSH T1E732BA156E98CA39F0835734C1A3C65313289A5AEDE5733BC7349F1D29A01344AAFAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\bg-BG\SnippingTool.exe.mui
- SHA256 dd91dfd393b012406826694a750d3fa7eeacc7ec05d18670210282ad5a64e34e
- MD5 150e6240f6da52b18cd0862bba5aa5c5
- SHA1 9621a30083342785620e47a1e4c3e5ee2e2e59e2
- SHA512 ee751f6b651d0f8f37898f1813265ce15d5b977375d2c1dcdc3cce3ca91d956a1e11c6e0934c959a180272d710caa211247acb47539c6867b4170b7350bbb3ff
- SSDEEP 96:RJ1BbRzsJi4UH5CxH0yMKSHqD32w0T7rT79isbejSLjDFPyrUg8Vi/WOuk9uRN:TLFr00yMf22FLJPbCSLv0rJ8V0WWoN
- TLSH T1F752421FF9BD9604F551E6341E5686E322BEBB0073258A9A874F3E2CB06C63437246D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\cs-CZ\SnippingTool.exe.mui
- SHA256 b1aea0575b5412fb7ea236f1acc1acf4c712fe36457dd5c0cee09d925255e324
- MD5 ca620fe662bcdfe2d144699aeceb7b98
- SHA1 25e6de9163c16af7b5b1c452fc6384df8c7dbb1c
- SHA512 04cc5e6abb1ce9359c6767ff71d2f44fb3ba1d2d78aa20f1f252ffd3b134f732d6560fbabe59c47d76de7540a9656ff85ce0d94ff9b322567258287e3a4d1e14
- SSDEEP 192:CXxH5CEU012QCbt6D22LgF22i3rmpg+fWUhq8WKaK:CXxHDU0cQCbt6DXQW7mpg++Uh3WK7
- TLSH T15C42450563F80A51F1B76F75BCB20BA5597B7C62AF31C20F5A40125D1D70AE0E8B9B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\da-DK\SnippingTool.exe.mui
- SHA256 a12eda8ba4181bb13b6a2606b27b1d55ce3de669553be7cee903e74700f1091a
- MD5 3e6f1f45f4ffdbecc6a71d0a4d7189d7
- SHA1 e0a1092a2a3885811c4b42796dae4faacb5ec4e9
- SHA512 a4a2f664fe04f969338be9bd324a7464538d62790e7cf9533f2e3a56e70deba603de3978685b2f2c22740f1892f771ab74df9703ced56492bbb1d46855a56b9a
- SSDEEP 192:UK9TqKOsejDIDIjF2djCuU6pCubFx2zfs8V7WuN0W5:UjKBxt3tb2EYWuN0W5
- TLSH T1AC42641177E96A1AF1F22B707CF706811A7DBD92B939C31E6A40260D1C713E899F4B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\de-DE\SnippingTool.exe.mui
- SHA256 1bdd789cb038c56733853ee1057aaa46a526848ffc102c350ff7756b0a41a2c7
- MD5 be70801abd60928a0e62e0d0ebe20cba
- SHA1 df0671a1cd5cc7e7981d757f9cc37ae4354932f4
- SHA512 384983c856702e96eaf2442785c04786d6449095791384f70f95b637a7017f23843d46be03be33cdf355fac49acec807b29a1c88e2693c6665931ad7b43e5339
- SSDEEP 192:netfC24/bSAGY9tEHVlV+zQZ+352s2BKT8olmTm43hHk8VG3Wr05t:nwCVbSXeBzh352XG8/ZhHkdWr0v
- TLSH T124524311A3E54A18F2F26F7069B613846EBAFD92AE75D61E4B00219D2C31F50DDB4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\el-GR\SnippingTool.exe.mui
- SHA256 3bfdaf2cc1cd7f560ee2fa4e58a62d7fe62c8a6162fd79cc60054482bedd51f7
- MD5 3387d580690459b30cb7ccf29add99af
- SHA1 2f21457149cadbdd72c45629ccd1249ff9a307d8
- SHA512 1a6da8feca4669d6a8b5d80747e7500c92a6ee92250a0c062a5f7443e2779b61824db80dfae2a97a7b99cf5954343f70a26a6d5c4f33244a821cca0b74b14059
- SSDEEP 192:8694qPVChh3xyGizOj4LDJLDfCsNDL3Ysa235hJ31J3W4l1faGB57YMymhWCzsK:8694qPuD/Q/YSphJ31J3W4yGFWCzB
- TLSH T1AF628E4F4EEB1762EDE459F4957385B60E6DFE921520DA3FB2E0300CE96E8154CC1E2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\en-GB\SnippingTool.exe.mui
- SHA256 dbbae98323c7504e69ce005e6b62c44b1add396a17859e45ab810a780aedf22e
- MD5 b38a12a062a2fa6d3b5e2e1d2b74111d
- SHA1 c3c077720447f5107d1217e3db4887c366d6ffad
- SHA512 c057b3fbe12eb7a89c6f13a3f53813f42600ee295640dc3dd3f9c20a19d6d89bf346dac169a4f762a1211ec3f573c01f3c2a02bc43bc294791f3d1edf560ea5f
- SSDEEP 192:u6090tW7DrPnxKWAwhu6284RzlXVn/AfNc8V4WX+Wr:uV6tW7HUJwhudBRzB9AfSbWX+Wr
- TLSH T1AE323212B7F84509F1F77BB469B216940A7EBD52AE39C34E5A00110E6935F60EEB4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\es-ES\SnippingTool.exe.mui
- SHA256 1d94450c2bd8273d4ee6f4b61128eee7c3ffee08c78e9d73ea7b0db9202506aa
- MD5 eb8c8ba1266a6e0ed5183b356b5457c6
- SHA1 0e874617e8e494b081f098603fb8a48024dd5269
- SHA512 b9f1752e8aad2e9466968e92f114025906341cb258c6b4f160cf143cc6fcedd3f86222cb8709978992e42f7105ed431596610ae143ee4b6d4b8f790c4f7b281e
- SSDEEP 96:BJBXERfTFEwWEQoWAbY1oWWXuirxPWnFDzvRRod0DCdlD32kGinVPbauepinVPz4:D2jYEEtodh2kRPezGPzP5aM8V5mWZc6
- TLSH T19A520F50ABF95745F2F37F38A9B606848E7ABC66B93AC20E5610115E1DB0F44CE64B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\es-MX\SnippingTool.exe.mui
- SHA256 191a68e7b00b00446b13aad5c879a5939178c54a65cc7317871de07eeb24f795
- MD5 1732334726694c34721f61c649b7ecd8
- SHA1 fe4ef85e5accb9f81466d1e14db2ce0d1d47d489
- SHA512 c175fb08cf8b0f1b3e507073958daa91f6a8a971031f2673970925ff99ae71aa923f1febd581cad48206d837a51e8a00ad035185634dabc243a569db2b494244
- SSDEEP 96:AeOJPzoJTFEwWcQoWAbY1oWGZW0hW4nrDzvRRt/0DCdlD32kQvinV3MuQbbKHZpq:AeOMY2Tt7h2kQw3MyHXP5aU8VDWZcZ
- TLSH T1275221106BF95645F2F37F38A9B606848E7BBCA2B93AC20E5610115E1DB5F44CE64B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\et-EE\SnippingTool.exe.mui
- SHA256 26397efc53c7c664fe6893f0c74b6f01dabd525c956f7b0da7e484598dfc1fd1
- MD5 2e5e4dcb02cf41c98919f2f2ad9e405a
- SHA1 7f3ad2e4a7a12fe40d91c4021527f0684c86d4f4
- SHA512 cbc990ea90f631a78ddb02f8e250a9d2ce0ecbb10c3d8142b28928c9461574ec997e95c21dfd784401ea46d731e7bacd7028f173925dc1c54d2e2b4645a7cd2a
- SSDEEP 192:bKabdB3p79GQy6skeaCyi2/0NJ/FUDdkjGCvj12pErVe8V2WoOp:bfdB3pxy6FeaC08UDCItWoQ
- TLSH T1D3426B82A7E86655F2F36F346CF217441A6BBD97BD36C22D1A00150EAC707D0DAB4B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\fi-FI\SnippingTool.exe.mui
- SHA256 bd69e3cc20c6e9bcba52eced755180014ffa5719e49bcda2d1ce8ee157e45574
- MD5 74507bbb00dc400f73328cb0453747a0
- SHA1 3342cc8f761661178deac79bdd6ad9fad8ad5755
- SHA512 0b32bfbe96a2cf9682ea9101e87eddad8329f5f7853b873469484512da73409cd49435e9a5aa0ec24c67bda1d9b9888c475201a7381ef64c5c69dac614239d8c
- SSDEEP 384:nUayiEiab8iLOGswll3Z9GTll3nTdntiopDWzIWe:nAXRb8Lw/GTv/Oo
- TLSH T148424346A3F84625F2F35F746EF516501A7BBE936EFAD35E1E00150C68252C0D9A0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\fr-CA\SnippingTool.exe.mui
- SHA256 944d8d16ac6a8358c3f6a53d5b6c149abc4d31a2d53069ead6b4db52f25f6832
- MD5 17b6adc3c98bba73ca640abe1a465eea
- SHA1 db0652c6233dab778b57ac3f07043c0bd0567ea0
- SHA512 e8b27ba2c80a1211bb42db149aa3258da222a0cf4fdaec36eb714c8801a2868d0451817aa351db103ccaf4b653cabbb6deb5a0cd621478b360538fcff780e24b
- SSDEEP 192:J3niD4YNbSeU7GpV1n27OeNoajBeNFEE3T53tWS38VY2EWaDCK:J3iEGyi70PoaYVTpP3mEWaDb
- TLSH T12F52CB01B3E84A61F6F7BFB668BA56584F7BBC9B9D35C21D0A00618D2C71F148DA4723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\fr-FR\SnippingTool.exe.mui
- SHA256 7652729cb45f4bd69530290a47d85be75a8e7b977832dbede0d007c638f3013b
- MD5 696905ae3d2e0f561fad3bdd221e0f20
- SHA1 2c62ac55e025e23f8e41e0893312763f1fc6af9f
- SHA512 644e529c2e242b89e7286817b366c7ca6dc4ccc28af82f45c3ef4e28d6dfeb745a7afe6314b15575d99d51014689aa7c78904f5652a848a71e7c858e71ecf92f
- SSDEEP 192:nm0riD4YkuLtMUOkCpVZn2/6oeNrajseNYEL2fksS38VYCWgDCx:nmoiEo307YiNra1/2fA3yWgDQ
- TLSH T14F52FA01B3E84651F6F3BFB668BA56584E7BBC9BAD35C21D0A00258D6C72F148DA4733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\he-IL\SnippingTool.exe.mui
- SHA256 6f13c51978d9b6cb3bea301b23f3ae7cd1cd9f95aa68fcf85e64cc959244c911
- MD5 0b89c7ca86d61721c9b3a88e8df48020
- SHA1 41b5569bdfd00a7cf46e7e4c041a339177fc1f1f
- SHA512 3c19e0573a217d11c6377a63c04726f488f7a84570e6b4fae61f2564873e1cd4157f79e4406807e5830680f0c157e19d49d1b43019b74269215dada9b41d64a9
- SSDEEP 192:Mvaz7OhXs7nbA98IfAA5HgPRX2f8KnxnYiQxdZoPOfkDjWEmY+Wt:eanKEns9kuOGf8KnxnYiQxdZoGfkDjWM
- TLSH T1C832FF051B96C2E9E452DF37923F2E9E4294D988196D77079C9C122C387E7908BDCFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\hr-HR\SnippingTool.exe.mui
- SHA256 017235fae3372fe63dd5c64c45078fdee81fa2a6cbd3764e9c578db076c08e65
- MD5 79beba952dca095df5ca7a3abb7e087a
- SHA1 6446b6282fd92eee12a83dfea8267b9cb38c499d
- SHA512 86b81ad3782894bd1ee7668ddc9d242db8f3bc130c3ea05b66fd5d5f58bdf593b646755e164c26661349f0ee8987cc957d4df9376b08a19a7df5a8934d1a4fd0
- SSDEEP 192:cxzNkvkvbDFmofEPK8QRc54DD5e2pw6IaJob30t53dww/ct5ovWEph/zcyny/5AN:cxFT8QRciDDnpw6Ijswk2/GWrE
- TLSH T1C4424786A7FC164AF5F37F712AB613694A7BBC71BA35C22F1500129C1D716D08AB4B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\hu-HU\SnippingTool.exe.mui
- SHA256 b429fa45193efa6ba27731a954c57d384d5fcb60ebba1256a1d6db473c95e694
- MD5 024ddee28d4c98a596b24c3b34b1d292
- SHA1 d333e95d5a070b9912714253bd9f5bd9a369b845
- SHA512 b064bfbb8ee54114b1cc1cc9e9f3f5e247e3ac5d61c0c2d5edafd2d6282a93664cb922fc232e618c20df0d50ad909c2a3542c524b032f45981aa01c0b62e9208
- SSDEEP 192:EdEv/MTTArTLATgOg2o/vtmF/oQO5xkEhg8ZEFn8oW9yIW7:EdEv/MTETETzo/1w/A5lgxNWkIW7
- TLSH T11542344563EE5217F0B78F313DFA53850A7AFC56BE3AD21E9A40624C2D70698C970B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\it-IT\SnippingTool.exe.mui
- SHA256 09672b1e6050ca9af867bbbae57120e26881823b3746cbd888b288d47d5c63bf
- MD5 165e824fa342b11f1154ad5ade1e9e08
- SHA1 b0bdd9755295c819592a247cc2cf362198cd175d
- SHA512 e4d8def92d92ee00aa4a4f24e2e8759c213c960391da199a06a5e0827a78a5e9f82cac9e32356907dac05ee2b225669c99f189f98d86f3b4d50136fe658951d7
- SSDEEP 384:WVppablJ/TFN48zhj+RlgnOsoQiDAK8WZA:WmZN9jQbBAsA
- TLSH T160521012A7FC5544F6F3AFB4A97A2B550E7BBE53AD39D21E0640204D5831FA48DA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\ja-JP\SnippingTool.exe.mui
- SHA256 6978743861c5f9ba6b4413bab8421008ab25d5c70cc6a001f396d3c1e3240978
- MD5 3a89eb4c46605f70eb2a871fd1153c7a
- SHA1 91bc51494334ed0a92ef6690dd34f7d0bf3a21dc
- SHA512 9105b5c7478504dce19d065be73227c31d336067682eb3fb2ea5394162b0b6371fd0db200813fff3f54ce9c632ef84246b2e6f3ab6d6e554624526f2654d01b9
- SSDEEP 192:s96xFa0ivXPbJVzb8pOUBiPkNT8VlWX+WQ:skA0ivfbJVzbQOmiPk1WWX+WQ
- TLSH T12322520ABAF5490AF0F1E63085E373C0167CFE1AE6E2871B9F10650E7451B5CAB65B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\ko-KR\SnippingTool.exe.mui
- SHA256 fc6bfef166e60894304f3dd11eaf69028ea45c3553303a9c113d8a4eed032855
- MD5 8551437c25aef457adfd48dd1d5b65db
- SHA1 4bf2e3b902ce14a9c83f86ee916cc11d343170b7
- SHA512 f71970f841b73850e0c81e6cdf8303957cd2969dba9124b3cabf085958d1e3fe9735c2379d2479ce9ef7255a4c12f78ee7264e4ba7d233f22badc6a7cbe1004f
- SSDEEP 96:wJYOZtlmHzVVto80URlZBSm6RYicyvPECjRa7ejwng8VIaGWYu49uFWwY:4YFafcXCJL8VmWc+Wz
- TLSH T1E5127407EAE89A62F191D77059734782033DEE18AB23D7076F40171E7834758AE86F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\lt-LT\SnippingTool.exe.mui
- SHA256 0144194cd1f9c0efbebca50adde96ce6ae50a5ab1ad80422f642307bc204ead3
- MD5 d156801023e4bec5c2f65c48b5fc57cd
- SHA1 6532518b1d9729981727273ba00dcaa4ab563fc1
- SHA512 a7355dd96833b141f192e9e441d7830ed2cd952a48b9b3250f0acb6d9fe5d4eb36670e2b78ac6d721360bd3670af3d199c45621a9cd0f21742df8ffa37571e43
- SSDEEP 384:PEVoWEbXn2Q1HJSb4GXUC7XwJnJXvpj+p67WGqU:PEVoWEbXn2F4GXUC7XwJJXvp+aqU
- TLSH T181527746A3F80A89F2F30F71A5F646560BBEBD277E36C21F5900924C6870AD4D5B0B36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\lv-LV\SnippingTool.exe.mui
- SHA256 2d42c7d921813f815dc9aadadb1360dfd120ee699fb136ea752be3bdacbaf9e6
- MD5 df25b9428293ae2d7c7286f7622b3909
- SHA1 5d56052d54f2a11e077dc734cc4e4e36f90d68a0
- SHA512 ce3970c39eb0bf49e5301c04586e420ee9c2865786c93369429e511fd965fdf8ba202e74c7a7a97eecfe0add26059829341eb0526343d37622a1b22a86117a39
- SSDEEP 192:C2ejsCHNlVi2sumtS8mvorxN+dT8VJWZsvW:C2eIMrrsoYCKWZsO
- TLSH T111526C86A3ED166AF1F30E355AF217410A7FBC537E35E21F4A00164E5871AA8D9B0F63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\nb-NO\SnippingTool.exe.mui
- SHA256 dad5f4e28232641c9b4ac5b4e4cad3e728820980441c3ef66ed67409752fd0e7
- MD5 bb42648a833d9aec9442ad50840d78a5
- SHA1 c8b4f921ee4a01b52c8485c9c3f3d31b2e9ed6d7
- SHA512 b97ad1968a53bc4c8838139b234658631b517c198122b650ec55938c5612bf2e73e0c1f948a0cd8534a8e36bb7d85e05bbaafc27afb67fcf153b674d14332fd1
- SSDEEP 192:KNr7Lbr70EUk0EUk0EUk0EUk58bbtZC4fYIFXM+xk3c94O0AVR2QHWszwhzwk6o+:KNr7Lbr70EUk0EUk0EUk0EUk58Xts4lD
- TLSH T1A842255277E5251AF1F22F747DF616840A7EBD92BA35C20E6640220D18727E8D9F4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\nl-NL\SnippingTool.exe.mui
- SHA256 43fd70b02a3dc7d2f36471d85f9d673b37d944bd004cefe63ca33a5f2c55e76c
- MD5 b25a5ea192f756bf578b8de9462a57d5
- SHA1 6ee2ce5e4ed6628bb365d47da26fe73631ab4a0c
- SHA512 4fae3b03202e131c60dc1b741ddbded114a8535b83c55781aef3da6ea7e9e38b01014ad7326d1682bf473c3a575f6ac4700f3cd3ff91df5cd3350cc235c6e745
- SSDEEP 192:FWniF/Oj4nN3L4+22/QaQajxD2ACA/5JzWgJzX:F8iF/OjY3UpWLLVD2TWjWgJr
- TLSH T14552428173F99218F4F72F352DB626904E7EBD82BD72D35E5B00265C1871A848EA4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\pl-PL\SnippingTool.exe.mui
- SHA256 00779d8ef56dc5a60db8c7c3b47e8397c2eeb7beb3fee1f4938eed34d8669fa7
- MD5 a8e36ed8d02d25cb190c40a45b73c7d2
- SHA1 695fe0daac85947a1c1d023a82c48e680ea86a0a
- SHA512 00527e5f638d77fd263e0aa83a68e8d2ed5cbcc8c77b63dd4efaf1b611a51d4e975dc771a4bd776254c6f87f77d56074140e486951f3c9a3f02bebb9d556fcb6
- SSDEEP 96:0Ja9NPTcA/PbJOlpHT7xvxl1LlY/A/BA432VcTbERcGk9wyGk9OKFCpYq7DX9L+3:Ui6FtjP12A2N1TrpT7mlEaWryJ
- TLSH T1D8523304A3F40A56F5F36F7855B666984F7FFC22BA35824F9A40220D1CB0AE58D61B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\pt-BR\SnippingTool.exe.mui
- SHA256 d81aed6990b3ef15351c73b7acad16125b97be3c64631bb8a694fd7fd9e01975
- MD5 8d71bb4b0a5982a2e37dd44b0a66f64c
- SHA1 ccca18c572a061b4660bd21fbf9fa9e4a827ba43
- SHA512 f16772f13475ea2fdb802f959fb62bb89d28e680d07ac854ff23e44a6c9a1bfa0121489fb5ffa41645c494b89370bf9e5c6cb7e7ddcdfdfaa0f5f501c5705fdb
- SSDEEP 96:LJqYRajXb6Zm8GwZHi+f0ZBxiNmh3M24krmpuUwE3214+SjYpi2yOrjYpeg3AG9B:1qRXW50/E843214+Ir3q/U8VtWskT
- TLSH T1A1521F41BBFD1614F9F3BFB5597AA6514E7FBCA2A939C21E4610210D2C70F8089A4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\pt-PT\SnippingTool.exe.mui
- SHA256 9521128824fc12455037eff063cb06bbdf3773705c5f1da54ad4b423541da78e
- MD5 a719497f5cdc75cea879b3d57c0e2310
- SHA1 1ff7c9110a4eac4c621be51785f67995c4857953
- SHA512 71ae495c050880ed55abc472b820ca85ff9b004d3115c0af9565c7f4d8c7377652409d1e64a27cd0f753d4451ac97414d0421c47f44a0c15447dac549e8e74f1
- SSDEEP 192:NyiDfocxaOW1FuEo72a3jX5NYmGg8VdWccy:Nv45sEla3jX5yBgeWch
- TLSH T157526150ABFD1A04F9F37F39597A1A508E3BBCA2E93AC61E5510215E2D70F408E64B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\ro-RO\SnippingTool.exe.mui
- SHA256 e79f838874bc0db8d27107938174198f901676b75ff6f98daf2b6dc26444cd49
- MD5 42fee2c4afa11f33f95a15d9a58230d7
- SHA1 087aed3db4e7ae7ca70dd0583076ce1aa53f0d62
- SHA512 debef34e4a11f367e7fa078854f58b1a3b5220e4c777afdc645ac8b474bdbe071d96c5bc318b1774a8fc59085a3e007efd96690825ebd9707b8b9a32522fb24e
- SSDEEP 192:e0upfmcYONuQRl/x7Oi2y0fJcDohOvWB6+u:e0upfmc7NuUlZEjfGDkoWBo
- TLSH T171521101B3E91611F2F37B786E7916580E7BBE6BA935C60E0A04114E6E32F849D64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\ru-RU\SnippingTool.exe.mui
- SHA256 0ecef04fe87f6279b665ca3f0808900eb220b813f932f7c20cddcfc2b48d9a5d
- MD5 b1578a105ee30ecaecb988e15e7fe0a5
- SHA1 b42469c7bb68285524dcc1c78c9b54a6c139c76f
- SHA512 b998c582be8acde20b7f1b128558af82c0f724b7647c883892db76d66721930fed84c40b392d84bbbb4824a23f3cec61a31db9421fba901001be8e91b13702c7
- SSDEEP 192:9pOrXdXLXkdERCA2fSva8Wi3h39V9b8VJW7sgk:9UrXdXLXDmKva8WQZNbyWQT
- TLSH T17652760FEABD9615F450E2700FA249E721BABB01372582CBDA4F7C6D706863437647E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\sk-SK\SnippingTool.exe.mui
- SHA256 cb71199b8d23235182fb4efc14c9e8cb8245f81a45e53b5dbeeb3fb2b5829d4b
- MD5 cb1db9b3c818433bc26c521ac810179b
- SHA1 edfc92f38458876f1ca171e6a910e2526e9f8d71
- SHA512 db14829c5642a2989b46eda2b91de970c5b231f3f3c26a2929c24adf4eae537bdeed7e551aab04ded656cd69b6603f97825bb2cb30adf255b5848277a25eda88
- SSDEEP 192:IyD7c7CbBMrr0aOTdDt0HxoF2GVv+o19L+a19h+suyc6iV8VY6WF+WV:IzGMroxt0Hx7GVv+oXdXosE6iVqWF+WV
- TLSH T1A052361193FC4A81F0F7AF3564B60A910BBB7C96BE36C20F5A04520D5970AD4E9B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\sl-SI\SnippingTool.exe.mui
- SHA256 11b988a33a2bdf4cbde8edab415b397ccde18a39549593ae3932bb9697400706
- MD5 8d2696c367785c8f54f57a30d862a676
- SHA1 c9639311a6e6d25a65e41cd23752765ef47fed60
- SHA512 dd483622fb79d2af6c46ae47520ff8c441f5eadb8bae4765a28cad1768aac5756b630f16d521eb7c165bd98dc146d003ae152d88ec80a21c6a15d517861b2653
- SSDEEP 192:wogDq5zJX1d9SYUEx/2SMnHgWaWJRkaBEWRyKPkaBEdisy1c+3x0F4mm8V0W9ipT:wX8aXEYtnHlfi2iLELfWwR
- TLSH T16452675AA3F91646F0F77F7195F607A88B7EBC62BA35821F4A00124D1D726D0C9A0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\sr-Latn-RS\SnippingTool.exe.mui
- SHA256 99286fc3f815698045b1173f941e131f4c2521703d314d4cd15a138fc187dd77
- MD5 89f80445476264de7d6900371ae85e0e
- SHA1 56ed1bd147353086c3865f8decb39b508ff8bda9
- SHA512 6ad0ae674f119d0674f2b4c4e7ab0c0ff6672673478ce46f401c58407a91f46de9add81e65324847aeb2bbe9af5aca0c7dee9f2392fc15c8b1f1d8e975edcb49
- SSDEEP 192:fbAbf3h6wCsckqY6K8/DGI237P+IMS76FbZ6qzbWkhgnx+iEjYipYzWSP5fC:fAqqxd37P+IhlgzQWSB6
- TLSH T143424882A3F86656F5FB7F7969F613A00A7BFC61BA35C22F1500125D1D71AC089B0B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\sv-SE\SnippingTool.exe.mui
- SHA256 a9230e6091da0288263526c76d26d3ddac65d5f95c439856805bbade589de7f6
- MD5 9cbcdab2acb241e54b0c1b422b8e407d
- SHA1 7db087e8a27264724aa3e8ae63ef2532fdc96be0
- SHA512 62b8f602e718cdea46b96947279f0d2a4005bd30bfef44981573e2ccf3b4f0d870ead50534ce2098f5a484b96fe236238b8d04c1b865463f056f264fe4e0c05e
- SSDEEP 192:GbMcE4wvHqXTM/LUouC+9F4VJjVXAU22TeLrdIQLrTGxcaLALL5njnqa8VEW7vy:GbMcE4wSXQ//K9CJjVXAvCUp4aBhfW7K
- TLSH T1A242460173E86A29F5F34BB87CF626500ABEBC916A79C20E6F40265C58317D498F4B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\th-TH\SnippingTool.exe.mui
- SHA256 376da3feca3ea393adde3cb84dd3aab5955b964b2a53deeeae32d63fb86eeb38
- MD5 7afc437d23a0b361116aa5a915cba2c8
- SHA1 74505a29bd7134e9c0a2db5745177792626ed403
- SHA512 1589fb5915a2e677ad07e84ff711e2458359c1ba911362dbc17ff34fae2c007de8ddd452d320cb18f61689d9fe48f336588c5c75201781994c272f09be7d6b42
- SSDEEP 192:VtP6aGr0g911J7a7bjSzltwnUh5yPAF8VBWuZ5:Vd6aGZLavj0yPKyWuz
- TLSH T18932AC35EAF35702D05AC1F0E5E64B723D39F912D92BC346C62BEA1C692067477B0A39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\tr-TR\SnippingTool.exe.mui
- SHA256 808c80cd537513df04f6637bf3065602d18d4ea32bc3cd9d1de1b8aa964fd50b
- MD5 6e3c3f750389c3efb9bf6c2f285d8475
- SHA1 1528399709e6dcc5711b4770031b22f48dd08c9a
- SHA512 b98cb30a62a5a265696258943c1f2e729471885d99110bd84b66d359e545fefe43b00f5633f45f69c4577a07de902738af0e4353eafa5be2da236cf9f0bdedf9
- SSDEEP 192:51IB2d59Xxc6qhRJ7DdVkdxV8SxfiY9C2Yu/7RUIKwp4nUIKk2kILLMQf/Vo2Rrp:51IBk9hQ+US8CYQTyn2L5nxrBWelWM
- TLSH T10952680593D98A46F9F34F352EB356A10FFABCF2B935C21F6B51211D1831AA89D50B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\uk-UA\SnippingTool.exe.mui
- SHA256 5fa067f69dc67a5ee7d4c88b5b3e9a7b3dae464a3d57a205878ddd692afba22b
- MD5 4a5ecb6548d561a7608e9690eb1bd521
- SHA1 52b1539b4ade050246f2a1b878f2a68047b52960
- SHA512 3a6e63aaac966ead0e92d555415ba4140c21454ca58fba54f28de422034ea3288dedc7b8024df3a1d265dec0532525d7e0f2c39d6e1efcaa67cb2e3f00c48639
- SSDEEP 192:Cg38SrVonbJCh2bj52hfG2a1O8VYRWANjz:Ci3gnOhW2/
- TLSH T19D529C1FEBB8CA29E454D6710E9246EB11BDBB102795C2CAF64F3D2970582393B647C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\zh-CN\SnippingTool.exe.mui
- SHA256 8c3398eb4193b9e7fc1104c68d6d71d5c87cab693f96431a92e772cbd388fe5e
- MD5 e1fd8f1ad331e39c81c48bbbeb3f612b
- SHA1 93a8569a1091097275d3165533793404c248bd20
- SHA512 5af3ceee349638fb0ff4eebbacd82c39b491c74a5b9d4ec60a556a91d7c3f9ce6de2c313589f0c005dd27ce9af846def306acfca1276aacdaf5fc02dde86dadc
- SSDEEP 96:vJhRdzhoYuQ24Yz9HYNvlMTDGZMnezPArrPgAtggM6tKkkg8VI2Wqu49uFWw6:hdi943ZmuA9tV8VVWG+W1
- TLSH T17D02730A57D64E1AE0A10A7485F313C0077CAF1F62A39F9FCF00259D28746296C95FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
ClassicApps\snipping\snipping_lang_files\zh-TW\SnippingTool.exe.mui
- SHA256 76bdde01e6d060f76cbcbf54570cb9f23fddb968f200083b20672e041d589508
- MD5 58d1ab62222f79aa3643d861334a66bd
- SHA1 501e6194e47ff0101b8e3ed5734dbeb7ab958310
- SHA512 9663aea6d8dbd5fce3010c481edcf57cbd6dbd8bd2f8ad2ebc4c3a65dbafe3662cb3624773acd86ac3af1cb8f96f3a7d6196c6991650504991f42ccfde8dca9c
- SSDEEP 96:GJ98b0gOUES02tOm5vKulGJDPgkalN3QUbIsZ1rZ8rrZ4tC5gzg8VIaZWTu49uF+:292vIkTlIcQEK+tC5gM8V5Wf+W1
- TLSH T1D5026306DBD64A16E0A0577488E303D25B7AEB2E7692931FEF006B4D74703289E91F76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=33136,
count=1, id=258, version=33136,
LICENSE
- SHA256 8a53da4a131966abd5d5e10011cac21d65a87846c0510cbecffc05b6f7815394
- MD5 632548f295e44670373001714f28afe9
- SHA1 9033c8f8c2f7021ce93586be6eca071a0b048d18
- SHA512 b2be448bd704d01e7676ddab774335084414b978f099c3ab815b0ed359798509413bb28247e6e9579856c406bb6fd61dbafcccba1d149c3ba83806af9da7003d
- TLSH T14111B51EB351077228AB23605578ACD5F23BB25F7A5F2A84246DF341233A06CC5FF850
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 91b0da88ea89a339300d9dcd5441134aab53753b8a913bc87701bb4bf4ee7005
- MD5 22fb15595be6d8e882779996b94e5fb4
- SHA1 ee4c4ea63299e4a3cd963d0292cf1885167b1574
- SHA512 d67e7284da7df76f6ab3f652c8e305a8a8dab163fd604fa59ce5e199fe503ec02a610d2152165177f9c14b4bbc446177c129ced1c2569da58ae76de5d025ff4d
- SSDEEP 192:QxSd9W7rRs28itBf/Q/a0T8I73w1QYEEavxCNiAYH:uSd9QNBXudzsNsH
- TLSH T13002C8FF69127AB80B738086A63781D0EF212140D6B291D174FD451CAFA65E7483EE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAI-GUI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d25b89fcf08b3361f56a15330e1cc1fffe64500d104c76c429b8665a8d936679
- MD5 2a331d9c4b9e046f932ccc85cf993482
- SHA1 3e71e890c84d9e3edaa586fbdaa9fe4eaa9956aa
- SHA512 e0f989e31ad7de9e45c5b313f0ea72daa3194261c034dfca997246c19c247fc7c38f0937f16d553a0be908e73488cc64c5a11d0169202d6d7f1070db457cee8d
- SSDEEP 12288:Y8QjR3s0MtJhpiKt0bwl5aJO8QjR3s0MtJhpiKt0bwl5aJu:YW00Ht0bwl51W00Ht0bwl5
- TLSH T124456BA59F966E8CCF502927D4DD66D6663D13EBE01000DE320FA6879FACC1457E08EE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1257310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
RemoveWindowsAIPackage\amd64\ZoicwareRemoveWindowsAI-amd641.0.0.1.cab
- SHA256 0e144136cf554d586f443d9b61aae64727b8b5489fb9b187d39d6d43d1bb8b6f
- MD5 a3f1294cd649fe68282278552b90bf50
- SHA1 ff00efb18b15e4e51920d555d39ee7d313777440
- SHA512 5b73a3cf12fd514e7f3a7a8b6c0d686781be1126c92b2f4701814732eec5bd9450f95272b26734ea0c487eeb98932e1905bf47a4d5230098d39285eba0ec207b
- SSDEEP 192:Ov7uP1vyu6D5pjlIzvj3+ulB3KcFs04M5jG10T8:Ov7K1vA5pjlCvj3R/qHkGY8
- TLSH T19442C440B7A6AB8BC5120872733D7D31F1B415829F552BC77ABAE7E43872210B9706BD
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
f355f8dee402c7ce8ba741d9552b0418bb83426df46465df04a33748be722eeb
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 26, 2026
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
20:36:97:e4:18:c9:69:99:4a:1f:15:04:cb:28:79:e9
Issuer
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Timespan
Oct 5, 2026 - Jan 5, 2860
amd64_11e802062ad41dc9ff8bb5ea6753ff90fda76fb8_31bf3856ad364e35_38655.38527.65535.65535_none_121f898c7b99b89d.manifest
- SHA256 facfd2ee1e95d1260dab37e9960eef444504924a4f7b24d99f7996a233d5d6ce
- MD5 73e4984a3a403f56373fa2cfe516e9f3
- SHA1 907bea6f9c05f0d6458bcda19e94215e5b2a9d04
- SHA512 6bec30f7bf8bff56532a3dd48d49d65b79b91acbe79782de4a68649b763621ec7ce989040229af57e50462d79201a9815c94ac79c1f40a8732b17a26f82efe52
- TLSH T1E501D000F009EF3E87234A917EBC6830B35D23250B4C1FAC98B4A9BEEB5B6D61145033
- MD5 SHA1 SHA512 TLSH
amd64_1672635dc8faec0740936c3c0f2cba350733c9c9_31bf3856ad364e35_38655.38527.65535.65535_none_c2a85002b039a09e.manifest
- SHA256 c95efee7da7082bbfe37ed5eeeae0fd7dd629203bab834871ac34e43e9b387dd
- MD5 2eb90a572b50d049dfbcc7c4cf5f295a
- SHA1 7430f1468e52dcaf364cc454bc76210cd5e8d1e6
- SHA512 0a38b00ccaf0008c99cde79d373aaf168d5efd753c02ef6e4601aa153fb3edaa88018f50c7f17f3d1a5b9b385f25db8cc38c46b1e86ffcca3a15f48566b07138
- TLSH T10801D500B118BE3E873306517EFC2871A36D63250B5C0FA8D9A5A869E75F6E70145073
- MD5 SHA1 SHA512 TLSH
amd64_26886f55a03ad1bc4debe5a7304f3911a99ad01f_31bf3856ad364e35_38655.38527.65535.65535_none_a97c360a032c50dd.manifest
- SHA256 2c0ff676506cd9f7813e8068f1180b794fbf2752ca59b50bf9466ce397d8f496
- MD5 e2f09f2421b258d0f850161309c4a1d4
- SHA1 7c2f1f0fcfe0f8e47118f1784ad3bbd5d9339b47
- SHA512 1397ff5b32c9807b567f16323041ab60194b28e30aac8b1b09452a086f3e97bb8fb2ccbd3c3c619f0afd707178ff5b17af93e9bde1f50ee954892bedaf5633a3
- TLSH T17401B100F00CEE3D4B2306617EBD2570A36E6325075C0B9898A0586EE75A5D71101077
- MD5 SHA1 SHA512 TLSH
amd64_26d9a6e844b8509091450bf2ffc9bc3fca5ff0d8_31bf3856ad364e35_38655.38527.65535.65535_none_b9de4e233b31b234.manifest
- SHA256 329104168d45e6a4277fd899a8cd4b45af8b514be1815352ae6f72c92e07fcd6
- MD5 8e79ff43b1c31c844286f5564a149312
- SHA1 da81b9012639cb46b6cb08c08a51ef1e27e6f1b8
- SHA512 7beede72fc702d32633c564b82b5856387a0213c070f12e874e61ca66ae790b57e5f971d726cfda89e51c049f522051d8af015f5d3d076cf02d6bfe8285ee3d0
- TLSH T12A01B600B11DEF3D47220A527EBD7970B36D2371065C1BA8A964947DE75B6D50545123
- MD5 SHA1 SHA512 TLSH
amd64_362d3b36598149c4655f6218febd9eafb3248b0c_31bf3856ad364e35_38655.38527.65535.65535_none_5b9aa682dab50d7a.manifest
- SHA256 1bb2c88629214835415f7e63fa64237d0908608b8f75a1a83c3cf5d30469eaf5
- MD5 bc3373095adb940ba4b6a5905392f6bf
- SHA1 f26373ca70b07398918ea25cd4f892776d18f4a4
- SHA512 1d4d31fef919f87b20afcefe7e59262e4e89c8e2f5c4540dff555178c28996c57a2f193a0ad5127e6bde5708ea64d5a0cb6e5fd15de9bfe005aa1740a935d19a
- TLSH T1B501B100B109AE3D46231692BEBC6871A35D2326064C0BD998A5A8AEAB4B6D61505027
- MD5 SHA1 SHA512 TLSH
amd64_391580f2fa19f274d4a39e091e51f33628a2aa7b_31bf3856ad364e35_38655.38527.65535.65535_none_a84559756daa1246.manifest
- SHA256 738c7f4f56f856a75f626d11bddf099cd90363569746f73a111d1e43543327ec
- MD5 02b180d8c7005351592c44b86a381fdc
- SHA1 c982ae2546e1dcc51c400f0e820c0253afccb4e7
- SHA512 ea7e782da2239873cdb94264627b2e65bf1507ef88353bf033503a082070d415bb17fab2c89763d50a152b03d793c7b46a786fac316e7da8137b0c12f9fed29f
- TLSH T15501B100F109BD3D9B2346517EBD6971A36D3325475C1FA899B068BEEB4B9D70541027
- MD5 SHA1 SHA512 TLSH
amd64_4a81eb0cd812ce6e67ff46c19da83b7ee58afa5a_31bf3856ad364e35_38655.38527.65535.65535_none_8757fbb290c1aa8d.manifest
- SHA256 94a366f9dd5f508a815306597d49a2e3e6e7135527540e2cf548d0cc49cbba43
- MD5 decb7a074cdfda4b8b6ff6402ef87a34
- SHA1 32fb20b524eef3be68347e4fda3386eb2e59f8b7
- SHA512 cc5467151f774d4fe3a63d3b12b3b978c3ad5d3376f0c3bfae65d4aaaa46552411e8e55ea23f082e2bc7d66ef3dc019fa93af864715426afd7a707fb9fa07da9
- TLSH T10901D500F11DEE3D872346927EBC6970B36D63750B5C0FA89DA4A8BEDB5B2D60105067
- MD5 SHA1 SHA512 TLSH
amd64_63b3e2a9103050c7729dfef49a25d315cb514c76_31bf3856ad364e35_38655.38527.65535.65535_none_fdc644cd4af312a3.manifest
- SHA256 303fb4409a1640a06489cdd6d3ae7cacb51759a3783ffb3d35c7a8b22decc610
- MD5 8865ae7c6b052da40a3dddcd5166cee7
- SHA1 aba7dd00a184d425063f1e113855c08604e86608
- SHA512 1566af1199ff916991d93cface74b3d127ccee8d3cee3b0754f632ae00991a74225705448a4c3c755cd557cba5f06823ff2b53655ce0f59b40b1076a8d6f911b
- TLSH T15F01F100F018BE3E97331A937EBC2971B35D2336061C0BA89860A4ADE75E1D70545027
- MD5 SHA1 SHA512 TLSH
amd64_89b748aade066363a5e0127d2bb24875b248bdb5_31bf3856ad364e35_38655.38527.65535.65535_none_71389aa9d5f40482.manifest
- SHA256 5a3648ee7851b6ba4da0dc4ceaef9a1223254f778ce84801a85b095d2e749f69
- MD5 1de6403204001d2c4db52be4d01836a5
- SHA1 09a19577f3a062c1a412820d6a960b672699a08a
- SHA512 6266d29dbb40b96dfd149593ef3904e34c31507702d56d8d276e03e28932e39b232ea468f1bdaab7e2682106eccc5ef472d0d5c7bc515a3856cd14cf99e03818
- TLSH T1BE01F101F10DBE3E97331651BEBC2930B36E2332066C0FA899A0656EEB5F1D60545077
- MD5 SHA1 SHA512 TLSH
amd64_950c4e370ddecf4f726b80720f6a4e7bd59ef967_31bf3856ad364e35_38655.38527.65535.65535_none_2fe2fc9b9b97482b.manifest
- SHA256 1c264b7e82924c8ee6df1380d096d0c4c05127be622d14a1029b3668ad493a38
- MD5 a2e29bfbcb6ba15e7d4d1e1c4a67d94b
- SHA1 4b9655ccb4ce82225c4f773ed23da29de20fadba
- SHA512 6633e8a6805b9ea677ef68dd759cb8d5a0037329f4ba1b8b51b992d6bf2d895a39cfcc0e995f780376c3891ab3b04359a34caef1188308e6153eea86d9812841
- TLSH T1A401B100B10DAE3E8A230AA17EBD2974A35D2325465C5FA8A8A464AEA74F6D61001027
- MD5 SHA1 SHA512 TLSH
amd64_9cbd88ba7abc475f4b2dfa0d0ea7ffbd157c8758_31bf3856ad364e35_38655.38527.65535.65535_none_dc0a74736ac4985b.manifest
- SHA256 8bc6a6b651bc70c9215cd1c6d384a30911c8f9d701e7a52a418db224b7180888
- MD5 db6748b9108c0e09d4275a24f8b03a6e
- SHA1 254599e665d3988b1694613ecf266aab4e73dfac
- SHA512 e59d1a57c7bea0555d3cf58f00fcaa3c4d37757f8fbc23900a4232b8df2c2ef14ee6f1836950cc8a33e69761e4d82c4a92de559a6705d126acc1734afd1a5cac
- TLSH T15501F100F118EE3E97220A51BFBE3930A39D23250A4C0BA888A194AEEB0F2D70400063
- MD5 SHA1 SHA512 TLSH
amd64_aedd22f668f4731b866c643e1e9c3de34f241722_31bf3856ad364e35_38655.38527.65535.65535_none_c5ac24321b2a99a8.manifest
- SHA256 410b1186158fb79ea9e8db2035498ff78cce933a759ed9fbd2b6986990d488a0
- MD5 e906835d21e19259f9a162009814c207
- SHA1 08c45aa74bcc1c38066ef7c4f603b480ef667933
- SHA512 3de110f161fb09584f001a5dd743b4a18ff672f151c47ca6746c043f2279cce5796c3ebb1279d7ae97174fbeef6e180dda8e56843e44867b3b08088019d55f4e
- TLSH T19801B100F019BE3E9A234A617EBD6971F35D23250B5C0F9898A0A9AEE74B6D60045027
- MD5 SHA1 SHA512 TLSH
amd64_ba299a8cf4b207f5e08c4518f76bcdf3129429da_31bf3856ad364e35_38655.38527.65535.65535_none_9efd476fce95774f.manifest
- SHA256 90900602b9b419c7931b308ffde457c797dd4777912fe766c819462b489e876b
- MD5 7348e5d4247757839c3ce66a15487516
- SHA1 e690e1ebab354797bedaa70cfaf41722eb2c6624
- SHA512 90815c687242145e6c7dfac16a0d7b0360b42c5001df8c8e80d5520810ccab6d5bc9621128869f3206f98379de136d4a476326485a4c15085f9279704cf9205b
- TLSH T1C801B100F108FE3E87230A92BEBC6570B36D2325079C5BA899A468A9E75B6E60105123
- MD5 SHA1 SHA512 TLSH
amd64_ba7ee049da5a7edf2933fd82891caafe6242582f_31bf3856ad364e35_38655.38527.65535.65535_none_4bb2f7daad31ab33.manifest
- SHA256 10c814691bf235f3a4ee0bfd8c9d3fb4b646e3ef02e29690e0dab7ebe9bca1c2
- MD5 e15a00dcec15854bde309b04fa471b30
- SHA1 c971c36d322b66fba9ed8fa43b533ebf81c2cf1b
- SHA512 5861b877d8197eefea38cddc7c9c0447331f99b9a0da03f1ec6b5c7a6cfb25f9d4f4c91e6d22fe3aa2f5ef64a0afb6a1f7a4562e636ffc12c3822e56373561e9
- TLSH T16E01F600F108EE3D8B3316937A7C6570A35D2325070C0F9CDC60A8ADEB5B5D71105067
- MD5 SHA1 SHA512 TLSH
amd64_cd29b6d92d07bc1fcb59512bab53dae8adb1087e_31bf3856ad364e35_38655.38527.65535.65535_none_8be532283da3a19b.manifest
- SHA256 48833297acbfe6cb7fc1a30690c1fb952a534ee505906cc7c27595a60211ea83
- MD5 261b35a51f3f1db7146e404cc8518daa
- SHA1 0a74bd0110cbb05816f35f85fb3962e2a07d0ea4
- SHA512 a7c7fef0aa642be53e82c89ae7334406fc34105d965ae28d253dd8632a4b8fb3c4f5b59689c1d7165427524dbcc04fb5f7f478239fbc53e40d73c76f24f80151
- TLSH T1B701D500F118AE3E4B234A517FBC6971A3AD23350B5C0BE8D9A4586EEB4E5D71105033
- MD5 SHA1 SHA512 TLSH
amd64_d51e7f69c874616c9c84ef1867f683704d27f47c_31bf3856ad364e35_38655.38527.65535.65535_none_1f8273cd05549a74.manifest
- SHA256 d81dd71e8085e55e54f3ea688e1860a6fd8ba2b35ecf27352eaa544394b3b6af
- MD5 188dac701ead272b2b0322d42b76806e
- SHA1 8aed7bb1e2fb80009d4c61005e54ebaa8fd26110
- SHA512 4471d4644f1d54e45a3250eb3fc5a77b5c1317584d537c5906ed00d3ece6a48af3605027ec98266b54c34e7086fe4b19211aace7874f2e7b2030ba05f6ed4a45
- TLSH T11501B100F018AE3E87220A51BFFC6970A36D23360B5C0FA89960A5BAE75B6D60145077
- MD5 SHA1 SHA512 TLSH
amd64_d7e8127c309f21713d91fa8c4c2265305335e169_31bf3856ad364e35_38655.38527.65535.65535_none_2a70661c7d0370ce.manifest
- SHA256 d9d833b02e18c4e70f43572d2d95a00faf66d5146002e3257ba14b9ee2cbc76a
- MD5 d8053fc58c7fb78319f89a9548485c2d
- SHA1 a832be6e8f676e12f946ee6929591d7f7a0337c9
- SHA512 9a05b90cba237c1908a9cac2cd8c91d5d609b914b694badb2d84cb198b6572645a3f6e399e107e6b849aaf3195857e646c97a5f1fc164149555b257ce46243ab
- TLSH T13D01F100F109EE3EC7230B91BABC2930E36D2322074C5BBC98E468AAEB5B5D75245063
- MD5 SHA1 SHA512 TLSH
amd64_df21856b5f14db06026d6b7b0011e19e9f676039_31bf3856ad364e35_38655.38527.65535.65535_none_c3cfc6b502bc5bb8.manifest
- SHA256 8b3c231e5f87d66ecf04363d6ed4e9fd9d7f464849088d11a2ed1f3adce04fcb
- MD5 8952b1eb199e0ab65f4d99d32d195ac1
- SHA1 7e08ce44c180d134da11e037e5ef088f9927a165
- SHA512 6217633a7345acdb0b842e32bd060403648a9ef575911a693c15db97a2a104a154d90a7e7dc84d7f64027d44df048ba67e8030ef79c1b6e63d415d27f6244e21
- TLSH T19601B100B119AE7E87230651BEFC6970A36D6335075C0BA899A4A87DEB5B6D64105063
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108d7945a2e7e9d.manifest
- SHA256 d4b0e70cee7568f81b652ac5e263d8ad28be6a03a0037e7e73d53916b7fc6a60
- MD5 3fafd5accbbe46c6dc4104e939893e29
- SHA1 889a5aaba0f09ecc3f437e68a0417288cfabe3b2
- SHA512 d519ca3bc3a123707e3ea1125065b89e1c5c6a99a4aec8b4e3671ff6fa2bb12e58e8ab7904d561167137da943567158a4d6732062a309c28082dee1023cfce73
- TLSH T17DE06800F0085E3E83215A22AFB86974A36D33730A684FA88864A9B99B575D9650507B
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea620d27c4484e.manifest
- SHA256 88e7e90874a53939bff6b63c4a1c591aab097cbeb2c0a1ff285dffbf070447d3
- MD5 2482785a575ee89581ae51fabdb23146
- SHA1 4614e2b1abf254d81b7585205676f5f25b4b92ef
- SHA512 857c09509d33db04188120abb1508c5862588934afa1929739259255e6122d12268f3233d683bdb6b8e51c06ff8236f4c39a47d5b9705cec282e87876285ebd8
- TLSH T1D3E0F100F00C5E3E871109316FBA6860E32D33330A684F5C587569BA97474D84441036
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2268220c2a52.manifest
- SHA256 728e68427860fc1de63c69d307acca940a5595587072888a10a77722222a3a7f
- MD5 84b0204df34f635b437891bfa8b6e80e
- SHA1 204384fceab4d63be68dc42320b6db2404f033e1
- SHA512 9d39fc4820ea22582be31c396efc046e059a78f29c20f645ed38a326139e204cbae68106f2cb8c096ad78c148b8c9139c84287e055302d181cfabe683bb7af6c
- TLSH T19DE06100F00C5F3E871109316F756964A32D33370A584F58586565A957575D85501076
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a35da8a335eb56.manifest
- SHA256 ec814f0e2327a64276e67d9b997f70dbc87f74220da882edb7d5628bbb091618
- MD5 3e413d1b24d8589799d01b575fafff66
- SHA1 60cbdbc92a4cdcd42bdef6cc7731a1b84c4dfe98
- SHA512 f5e1c434c4b27419ff88b10647fa9ecfef34798bbeabab245e3e7c3917335c442d5b08bbd809ce32c3411d7eb82fc605f92d7f7e17e44f3612ea5ed6b4aafe96
- TLSH T175E06800F0085F3E87210A22AFB86964A32D33330AA84FA85865A5A69B574D85501076
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c063d96a4febe.manifest
- SHA256 8993a23684a394df118d6120045176051673ca95b894183af67a812614853434
- MD5 7e381eaab765c997c0d77269870b7609
- SHA1 9dcf23e20cdabed4407ed9941905a842c092b0eb
- SHA512 1423e72696134d09821d7dc57c201c02c1e48328ac83cc3591b7dc632a62ef6c84e3bb88d79a7afc00482dcfbb9f57a82a1c3cfa05d672432d1c64c5de9ae712
- TLSH T1DBE06800F01C5E3E83614A12ABB8AAB4A32E33770A684FA89964A5B69B575D8150617A
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_581701dc439f7087.manifest
- SHA256 8dc547f0466f6fb8a825cf81a2f3bb9a6be5a5888f52524844944ab5d8d29d3d
- MD5 767be89a75931d83e80c5b9e2684e477
- SHA1 8f4ea9ccf9eab0d74a97bf0421c69d9b82de5875
- SHA512 a812e019b79ec76e2b2b10fa36de57dfce6666bd9cee81d1223b2748dfa3840ce63dd947386e6107baefa487280beb554c365b5fca91878783066434f6eb2ebb
- TLSH T13CE0F100F00C5E3E83220D136B787AB0A32D33370A580F989C65B5F5A7470C5151517A
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059ce1049764b18.manifest
- SHA256 db363a088e70441c5b58051ae3f00439315bcab39e78ae27153aa7145735b029
- MD5 fd68c30d72d98bd9376317777eabb2f8
- SHA1 b0534a2e69d236b57bc6f92195e96a52c58ecd64
- SHA512 0e42f05a9e6695fd9d0ebe085f765150a186c41867d10e4d969d2014ec8c7af50b135f656a7625f00535aaa62133436e29c27ddd08fa3d3884908f917760ab94
- TLSH T179E0F100F00C9F3E87220D136B787AB0A32E33370A680F58EC65A5F597574C5151507B
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e0e212ed2bec.manifest
- SHA256 8c638b99e48e93386ace7402cc898996cfcc9c16e809ade9eeb6eafb83a30e35
- MD5 9341cc0c48b7b9af649e139197fb4c04
- SHA1 c20fcd95cf5ce526c0da5d4b1e2aef03808dd777
- SHA512 d0c2a670afafd22518166d94549e9d31186dc3ee3af49b8b96c422a81756822fd998ca528c5b4f35eb50cc3cfadb1e37d48fe7acce15dd56af0d763764c86774
- TLSH T18CE06100F10C9F3E87610D136FB87974A33E33730AA81F58AD75A5B597575D41545076
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dba882e933eb9.manifest
- SHA256 356635ea13b3097b2e8dfc803b67ba18d594e06b0c26b0e4d7907c501f38e062
- MD5 c0ad079456f3cf9c834fc957da051aff
- SHA1 d983d3488c5899c1f692adfbbe2faf8f3f468ed8
- SHA512 a7a744820a6e233740d7b7244102f8a318c343ef6561606ed91ff43c8bbe00e8b358fb9ccdf1112980fd500a3618622ce71d4666f7a8fa125e9292c7146024bf
- TLSH T12DE06100F00C9F3E83510D126FB87974A33D33730BAC0F546D6565B597575D41545076
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7dd83d154563f2.manifest
- SHA256 d18cf9b31e68e65f23c25130d7d90428ab479c70f76f62aedc67a387965a790a
- MD5 87a416e26bdfcae351f514f31ab6f509
- SHA1 d79b656863190da8411617feb075630d98c8207d
- SHA512 35032834bdacd9b9bb27fc164fd3110d44593f176a781f56d9c6c856f127bb14ef979826d271ee82cd2cd14e7756b22e20a8998ad18cafd46418fb1ccd1d6c52
- TLSH T165E06800F01C9E3E87614A12AFB86AB4A33D33730AA80FA899A9A5B59B575D81505076
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf38ed71491164.manifest
- SHA256 9dff7965ce82937c37b1e907f99682ab6a654e03852ae4e3de2f6250c302cd14
- MD5 c01c171fb505705b90d619726284841f
- SHA1 10b7e8e3747afa2aaf3c26cbd9d0c46cba4b02e9
- SHA512 65b7985e86800f05fc82aec7e1c9d9381d1bcc6399cc1a9d80875931189e96dcaa55925857bba8afec5c21115f7bcaeedb9b060ba96ff91ad9dfe8e3700aa976
- TLSH T133E06100F11C9F3E835149126FB46A74A37D33730A680F645969A5B59B574D41505176
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be2bce1dc49ffc.manifest
- SHA256 bf456f37531ddfd3bfb1a1f5f8435323ab969f420dc5452547d968cd5c2ac33b
- MD5 c73b91e7a24b5376fccdb7e3bdce4f08
- SHA1 6d202d7f3c76431368a3546703813d7a6e8fa044
- SHA512 8fb1963a1bcd980286632cfb08133e053dd8e9fd3e8d705d1cc55afa5e6ed97e73aec546cd614467dfd5434284947f42a60adce977445ce865939c411ffd9d2e
- TLSH T1A5E06800F00C5F3EC3610E12ABBE7974A36D33370EA80FAC89B5A5B9AB574D919050B6
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa25d273863ca66.manifest
- SHA256 a20ef3a8b918c83c1d794db5eb5a1059616a1c984dd02ec015088ec94c340c23
- MD5 75dba66d73c6c53ff99daa8d5149fcac
- SHA1 9ac4ad5c11e0d8303c06d213c127a02afd0bf604
- SHA512 dcbf1589822a2c6220e0165a55f0bc394834cf55cdad467a3d9dbc81213b90237ed5a519db753a352c92ec0c3479e15fde36a61864378e8924afbfa12b85f4a4
- TLSH T16DE0F100F10C6E3E83314911BFB92970E33D33330A680F98897465B5AF4B0D40401176
- MD5 SHA1 SHA512 TLSH
amd64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b80f068ad03a6.manifest
- SHA256 4a1c7efa8ada9b6c7fe0805d7d6711c1bf5049a7fc6cc849a6b7e58b0215b8d8
- MD5 3e93cdbdfae052024adadbc35fcd28f0
- SHA1 786bd1266bd0373ff542ba4fdf2d00bfb9691fc1
- SHA512 59b49abed82f59e3f439d1b453091ba30fce32476ae58c72411f554a5fcb4dfd624f0a83d341e27ce5f774d7f9df6adb4085f147a43d668f8fc6c617665b8397
- TLSH T1BDE0AB00F00C5E3EC3200A11ABB96A64D32D23230AA84FB848A866A59B664C916410B6
- MD5 SHA1 SHA512 TLSH
amd64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248d65324b38d81.manifest
- SHA256 fb30a859deec803d44f4eb58c61105a7d2c3b4fed9f0a9b00a3ad8091303b624
- MD5 18eea8684ac14b8703d2c991f1fb6e84
- SHA1 4dc905d74ce418cdcdd7871bcdbc27738dc7b7b0
- SHA512 e12eadac07bf243a07bd60dfdd73d0faa6e68d55cb5c347d7c25d84f57894ff99e06510e7cd4b2e72815b97665b28fbca7bf981045c5a2cb22fe650c08a1fe56
- TLSH T1B0E0F100F00C2E3D871105216BFA6960D33E33360B680F5899B56DB997474C51541037
- MD5 SHA1 SHA512 TLSH
amd64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba7e3535b8898d.manifest
- SHA256 12d0bb6d8a455271aacf32df81afa11f969140da4b0103431ea53c9fffc49372
- MD5 ee0117799953090492c0c0339539961a
- SHA1 707a24065cb4331a3284bd111e163a559d30076d
- SHA512 c514d0d01ab39757f515e9fe3328671a566777b3aacb7310afa1af88588fef2bb68754fe81f6c5a635ae79afe4a48409f057c3e8807f99bdef8ff800560737dd
- TLSH T10EE06100F00C6E7D871105216BB56964937E33360A580F5499A569A957564D51501077
- MD5 SHA1 SHA512 TLSH
amd64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_293807153aa35c79.manifest
- SHA256 104fb3ff2e19a7c8842ac4ad245d237d07812dffd5b6b925424424fe8ff726f9
- MD5 6608ad58a67cace84b87e1d514294e20
- SHA1 d11865adefaefcef7e323ef2db1df498a71a75a1
- SHA512 d5ff7e3889fe29a1e4026021712ea37714d433171921c30cc8492840152a945d7f20542f7b14b6fccf858a35269c639facefa30cc27f1835418626869cacc93d
- TLSH T17AE0C000F00C6E3E87210A12AFF86D74D33E33360BAC0FE89DB4A9B59B5A4CA1601077
- MD5 SHA1 SHA512 TLSH
amd64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c3d913b2d96b4.manifest
- SHA256 39a0fcec15f7678812fbc1afd02818d5be292ecea89f4e34ca25c4d389259b7b
- MD5 33455e91e1c204d9284339a2c1fe8670
- SHA1 5bb5e36c508a94a6a91d43760b4d755273d79ad5
- SHA512 182ff52f0a75f85a6c9f33f556b4f87490717124c60aec251f66d102958a63b8594e9e5d7c1ddff1e71a086414b1181ca6b30f2188beade3384267890f99ec0a
- TLSH T14AE0CA00F00C5E3D472105116FF43974933D33360B5C0F945D7569B597564D51545177
- MD5 SHA1 SHA512 TLSH
update.cat
- SHA256 73ff7b06c1bf42e46c4509d41699a9b5a5993904c4d3386a9b68795abf7cf999
- MD5 1b7de678cdfd0680b8123b894c388037
- SHA1 1db4f0e5d793a438620791598da8d78a7162d01d
- SHA512 997b43adcace19bcba874fa24258f93d3e3ff3d69e11104846e4823d063be2a09cfc6d8dec484ec1b2d933c5b9a85909df45e6a9a8608224666daabdefc38965
- SSDEEP 192:YYP3JdpfsHQcKzc+AsRX9t711He5iJ4vDAIBfmyRucnV9JLezMh+5gi2J5l0TiWG:F/tczsFlRObLP4iWGT
- TLSH T1DB027B22A4010AC2C44BA5384166B97ED9F79FEFA1A2113F387B72380D56194735F93B
- MD5 SHA1 SHA512 SSDEEP TLSH
update.mum
- SHA256 04450d355f34779bc1d6599ad6153e0426c838297f7f24ee368e5b351736a803
- MD5 c79060f1f6bbc56a12a1bff289ac778d
- SHA1 1ded184fa72d2181bbdc9ef22d8debed7c6d42cd
- SHA512 ca40a78c096b8f8948181cab12413e6c5081814e1112c7d19748f086317b363a44cade943ef274fc9bd466d5762c491f674a088c83f39a7149fb27d63c3aa990
- SSDEEP 96:CciSG6sklaFMa9m+8YFIROtmDenBveiNFS/v8yL:ne8eBvxNwv5L
- TLSH T14FC14001F0256D3F41724E223FBC3C35F63F95288F8A2F549AFAB2D4AB97495195428B
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAIPackage\amd64\amd64_11e802062ad41dc9ff8bb5ea6753ff90fda76fb8_31bf3856ad364e35_38655.38527.65535.65535_none_121f898c7b99b89d.manifest
- SHA256 facfd2ee1e95d1260dab37e9960eef444504924a4f7b24d99f7996a233d5d6ce
- MD5 73e4984a3a403f56373fa2cfe516e9f3
- SHA1 907bea6f9c05f0d6458bcda19e94215e5b2a9d04
- SHA512 6bec30f7bf8bff56532a3dd48d49d65b79b91acbe79782de4a68649b763621ec7ce989040229af57e50462d79201a9815c94ac79c1f40a8732b17a26f82efe52
- TLSH T1E501D000F009EF3E87234A917EBC6830B35D23250B4C1FAC98B4A9BEEB5B6D61145033
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_1672635dc8faec0740936c3c0f2cba350733c9c9_31bf3856ad364e35_38655.38527.65535.65535_none_c2a85002b039a09e.manifest
- SHA256 c95efee7da7082bbfe37ed5eeeae0fd7dd629203bab834871ac34e43e9b387dd
- MD5 2eb90a572b50d049dfbcc7c4cf5f295a
- SHA1 7430f1468e52dcaf364cc454bc76210cd5e8d1e6
- SHA512 0a38b00ccaf0008c99cde79d373aaf168d5efd753c02ef6e4601aa153fb3edaa88018f50c7f17f3d1a5b9b385f25db8cc38c46b1e86ffcca3a15f48566b07138
- TLSH T10801D500B118BE3E873306517EFC2871A36D63250B5C0FA8D9A5A869E75F6E70145073
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_26886f55a03ad1bc4debe5a7304f3911a99ad01f_31bf3856ad364e35_38655.38527.65535.65535_none_a97c360a032c50dd.manifest
- SHA256 2c0ff676506cd9f7813e8068f1180b794fbf2752ca59b50bf9466ce397d8f496
- MD5 e2f09f2421b258d0f850161309c4a1d4
- SHA1 7c2f1f0fcfe0f8e47118f1784ad3bbd5d9339b47
- SHA512 1397ff5b32c9807b567f16323041ab60194b28e30aac8b1b09452a086f3e97bb8fb2ccbd3c3c619f0afd707178ff5b17af93e9bde1f50ee954892bedaf5633a3
- TLSH T17401B100F00CEE3D4B2306617EBD2570A36E6325075C0B9898A0586EE75A5D71101077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_26d9a6e844b8509091450bf2ffc9bc3fca5ff0d8_31bf3856ad364e35_38655.38527.65535.65535_none_b9de4e233b31b234.manifest
- SHA256 329104168d45e6a4277fd899a8cd4b45af8b514be1815352ae6f72c92e07fcd6
- MD5 8e79ff43b1c31c844286f5564a149312
- SHA1 da81b9012639cb46b6cb08c08a51ef1e27e6f1b8
- SHA512 7beede72fc702d32633c564b82b5856387a0213c070f12e874e61ca66ae790b57e5f971d726cfda89e51c049f522051d8af015f5d3d076cf02d6bfe8285ee3d0
- TLSH T12A01B600B11DEF3D47220A527EBD7970B36D2371065C1BA8A964947DE75B6D50545123
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_362d3b36598149c4655f6218febd9eafb3248b0c_31bf3856ad364e35_38655.38527.65535.65535_none_5b9aa682dab50d7a.manifest
- SHA256 1bb2c88629214835415f7e63fa64237d0908608b8f75a1a83c3cf5d30469eaf5
- MD5 bc3373095adb940ba4b6a5905392f6bf
- SHA1 f26373ca70b07398918ea25cd4f892776d18f4a4
- SHA512 1d4d31fef919f87b20afcefe7e59262e4e89c8e2f5c4540dff555178c28996c57a2f193a0ad5127e6bde5708ea64d5a0cb6e5fd15de9bfe005aa1740a935d19a
- TLSH T1B501B100B109AE3D46231692BEBC6871A35D2326064C0BD998A5A8AEAB4B6D61505027
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_391580f2fa19f274d4a39e091e51f33628a2aa7b_31bf3856ad364e35_38655.38527.65535.65535_none_a84559756daa1246.manifest
- SHA256 738c7f4f56f856a75f626d11bddf099cd90363569746f73a111d1e43543327ec
- MD5 02b180d8c7005351592c44b86a381fdc
- SHA1 c982ae2546e1dcc51c400f0e820c0253afccb4e7
- SHA512 ea7e782da2239873cdb94264627b2e65bf1507ef88353bf033503a082070d415bb17fab2c89763d50a152b03d793c7b46a786fac316e7da8137b0c12f9fed29f
- TLSH T15501B100F109BD3D9B2346517EBD6971A36D3325475C1FA899B068BEEB4B9D70541027
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_4a81eb0cd812ce6e67ff46c19da83b7ee58afa5a_31bf3856ad364e35_38655.38527.65535.65535_none_8757fbb290c1aa8d.manifest
- SHA256 94a366f9dd5f508a815306597d49a2e3e6e7135527540e2cf548d0cc49cbba43
- MD5 decb7a074cdfda4b8b6ff6402ef87a34
- SHA1 32fb20b524eef3be68347e4fda3386eb2e59f8b7
- SHA512 cc5467151f774d4fe3a63d3b12b3b978c3ad5d3376f0c3bfae65d4aaaa46552411e8e55ea23f082e2bc7d66ef3dc019fa93af864715426afd7a707fb9fa07da9
- TLSH T10901D500F11DEE3D872346927EBC6970B36D63750B5C0FA89DA4A8BEDB5B2D60105067
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_63b3e2a9103050c7729dfef49a25d315cb514c76_31bf3856ad364e35_38655.38527.65535.65535_none_fdc644cd4af312a3.manifest
- SHA256 303fb4409a1640a06489cdd6d3ae7cacb51759a3783ffb3d35c7a8b22decc610
- MD5 8865ae7c6b052da40a3dddcd5166cee7
- SHA1 aba7dd00a184d425063f1e113855c08604e86608
- SHA512 1566af1199ff916991d93cface74b3d127ccee8d3cee3b0754f632ae00991a74225705448a4c3c755cd557cba5f06823ff2b53655ce0f59b40b1076a8d6f911b
- TLSH T15F01F100F018BE3E97331A937EBC2971B35D2336061C0BA89860A4ADE75E1D70545027
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_89b748aade066363a5e0127d2bb24875b248bdb5_31bf3856ad364e35_38655.38527.65535.65535_none_71389aa9d5f40482.manifest
- SHA256 5a3648ee7851b6ba4da0dc4ceaef9a1223254f778ce84801a85b095d2e749f69
- MD5 1de6403204001d2c4db52be4d01836a5
- SHA1 09a19577f3a062c1a412820d6a960b672699a08a
- SHA512 6266d29dbb40b96dfd149593ef3904e34c31507702d56d8d276e03e28932e39b232ea468f1bdaab7e2682106eccc5ef472d0d5c7bc515a3856cd14cf99e03818
- TLSH T1BE01F101F10DBE3E97331651BEBC2930B36E2332066C0FA899A0656EEB5F1D60545077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_950c4e370ddecf4f726b80720f6a4e7bd59ef967_31bf3856ad364e35_38655.38527.65535.65535_none_2fe2fc9b9b97482b.manifest
- SHA256 1c264b7e82924c8ee6df1380d096d0c4c05127be622d14a1029b3668ad493a38
- MD5 a2e29bfbcb6ba15e7d4d1e1c4a67d94b
- SHA1 4b9655ccb4ce82225c4f773ed23da29de20fadba
- SHA512 6633e8a6805b9ea677ef68dd759cb8d5a0037329f4ba1b8b51b992d6bf2d895a39cfcc0e995f780376c3891ab3b04359a34caef1188308e6153eea86d9812841
- TLSH T1A401B100B10DAE3E8A230AA17EBD2974A35D2325465C5FA8A8A464AEA74F6D61001027
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_9cbd88ba7abc475f4b2dfa0d0ea7ffbd157c8758_31bf3856ad364e35_38655.38527.65535.65535_none_dc0a74736ac4985b.manifest
- SHA256 8bc6a6b651bc70c9215cd1c6d384a30911c8f9d701e7a52a418db224b7180888
- MD5 db6748b9108c0e09d4275a24f8b03a6e
- SHA1 254599e665d3988b1694613ecf266aab4e73dfac
- SHA512 e59d1a57c7bea0555d3cf58f00fcaa3c4d37757f8fbc23900a4232b8df2c2ef14ee6f1836950cc8a33e69761e4d82c4a92de559a6705d126acc1734afd1a5cac
- TLSH T15501F100F118EE3E97220A51BFBE3930A39D23250A4C0BA888A194AEEB0F2D70400063
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_aedd22f668f4731b866c643e1e9c3de34f241722_31bf3856ad364e35_38655.38527.65535.65535_none_c5ac24321b2a99a8.manifest
- SHA256 410b1186158fb79ea9e8db2035498ff78cce933a759ed9fbd2b6986990d488a0
- MD5 e906835d21e19259f9a162009814c207
- SHA1 08c45aa74bcc1c38066ef7c4f603b480ef667933
- SHA512 3de110f161fb09584f001a5dd743b4a18ff672f151c47ca6746c043f2279cce5796c3ebb1279d7ae97174fbeef6e180dda8e56843e44867b3b08088019d55f4e
- TLSH T19801B100F019BE3E9A234A617EBD6971F35D23250B5C0F9898A0A9AEE74B6D60045027
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_ba299a8cf4b207f5e08c4518f76bcdf3129429da_31bf3856ad364e35_38655.38527.65535.65535_none_9efd476fce95774f.manifest
- SHA256 90900602b9b419c7931b308ffde457c797dd4777912fe766c819462b489e876b
- MD5 7348e5d4247757839c3ce66a15487516
- SHA1 e690e1ebab354797bedaa70cfaf41722eb2c6624
- SHA512 90815c687242145e6c7dfac16a0d7b0360b42c5001df8c8e80d5520810ccab6d5bc9621128869f3206f98379de136d4a476326485a4c15085f9279704cf9205b
- TLSH T1C801B100F108FE3E87230A92BEBC6570B36D2325079C5BA899A468A9E75B6E60105123
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_ba7ee049da5a7edf2933fd82891caafe6242582f_31bf3856ad364e35_38655.38527.65535.65535_none_4bb2f7daad31ab33.manifest
- SHA256 10c814691bf235f3a4ee0bfd8c9d3fb4b646e3ef02e29690e0dab7ebe9bca1c2
- MD5 e15a00dcec15854bde309b04fa471b30
- SHA1 c971c36d322b66fba9ed8fa43b533ebf81c2cf1b
- SHA512 5861b877d8197eefea38cddc7c9c0447331f99b9a0da03f1ec6b5c7a6cfb25f9d4f4c91e6d22fe3aa2f5ef64a0afb6a1f7a4562e636ffc12c3822e56373561e9
- TLSH T16E01F600F108EE3D8B3316937A7C6570A35D2325070C0F9CDC60A8ADEB5B5D71105067
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_cd29b6d92d07bc1fcb59512bab53dae8adb1087e_31bf3856ad364e35_38655.38527.65535.65535_none_8be532283da3a19b.manifest
- SHA256 48833297acbfe6cb7fc1a30690c1fb952a534ee505906cc7c27595a60211ea83
- MD5 261b35a51f3f1db7146e404cc8518daa
- SHA1 0a74bd0110cbb05816f35f85fb3962e2a07d0ea4
- SHA512 a7c7fef0aa642be53e82c89ae7334406fc34105d965ae28d253dd8632a4b8fb3c4f5b59689c1d7165427524dbcc04fb5f7f478239fbc53e40d73c76f24f80151
- TLSH T1B701D500F118AE3E4B234A517FBC6971A3AD23350B5C0BE8D9A4586EEB4E5D71105033
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_d51e7f69c874616c9c84ef1867f683704d27f47c_31bf3856ad364e35_38655.38527.65535.65535_none_1f8273cd05549a74.manifest
- SHA256 d81dd71e8085e55e54f3ea688e1860a6fd8ba2b35ecf27352eaa544394b3b6af
- MD5 188dac701ead272b2b0322d42b76806e
- SHA1 8aed7bb1e2fb80009d4c61005e54ebaa8fd26110
- SHA512 4471d4644f1d54e45a3250eb3fc5a77b5c1317584d537c5906ed00d3ece6a48af3605027ec98266b54c34e7086fe4b19211aace7874f2e7b2030ba05f6ed4a45
- TLSH T11501B100F018AE3E87220A51BFFC6970A36D23360B5C0FA89960A5BAE75B6D60145077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_d7e8127c309f21713d91fa8c4c2265305335e169_31bf3856ad364e35_38655.38527.65535.65535_none_2a70661c7d0370ce.manifest
- SHA256 d9d833b02e18c4e70f43572d2d95a00faf66d5146002e3257ba14b9ee2cbc76a
- MD5 d8053fc58c7fb78319f89a9548485c2d
- SHA1 a832be6e8f676e12f946ee6929591d7f7a0337c9
- SHA512 9a05b90cba237c1908a9cac2cd8c91d5d609b914b694badb2d84cb198b6572645a3f6e399e107e6b849aaf3195857e646c97a5f1fc164149555b257ce46243ab
- TLSH T13D01F100F109EE3EC7230B91BABC2930E36D2322074C5BBC98E468AAEB5B5D75245063
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_df21856b5f14db06026d6b7b0011e19e9f676039_31bf3856ad364e35_38655.38527.65535.65535_none_c3cfc6b502bc5bb8.manifest
- SHA256 8b3c231e5f87d66ecf04363d6ed4e9fd9d7f464849088d11a2ed1f3adce04fcb
- MD5 8952b1eb199e0ab65f4d99d32d195ac1
- SHA1 7e08ce44c180d134da11e037e5ef088f9927a165
- SHA512 6217633a7345acdb0b842e32bd060403648a9ef575911a693c15db97a2a104a154d90a7e7dc84d7f64027d44df048ba67e8030ef79c1b6e63d415d27f6244e21
- TLSH T19601B100B119AE7E87230651BEFC6970A36D6335075C0BA899A4A87DEB5B6D64105063
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108d7945a2e7e9d.manifest
- SHA256 d4b0e70cee7568f81b652ac5e263d8ad28be6a03a0037e7e73d53916b7fc6a60
- MD5 3fafd5accbbe46c6dc4104e939893e29
- SHA1 889a5aaba0f09ecc3f437e68a0417288cfabe3b2
- SHA512 d519ca3bc3a123707e3ea1125065b89e1c5c6a99a4aec8b4e3671ff6fa2bb12e58e8ab7904d561167137da943567158a4d6732062a309c28082dee1023cfce73
- TLSH T17DE06800F0085E3E83215A22AFB86974A36D33730A684FA88864A9B99B575D9650507B
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea620d27c4484e.manifest
- SHA256 88e7e90874a53939bff6b63c4a1c591aab097cbeb2c0a1ff285dffbf070447d3
- MD5 2482785a575ee89581ae51fabdb23146
- SHA1 4614e2b1abf254d81b7585205676f5f25b4b92ef
- SHA512 857c09509d33db04188120abb1508c5862588934afa1929739259255e6122d12268f3233d683bdb6b8e51c06ff8236f4c39a47d5b9705cec282e87876285ebd8
- TLSH T1D3E0F100F00C5E3E871109316FBA6860E32D33330A684F5C587569BA97474D84441036
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2268220c2a52.manifest
- SHA256 728e68427860fc1de63c69d307acca940a5595587072888a10a77722222a3a7f
- MD5 84b0204df34f635b437891bfa8b6e80e
- SHA1 204384fceab4d63be68dc42320b6db2404f033e1
- SHA512 9d39fc4820ea22582be31c396efc046e059a78f29c20f645ed38a326139e204cbae68106f2cb8c096ad78c148b8c9139c84287e055302d181cfabe683bb7af6c
- TLSH T19DE06100F00C5F3E871109316F756964A32D33370A584F58586565A957575D85501076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a35da8a335eb56.manifest
- SHA256 ec814f0e2327a64276e67d9b997f70dbc87f74220da882edb7d5628bbb091618
- MD5 3e413d1b24d8589799d01b575fafff66
- SHA1 60cbdbc92a4cdcd42bdef6cc7731a1b84c4dfe98
- SHA512 f5e1c434c4b27419ff88b10647fa9ecfef34798bbeabab245e3e7c3917335c442d5b08bbd809ce32c3411d7eb82fc605f92d7f7e17e44f3612ea5ed6b4aafe96
- TLSH T175E06800F0085F3E87210A22AFB86964A32D33330AA84FA85865A5A69B574D85501076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c063d96a4febe.manifest
- SHA256 8993a23684a394df118d6120045176051673ca95b894183af67a812614853434
- MD5 7e381eaab765c997c0d77269870b7609
- SHA1 9dcf23e20cdabed4407ed9941905a842c092b0eb
- SHA512 1423e72696134d09821d7dc57c201c02c1e48328ac83cc3591b7dc632a62ef6c84e3bb88d79a7afc00482dcfbb9f57a82a1c3cfa05d672432d1c64c5de9ae712
- TLSH T1DBE06800F01C5E3E83614A12ABB8AAB4A32E33770A684FA89964A5B69B575D8150617A
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_581701dc439f7087.manifest
- SHA256 8dc547f0466f6fb8a825cf81a2f3bb9a6be5a5888f52524844944ab5d8d29d3d
- MD5 767be89a75931d83e80c5b9e2684e477
- SHA1 8f4ea9ccf9eab0d74a97bf0421c69d9b82de5875
- SHA512 a812e019b79ec76e2b2b10fa36de57dfce6666bd9cee81d1223b2748dfa3840ce63dd947386e6107baefa487280beb554c365b5fca91878783066434f6eb2ebb
- TLSH T13CE0F100F00C5E3E83220D136B787AB0A32D33370A580F989C65B5F5A7470C5151517A
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059ce1049764b18.manifest
- SHA256 db363a088e70441c5b58051ae3f00439315bcab39e78ae27153aa7145735b029
- MD5 fd68c30d72d98bd9376317777eabb2f8
- SHA1 b0534a2e69d236b57bc6f92195e96a52c58ecd64
- SHA512 0e42f05a9e6695fd9d0ebe085f765150a186c41867d10e4d969d2014ec8c7af50b135f656a7625f00535aaa62133436e29c27ddd08fa3d3884908f917760ab94
- TLSH T179E0F100F00C9F3E87220D136B787AB0A32E33370A680F58EC65A5F597574C5151507B
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e0e212ed2bec.manifest
- SHA256 8c638b99e48e93386ace7402cc898996cfcc9c16e809ade9eeb6eafb83a30e35
- MD5 9341cc0c48b7b9af649e139197fb4c04
- SHA1 c20fcd95cf5ce526c0da5d4b1e2aef03808dd777
- SHA512 d0c2a670afafd22518166d94549e9d31186dc3ee3af49b8b96c422a81756822fd998ca528c5b4f35eb50cc3cfadb1e37d48fe7acce15dd56af0d763764c86774
- TLSH T18CE06100F10C9F3E87610D136FB87974A33E33730AA81F58AD75A5B597575D41545076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dba882e933eb9.manifest
- SHA256 356635ea13b3097b2e8dfc803b67ba18d594e06b0c26b0e4d7907c501f38e062
- MD5 c0ad079456f3cf9c834fc957da051aff
- SHA1 d983d3488c5899c1f692adfbbe2faf8f3f468ed8
- SHA512 a7a744820a6e233740d7b7244102f8a318c343ef6561606ed91ff43c8bbe00e8b358fb9ccdf1112980fd500a3618622ce71d4666f7a8fa125e9292c7146024bf
- TLSH T12DE06100F00C9F3E83510D126FB87974A33D33730BAC0F546D6565B597575D41545076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7dd83d154563f2.manifest
- SHA256 d18cf9b31e68e65f23c25130d7d90428ab479c70f76f62aedc67a387965a790a
- MD5 87a416e26bdfcae351f514f31ab6f509
- SHA1 d79b656863190da8411617feb075630d98c8207d
- SHA512 35032834bdacd9b9bb27fc164fd3110d44593f176a781f56d9c6c856f127bb14ef979826d271ee82cd2cd14e7756b22e20a8998ad18cafd46418fb1ccd1d6c52
- TLSH T165E06800F01C9E3E87614A12AFB86AB4A33D33730AA80FA899A9A5B59B575D81505076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf38ed71491164.manifest
- SHA256 9dff7965ce82937c37b1e907f99682ab6a654e03852ae4e3de2f6250c302cd14
- MD5 c01c171fb505705b90d619726284841f
- SHA1 10b7e8e3747afa2aaf3c26cbd9d0c46cba4b02e9
- SHA512 65b7985e86800f05fc82aec7e1c9d9381d1bcc6399cc1a9d80875931189e96dcaa55925857bba8afec5c21115f7bcaeedb9b060ba96ff91ad9dfe8e3700aa976
- TLSH T133E06100F11C9F3E835149126FB46A74A37D33730A680F645969A5B59B574D41505176
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be2bce1dc49ffc.manifest
- SHA256 bf456f37531ddfd3bfb1a1f5f8435323ab969f420dc5452547d968cd5c2ac33b
- MD5 c73b91e7a24b5376fccdb7e3bdce4f08
- SHA1 6d202d7f3c76431368a3546703813d7a6e8fa044
- SHA512 8fb1963a1bcd980286632cfb08133e053dd8e9fd3e8d705d1cc55afa5e6ed97e73aec546cd614467dfd5434284947f42a60adce977445ce865939c411ffd9d2e
- TLSH T1A5E06800F00C5F3EC3610E12ABBE7974A36D33370EA80FAC89B5A5B9AB574D919050B6
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa25d273863ca66.manifest
- SHA256 a20ef3a8b918c83c1d794db5eb5a1059616a1c984dd02ec015088ec94c340c23
- MD5 75dba66d73c6c53ff99daa8d5149fcac
- SHA1 9ac4ad5c11e0d8303c06d213c127a02afd0bf604
- SHA512 dcbf1589822a2c6220e0165a55f0bc394834cf55cdad467a3d9dbc81213b90237ed5a519db753a352c92ec0c3479e15fde36a61864378e8924afbfa12b85f4a4
- TLSH T16DE0F100F10C6E3E83314911BFB92970E33D33330A680F98897465B5AF4B0D40401176
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b80f068ad03a6.manifest
- SHA256 4a1c7efa8ada9b6c7fe0805d7d6711c1bf5049a7fc6cc849a6b7e58b0215b8d8
- MD5 3e93cdbdfae052024adadbc35fcd28f0
- SHA1 786bd1266bd0373ff542ba4fdf2d00bfb9691fc1
- SHA512 59b49abed82f59e3f439d1b453091ba30fce32476ae58c72411f554a5fcb4dfd624f0a83d341e27ce5f774d7f9df6adb4085f147a43d668f8fc6c617665b8397
- TLSH T1BDE0AB00F00C5E3EC3200A11ABB96A64D32D23230AA84FB848A866A59B664C916410B6
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248d65324b38d81.manifest
- SHA256 fb30a859deec803d44f4eb58c61105a7d2c3b4fed9f0a9b00a3ad8091303b624
- MD5 18eea8684ac14b8703d2c991f1fb6e84
- SHA1 4dc905d74ce418cdcdd7871bcdbc27738dc7b7b0
- SHA512 e12eadac07bf243a07bd60dfdd73d0faa6e68d55cb5c347d7c25d84f57894ff99e06510e7cd4b2e72815b97665b28fbca7bf981045c5a2cb22fe650c08a1fe56
- TLSH T1B0E0F100F00C2E3D871105216BFA6960D33E33360B680F5899B56DB997474C51541037
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba7e3535b8898d.manifest
- SHA256 12d0bb6d8a455271aacf32df81afa11f969140da4b0103431ea53c9fffc49372
- MD5 ee0117799953090492c0c0339539961a
- SHA1 707a24065cb4331a3284bd111e163a559d30076d
- SHA512 c514d0d01ab39757f515e9fe3328671a566777b3aacb7310afa1af88588fef2bb68754fe81f6c5a635ae79afe4a48409f057c3e8807f99bdef8ff800560737dd
- TLSH T10EE06100F00C6E7D871105216BB56964937E33360A580F5499A569A957564D51501077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_293807153aa35c79.manifest
- SHA256 104fb3ff2e19a7c8842ac4ad245d237d07812dffd5b6b925424424fe8ff726f9
- MD5 6608ad58a67cace84b87e1d514294e20
- SHA1 d11865adefaefcef7e323ef2db1df498a71a75a1
- SHA512 d5ff7e3889fe29a1e4026021712ea37714d433171921c30cc8492840152a945d7f20542f7b14b6fccf858a35269c639facefa30cc27f1835418626869cacc93d
- TLSH T17AE0C000F00C6E3E87210A12AFF86D74D33E33360BAC0FE89DB4A9B59B5A4CA1601077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\amd64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c3d913b2d96b4.manifest
- SHA256 39a0fcec15f7678812fbc1afd02818d5be292ecea89f4e34ca25c4d389259b7b
- MD5 33455e91e1c204d9284339a2c1fe8670
- SHA1 5bb5e36c508a94a6a91d43760b4d755273d79ad5
- SHA512 182ff52f0a75f85a6c9f33f556b4f87490717124c60aec251f66d102958a63b8594e9e5d7c1ddff1e71a086414b1181ca6b30f2188beade3384267890f99ec0a
- TLSH T14AE0CA00F00C5E3D472105116FF43974933D33360B5C0F945D7569B597564D51545177
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\amd64\update.cat
- SHA256 73ff7b06c1bf42e46c4509d41699a9b5a5993904c4d3386a9b68795abf7cf999
- MD5 1b7de678cdfd0680b8123b894c388037
- SHA1 1db4f0e5d793a438620791598da8d78a7162d01d
- SHA512 997b43adcace19bcba874fa24258f93d3e3ff3d69e11104846e4823d063be2a09cfc6d8dec484ec1b2d933c5b9a85909df45e6a9a8608224666daabdefc38965
- SSDEEP 192:YYP3JdpfsHQcKzc+AsRX9t711He5iJ4vDAIBfmyRucnV9JLezMh+5gi2J5l0TiWG:F/tczsFlRObLP4iWGT
- TLSH T1DB027B22A4010AC2C44BA5384166B97ED9F79FEFA1A2113F387B72380D56194735F93B
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAIPackage\amd64\update.cdf
- SHA256 ed574c40c7c56f1072920831ca2f7adcc2eac29312cf0d59f0fb37ac1605fa36
- MD5 c85ca74ddcb0b063fb44a73b46c73214
- SHA1 1dc39403677e7e4d820d4142cecd795007568b79
- SHA512 d31d044cf1afe16e314b5d8b7e9bc55440a0ad34e63c7d5affca5158616a3fd22baa431c5d966e5a7863b1b58312caef4229c20da16cf6bc0264b138f7d4f1b1
- SSDEEP 96:JDrsaABiQEb2vA1vknA7wQypfOzRh33krW:h7dtyozrP
- TLSH T17EA18701F6251FDA86C26492A33EAC36F16825519F0B2FD3FAB5DACD387D090747067A
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAIPackage\amd64\update.mum
- SHA256 04450d355f34779bc1d6599ad6153e0426c838297f7f24ee368e5b351736a803
- MD5 c79060f1f6bbc56a12a1bff289ac778d
- SHA1 1ded184fa72d2181bbdc9ef22d8debed7c6d42cd
- SHA512 ca40a78c096b8f8948181cab12413e6c5081814e1112c7d19748f086317b363a44cade943ef274fc9bd466d5762c491f674a088c83f39a7149fb27d63c3aa990
- SSDEEP 96:CciSG6sklaFMa9m+8YFIROtmDenBveiNFS/v8yL:ne8eBvxNwv5L
- TLSH T14FC14001F0256D3F41724E223FBC3C35F63F95288F8A2F549AFAB2D4AB97495195428B
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAIPackage\arm64\ZoicwareRemoveWindowsAI-arm641.0.0.1.cab
- SHA256 1be8541e09076bf3dd1f002f43ea0dc870b32420260ae68d3eca82442207ae9b
- MD5 876fec14aa4df31865dfff70bf06d667
- SHA1 9427c5674af1c12922b46c330c4fe16b20df4e54
- SHA512 a67efeecb289a6cd66607e3fdad63635f454f2eebdc3cec2faede6bde24abe47d3352d8e55c2c0b8d1d3928c5a6cf97f17ed5e417f254648af15c566edc34ee7
- SSDEEP 192:yiB3+aDxB/8PFmu4KduDx584dPIIehgO/THxxoI6vQdX9ZlpQoB+qFxtGs1QoFFb:W9zjzT/7h6mNGsTFztc4/VQ09N1+rvcf
- TLSH T15642E640772A5FC7C59260BAF33C7D71FA9454479E012B92B27DE9C63C792402A346B9
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
2737407d9b5bb4389750ce380fb6b06a8028973675813af820368fc90a7c603c
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 26, 2026
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
1c:27:55:48:84:f1:6f:84:48:60:3f:9a:66:01:94:04
Issuer
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Timespan
Oct 5, 2026 - Jan 5, 2860
arm64_0876948bdd6a88ab2d6f027d32289129ac6ddc3b_31bf3856ad364e35_38655.38527.65535.65535_none_68581de951596534.manifest
- SHA256 3ce0c1ae2989afe086f11d3bf7a5a7271b1abf22a80d0745c7df835600e68232
- MD5 9a1415fced41d0fb9bdc0360770df001
- SHA1 a31e29fb398fc17a6a89432b87be5289f71fcb4a
- SHA512 15ddb6355ebebe35575465106bd0342fea58b8e7a45a110683e42f22cc117d30380ab0ac939a33c53608bf73e138929cac08a796784a7d219fe576e55ff0614e
- TLSH T16501B100B11DEE3F97335651BEBD7970F35D23264A4C1F9889A4A47AEB4F6E60505023
- MD5 SHA1 SHA512 TLSH
arm64_126596911e4fa4ff2129c7dfceb6bc1b9bb083b5_31bf3856ad364e35_38655.38527.65535.65535_none_e698cdc1173b0568.manifest
- SHA256 6898acede4dc8e6d3e12aaa4b3fffdc7c10cccc366662271b6792bf61f89eaee
- MD5 a4cbaff1f887d9e1200d4f0ac6bde00a
- SHA1 c1e8e4a7459ab2f39f52d3d35e913987a495906c
- SHA512 ffc412dd3c5abec85d395f363dbc546fc23170c05a405f2dc9052d0ab45fc3a564e96dfc463012ba29a853772e3351219522524fee0d17b7e03f483699577572
- TLSH T1FE01B100B019BD3E57230761BBBD2971A35D23254B4C1B98D9A1A87EEB5F5D70241023
- MD5 SHA1 SHA512 TLSH
arm64_1656476bd2f2c9d58e480fd5c9bf3982146d5fa2_31bf3856ad364e35_38655.38527.65535.65535_none_f57c036c149984be.manifest
- SHA256 194ce6feb6256250746832056fbef68e6f0b182574065d574334f1dc0f297bc4
- MD5 a3705c7e4fdfcbd62e9c0efc8a5233c6
- SHA1 86a28e617c83bd2562965fee165d1cdd3d66be2d
- SHA512 c18d0033e2cab12361c7985ba60ed44626a280d8942bf97144b02e8af695e5fe4c9a47608a8fa1ffbc8ce5d7ca288ee3b7d3abfbcce4b4d2d6f9b5a140e497af
- TLSH T1C9016D00B11AAE3E5B224651BEBD2971A3AD23250A4C0FA899A4A96AEB5E5D60545033
- MD5 SHA1 SHA512 TLSH
arm64_1726caf21580ee7b91f2463f7ef2eacdc6d108b4_31bf3856ad364e35_38655.38527.65535.65535_none_12ed7239d451f890.manifest
- SHA256 6377176c1d126bbbb35b85193386e30009acb95773e0f30353c5d9ee7a895f34
- MD5 5a7652382c6c84db0071303a2ce9a2e1
- SHA1 42fa4235b6f9bd3cf2ef5811886a000ff4e03afe
- SHA512 8e5235a77f0ae36fa0411d1bbe895a1df8fc6d46e0ab50a8956c9cd80ca6c1c88415b73ffb706c56a92d8dba103d870f89c27c07c44d919a3c5639470563a2fd
- TLSH T17601B100F019AE3E47234612BEFC7970A35D23650A4C1FA899A4A47ADB5F2E60505037
- MD5 SHA1 SHA512 TLSH
arm64_183f71d9473c2dfeb4c49a1be811fdbaf9c29a6c_31bf3856ad364e35_38655.38527.65535.65535_none_bcc52580a95fa839.manifest
- SHA256 f6889d555aeb8a03a9330f05706df35774317ac71af5d617a167ea09fbdd7ea2
- MD5 e1ce578133ebb94b0c127485ecd66d3a
- SHA1 a02de8c235de90cb417156415e3cc0b5d55c2e92
- SHA512 2038163393bf859bcafd370380f632ebbaf7d7ad0500d90042f29dc589feb229deacfa0ae19927fcafe56562e0dbee6a8cb33608cf35ad630b92ec5a3af81841
- TLSH T1EE01B100F109AE3E4B234721BFBD2970B39D23250A4C5F9898E4A86ED74B6D64145023
- MD5 SHA1 SHA512 TLSH
arm64_246a76d150f54f9fcb9c4c89ca80f5c30b0b7e01_31bf3856ad364e35_38655.38527.65535.65535_none_08bfae8de1fa0b4a.manifest
- SHA256 7a2d83a1b510a8023fb6ad358599db4120ac2ad145d4a8bd5f472fec4a8758fe
- MD5 7ed642fb3cad0ca8b25bf8869b0fff86
- SHA1 d094ffb91aa3b19b866acb1da74bd4c2c592b17c
- SHA512 cfc14ac622f9011b3f61954197fde5bbb4a25ee8775b63a7295b57275c5c9788c0042f6e3917ff0683addc4448ccea767e17ceedc37a254f6bfcaee6a084ac78
- TLSH T1B501D500F109AF7F4B230652BEBC2470B35D23260F4C0F9888A0A87EE75F5E64101023
- MD5 SHA1 SHA512 TLSH
arm64_31251456d87a6fefa74ab7c6d1a48be2add49419_31bf3856ad364e35_38655.38527.65535.65535_none_08254cbe41dc26bd.manifest
- SHA256 aecb273cda490f6b571b176e55a682d3c4a8b1d4b9b92042063bef4c6d419deb
- MD5 484d14b5a738e909499383958cc606d3
- SHA1 32f39888299f7f359fb3c7f032d0065fc8af5164
- SHA512 571f66caea4156593b8626ff598bc79ccf5449fe13f47e9a78ad8fa503dee2b516f7d654948e4dbe62d62d2a42c66d3a646df2881667760bda09e0a79495ba95
- TLSH T1F3018E00F119EE3E87230652BABD7570A35D23250A4C1F98AD61A479E75A5D64515027
- MD5 SHA1 SHA512 TLSH
arm64_37162d79ecc887f06f0e83ede79ccf6e16ea516a_31bf3856ad364e35_38655.38527.65535.65535_none_33af92df21707c9d.manifest
- SHA256 c4bf871b98b42dab7ffed1e2a08971a8c31c359ab2f6a06c703d40eca882b92d
- MD5 768d673b1feba16de8724a3912a9d77e
- SHA1 309687bae15e07f475aef5de1f744e7f9b7a21c7
- SHA512 ee9ed62ace3903dd2b5a61cbc66be3249818967fb6a233e6dedc11f9443b5b8a3641272a6a685f68badb513beaa354cf8f246706c783443c894fe5102327f900
- TLSH T16901B100F109AE3E87324A51BBBD3974A35D23390A4C0F9C88A1A87EEB5B6E60105033
- MD5 SHA1 SHA512 TLSH
arm64_3b6e601dc9a0538d216bfd084a9ebe36bc7d0996_31bf3856ad364e35_38655.38527.65535.65535_none_95814d1eb952b1c7.manifest
- SHA256 851cf5dc058db26e729678fddddade86061e9301281369cb5a775bcb4642ddbc
- MD5 9a5a2c2107d0b25cf71bfe92efff3f79
- SHA1 bb9f74788230a560e3094cd9303386e881ddf7b9
- SHA512 3cc5b1377dff973defaf53c1b7b518f6773aa026705d65047ffda22bee20b92a0f628da961abb581e75276235686234b58ae865366d469c74d92760b114dff88
- TLSH T13E01B101F009AE3E87230661BEBD6971E35D23650F5C0F9C98A5A87EE75F6DA4145023
- MD5 SHA1 SHA512 TLSH
arm64_613d2ba8b95c00f19b7535e5d6cb475f9255695b_31bf3856ad364e35_38655.38527.65535.65535_none_fc203dcb716d6e81.manifest
- SHA256 6cb42eb096b18db3eb42b852102ba2ea5b9251897a4aa0ba57693e9fb3210d9e
- MD5 9c435e8894d05487ff3fbbe451cf4238
- SHA1 1f33e3666e84ee5b789780df519bead4b436dcb1
- SHA512 25a6486081319f77eee252afa2dbf240daed486bdad9d87bea0377000a44551af90ba4b70a3436be0efcd080a5db03a121421976e017f676f3412deb0d1bd554
- TLSH T13001B100F119FE3E47330A62BEBC7970B36D23250A5C1BA8D9A4A47AE75B6E60145023
- MD5 SHA1 SHA512 TLSH
arm64_7789327b3d2947e595587f19c2a115f0441121db_31bf3856ad364e35_38655.38527.65535.65535_none_4a9f7012aeae5cbb.manifest
- SHA256 aafb944f787db2386abe2952aa9d559236898167a939b828da5b85d1c38a573e
- MD5 1cbfc037bada87233dd17adbaa377a76
- SHA1 748787a3f0ae6c919f2f5d9f9e98765c85a3b808
- SHA512 47dc0488c8d1fff9312ac3f187aadb4cb12c7acd4aa34a7b82833b7f7871b03de388ad8e40ce8027195063950426641ff64b36a842906af706dcae7e456d90ff
- TLSH T1B601B100B109EE3E86224A51FEBC7970B36D23750B4C1BA89864A479EB5B5E60645023
- MD5 SHA1 SHA512 TLSH
arm64_8e277ff241ede8cae0ba406d92b3a9a7bc0e5374_31bf3856ad364e35_38655.38527.65535.65535_none_9e23c16a47b48622.manifest
- SHA256 4c1613ebdec18ee2f3c87ff46b21db940166a327253b93ac7ebb046e5cf9ff65
- MD5 81a3f7f3c1b62d626ad170c5f231f07a
- SHA1 fe9146c4e30365e4c922f0b8cfcc733a9dfadf7e
- SHA512 30e0fc758bf9d93fbabb51c800956a390e9bcb8ce24d2434c0289865c7f9c8341696fd6bfcde16c74cf2f851f0147eb7dd45d2a73a9abcc0b2ac58058ee0d842
- TLSH T11C01BD00F109AE3E86234A12BFBC7871A35D23660A4C4BA989A4B87EE74F2E60545023
- MD5 SHA1 SHA512 TLSH
arm64_a4207268bba4bd2ea2a0a20204642dfd46a532f7_31bf3856ad364e35_38655.38527.65535.65535_none_b6f81a626516f554.manifest
- SHA256 ede5ee9c64d6a4b71c16b0fed6fb1fabd13cb59632ccddd741adf9df0f9ce3bb
- MD5 485854758c4cb1ee9cef2f84129cad9a
- SHA1 24823532db78f5e32149b393f7c2a1f208fda338
- SHA512 c1c33191269204216c81178343a76ebfc7989fe0c57a25dab08b67a95f98cd8af727c7d633f37b658983fc257a70c7c4626ea92330dcbf97073ad7dedf030a58
- TLSH T11601BD00B009AE3F5B230611BEBC6971E36E23350A4C0BE999A4A87AAB5E5960605023
- MD5 SHA1 SHA512 TLSH
arm64_d4f8e3d2e02eb4df654660f9ee83d6dad7dd6d5b_31bf3856ad364e35_38655.38527.65535.65535_none_6ad167aff214c713.manifest
- SHA256 9a7cbe41aca3c66b42547720b82cafbfff0398e3a79ae7226402bcedf5badc18
- MD5 24c835a5289b4842f215dc463cbf9709
- SHA1 9024a2e7f64b990f1f0930c33b754bf3be2c2193
- SHA512 94d7949a21c2c95fe1941f33eda6021fe22a68b97d950705248af98447ee87e4f1ed3cbfbd2a956e65f3e4e2328f1aa6faa773542252edcbba7a6c4909856bcb
- TLSH T1B001BD00F009BE3E5A234621BEBD3970E36E23254A5C0BA898A0A87EA75E5970215023
- MD5 SHA1 SHA512 TLSH
arm64_da9eef33d1fce725817119aaac8789390681c980_31bf3856ad364e35_38655.38527.65535.65535_none_3c8e65e13c867e58.manifest
- SHA256 7317db672aeda284490ad56788060d1efbb3ed500f02e92677229a7e9ec4946c
- MD5 048c62563e01e3f08f7332cd3ecd7fd2
- SHA1 6185e2b51ee9c043d8bc79284e520107848f3fe2
- SHA512 55d19b18418cf3d0fbc9d6a587edea4fd9d98c06d3acee5d5d919936dbb4cf0714a19c0bddf47e7c44d415ddcbeb1b53acb72465f4a3d389ebec7d7d9a2777af
- TLSH T1D601D500F11DEE3E47230611BEFC7570A36D23360A4C0FA889A5F87EDB4B5E60145023
- MD5 SHA1 SHA512 TLSH
arm64_e00be72c39effb5deb56ca662fcf41245b3c9869_31bf3856ad364e35_38655.38527.65535.65535_none_9170f724b3706a22.manifest
- SHA256 0491d8e9a866812cfe6dfac2b89997dfaf95554a6ed25b1a95850fc4de01cabf
- MD5 9baad0e93b6529a4f196df0a82d312bd
- SHA1 72149b0f6b72c4db8e327f996c502c1747d58b20
- SHA512 82c34d9807f62e1262c0f83577045375e1367d180230cb692348637839327eb019f7d803aca026512ea1b1982f2fc55f66b3a2855309dc48886cc96a14bb4fbb
- TLSH T10E01F100F019EE3E47230612BEFC3970B35D23750A4C0BA888A5A87AEB4F5D60605023
- MD5 SHA1 SHA512 TLSH
arm64_e4ee5f67fb27349a3d4be3afdda980b4f2640030_31bf3856ad364e35_38655.38527.65535.65535_none_a2337873ec78cf1f.manifest
- SHA256 98ee7401a3e4fb2260afb5a00cd26c9fc8254c3c1f7335cdb68404d63d00060b
- MD5 449af2d6fc0b061b925e0a9fd142d3f3
- SHA1 df0eb50151788888b2ebdf44158c2d9b1c1b0dd9
- SHA512 205b1daaf1197d4db6d91555a8ea01c6263b9112030f6913a3067eb6fb6c0c5990f9f9b179fee586a9ae270d369a5380306f9de0975e6bd94aa62f33681f1c61
- TLSH T1A901B100F11DAE3E87330653BEBD7571B36E237A0A5C0B9898A4A4BEF75A6D70605137
- MD5 SHA1 SHA512 TLSH
arm64_ee6220582211b482e90fe395fd191b19b50995f3_31bf3856ad364e35_38655.38527.65535.65535_none_b791c7de01e4c34c.manifest
- SHA256 2b15bc129c9ec14c4efb068b01d37ed162e7a177db688ceb26110b45b4d515cf
- MD5 5a385688214e4a491f1d8ed1f5725df6
- SHA1 be83c272ec8cd5bf65809dd15974e3ffd3702324
- SHA512 7a29dd6aaff50885e7b03f0437a12631651e035d8a2934a98f4d1faf26a2acd69297d4883c15a8482ae4f82b8491c0d94a0125b22a4cce7ceac3a7eae643604e
- TLSH T1BE018E00F119AE3EC7230651BABD6571E35E23250B4C1BB858A4A83AEB5A6D70646073
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108dfce5a2e7339.manifest
- SHA256 d13255a8f247aa78a50e43824900137eb42da77bbb9b69ab9681ea627a24174c
- MD5 ad2f631c4f55009ee6e8763a199611a1
- SHA1 92ef30b40036591c7e6fa54623eea5a21a003d01
- SHA512 9100834c7f9c9f2ea530cc91f7e6d901886da676d9834e88717dcc7b0b9e5e8bcf40794f20ed1d15b9b0ab89292cb2aa3bc0453c42cd46fab5a45df733f18c2d
- TLSH T151E06800F0085E3E83215A22AFB87974A36D33770A584FA88864B9B99B575A95605077
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea6a4727c43cea.manifest
- SHA256 63ccd6986a0a4553fc4ebd27779ba5491d93920bfafcfe6620c3635cc470c759
- MD5 f30c40dd82f65fbda455640f61576301
- SHA1 2f12e4c3b0ecf4c1d5b6f86f65bee54cbf2cfab2
- SHA512 f2e9571d85dae6e3ebcf34c6bba7a7fa4f7857adecc954d7cd6eb9c888c76ecb68a31b76f567c39097c4b0ac37e6561c43a16a526dbaa047d69b21e3c41dcbc5
- TLSH T1B0E0F100F00D5E3E87110931AFBA6860E32D33370E584F5C5875A97A97474D84541032
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2aa2220c1eee.manifest
- SHA256 4e632bc6c205c964619cc122e8e5e095d2b4c95016fe639dff889a53fafc9ac6
- MD5 18d44d22eb40fb8c3ff80143adbc47b4
- SHA1 1b7897a7cffe71760b1f9c856b7c868e72d7fe38
- SHA512 bde43c43c881d9171ef8520a447641d9166e0d1f63ee976954e5226fc65ef9feed2ff8e678ee17c1d1dc71e749ec27ab57ee2a7d388ac83c81532378145d4e6e
- TLSH T16DE06800F00D5F7E87210A32AFBA69A4A32E33770E584FA858A5A5BA9B575E84502036
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a365e2a335dff2.manifest
- SHA256 dfdeea13aa670df5e935f31cdbb95d40c0b8c2c916ee494d15f91f1f5f23b929
- MD5 bcaf638b37659c4211b19b56e33bbef4
- SHA1 ff6db5eaffc2cf654a198bb560be224a52f2998e
- SHA512 075474a82976cc025a203e5bb5b4b941dd40153defc704bb0b95430ac4dc411ca2077a8dee3b33c6d5bf2d5ed99d5d396c0edbb054335398923fedd3989facaf
- TLSH T1B9E06800F0085F7F87210A22AFB86964A32D33770E984FA84865A5769B574984501076
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c0e7796a4f35a.manifest
- SHA256 f4ac00b362c782837f09cb01294924fac1756990288a669e0f880f85fc689e19
- MD5 7da749dfc29a0f23fa70c70beb8afba5
- SHA1 e861c7ed290b74ff36f9e37bcf4c3880d92e48f3
- SHA512 9d7912467d6fc9bcb56ed867afc56072509bc03f65982c37a540ee12c09d2c79206608489be9d44316a1fb6eb6abfedd75bd06f020fc1f82f3be92590f948871
- TLSH T12EE06800F01C5E3E83614A12ABB8BAB4A32E33770E684FA89964A5B69B575980606176
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_58170a16439f6523.manifest
- SHA256 01544e414351245c8abcc57bda3921b8828500ac26c2ef006d4c0227dba17dad
- MD5 1baec5a70b9f6adb95901cab7bf08178
- SHA1 54c57a7f233a032e3b62ebc7cf58cce5d817ab8a
- SHA512 259a5cca93b9df59e9e30872674ab6acfcfd37da6c5f8fbdb1503fe170b4be88d98ec5339b59419a3fa7fe7255eec9695befbbbb5e6947d0ca213b60b997a2e2
- TLSH T166E0F100F00C5E3E83220913AB787AB0A32D33770A580F989C65B5B5A7470D50615176
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059d64a49763fb4.manifest
- SHA256 a22702610e651a7348aca4a9fbb20bd607b0b30c6eef862d6314dec6d997cc52
- MD5 fde4037a139bd5d61f1bab5b5b33ee96
- SHA1 e7eb3b5cad3ab3d264136a79564af91b48e6ba84
- SHA512 d5f5c9b1fa282f52515c159fda38ff55ebd49e7b9aec7eee4274754654170dbeaff3dad697233577d7e42600f832d1d4f5b58b852d07ef3de17c5b728181bfa6
- TLSH T17BE0F100F00C9F3E87220913AB787AB0A32E33770A580F58DC65F5B597574D50615077
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e91c12ed2088.manifest
- SHA256 3c69d2be47022db4784296d0375f7a29167427c7e609e76ccd57a45eb037a6d7
- MD5 3291d713d462e8016ad36915a608e402
- SHA1 394ae0de7bc5681f8c268a19b939be698ed64908
- SHA512 769e60cbb1ebcc633b8d9f6730013de325525fbea0b47b03066d27fca1fdfb652f30031cdece66a16254ce014745761210f26d0a2680103ad88c0de9e6b8ea37
- TLSH T141E0F100F00C9F3E43200913AFB87970A33E33730AA80F589D74A57597575D40541032
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dc2c22e933355.manifest
- SHA256 3908f8dfc2c7618b15026cbeb696d4a28f31e7f59105ff84cb59b8d6593be05b
- MD5 9b3be5c4a169d410c4e31ff59ab589a5
- SHA1 c266b72c5aba0a4c0902c541563d38d3bcb63727
- SHA512 a6310a8cb3c21c5c7eed0e5b5465e8b1eb103be952bc61ffd948fd9f4105cd126dcde2ef44fb765f397703efed19be9feea2193715c5d515e1022f8ac0603df9
- TLSH T1B3E06100F00D9F3E43510912AFB87974A33D33770B9C0F545D65A57597575D40545076
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7de0771545588e.manifest
- SHA256 d49c206b13bf8bd7da6dbe41f7e3bda0daee0d655057c8cd2235cc00bd705853
- MD5 1ebd3fdd1a0e9b029394b54cfeff1a6e
- SHA1 9affecd39f1ca0472a3c4024df8e5e57610953cc
- SHA512 8c508ef719007923bc1c9ced73d9dc616f9a6920994c3cd03208a8429841679ae6302dec47fb580f9afcad4201b66999bde7586614be8358593349f25b73dff8
- TLSH T10BE06100F01C5E7E47514912AFB47A74A33D33770A580FA44965E5759B575D80505036
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf412771490600.manifest
- SHA256 5639817e8dd21fee469464ff8ea96e02ee6cf79bc72107ddb8d1b6a300de96eb
- MD5 9c9a7db4cacac2e54a0e026178dade4d
- SHA1 4ec00f80adbb6d93294507367519cf1d89f5c968
- SHA512 ecfa87bdcc0dde1c920f377beb31d867df5689165479c4eb795430540f474ca35382c2ff1064f60a1fd565157ad350f3cf5aa44103e08246bfdbd846fde6952c
- TLSH T198E0F100F00C9F3E43100912AFB47A70A33D33B30A680F644869A4759B470D40600032
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be34081dc49498.manifest
- SHA256 4e2ae8ff33bcfd245ec75b7b2c8882417f00015525b48358e8a53a436c3f221a
- MD5 511b5e33a704bc01eb6af2d18f815389
- SHA1 75cdf83a96a9a30f0fc2400cb7962bba679d1386
- SHA512 04d157a55647422748786b17c22390fcbe5b5edf508ed97d21102d1284e4823cde15b81810791856d234ee8ffb90b19a62afb75ec9509c9e71612d765b515dfc
- TLSH T160E06800F00C5F3E83610A12ABBE7974A36D33770E980FAC89B5A5B9AB574A90905076
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa265613863bf02.manifest
- SHA256 f65fdf2621da3d6721a42609319f7330a25d602ecb51ee9728888c5f76b15b6a
- MD5 d577ddabc18c516df20262fbc2a28d1a
- SHA1 7f7a344c66833991066349bcaa3d7305180c3172
- SHA512 ebd77f47060a45e3bec03021f01d00608305d44b0069d09655e7986f082b3049355c94edba7d5a55b5edf51de6ab35281b4fb6d9d2ec9dfcf93e35318a35d44e
- TLSH T1DAE0F100F10C6E3F83314911BFB92970E33D33330A680F988974B575AF4B0940501176
- MD5 SHA1 SHA512 TLSH
arm64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b892a68acf842.manifest
- SHA256 890866e9f287a75fdd560d68bea82a482d21c65344b27eaaa176cf44520136d5
- MD5 fa88f9d29923daf0e6de595a8e87db96
- SHA1 b34f605e128775aef626addc4d4be67cd74b0177
- SHA512 4a377069569ab98418f4727751d3d138b404313a9b77bea7c71655326a221f45155a5293d958016cb7288975129f56a7f999baaa20b6c54c2c26e094710cf944
- TLSH T1B5E0AB00F00C5E3EC3200A11ABB96A64D32D23230A984FB848A8A6759B664D90641072
- MD5 SHA1 SHA512 TLSH
arm64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248de8d24b3821d.manifest
- SHA256 6eca65c2a25426165c1453ed4b4da9a686da68665ecd9391947ff2ea87245150
- MD5 7b2283ef7d797ce87e89fc27dcce06f2
- SHA1 cb71ab1c010fe9b39560fadd4031c9b5fe6c04ea
- SHA512 b92908dd5ba872f30f06e6b646cecbe7123bb8cbb6fc324bb8744c01e3ceb33e9e112c91e0055347e4500314e20547e0b0e2c0f6ef9e16172a8b1bb62e7536d6
- TLSH T163E06100F00D6E7E97110521ABFA6965D33E33360B580F5899B5AD7997574951641037
- MD5 SHA1 SHA512 TLSH
arm64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba866f35b87e29.manifest
- SHA256 0bfaf4e17ce43f4b1eb1b9d1d5f3ab211d36956735e38bc4b9bf7795433d0709
- MD5 d4d880a1194d99cc83b21a5f0e6b8c7b
- SHA1 667d2e2788329705ffaecbf6718f365f7030e16a
- SHA512 bd0460920a61ad9d283a2c217f0cd552a1ed883324a8428091d678c8ca18af1a6dd571c0916c3f5193ad7d7332d39c2f76d3c0022e0ab783c12b66fae0a97dca
- TLSH T195E06100F00D6E7E47110521ABB56964937E33360A580F5499A5A97957564951601037
- MD5 SHA1 SHA512 TLSH
arm64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_29380f4f3aa35115.manifest
- SHA256 512910b1a4670f6ca17e0f1fb84ad78ccfac9b86b922e301353cf45f6013c42c
- MD5 a9c2747f1be2e08cbe8a35e8babdc70c
- SHA1 2d94158741c9df80fb00d0a20068b4f2911601dc
- SHA512 e0650f5f8154533fd2aa6a7eaf89b43afc222247ca5146baccf234a3aa3dd916919778dfe4869bfb9ce0a3775dfa5fb5243776f400ebc71034acf45de581385f
- TLSH T186E06800F0096E7E47210612ABB86964933E33360A980FA889A4A9759B5A49A1601077
- MD5 SHA1 SHA512 TLSH
arm64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c45cb3b2d8b50.manifest
- SHA256 b9f4044490f4f4b8a6aba12a87fca89464bd20a75511438b578633bfecc5f480
- MD5 7b8d511ee631ffffbcc0708efc59ac6a
- SHA1 890217d15256814ca7424750056f0f27f3a732fb
- SHA512 f2066f7d6ff1db56e84c12ea41b307cfec622276a77285845b879d9342d33d044e53dc0fcfa767e5bd3ff2fcc94b3e39f294bad84ec269aa740da26699d7c5cd
- TLSH T176E0C000F00D6E7E47210612AFF83974A33E33360F9C0FA85DB9B975AB5A4DA0645177
- MD5 SHA1 SHA512 TLSH
update.cat
- SHA256 df41c76532606ec409e371939ff62d03a6389a3ff40acea4f9fc851aac1c45f2
- MD5 e5ce6638661f0c35c3b4a568d2532f56
- SHA1 29da7cb600b00b3feb4ddde7f919ca6fb9bd6def
- SHA512 23396928d20a79703e4ca499dc9d1854a0b6c45be2a133d05699a8d3d7c595555ff5d4a46139ae1df114972cab30c56ce226399982fa9707e816c85408bb56bf
- SSDEEP 192:s6jTrJbbfgVhQAN6LxDDSnSg+W8fmqmYA87SrE1thOyN4MHEwbjlRsGv1SMI:05ELGf+xrvcP
- TLSH T156029B2550011BC2C54BA13481A6BA7ECAF79FEEA473123F347B72384A56294334F93B
- MD5 SHA1 SHA512 SSDEEP TLSH
update.mum
- SHA256 3b879a7c5972179e22f11e08b248a9bbedcd6794c58c46d33ddbe3fa75bbc894
- MD5 280bae984344cb3dc947cff66a7c0629
- SHA1 cbe9ebd1451c9c7d82e41c234e1d92e806c552e8
- SHA512 b33b1b66683598d87c209b94bc9b314bacf07ea2b4dd96661406ab29909b1874c9d2716e5732b19b42e2956f143c881e96c215013fdd2c24ca63620435fe6602
- SSDEEP 96:Cci2jxOiVTOUYNTqyreroqaESZ16Ge/VOyAupj0g:nnxhTQTdwFabZ+
- TLSH T1C2C14310B025AD3F41724A22BFBC3D71FA7F15388F492F548AFAF065ABDB4690A55207
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAIPackage\arm64\arm64_0876948bdd6a88ab2d6f027d32289129ac6ddc3b_31bf3856ad364e35_38655.38527.65535.65535_none_68581de951596534.manifest
- SHA256 3ce0c1ae2989afe086f11d3bf7a5a7271b1abf22a80d0745c7df835600e68232
- MD5 9a1415fced41d0fb9bdc0360770df001
- SHA1 a31e29fb398fc17a6a89432b87be5289f71fcb4a
- SHA512 15ddb6355ebebe35575465106bd0342fea58b8e7a45a110683e42f22cc117d30380ab0ac939a33c53608bf73e138929cac08a796784a7d219fe576e55ff0614e
- TLSH T16501B100B11DEE3F97335651BEBD7970F35D23264A4C1F9889A4A47AEB4F6E60505023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_126596911e4fa4ff2129c7dfceb6bc1b9bb083b5_31bf3856ad364e35_38655.38527.65535.65535_none_e698cdc1173b0568.manifest
- SHA256 6898acede4dc8e6d3e12aaa4b3fffdc7c10cccc366662271b6792bf61f89eaee
- MD5 a4cbaff1f887d9e1200d4f0ac6bde00a
- SHA1 c1e8e4a7459ab2f39f52d3d35e913987a495906c
- SHA512 ffc412dd3c5abec85d395f363dbc546fc23170c05a405f2dc9052d0ab45fc3a564e96dfc463012ba29a853772e3351219522524fee0d17b7e03f483699577572
- TLSH T1FE01B100B019BD3E57230761BBBD2971A35D23254B4C1B98D9A1A87EEB5F5D70241023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_1656476bd2f2c9d58e480fd5c9bf3982146d5fa2_31bf3856ad364e35_38655.38527.65535.65535_none_f57c036c149984be.manifest
- SHA256 194ce6feb6256250746832056fbef68e6f0b182574065d574334f1dc0f297bc4
- MD5 a3705c7e4fdfcbd62e9c0efc8a5233c6
- SHA1 86a28e617c83bd2562965fee165d1cdd3d66be2d
- SHA512 c18d0033e2cab12361c7985ba60ed44626a280d8942bf97144b02e8af695e5fe4c9a47608a8fa1ffbc8ce5d7ca288ee3b7d3abfbcce4b4d2d6f9b5a140e497af
- TLSH T1C9016D00B11AAE3E5B224651BEBD2971A3AD23250A4C0FA899A4A96AEB5E5D60545033
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_1726caf21580ee7b91f2463f7ef2eacdc6d108b4_31bf3856ad364e35_38655.38527.65535.65535_none_12ed7239d451f890.manifest
- SHA256 6377176c1d126bbbb35b85193386e30009acb95773e0f30353c5d9ee7a895f34
- MD5 5a7652382c6c84db0071303a2ce9a2e1
- SHA1 42fa4235b6f9bd3cf2ef5811886a000ff4e03afe
- SHA512 8e5235a77f0ae36fa0411d1bbe895a1df8fc6d46e0ab50a8956c9cd80ca6c1c88415b73ffb706c56a92d8dba103d870f89c27c07c44d919a3c5639470563a2fd
- TLSH T17601B100F019AE3E47234612BEFC7970A35D23650A4C1FA899A4A47ADB5F2E60505037
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_183f71d9473c2dfeb4c49a1be811fdbaf9c29a6c_31bf3856ad364e35_38655.38527.65535.65535_none_bcc52580a95fa839.manifest
- SHA256 f6889d555aeb8a03a9330f05706df35774317ac71af5d617a167ea09fbdd7ea2
- MD5 e1ce578133ebb94b0c127485ecd66d3a
- SHA1 a02de8c235de90cb417156415e3cc0b5d55c2e92
- SHA512 2038163393bf859bcafd370380f632ebbaf7d7ad0500d90042f29dc589feb229deacfa0ae19927fcafe56562e0dbee6a8cb33608cf35ad630b92ec5a3af81841
- TLSH T1EE01B100F109AE3E4B234721BFBD2970B39D23250A4C5F9898E4A86ED74B6D64145023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_246a76d150f54f9fcb9c4c89ca80f5c30b0b7e01_31bf3856ad364e35_38655.38527.65535.65535_none_08bfae8de1fa0b4a.manifest
- SHA256 7a2d83a1b510a8023fb6ad358599db4120ac2ad145d4a8bd5f472fec4a8758fe
- MD5 7ed642fb3cad0ca8b25bf8869b0fff86
- SHA1 d094ffb91aa3b19b866acb1da74bd4c2c592b17c
- SHA512 cfc14ac622f9011b3f61954197fde5bbb4a25ee8775b63a7295b57275c5c9788c0042f6e3917ff0683addc4448ccea767e17ceedc37a254f6bfcaee6a084ac78
- TLSH T1B501D500F109AF7F4B230652BEBC2470B35D23260F4C0F9888A0A87EE75F5E64101023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_31251456d87a6fefa74ab7c6d1a48be2add49419_31bf3856ad364e35_38655.38527.65535.65535_none_08254cbe41dc26bd.manifest
- SHA256 aecb273cda490f6b571b176e55a682d3c4a8b1d4b9b92042063bef4c6d419deb
- MD5 484d14b5a738e909499383958cc606d3
- SHA1 32f39888299f7f359fb3c7f032d0065fc8af5164
- SHA512 571f66caea4156593b8626ff598bc79ccf5449fe13f47e9a78ad8fa503dee2b516f7d654948e4dbe62d62d2a42c66d3a646df2881667760bda09e0a79495ba95
- TLSH T1F3018E00F119EE3E87230652BABD7570A35D23250A4C1F98AD61A479E75A5D64515027
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_37162d79ecc887f06f0e83ede79ccf6e16ea516a_31bf3856ad364e35_38655.38527.65535.65535_none_33af92df21707c9d.manifest
- SHA256 c4bf871b98b42dab7ffed1e2a08971a8c31c359ab2f6a06c703d40eca882b92d
- MD5 768d673b1feba16de8724a3912a9d77e
- SHA1 309687bae15e07f475aef5de1f744e7f9b7a21c7
- SHA512 ee9ed62ace3903dd2b5a61cbc66be3249818967fb6a233e6dedc11f9443b5b8a3641272a6a685f68badb513beaa354cf8f246706c783443c894fe5102327f900
- TLSH T16901B100F109AE3E87324A51BBBD3974A35D23390A4C0F9C88A1A87EEB5B6E60105033
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_3b6e601dc9a0538d216bfd084a9ebe36bc7d0996_31bf3856ad364e35_38655.38527.65535.65535_none_95814d1eb952b1c7.manifest
- SHA256 851cf5dc058db26e729678fddddade86061e9301281369cb5a775bcb4642ddbc
- MD5 9a5a2c2107d0b25cf71bfe92efff3f79
- SHA1 bb9f74788230a560e3094cd9303386e881ddf7b9
- SHA512 3cc5b1377dff973defaf53c1b7b518f6773aa026705d65047ffda22bee20b92a0f628da961abb581e75276235686234b58ae865366d469c74d92760b114dff88
- TLSH T13E01B101F009AE3E87230661BEBD6971E35D23650F5C0F9C98A5A87EE75F6DA4145023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_613d2ba8b95c00f19b7535e5d6cb475f9255695b_31bf3856ad364e35_38655.38527.65535.65535_none_fc203dcb716d6e81.manifest
- SHA256 6cb42eb096b18db3eb42b852102ba2ea5b9251897a4aa0ba57693e9fb3210d9e
- MD5 9c435e8894d05487ff3fbbe451cf4238
- SHA1 1f33e3666e84ee5b789780df519bead4b436dcb1
- SHA512 25a6486081319f77eee252afa2dbf240daed486bdad9d87bea0377000a44551af90ba4b70a3436be0efcd080a5db03a121421976e017f676f3412deb0d1bd554
- TLSH T13001B100F119FE3E47330A62BEBC7970B36D23250A5C1BA8D9A4A47AE75B6E60145023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_7789327b3d2947e595587f19c2a115f0441121db_31bf3856ad364e35_38655.38527.65535.65535_none_4a9f7012aeae5cbb.manifest
- SHA256 aafb944f787db2386abe2952aa9d559236898167a939b828da5b85d1c38a573e
- MD5 1cbfc037bada87233dd17adbaa377a76
- SHA1 748787a3f0ae6c919f2f5d9f9e98765c85a3b808
- SHA512 47dc0488c8d1fff9312ac3f187aadb4cb12c7acd4aa34a7b82833b7f7871b03de388ad8e40ce8027195063950426641ff64b36a842906af706dcae7e456d90ff
- TLSH T1B601B100B109EE3E86224A51FEBC7970B36D23750B4C1BA89864A479EB5B5E60645023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_8e277ff241ede8cae0ba406d92b3a9a7bc0e5374_31bf3856ad364e35_38655.38527.65535.65535_none_9e23c16a47b48622.manifest
- SHA256 4c1613ebdec18ee2f3c87ff46b21db940166a327253b93ac7ebb046e5cf9ff65
- MD5 81a3f7f3c1b62d626ad170c5f231f07a
- SHA1 fe9146c4e30365e4c922f0b8cfcc733a9dfadf7e
- SHA512 30e0fc758bf9d93fbabb51c800956a390e9bcb8ce24d2434c0289865c7f9c8341696fd6bfcde16c74cf2f851f0147eb7dd45d2a73a9abcc0b2ac58058ee0d842
- TLSH T11C01BD00F109AE3E86234A12BFBC7871A35D23660A4C4BA989A4B87EE74F2E60545023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_a4207268bba4bd2ea2a0a20204642dfd46a532f7_31bf3856ad364e35_38655.38527.65535.65535_none_b6f81a626516f554.manifest
- SHA256 ede5ee9c64d6a4b71c16b0fed6fb1fabd13cb59632ccddd741adf9df0f9ce3bb
- MD5 485854758c4cb1ee9cef2f84129cad9a
- SHA1 24823532db78f5e32149b393f7c2a1f208fda338
- SHA512 c1c33191269204216c81178343a76ebfc7989fe0c57a25dab08b67a95f98cd8af727c7d633f37b658983fc257a70c7c4626ea92330dcbf97073ad7dedf030a58
- TLSH T11601BD00B009AE3F5B230611BEBC6971E36E23350A4C0BE999A4A87AAB5E5960605023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_d4f8e3d2e02eb4df654660f9ee83d6dad7dd6d5b_31bf3856ad364e35_38655.38527.65535.65535_none_6ad167aff214c713.manifest
- SHA256 9a7cbe41aca3c66b42547720b82cafbfff0398e3a79ae7226402bcedf5badc18
- MD5 24c835a5289b4842f215dc463cbf9709
- SHA1 9024a2e7f64b990f1f0930c33b754bf3be2c2193
- SHA512 94d7949a21c2c95fe1941f33eda6021fe22a68b97d950705248af98447ee87e4f1ed3cbfbd2a956e65f3e4e2328f1aa6faa773542252edcbba7a6c4909856bcb
- TLSH T1B001BD00F009BE3E5A234621BEBD3970E36E23254A5C0BA898A0A87EA75E5970215023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_da9eef33d1fce725817119aaac8789390681c980_31bf3856ad364e35_38655.38527.65535.65535_none_3c8e65e13c867e58.manifest
- SHA256 7317db672aeda284490ad56788060d1efbb3ed500f02e92677229a7e9ec4946c
- MD5 048c62563e01e3f08f7332cd3ecd7fd2
- SHA1 6185e2b51ee9c043d8bc79284e520107848f3fe2
- SHA512 55d19b18418cf3d0fbc9d6a587edea4fd9d98c06d3acee5d5d919936dbb4cf0714a19c0bddf47e7c44d415ddcbeb1b53acb72465f4a3d389ebec7d7d9a2777af
- TLSH T1D601D500F11DEE3E47230611BEFC7570A36D23360A4C0FA889A5F87EDB4B5E60145023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_e00be72c39effb5deb56ca662fcf41245b3c9869_31bf3856ad364e35_38655.38527.65535.65535_none_9170f724b3706a22.manifest
- SHA256 0491d8e9a866812cfe6dfac2b89997dfaf95554a6ed25b1a95850fc4de01cabf
- MD5 9baad0e93b6529a4f196df0a82d312bd
- SHA1 72149b0f6b72c4db8e327f996c502c1747d58b20
- SHA512 82c34d9807f62e1262c0f83577045375e1367d180230cb692348637839327eb019f7d803aca026512ea1b1982f2fc55f66b3a2855309dc48886cc96a14bb4fbb
- TLSH T10E01F100F019EE3E47230612BEFC3970B35D23750A4C0BA888A5A87AEB4F5D60605023
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_e4ee5f67fb27349a3d4be3afdda980b4f2640030_31bf3856ad364e35_38655.38527.65535.65535_none_a2337873ec78cf1f.manifest
- SHA256 98ee7401a3e4fb2260afb5a00cd26c9fc8254c3c1f7335cdb68404d63d00060b
- MD5 449af2d6fc0b061b925e0a9fd142d3f3
- SHA1 df0eb50151788888b2ebdf44158c2d9b1c1b0dd9
- SHA512 205b1daaf1197d4db6d91555a8ea01c6263b9112030f6913a3067eb6fb6c0c5990f9f9b179fee586a9ae270d369a5380306f9de0975e6bd94aa62f33681f1c61
- TLSH T1A901B100F11DAE3E87330653BEBD7571B36E237A0A5C0B9898A4A4BEF75A6D70605137
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_ee6220582211b482e90fe395fd191b19b50995f3_31bf3856ad364e35_38655.38527.65535.65535_none_b791c7de01e4c34c.manifest
- SHA256 2b15bc129c9ec14c4efb068b01d37ed162e7a177db688ceb26110b45b4d515cf
- MD5 5a385688214e4a491f1d8ed1f5725df6
- SHA1 be83c272ec8cd5bf65809dd15974e3ffd3702324
- SHA512 7a29dd6aaff50885e7b03f0437a12631651e035d8a2934a98f4d1faf26a2acd69297d4883c15a8482ae4f82b8491c0d94a0125b22a4cce7ceac3a7eae643604e
- TLSH T1BE018E00F119AE3EC7230651BABD6571E35E23250B4C1BB858A4A83AEB5A6D70646073
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-aifabric-cbs-1-6_31bf3856ad364e35_38655.38527.65535.65535_none_4108dfce5a2e7339.manifest
- SHA256 d13255a8f247aa78a50e43824900137eb42da77bbb9b69ab9681ea627a24174c
- MD5 ad2f631c4f55009ee6e8763a199611a1
- SHA1 92ef30b40036591c7e6fa54623eea5a21a003d01
- SHA512 9100834c7f9c9f2ea530cc91f7e6d901886da676d9834e88717dcc7b0b9e5e8bcf40794f20ed1d15b9b0ab89292cb2aa3bc0453c42cd46fab5a45df733f18c2d
- TLSH T151E06800F0085E3E83215A22AFB87974A36D33770A584FA88864B9B99B575A95605077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-copilot-d..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_0fea6a4727c43cea.manifest
- SHA256 63ccd6986a0a4553fc4ebd27779ba5491d93920bfafcfe6620c3635cc470c759
- MD5 f30c40dd82f65fbda455640f61576301
- SHA1 2f12e4c3b0ecf4c1d5b6f86f65bee54cbf2cfab2
- SHA512 f2e9571d85dae6e3ebcf34c6bba7a7fa4f7857adecc954d7cd6eb9c888c76ecb68a31b76f567c39097c4b0ac37e6561c43a16a526dbaa047d69b21e3c41dcbc5
- TLSH T1B0E0F100F00D5E3E87110931AFBA6860E32D33370E584F5C5875A97A97474D84541032
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-copilot-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_26df2aa2220c1eee.manifest
- SHA256 4e632bc6c205c964619cc122e8e5e095d2b4c95016fe639dff889a53fafc9ac6
- MD5 18d44d22eb40fb8c3ff80143adbc47b4
- SHA1 1b7897a7cffe71760b1f9c856b7c868e72d7fe38
- SHA512 bde43c43c881d9171ef8520a447641d9166e0d1f63ee976954e5226fc65ef9feed2ff8e678ee17c1d1dc71e749ec27ab57ee2a7d388ac83c81532378145d4e6e
- TLSH T16DE06800F00D5F7E87210A32AFBA69A4A32E33770E584FA858A5A5BA9B575E84502036
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_58a365e2a335dff2.manifest
- SHA256 dfdeea13aa670df5e935f31cdbb95d40c0b8c2c916ee494d15f91f1f5f23b929
- MD5 bcaf638b37659c4211b19b56e33bbef4
- SHA1 ff6db5eaffc2cf654a198bb560be224a52f2998e
- SHA512 075474a82976cc025a203e5bb5b4b941dd40153defc704bb0b95430ac4dc411ca2077a8dee3b33c6d5bf2d5ed99d5d396c0edbb054335398923fedd3989facaf
- TLSH T1B9E06800F0085F7F87210A22AFB86964A32D33770E984FA84865A5769B574984501076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-agenticplatform_31bf3856ad364e35_38655.38527.65535.65535_none_010c0e7796a4f35a.manifest
- SHA256 f4ac00b362c782837f09cb01294924fac1756990288a669e0f880f85fc689e19
- MD5 7da749dfc29a0f23fa70c70beb8afba5
- SHA1 e861c7ed290b74ff36f9e37bcf4c3880d92e48f3
- SHA512 9d7912467d6fc9bcb56ed867afc56072509bc03f65982c37a540ee12c09d2c79206608489be9d44316a1fb6eb6abfedd75bd06f020fc1f82f3be92590f948871
- TLSH T12EE06800F01C5E3E83614A12ABB8BAB4A32E33770E684FA89964A5B69B575980606176
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-c..ccess-adm-windowsai_31bf3856ad364e35_38655.38527.65535.65535_none_58170a16439f6523.manifest
- SHA256 01544e414351245c8abcc57bda3921b8828500ac26c2ef006d4c0227dba17dad
- MD5 1baec5a70b9f6adb95901cab7bf08178
- SHA1 54c57a7f233a032e3b62ebc7cf58cce5d817ab8a
- SHA512 259a5cca93b9df59e9e30872674ab6acfcfd37da6c5f8fbdb1503fe170b4be88d98ec5339b59419a3fa7fe7255eec9695befbbbb5e6947d0ca213b60b997a2e2
- TLSH T166E0F100F00C5E3E83220913AB787AB0A32D33770A580F989C65B5B5A7470D50615176
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-c..windowsai.resources_31bf3856ad364e35_38655.38527.65535.65535_none_8059d64a49763fb4.manifest
- SHA256 a22702610e651a7348aca4a9fbb20bd607b0b30c6eef862d6314dec6d997cc52
- MD5 fde4037a139bd5d61f1bab5b5b33ee96
- SHA1 e7eb3b5cad3ab3d264136a79564af91b48e6ba84
- SHA512 d5f5c9b1fa282f52515c159fda38ff55ebd49e7b9aec7eee4274754654170dbeaff3dad697233577d7e42600f832d1d4f5b58b852d07ef3de17c5b728181bfa6
- TLSH T17BE0F100F00C9F3E87220913AB787AB0A32E33770A580F58DC65F5B597574D50615077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isoenvbroker.resources_31bf3856ad364e35_38655.38527.65535.65535_none_6651e91c12ed2088.manifest
- SHA256 3c69d2be47022db4784296d0375f7a29167427c7e609e76ccd57a45eb037a6d7
- MD5 3291d713d462e8016ad36915a608e402
- SHA1 394ae0de7bc5681f8c268a19b939be698ed64908
- SHA512 769e60cbb1ebcc633b8d9f6730013de325525fbea0b47b03066d27fca1fdfb652f30031cdece66a16254ce014745761210f26d0a2680103ad88c0de9e6b8ea37
- TLSH T141E0F100F00C9F3E43200913AFB87970A33E33730AA80F589D74A57597575D40541032
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isoenvbroker_31bf3856ad364e35_38655.38527.65535.65535_none_2f8dc2c22e933355.manifest
- SHA256 3908f8dfc2c7618b15026cbeb696d4a28f31e7f59105ff84cb59b8d6593be05b
- MD5 9b3be5c4a169d410c4e31ff59ab589a5
- SHA1 c266b72c5aba0a4c0902c541563d38d3bcb63727
- SHA512 a6310a8cb3c21c5c7eed0e5b5465e8b1eb103be952bc61ffd948fd9f4105cd126dcde2ef44fb765f397703efed19be9feea2193715c5d515e1022f8ac0603df9
- TLSH T1B3E06100F00D9F3E43510912AFB87974A33D33770B9C0F545D65A57597575D40545076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isosessioncore_31bf3856ad364e35_38655.38527.65535.65535_none_1b7de0771545588e.manifest
- SHA256 d49c206b13bf8bd7da6dbe41f7e3bda0daee0d655057c8cd2235cc00bd705853
- MD5 1ebd3fdd1a0e9b029394b54cfeff1a6e
- SHA1 9affecd39f1ca0472a3c4024df8e5e57610953cc
- SHA512 8c508ef719007923bc1c9ced73d9dc616f9a6920994c3cd03208a8429841679ae6302dec47fb580f9afcad4201b66999bde7586614be8358593349f25b73dff8
- TLSH T10BE06100F01C5E7E47514912AFB47A74A33D33770A580FA44965E5759B575D80505036
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-onecore-isosessionserver_31bf3856ad364e35_38655.38527.65535.65535_none_66cf412771490600.manifest
- SHA256 5639817e8dd21fee469464ff8ea96e02ee6cf79bc72107ddb8d1b6a300de96eb
- MD5 9c9a7db4cacac2e54a0e026178dade4d
- SHA1 4ec00f80adbb6d93294507367519cf1d89f5c968
- SHA512 ecfa87bdcc0dde1c920f377beb31d867df5689165479c4eb795430540f474ca35382c2ff1064f60a1fd565157ad350f3cf5aa44103e08246bfdbd846fde6952c
- TLSH T198E0F100F00C9F3E43100912AFB47A70A33D33B30A680F644869A4759B470D40600032
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-windows-aicomponentmgmt_31bf3856ad364e35_38655.38527.65535.65535_none_e9be34081dc49498.manifest
- SHA256 4e2ae8ff33bcfd245ec75b7b2c8882417f00015525b48358e8a53a436c3f221a
- MD5 511b5e33a704bc01eb6af2d18f815389
- SHA1 75cdf83a96a9a30f0fc2400cb7962bba679d1386
- SHA512 04d157a55647422748786b17c22390fcbe5b5edf508ed97d21102d1284e4823cde15b81810791856d234ee8ffb90b19a62afb75ec9509c9e71612d765b515dfc
- TLSH T160E06800F00C5F3E83610A12ABBE7974A36D33770E980FAC89B5A5B9AB574A90905076
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-windows-i..al-shell-aix-config_31bf3856ad364e35_38655.38527.65535.65535_none_dfa265613863bf02.manifest
- SHA256 f65fdf2621da3d6721a42609319f7330a25d602ecb51ee9728888c5f76b15b6a
- MD5 d577ddabc18c516df20262fbc2a28d1a
- SHA1 7f7a344c66833991066349bcaa3d7305180c3172
- SHA512 ebd77f47060a45e3bec03021f01d00608305d44b0069d09655e7986f082b3049355c94edba7d5a55b5edf51de6ab35281b4fb6d9d2ec9dfcf93e35318a35d44e
- TLSH T1DAE0F100F10C6E3F83314911BFB92970E33D33330A680F988974B575AF4B0940501176
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_microsoft-windows-s..ngshandlers-copilot_31bf3856ad364e35_38655.38527.65535.65535_none_f88b892a68acf842.manifest
- SHA256 890866e9f287a75fdd560d68bea82a482d21c65344b27eaaa176cf44520136d5
- MD5 fa88f9d29923daf0e6de595a8e87db96
- SHA1 b34f605e128775aef626addc4d4be67cd74b0177
- SHA512 4a377069569ab98418f4727751d3d138b404313a9b77bea7c71655326a221f45155a5293d958016cb7288975129f56a7f999baaa20b6c54c2c26e094710cf944
- TLSH T1B5E0AB00F00C5E3EC3200A11ABB96A64D32D23230A984FB848A8A6759B664D90641072
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_userexperience-aix-..oyment-languagepack_31bf3856ad364e35_38655.38527.65535.65535_none_b248de8d24b3821d.manifest
- SHA256 6eca65c2a25426165c1453ed4b4da9a686da68665ecd9391947ff2ea87245150
- MD5 7b2283ef7d797ce87e89fc27dcce06f2
- SHA1 cb71ab1c010fe9b39560fadd4031c9b5fe6c04ea
- SHA512 b92908dd5ba872f30f06e6b646cecbe7123bb8cbb6fc324bb8744c01e3ceb33e9e112c91e0055347e4500314e20547e0b0e2c0f6ef9e16172a8b1bb62e7536d6
- TLSH T163E06100F00D6E7E97110521ABFA6965D33E33360B580F5899B5AD7997574951641037
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_userexperience-aix-deployment_31bf3856ad364e35_38655.38527.65535.65535_none_cdba866f35b87e29.manifest
- SHA256 0bfaf4e17ce43f4b1eb1b9d1d5f3ab211d36956735e38bc4b9bf7795433d0709
- MD5 d4d880a1194d99cc83b21a5f0e6b8c7b
- SHA1 667d2e2788329705ffaecbf6718f365f7030e16a
- SHA512 bd0460920a61ad9d283a2c217f0cd552a1ed883324a8428091d678c8ca18af1a6dd571c0916c3f5193ad7d7332d39c2f76d3c0022e0ab783c12b66fae0a97dca
- TLSH T195E06100F00D6E7E47110521ABB56964937E33360A580F5499A5A97957564951601037
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_userexperience-aix_31bf3856ad364e35_38655.38527.65535.65535_none_29380f4f3aa35115.manifest
- SHA256 512910b1a4670f6ca17e0f1fb84ad78ccfac9b86b922e301353cf45f6013c42c
- MD5 a9c2747f1be2e08cbe8a35e8babdc70c
- SHA1 2d94158741c9df80fb00d0a20068b4f2911601dc
- SHA512 e0650f5f8154533fd2aa6a7eaf89b43afc222247ca5146baccf234a3aa3dd916919778dfe4869bfb9ce0a3775dfa5fb5243776f400ebc71034acf45de581385f
- TLSH T186E06800F0096E7E47210612ABB86964933E33360A980FA889A4A9759B5A49A1601077
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\arm64_userexperience-coreai_31bf3856ad364e35_38655.38527.65535.65535_none_851c45cb3b2d8b50.manifest
- SHA256 b9f4044490f4f4b8a6aba12a87fca89464bd20a75511438b578633bfecc5f480
- MD5 7b8d511ee631ffffbcc0708efc59ac6a
- SHA1 890217d15256814ca7424750056f0f27f3a732fb
- SHA512 f2066f7d6ff1db56e84c12ea41b307cfec622276a77285845b879d9342d33d044e53dc0fcfa767e5bd3ff2fcc94b3e39f294bad84ec269aa740da26699d7c5cd
- TLSH T176E0C000F00D6E7E47210612AFF83974A33E33360F9C0FA85DB9B975AB5A4DA0645177
- MD5 SHA1 SHA512 TLSH
RemoveWindowsAIPackage\arm64\update.cat
- SHA256 df41c76532606ec409e371939ff62d03a6389a3ff40acea4f9fc851aac1c45f2
- MD5 e5ce6638661f0c35c3b4a568d2532f56
- SHA1 29da7cb600b00b3feb4ddde7f919ca6fb9bd6def
- SHA512 23396928d20a79703e4ca499dc9d1854a0b6c45be2a133d05699a8d3d7c595555ff5d4a46139ae1df114972cab30c56ce226399982fa9707e816c85408bb56bf
- SSDEEP 192:s6jTrJbbfgVhQAN6LxDDSnSg+W8fmqmYA87SrE1thOyN4MHEwbjlRsGv1SMI:05ELGf+xrvcP
- TLSH T156029B2550011BC2C54BA13481A6BA7ECAF79FEEA473123F347B72384A56294334F93B
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAIPackage\arm64\update.cdf
- SHA256 817085fc5b26a6064775c450d87dda5832c700a0b19fdffac252e16168c9da47
- MD5 022de9bd5ecceb023d71633f1961114b
- SHA1 4c0569665b7d12b1c24788bf43360954b67079a8
- SHA512 aedcba02ecf3a508e63fd99a7e5f3b7276cb423beea77df036e162fdce1bb1d3905f016fd2d1f937b9f66b6f0b9ceb5a2c4fb9e6692e137a939df21fabaceeaf
- SSDEEP 96:S4/aILKQkBQA7OrdDEEYb2aq7MIhh6qrKJxRoahZKv43m/L:S4/LKhMdfYK36UP
- TLSH T19CA13501F6251F8A86D260C6E33E7C35F2682845DF0B2FD2EAB9D98D387D05479A057B
- MD5 SHA1 SHA512 SSDEEP TLSH
RemoveWindowsAIPackage\arm64\update.mum
- SHA256 3b879a7c5972179e22f11e08b248a9bbedcd6794c58c46d33ddbe3fa75bbc894
- MD5 280bae984344cb3dc947cff66a7c0629
- SHA1 cbe9ebd1451c9c7d82e41c234e1d92e806c552e8
- SHA512 b33b1b66683598d87c209b94bc9b314bacf07ea2b4dd96661406ab29909b1874c9d2716e5732b19b42e2956f143c881e96c215013fdd2c24ca63620435fe6602
- SSDEEP 96:Cci2jxOiVTOUYNTqyreroqaESZ16Ge/VOyAupj0g:nnxhTQTdwFabZ+
- TLSH T1C2C14310B025AD3F41724A22BFBC3D71FA7F15388F492F548AFAF065ABDB4690A55207
- MD5 SHA1 SHA512 SSDEEP TLSH