2decc472...98a2

C:\Users\CIiHmnxMn6Ps\Desktop\twitchru.exe

Sample File

Binary

Suspicious

»

Mime Type	application/x-dosexec
File Size	538.00 KB
MD5	ee5fa4a6c9be3b2adfff4ad6d7eb0a4d
SHA1	a64c13ab87f5c6f7abc20c76602c45ba89ad074c
SHA256	2decc47201a1d43aeec5853c4c89b7273bfdd782fcc52106a3675944739998a2
SSDeep	12288:5RdtqHbR0vxkpaU3gnbrU/jYs+AdtOEE8pYyf:jdtw0vxkpP3k4UsddHE8myf
ImpHash	76ed5f14d0aed85c8e54d99de45e020a

File Reputation Information

»

Severity	Suspicious
First Seen	2018-12-05 23:27 (UTC+1)
Last Seen	2018-12-06 19:20 (UTC+1)
Names	Win32.Trojan.Filecoder
Families	Filecoder
Classification	Trojan

PE Information

»

Image Base	0x400000
Entry Point	0x41ec87
Size Of Code	0x34c00
Size Of Initialized Data	0x51800
File Type	executable
Subsystem	windows_cui
Machine Type	i386
Compile Timestamp	2018-12-05 15:00:35+00:00

Version Information (9)

»

LegalCopyright	Copyright (c) 8pecxstudios
InternalName	Eq
CompanyName	8pecxstudios
FileDescription	Incursion Holmolka Csu Purportedly Annex
LegalTrademarks	Copyright (c) 8pecxstudios
ProductName	Eq
ProductVersion	6.6.6.6
PrivateBuild	6.6.6.6
OriginalFilename	Eq.exe

Sections (4)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x34bcd	0x34c00	0x400	cnt_code, mem_execute, mem_read	6.58
.rdata	0x436000	0x7692	0x7800	0x35000	cnt_initialized_data, mem_read	5.49
.data	0x43e000	0x3a04	0x1c00	0x3c800	cnt_initialized_data, mem_read, mem_write	3.79
.rsrc	0x442000	0x4833c	0x48400	0x3e400	cnt_initialized_data, mem_read	7.6

Imports (16)

»

KERNEL32.dll (107)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GlobalAlloc	0x0	0x43606c	0x3c65c	0x3b65c	0x285
GetFileSize	0x0	0x436070	0x3c660	0x3b660	0x1d4
CreateFileA	0x0	0x436074	0x3c664	0x3b664	0x78
GetLastError	0x0	0x436078	0x3c668	0x3b668	0x1e6
ExitProcess	0x0	0x43607c	0x3c66c	0x3b66c	0x104
GetCurrentProcess	0x0	0x436080	0x3c670	0x3b670	0x1a9
GetTickCount	0x0	0x436084	0x3c674	0x3b674	0x266
CompareStringW	0x0	0x436088	0x3c678	0x3b678	0x55
CompareStringA	0x0	0x43608c	0x3c67c	0x3b67c	0x52
GetLocaleInfoW	0x0	0x436090	0x3c680	0x3b680	0x1ea
WriteConsoleW	0x0	0x436094	0x3c684	0x3b684	0x48c
GetConsoleOutputCP	0x0	0x436098	0x3c688	0x3b688	0x199
WriteConsoleA	0x0	0x43609c	0x3c68c	0x3b68c	0x482
LoadLibraryA	0x0	0x4360a0	0x3c690	0x3b690	0x2f1
CreateProcessA	0x0	0x4360a4	0x3c694	0x3b694	0x94
GetExitCodeProcess	0x0	0x4360a8	0x3c698	0x3b698	0x1c5
GetStringTypeW	0x0	0x4360ac	0x3c69c	0x3b69c	0x240
GetStringTypeA	0x0	0x4360b0	0x3c6a0	0x3b6a0	0x23d
IsValidLocale	0x0	0x4360b4	0x3c6a4	0x3b6a4	0x2dd
EnumSystemLocalesA	0x0	0x4360b8	0x3c6a8	0x3b6a8	0xf8
GlobalLock	0x0	0x4360bc	0x3c6ac	0x3b6ac	0x290
GetUserDefaultLCID	0x0	0x4360c0	0x3c6b0	0x3b6b0	0x26d
SetEvent	0x0	0x4360c4	0x3c6b4	0x3b6b4	0x3d3
SetFilePointer	0x0	0x4360c8	0x3c6b8	0x3b6b8	0x3df
FlushFileBuffers	0x0	0x4360cc	0x3c6bc	0x3b6bc	0x141
GetConsoleMode	0x0	0x4360d0	0x3c6c0	0x3b6c0	0x195
GetConsoleCP	0x0	0x4360d4	0x3c6c4	0x3b6c4	0x183
GetSystemTimeAsFileTime	0x0	0x4360d8	0x3c6c8	0x3b6c8	0x24f
GetCurrentProcessId	0x0	0x4360dc	0x3c6cc	0x3b6cc	0x1aa
QueryPerformanceCounter	0x0	0x4360e0	0x3c6d0	0x3b6d0	0x354
GetEnvironmentStringsW	0x0	0x4360e4	0x3c6d4	0x3b6d4	0x1c1
FreeEnvironmentStringsW	0x0	0x4360e8	0x3c6d8	0x3b6d8	0x14b
GetEnvironmentStrings	0x0	0x4360ec	0x3c6dc	0x3b6dc	0x1bf
FreeEnvironmentStringsA	0x0	0x4360f0	0x3c6e0	0x3b6e0	0x14a
GetModuleFileNameA	0x0	0x4360f4	0x3c6e4	0x3b6e4	0x1f4
WriteFile	0x0	0x4360f8	0x3c6e8	0x3b6e8	0x48d
IsValidCodePage	0x0	0x4360fc	0x3c6ec	0x3b6ec	0x2db
GetOEMCP	0x0	0x436100	0x3c6f0	0x3b6f0	0x213
GetACP	0x0	0x436104	0x3c6f4	0x3b6f4	0x152
InitializeCriticalSectionAndSpinCount	0x0	0x436108	0x3c6f8	0x3b6f8	0x2b5
SetHandleCount	0x0	0x43610c	0x3c6fc	0x3b6fc	0x3e8
HeapReAlloc	0x0	0x436110	0x3c700	0x3b700	0x2a4
ReadFile	0x0	0x436114	0x3c704	0x3b704	0x368
GlobalUnlock	0x0	0x436118	0x3c708	0x3b708	0x297
CloseHandle	0x0	0x43611c	0x3c70c	0x3b70c	0x43
AllocConsole	0x0	0x436120	0x3c710	0x3b710	0xe
GetStdHandle	0x0	0x436124	0x3c714	0x3b714	0x23b
SetConsoleScreenBufferSize	0x0	0x436128	0x3c718	0x3b718	0x3bf
IsNLSDefinedString	0x0	0x43612c	0x3c71c	0x3b71c	0x2d2
FindResourceA	0x0	0x436130	0x3c720	0x3b720	0x136
LoadResource	0x0	0x436134	0x3c724	0x3b724	0x2f6
LockResource	0x0	0x436138	0x3c728	0x3b728	0x307
FreeResource	0x0	0x43613c	0x3c72c	0x3b72c	0x14f
SizeofResource	0x0	0x436140	0x3c730	0x3b730	0x420
lstrlenA	0x0	0x436144	0x3c734	0x3b734	0x4b5
GetTempPathW	0x0	0x436148	0x3c738	0x3b738	0x25b
GetModuleFileNameW	0x0	0x43614c	0x3c73c	0x3b73c	0x1f5
VirtualAlloc	0x0	0x436150	0x3c740	0x3b740	0x454
VirtualLock	0x0	0x436154	0x3c744	0x3b744	0x459
CreateEventA	0x0	0x436158	0x3c748	0x3b748	0x72
GetLocaleInfoA	0x0	0x43615c	0x3c74c	0x3b74c	0x1e8
CreateThread	0x0	0x436160	0x3c750	0x3b750	0xa3
WaitForSingleObject	0x0	0x436164	0x3c754	0x3b754	0x464
GetFullPathNameA	0x0	0x436168	0x3c758	0x3b758	0x1dc
FindFirstFileA	0x0	0x43616c	0x3c75c	0x3b75c	0x11d
FindNextFileA	0x0	0x436170	0x3c760	0x3b760	0x12e
GetModuleHandleA	0x0	0x436174	0x3c764	0x3b764	0x1f6
VirtualFree	0x0	0x436178	0x3c768	0x3b768	0x457
HeapCreate	0x0	0x43617c	0x3c76c	0x3b76c	0x29f
GetFileAttributesA	0x0	0x436180	0x3c770	0x3b770	0x1c9
SetEnvironmentVariableA	0x0	0x436184	0x3c774	0x3b774	0x3d0
GetCurrentThreadId	0x0	0x436188	0x3c778	0x3b778	0x1ad
SetLastError	0x0	0x43618c	0x3c77c	0x3b77c	0x3ec
HeapSize	0x0	0x436190	0x3c780	0x3b780	0x2a6
Sleep	0x0	0x436194	0x3c784	0x3b784	0x421
TlsFree	0x0	0x436198	0x3c788	0x3b788	0x433
TlsSetValue	0x0	0x43619c	0x3c78c	0x3b78c	0x435
TlsAlloc	0x0	0x4361a0	0x3c790	0x3b790	0x432
TlsGetValue	0x0	0x4361a4	0x3c794	0x3b794	0x434
GetProcAddress	0x0	0x4361a8	0x3c798	0x3b798	0x220
GetModuleHandleW	0x0	0x4361ac	0x3c79c	0x3b79c	0x1f9
LCMapStringW	0x0	0x4361b0	0x3c7a0	0x3b7a0	0x2e3
LCMapStringA	0x0	0x4361b4	0x3c7a4	0x3b7a4	0x2e1
GetCPInfo	0x0	0x4361b8	0x3c7a8	0x3b7a8	0x15b
GetStartupInfoA	0x0	0x4361bc	0x3c7ac	0x3b7ac	0x239
GetCommandLineA	0x0	0x4361c0	0x3c7b0	0x3b7b0	0x16f
HeapAlloc	0x0	0x4361c4	0x3c7b4	0x3b7b4	0x29d
GetFileType	0x0	0x4361c8	0x3c7b8	0x3b7b8	0x1d7
SetStdHandle	0x0	0x4361cc	0x3c7bc	0x3b7bc	0x3fc
HeapFree	0x0	0x4361d0	0x3c7c0	0x3b7c0	0x2a1
ResumeThread	0x0	0x4361d4	0x3c7c4	0x3b7c4	0x38d
ExitThread	0x0	0x4361d8	0x3c7c8	0x3b7c8	0x105
InterlockedIncrement	0x0	0x4361dc	0x3c7cc	0x3b7cc	0x2c0
InterlockedDecrement	0x0	0x4361e0	0x3c7d0	0x3b7d0	0x2bc
WideCharToMultiByte	0x0	0x4361e4	0x3c7d4	0x3b7d4	0x47a
InterlockedExchange	0x0	0x4361e8	0x3c7d8	0x3b7d8	0x2bd
InitializeCriticalSection	0x0	0x4361ec	0x3c7dc	0x3b7dc	0x2b4
DeleteCriticalSection	0x0	0x4361f0	0x3c7e0	0x3b7e0	0xbe
EnterCriticalSection	0x0	0x4361f4	0x3c7e4	0x3b7e4	0xd9
LeaveCriticalSection	0x0	0x4361f8	0x3c7e8	0x3b7e8	0x2ef
MultiByteToWideChar	0x0	0x4361fc	0x3c7ec	0x3b7ec	0x31a
RtlUnwind	0x0	0x436200	0x3c7f0	0x3b7f0	0x392
TerminateProcess	0x0	0x436204	0x3c7f4	0x3b7f4	0x42d
UnhandledExceptionFilter	0x0	0x436208	0x3c7f8	0x3b7f8	0x43e
SetUnhandledExceptionFilter	0x0	0x43620c	0x3c7fc	0x3b7fc	0x415
IsDebuggerPresent	0x0	0x436210	0x3c800	0x3b800	0x2d1
RaiseException	0x0	0x436214	0x3c804	0x3b804	0x35a

USER32.dll (39)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
MessageBoxA	0x0	0x436260	0x3c850	0x3b850	0x1f8
SetWindowTextA	0x0	0x436264	0x3c854	0x3b854	0x2ab
PostMessageA	0x0	0x436268	0x3c858	0x3b858	0x21e
GetDlgItem	0x0	0x43626c	0x3c85c	0x3b85c	0x11f
EnableMenuItem	0x0	0x436270	0x3c860	0x3b860	0xcf
DefWindowProcA	0x0	0x436274	0x3c864	0x3b864	0x95
PostQuitMessage	0x0	0x436278	0x3c868	0x3b868	0x220
UpdateWindow	0x0	0x43627c	0x3c86c	0x3b86c	0x2e9
GetDesktopWindow	0x0	0x436280	0x3c870	0x3b870	0x11c
GetWindowRgn	0x0	0x436284	0x3c874	0x3b874	0x189
GetDCEx	0x0	0x436288	0x3c878	0x3b878	0x11b
GetCursorPos	0x0	0x43628c	0x3c87c	0x3b87c	0x119
wsprintfA	0x0	0x436290	0x3c880	0x3b880	0x307
SwitchToThisWindow	0x0	0x436294	0x3c884	0x3b884	0x2c3
SetForegroundWindow	0x0	0x436298	0x3c888	0x3b888	0x27a
ShowWindow	0x0	0x43629c	0x3c88c	0x3b88c	0x2b8
ReleaseDC	0x0	0x4362a0	0x3c890	0x3b890	0x24c
GetMenu	0x0	0x4362a4	0x3c894	0x3b894	0x13c
CheckMenuRadioItem	0x0	0x4362a8	0x3c898	0x3b898	0x3e
DestroyWindow	0x0	0x4362ac	0x3c89c	0x3b89c	0xa0
GetClientRect	0x0	0x4362b0	0x3c8a0	0x3b8a0	0x10d
ScrollWindowEx	0x0	0x4362b4	0x3c8a4	0x3b8a4	0x258
SetScrollInfo	0x0	0x4362b8	0x3c8a8	0x3b8a8	0x293
BringWindowToTop	0x0	0x4362bc	0x3c8ac	0x3b8ac	0x10
GetMessagePos	0x0	0x4362c0	0x3c8b0	0x3b8b0	0x14c
IsDlgButtonChecked	0x0	0x4362c4	0x3c8b4	0x3b8b4	0x1ba
LookupIconIdFromDirectory	0x0	0x4362c8	0x3c8b8	0x3b8b8	0x1ea
CreateIconFromResource	0x0	0x4362cc	0x3c8bc	0x3b8bc	0x5f
GetSysColor	0x0	0x4362d0	0x3c8c0	0x3b8c0	0x16c
GetDC	0x0	0x4362d4	0x3c8c4	0x3b8c4	0x11a
BeginPaint	0x0	0x4362d8	0x3c8c8	0x3b8c8	0xe
GetParent	0x0	0x4362dc	0x3c8cc	0x3b8cc	0x155
SystemParametersInfoA	0x0	0x4362e0	0x3c8d0	0x3b8d0	0x2c4
LoadImageA	0x0	0x4362e4	0x3c8d4	0x3b8d4	0x1d8
EndPaint	0x0	0x4362e8	0x3c8d8	0x3b8d8	0xd5
LoadIconA	0x0	0x4362ec	0x3c8dc	0x3b8dc	0x1d6
LoadCursorA	0x0	0x4362f0	0x3c8e0	0x3b8e0	0x1d2
RegisterClassA	0x0	0x4362f4	0x3c8e4	0x3b8e4	0x233
CreateWindowExA	0x0	0x4362f8	0x3c8e8	0x3b8e8	0x67

GDI32.dll (19)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TextOutW	0x0	0x43601c	0x3c60c	0x3b60c	0x2a0
CreateCompatibleDC	0x0	0x436020	0x3c610	0x3b610	0x2e
SetTextColor	0x0	0x436024	0x3c614	0x3b614	0x28d
GetTextMetricsW	0x0	0x436028	0x3c618	0x3b618	0x20d
MoveToEx	0x0	0x43602c	0x3c61c	0x3b61c	0x221
SelectObject	0x0	0x436030	0x3c620	0x3b620	0x25e
DeleteObject	0x0	0x436034	0x3c624	0x3b624	0xd0
BitBlt	0x0	0x436038	0x3c628	0x3b628	0x12
GetStockObject	0x0	0x43603c	0x3c62c	0x3b62c	0x1f4
FillRgn	0x0	0x436040	0x3c630	0x3b630	0x12d
SetMapMode	0x0	0x436044	0x3c634	0x3b634	0x27b
SetWindowExtEx	0x0	0x436048	0x3c638	0x3b638	0x293
SetViewportExtEx	0x0	0x43604c	0x3c63c	0x3b63c	0x28f
ExtCreatePen	0x0	0x436050	0x3c640	0x3b640	0x11d
BeginPath	0x0	0x436054	0x3c644	0x3b644	0x11
LineTo	0x0	0x436058	0x3c648	0x3b648	0x21d
EndPath	0x0	0x43605c	0x3c64c	0x3b64c	0xde
StrokePath	0x0	0x436060	0x3c650	0x3b650	0x29d
GetPixel	0x0	0x436064	0x3c654	0x3b654	0x1eb

ADVAPI32.dll (4)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
OpenProcessToken	0x0	0x436000	0x3c5f0	0x3b5f0	0x1f1
GetTokenInformation	0x0	0x436004	0x3c5f4	0x3b5f4	0x154
GetPrivateObjectSecurity	0x0	0x436008	0x3c5f8	0x3b5f8	0x140
GetSecurityDescriptorControl	0x0	0x43600c	0x3c5fc	0x3b5fc	0x141

SHELL32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHBrowseForFolderA	0x0	0x436240	0x3c830	0x3b830	0x77

ole32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateStreamOnHGlobal	0x0	0x43631c	0x3c90c	0x3b90c	0x85

OLEAUT32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
OleLoadPicture	0x1a2	0x43622c	0x3c81c	0x3b81c	-
OleSavePictureFile	0x1a7	0x436230	0x3c820	0x3b820	-

VERSION.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetFileVersionInfoW	0x0	0x436300	0x3c8f0	0x3b8f0	0x5

COMCTL32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateToolbarEx	0x0	0x436014	0x3c604	0x3b604	0xe

WS2_32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WSAStartup	0x73	0x436308	0x3c8f8	0x3b8f8	-

NETAPI32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
NetAuditClear	0x0	0x43621c	0x3c80c	0x3b80c	0x72

SHLWAPI.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
PathFileExistsA	0x0	0x436248	0x3c838	0x3b838	0x44
StrCmpNIA	0x0	0x43624c	0x3c83c	0x3b83c	0x11c
PathRemoveFileSpecW	0x0	0x436250	0x3c840	0x3b840	0x8b

OLEACC.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateStdAccessibleObject	0x0	0x436224	0x3c814	0x3b814	0x4

SETUPAPI.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SetupDiDestroyDriverInfoList	0x0	0x436238	0x3c828	0x3b828	0x13e

WTSAPI32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WTSFreeMemory	0x0	0x436310	0x3c900	0x3b900	0x8
WTSQuerySessionInformationA	0x0	0x436314	0x3c904	0x3b904	0xc

TRAFFIC.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TcSetInterface	0x0	0x436258	0x3c848	0x3b848	0x14

Icons (1)

»

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\bg\messages.json.gsg

Created File

Stream

Unknown

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\bg\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\bg\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.41 KB
MD5	5adc8550b91dfdea584b9f8041157923
SHA1	9e5175d593cfa36ffe6544f986c0f45e525b12b1
SHA256	1a2bf4989f8ddadf8c5f188879e6600f69f742e759a65ece19e60f6d53550d69
SSDeep	12:pht/8GforCV9QR0nH5E9nFbEMvCGuBG9YKBAtH:phzIsfZUFgEG8/SH

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt15.lst.gsg

Created File

Stream

Unknown

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt15.lst (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt15.lst.fuck (Created File)
Mime Type	application/octet-stream
File Size	88.44 KB
MD5	48341010d76bacf8c8b3572520bd01f7
SHA1	d39de53cc1ca25dbdca43e397f3e04d5702e81f1
SHA256	9ef844f502859aa5a832530a3a9bf364a9b8bfe0472d5d4fc4bddc8478337260
SSDeep	1536:uE+644iHuryDZ6Jn6aA17MOrofxNyd1rXA+R5c2b6CHR1RpdSd0lpFv1hkD7Uz10:PiOeDlaI7MNydVtRq2+C76mp9PkD7Uze

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_US\messages.json.gsg

Created File

Stream

Unknown

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_US\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_US\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	d23db4a7eeaff10d8b0a93fca09bc425
SHA1	f5a92c6c8358cc7acf7289e7acc5611075784aa7
SHA256	21aca813131f9c08b2a4dcc68b8efe5d088eb68ab24abeab32632ea48ec51f4b
SSDeep	6:IjrA0o1J8JLjllg6uJ8LnSACRDmgmnIGpfsnRVHKPgMrJLN13ootCRM7Q:IjrA088FlluazrCV9QR0nRgPhN1RtCRl

C:\\ProgramData\Oracle\Java\.oracle_jre_usage\17dfc292991c7c24.timestamp.gsg

Created File

Stream

Unknown

»

Also Known As	C:\\ProgramData\Oracle\Java\.oracle_jre_usage\17dfc292991c7c24.timestamp (Modified File) C:\\ProgramData\Oracle\Java\.oracle_jre_usage\17dfc292991c7c24.timestamp.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.19 KB
MD5	59f81dbd70b00781a4b303d62dee0ac2
SHA1	08ac98e10bed9503def17cadce7e500392e3dc58
SHA256	ab8a6ab9cce6af7472cdabda44806ac48ddf1207d65b2858a0bc84b9bc536abe
SSDeep	3:0O6NV6GFLmvPX2mWsxb8IdrNTxWWkkh3AigTdUxabop6e6zNd9lPh6ttZqJcoT9H:0O6NQ3PX2mWubfNTx7hqUwG6e6hbmtt0

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ms\messages.json.gsg

Created File

Stream

Unknown

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ms\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ms\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	a0985941da9b5e2e7a0a3e4a11bf4b34
SHA1	7cbb194ee7dc4814a8e134067f62368f3b538d1f
SHA256	bf798e416b84a93aa73e60f21bf19c359f26d79902dca7ee82682cbc1a1f7174
SSDeep	6:eL0bKDRaNNgZ5qrIlhTCcEHnSACRDmgmnIGpfsnBBpKuqRSQHES+sRGm92KBk4DD:sF7H14cEHnrCV9QR0nBBlsNESTrkmFB

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\store.vol.gsg

Created File

Stream

Unknown

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\store.vol (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\store.vol.fuck (Created File)
Mime Type	application/octet-stream
File Size	6.00 MB
MD5	bcf11423c9b0ebc9b725ae81c3e558c3
SHA1	5d8edea9d94a312e09e27af4deb88537173f3eaa
SHA256	92dbff057b317ee2062b480dbb5199c6544426af6dcdd52d48edf8ee3fcb37f2
SSDeep	196608:xeB+l0KmC/HqXFo94FMh8xaP4aTXEmLqFHxovDsOc6ws:UB+l0E/HkcUMh8gPH9cavDDc6ws

C:\\Boot\BCD.LOG.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	85d7498a586d52fc41baaeba006f8721
SHA1	d8283254eb9bda0dd61bc0318e40af2f81c1f747
SHA256	c7521952db533dbe9d3861f161bf44bdded8eb6873d1a8ba1a701e4b244abcfe
SSDeep	3:r3rGvRBb4ZK6tFD5BwblDC4DgCz9Us632OxRtmzQSiowIOn:DKvRgK+HyJe4RoREXw

C:\\Boot\Resources\en-US\bootres.dll.mui.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3534970c4d297e22fafe28df312a0e55
SHA1	511cbb75fbcb907d6e0160709dc1b770f460b60c
SHA256	8582a94c4cc53ce285c89483ae34dd1230d0e6e460981e7593cb2754d28b9732
SSDeep	3:DL8pf4KDf712p6q7YYqshZQbnAP29G+mTani26Bh4LbUF0h2WYIj8:DL8p9RqcHoQbAP2IjIi5hGbUF058

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.002.etl.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	988f50de7b0af484404637e6b281de76
SHA1	ff6d0e7deb7e5471c5668e8853deb817add85362
SHA256	41fc9c5aa22835731cd51faf7651256a7b3381654b32ca6f2087575fe280e706
SSDeep	3:Cemx4FLlBa9q1MLsJnfDUO4PikI5Yon4F3ZKg3f/DUor:CemxELlyquiUOgI5YZKo/DUor

C:\\Boot\pl-PL\bootmgr.exe.mui.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	c692364f94b80fe64eb3645b82bd8584
SHA1	ac19fef5cf991bf1c705d7656efd64532a56fff7
SHA256	95c2e02115254d0c16ac1c15195f03462a2ce75878d1e83208b1926b0b10fe07
SSDeep	3:rxkTsWg/NNncePoDgZdl3FjLqLfv8KVziXbRHYKZJGrGrqE:rvNxLxZLqL8KViLJarGrqE

C:\\Boot\hr-HR\bootmgr.exe.mui.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9415b88f84b4b7ca87e0374fcfa78026
SHA1	d07ee299d1517a9da5423f3f8fa7aa2ed711fe7b
SHA256	db30e6ca23a334d0492431bb728e7227cbd285df15ab873c2a7831cfb6b95c79
SSDeep	3:EIzHFCN5SFV1LrSmakksDFLcPY5FZvjs8qBOi8cNmlfNNloCmPn:EIpBLrSmahsdcPiRj2BOJNNbloCmP

C:\\ProgramData\Microsoft\User Account Pictures\user.png.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	8a62874c62c3e7639c5ab7ab03ca4036
SHA1	7ca13f1d51d8e16d99fc43f873a21de39287a256
SHA256	867cd681e33c2d2b42d7ef5c2581de27e6e4e47e5efdbbac1decf1fc9b078dff
SSDeep	3:VyIhRGxmeyharN1f4WxtL5s6Qc40IDAe4/w2ed82npUor:YICxpy6z42tdQcT2TKed82npUor

C:\\Boot\tr-TR\bootmgr.exe.mui.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e9bf3290d54e5975e36e0a76881efe89
SHA1	c3612d4ab8dffbc8e5931f1bac40ce62fcb6ff3c
SHA256	f7b86810b9c773652f56a24eba7f481b65c11d98a76720a3d608fe49a01452cb
SSDeep	3:1A+9AHBSsX/uI+4mMV+4l9nOC63Z+MFF4w6SYFuGma+e3rWYIj8:199AQsXmI+rMVH9n0sSyBnFuGWB8

C:\\ProgramData\Microsoft\User Account Pictures\user.bmp.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f55ecab32553c9a6bc75b35d77728bb6
SHA1	250d5e3d09bd98016c9701eb4cd6100b9a6e0387
SHA256	4619eac1866e477b2294be5d68016ae9d6c930d59dd3263a3bc8c7985ddd0112
SSDeep	3:+2nCbECvLI9OdyrFI+ZOblu8U6DTfCmjd9OYh7tMgXUqGV9Uor:pCRLIsyR1SgYftj/OM7tMgQ9Uor

C:\\Boot\tr-TR\memtest.exe.mui.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	4368417663ad5555f6b445aad675cb6a
SHA1	12cea8c1445e29186a47f29f02f087dde80411f3
SHA256	199817a6cbe9e118dd19a79a3f289054263d3f2da61669c826601c0215357dca
SSDeep	3:4APzb3CHy5zEk7QiaX+hn3EJCHx3dQiNTWbPiimschHGN40J3YIj8:4APHVEk7QJU0JEx3pNTcaPscBKb/8

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.006.etl.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f8c942b6b5a15fec64635bd45424c5aa
SHA1	43296f2b4508747e49779523dbc2491d5deb83d0
SHA256	ae25135c62a14811dd368b20c0093295945dacd24c50197d753001d2631572f3
SSDeep	3:S0fgTxxpBZeyqO8IG2vdHor0A2HFKnx+bv2Ohj0k6pNyde9Sn:/g9hECMIdHor0bSm+OhcDyg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.015.etl.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	58c0315e00a91165be124cd1dd95a164
SHA1	4b71682e442a052a6f1809109d5864a32acd6bc3
SHA256	c327fe143c64763291c954dc6794cdaf638f97b25fbfd72ad0f270f5d4ca6ab4
SSDeep	3:41pWOiIdATClXWBRv735+X0nxNBVpbep2+mrd+12Tyde9Sn:4Pi1zT3gX0nJbh+COSyg9Sn

C:\\Boot\nb-NO\memtest.exe.mui.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	c155cae71d383bd9ffa63952a74e23af
SHA1	49bda0ad9882916062b04ab5af1055b9bb7eb9bd
SHA256	1025b9553a5e86d17b21a1597c44b55f9ecf6c65870ca3a7c16d3eadb8f8734b
SSDeep	3:62VXMh29DsMMMsTv4lzdJ9QO34c3ppw0on27AAGrqE:62VchOpyv4NdEOIcXw0oncAAGrqE

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.001.etl.gsg

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	0ab0b4fac0fb5b47f3fd897bb05449c7
SHA1	7f0c2975c9bb085d83a247f3c706963ae7e731c7
SHA256	297c27dd832c832d6469f70154f4d46b4f407ede2d4d7a41b212e96a1fede858
SSDeep	3:b/h4nXSZs5iuGzAuCFjSayNhQGioiWZW9vOEM25j69Tyde9Sn:8wOiuiAuCFjMhQ8o9vr35oTyg9Sn

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\de\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\de\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\de\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	f6d2372f2e4e41b5fcb81d5ab2b71486
SHA1	9f599249d923e116c58c550510d04e4326079e9c
SHA256	8000575622151c29c8d054ee1b4ec8fd56d004c9714b63e792314c028533c880
SSDeep	6:sS17dfbJpa8L74GgQs1bSeSSACRDmgmnIGpfsny00L9ok4Y+hIQw+5cJBIl0QE7d:sidftpVL75zaArCV9QR0ny0So+hN+C4A

C:\\Boot\BOOTSTAT.DAT.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Boot\BOOTSTAT.DAT (Modified File) C:\\Boot\BOOTSTAT.DAT.fuck (Created File)
Mime Type	application/octet-stream
File Size	64.14 KB
MD5	f79b78f4545e0dffaa929b96f438cb65
SHA1	e716ce423368d8f7a10051453f1c93e3b94cff9c
SHA256	e6ebdc723d4efa541d5be0efdac83730519f651233e8280a1f815e6823587192
SSDeep	1536:h9CiCqQ3DiuK77V7tnG0uEtYI7KDM6/TWTUC6neJq:dCfeuQRRn379UTWYRes

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log.fuck (Created File)
Mime Type	application/octet-stream
File Size	1.36 KB
MD5	9941eb9322a81d072e2bd7e1d829b1be
SHA1	d69e44b97847841c5e1ab83fc5bbdaa461fa3533
SHA256	d2612511901b442e8814f33cb33831564354d71f6f67d2dd7218be068b2ca742
SSDeep	24:GyTyw6o30ZbuC9lTnedSTUxhaIFDSSSlfLnxHS+CJH8rW7AFT:hf6o3Ybv9lredoAtSSsnMN/Md

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.chk.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.chk (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.chk.fuck (Created File)
Mime Type	application/octet-stream
File Size	8.14 KB
MD5	389bfb2c4c68bafb01e97f63002c8694
SHA1	575f8040a76b1614e4a0430946fd27bc486a69a0
SHA256	257b3a7158b4e462b5d96a6a318bcc75b4999a5ab766606b77a5c8a0c5c51501
SSDeep	192:Ss/zC3pE67T8QYZHGTZbyoKXD8t2PW0OQzeQT4HRm8ma6yL:SI+a6pJyoigt0tztcxrma6u

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr65536.dat.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr65536.dat (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr65536.dat.fuck (Created File)
Mime Type	application/octet-stream
File Size	182.70 KB
MD5	e43bd88a52768bd93c1f89e38c915e35
SHA1	ecfae8a26807becd2e8931e08ab7aa43623520ac
SHA256	1a5b5711f7bc9bc44257ae12197c94e4af53fc999751dcf073f7a767568831a8
SSDeep	3072:k+VujHYACoc90AVLQ6tuNjBhfFVmcyTEVIm2vlMmDs9zwIYq/UyIkhSonX:/kHFbc9LdQ6tUdEvTXmolvDs9zwIeLOX

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.28 KB
MD5	66e8e4cc13bb5372daee2b3dd8dfea44
SHA1	a858087c45056b600b5cd64f98bea5e543e395f6
SHA256	60953b0f5fd8b50dfa1057e4607299988013be4e35df3cc066da2cb82c8b8aca
SSDeep	6:brD+V4v38xM0MM2hZUQdlDvO5zmVb3LKHZn3Ck+uG/C+fEC5kZBwrHnKarV:L+C2MFM2PUQd1Lglw07wrHnKKV

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png.fuck (Created File)
Mime Type	application/octet-stream
File Size	3.42 KB
MD5	9f9cba8ea0761068a49b4946f930f873
SHA1	a91a957f0c669a4e9522a6cb28a75b33abc2c059
SHA256	cf93be74e2657265815f30504944ab6a600d1836e034acbdf71cf54f0e839d70
SSDeep	96:B7cWCOUvR0kcjlZ4Q9HHii4ZmcTzQAC1PWgZ9aqY4KG25ce:eWZUHu12TsdLaqY4KGice

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fi\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fi\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fi\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	4c3c6ee72b0ae1bd8ae7cfb6601751d5
SHA1	4b2041038a999e1f72590fd352dca525910d2e10
SHA256	e083164954a46da94f3abd7ee4089bad663a316f6b3e3981355cec8b180b7de7
SSDeep	6:05PX3L13XUs/HmRFDISSACRDmgmnIGpfsnRTmhyl5lcJRYpxUj+QgPaW:09X3x3cRfrCV9QR0nJmhygJR6xUj+H

C:\\ProgramData\Adobe\ARM\Reader_17.012.20098\AcroRdrDCUpd1800920044_incr.msp.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\ProgramData\Adobe\ARM\Reader_17.012.20098\AcroRdrDCUpd1800920044_incr.msp (Modified File) C:\\ProgramData\Adobe\ARM\Reader_17.012.20098\AcroRdrDCUpd1800920044_incr.msp.fuck (Created File)
Mime Type	application/octet-stream
File Size	9.25 MB
MD5	c10cd607c7a73549e595e5572a7986da
SHA1	f5a8401967c38244e0e2450b87ef672d75475760
SHA256	8b7c4146b7f199f9ee8924d0c87a5c95b4f25b29ecd3bca1092ccd8ba6dbf991
SSDeep	3:wAqemA8mA0gU/9XONRu8Pa1v7c+g5zMWDTbjgnbRBu9Itl:xmagmXODu8i1vD8YYbGs9

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USStmp.log.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USStmp.log (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USStmp.log.fuck (Created File)
Mime Type	application/octet-stream
File Size	3.00 MB
MD5	e8b81de940c9f74837eaed98ef0bb722
SHA1	ca43a7e145ef70fd5e64f574c7d456c0283b66f6
SHA256	6a21dc408c8d1fbee68ea02ed81fe3b977e28ce442b3e58e980c6c9baea7cc45
SSDeep	49152:PlOJ+HM1WEO8xwHEx2rjag5prgthoGGYxKTGNvGp72VFZdSYf4E+Izgh:PlOQHMs3ZEJY8vdGMXFfVFLSYf4/us

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.48 KB
MD5	b488a1dbf30962f3ef7ed954a97b4ba0
SHA1	3ca91829efc77af60a918eb267a59443180fc5cd
SHA256	03d9ef22ddaad44636f6a2df1750e0bcf461acda7f68f7821e9b58c879890b23
SSDeep	12:45EkC6BBFW3XQw/ICvvLvplRe3B//dFVNczZco8jTo:jkCiBodI6Lvd+//dFQziZHo

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt17.lst.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt17.lst (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt17.lst.fuck (Created File)
Mime Type	application/octet-stream
File Size	9.47 KB
MD5	ab8b1b4892b08351ffa43e236c15f2a4
SHA1	6a5f373ddd484e27620ca60fe498c84f91f606d7
SHA256	acdd85d364b04c4dd8311f315f8f8bba5d2bcdfde8a1e29a962c650f0f333003
SSDeep	192:JKy+Qo66kgIJuZRY868l8oVC8vaqStecW2G4vvIjrs74HQtJy0l3xA9JG7/L:JK5L66jIJEY8Xiox0ex2FMrs7lto63mC

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\manifest.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\manifest.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\manifest.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.84 KB
MD5	b194c4d49ccd7c018e92f8ddfc4c88b5
SHA1	ac3db153f9f3fce07cef9906c29fc387105df25d
SHA256	f55a6648c554c19590e5806999ef40fde1209f1f2c47073e9ae23b01f331ae11
SSDeep	12:WHfg3M+ZrHCukJvlOackzZ+HyFsrHJp4pXBuUTOWTTRG+oXGkJ67rF36DM5SAHpI:W/LlqkzZB2Y5TVpoWkE7rFKDGH3rqcFa

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\it\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\it\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\it\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	7234d7d03553f510d1c0ecc8ee44f148
SHA1	d2853fd36326f6261130ffc050dd7d053743e7cc
SHA256	1087458d45e7dff4ead4ef156f6b0a36decc57194af121b2acf3af23b0549be9
SSDeep	6:+lDlMyHthur9bFb8TKlSACRDmgmnIGpfsnqI/AAAcG79oXxTxJenSv3RKn:+9lMEur9JlrCV9QR0nql7iTJgS3s

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	9abe7512a2b204601b4c25f86995c2cb
SHA1	570ab9da5b3c4bcc2305f162bdf228fbd02b441e
SHA256	147f7a2b1350671b09912de526efc929db5c40fd5c56266cc282171151762585
SSDeep	6:L7rYF6xFfjR9GSACRDmgmnIGpfsnlY0uuchGGrzE1ylATaehy:3rk6X7bGrCV9QR0nCVucHzE1YCvhy

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.html.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.html (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.html.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.22 KB
MD5	f6515af84615a9ea3622bc8a4ba93ce3
SHA1	984afe4b7a33a7dd18becadae83660dfe4b9a884
SHA256	42fdd36082b73914aa10cbd70af1ce9b55441084bf807915371f1640dbc3ccee
SSDeep	6:QC7GMIQbcOMil5ZBoNpjQcoFo3vV8Y1D3RO1n:QC7wQbUGZmNPBtT1rsn

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wsRGB.icc.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wsRGB.icc (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wsRGB.icc.fuck (Created File)
Mime Type	application/octet-stream
File Size	2.75 KB
MD5	8d76708571e51ba668a65f6e79097fe1
SHA1	8cbfdb1303604f0f7bf28186da2eb8def2230978
SHA256	2777185ea309658d5bc5b50fff850463306398eb217c6b704d74b57099bf8ec1
SSDeep	48:syciM/3n0+sxL6+z9DQjrx/KDW256exAN6brUWRPpsuIndS1uat6ntcPykDf:dQE+H+ztQjcDv/AN6np+dS1uar7f

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lt\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lt\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lt\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	41ab8994a11921df2696dfaedaecbfe5
SHA1	2b4412e6bd7212e31f2cc23fbb38fd64267ac50e
SHA256	dc95a7d21c0b5c0548869fc527acbd90b4df046eff874c947b54e7c8fc860adf
SSDeep	6:CRngxeWTS5fXTnSACRDmgmnIGpfsn6JGwdFmDFLTuX3CxG1:Cj7nrCV9QR0n6JGwdMDtKHCxG1

C:\\ProgramData\USOShared\Logs\UpdateUx.001.etl.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\ProgramData\USOShared\Logs\UpdateUx.001.etl (Modified File) C:\\ProgramData\USOShared\Logs\UpdateUx.001.etl.fuck (Created File)
Mime Type	application/octet-stream
File Size	4.14 KB
MD5	47bb7fa223129ef65ba9f4447bd9612c
SHA1	626a61b600392a54db085d213443bc7728ae8b01
SHA256	7031062bb1210e18754c376ea5bd5606a7025553adb1e91266d8f6dee6c9cc91
SSDeep	96:xQ63IlO9XKjk7ISJ+BeSv6DIzRQTeHmcElscZfL4y2:xLI4Ue0evDKuTZxXZfa

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00001.jrs.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00001.jrs (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00001.jrs.fuck (Created File)
Mime Type	application/octet-stream
File Size	3.00 MB
MD5	5fc7710f4ae089888b789f1bc67316fd
SHA1	06e0b570bff922e9c50b6b5590c14e5d6b8ff766
SHA256	802164e8d65b4032703a5c5984d273102b6931ef090ea60ef6a50bb3e1966a7c
SSDeep	98304:3nxSMhqaguqNJnK/rcfLXctdbKTkFGKf3:3nxSESjMtVSE3

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es_419\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es_419\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es_419\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	ec7a4a2f5f884bf6c91f8bdf81c309f5
SHA1	228369273e16b2ae123e113128d78caa019d2950
SHA256	54368c69aa0a3c9b6b43542b71983b2c472fda79024dd06029ce1f645569cb7a
SSDeep	6:jV7sXltQVYsYL8LvY/X8pJlgLZdSACRDmgmnIGpfsnlY0uuchGGrzE1yOKJBNVQ+:B264Lq8X2JluZdrCV9QR0nCVucHzE1ZS

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ja\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ja\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ja\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	10c1f22a7d05350ffd4cb44dfa5dc3fc
SHA1	aad19f1798ad5cea67dcd056e392e4cb6e5489bf
SHA256	0b468e053165e9ec4403951fcf5660972673fa1c1472aa60217c278631954ede
SSDeep	6:KOYwHbS6+/gtOSwTrRSACRDmgmnIGpfsnjxFz+pH7dxgzfEq+KWCeeC:KwHbmPS2trCV9QR0n/gxgFTC

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wscRGB.icc.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wscRGB.icc (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wscRGB.icc.fuck (Created File)
Mime Type	application/octet-stream
File Size	64.80 KB
MD5	5dcacff6f2b4fd39094037e19df20720
SHA1	5244216ec67cbcee5ac08dc6cbc50002d23c1c6a
SHA256	d68906ebf57ea3a76b20c62ae5a4d1eda819c762ac6000f95f6c3c000d811903
SSDeep	1536:/+wjASt4dx23zQ59e6JjwQ6sAxbwP6wmCLTJymRP8ECwORv3:G2AwG23ze9TPc0P6wmYTJZiE94v3

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\cs\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\cs\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\cs\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	2af4c108d3c4ef05c3c7935efd2e6a7c
SHA1	31b0ad4e9ad2f91df8c6963cc606e934fbce2e46
SHA256	6639be1e2778bc707595fea4512cf9cd19c044cb65fb776c70b627b23e9d5ec7
SSDeep	6:tTUH3ewE7Nz/U8wHJDzazGgQSACRDmgmnIGpfsnZ+x6zKx1t4Vdd3Yc:5UHYheHJ6zGVrCV9QR0nzxYc

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\nl\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\nl\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\nl\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	3ad0a1ab5aa309338c727e18ced6c507
SHA1	dba64e6229003254297404244ba31164da7554a6
SHA256	8e8e627db8fb2571afdccdb159e83c4edfe634c0c836e6acb704b1eb173066e1
SSDeep	6:FBvKENR/gh90lT8Qxrfk4z+zpKlSACRDmgmnIGpfsnHRpQHoS1jamkK1qxZ9Cqa:FpKOR/1TXpktpKlrCV9QR0nHR+HrImk6

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt15.lst.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt15.lst (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt15.lst.fuck (Created File)
Mime Type	application/octet-stream
File Size	9.47 KB
MD5	d3b18d9cf46e6c3ae4cc1b3f5d63bad9
SHA1	24279848bec7e06afbfdee221b1499eadf4166f5
SHA256	b0a82a267b6dfe8569b9ae32c6c4be9ec2cbc100324e356d3627fd4009d0408d
SSDeep	192:Gy+Qo66kgIJuZRY868l8oVC8vaqStecW2G4vvIjrs74HQtJy0l3xA9JG7/L:G5L66jIJEY8Xiox0ex2FMrs7lto63mMD

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hi\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hi\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hi\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.42 KB
MD5	fbd04364d172563ee33b2364913bc672
SHA1	0e1b4770ba65a2be2cc3367becc5ba430162b59a
SHA256	f5c03fa63c7aa8530ceb09046d1e194ad3259a02c4bf12a4115d4367911e0723
SSDeep	12:vJ75E5BziOnrCV9QR0nA4/VRx0m70Wvuj16/:vJ1E5RiOrsf7/VjULp6/

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fr\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fr\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fr\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	4b4aefaa41884745e04d77a0eeb52868
SHA1	df612ffcbfb47f777ae480e3df8286dcf567d41f
SHA256	4ca1c805b5a1d73c82800557b76204ba4260418d1bc24e6b796e2b2f590131cf
SSDeep	6:9tLSK1dTrVlwRf5+DTDLko5hSACRDmgmnIGpfsns/jDChrfPLtKqojumU8mDuZKz:PSWlwT+rjrCV9QR0nYjDChDTFL0u

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ko\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ko\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ko\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	0690cce5cc389031bb5913e7775ab5ed
SHA1	3484c165ac106786b5363573a67f8398d6b37872
SHA256	8f1d67ae413d4787edfcb2d4a23bb4cf3f3b4041df14adda403b0a79de7edd49
SSDeep	6:sz/oDe926F1rxp0TOLE/noSACRDmgmnIGpfsnLEdTS3ldSEV4CpX:ssDeM6FhMiWnorCV9QR0nLElIdSE7X

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_GB\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_GB\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_GB\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	53721109b0c5b854e6fe63ada55cf068
SHA1	0ada1e64544e13e116437a1649e1108dbe600a1b
SHA256	e535a4a7619f1043cdb1aa4801155657f928a03a51a8b5f3587d6c8c72d853cb
SSDeep	6:bl/n7faC6iUf3jodpncUlTRSACRDmgmnIGpfsnRVHhn7ISdEp3LdchCYv+j67IrF:blDfvGfcDhrCV9QR0nRTPdEXGbv+j6AF

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.log.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.log (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.log.fuck (Created File)
Mime Type	application/octet-stream
File Size	3.00 MB
MD5	8c9b2277aabbdaecace4d2e06bee8af7
SHA1	e55065bc2f7ea3fe62bc320a54738cee04f4fa57
SHA256	a698b1b3a7e8704dcba83dbfc67cbe7bfc188d87f3003c093c2055972dcc3c3b
SSDeep	98304:YokrnDPmoE9i4W/wUzGWeLyMDLE/hqCNy0qn+:vOrm9i46LGWeLJE7y0s+

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hu\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hu\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hu\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	fb111e12f74498c17ece8f3fd66dca7c
SHA1	9dc006b8d29c0c637b9525a69eb2c132b9e96af3
SHA256	23cca0361bbaa1edc9b3291382058d7e19f28ce09daeacaf139ce3b69fe1b5f4
SSDeep	6:8sQPXpWR6uZv1fKzKvMP90lSACRDmgmnIGpfsnkvswTDcdLt6gRBueDpYca+c2MZ:8s6lWv8zKUmlrCV9QR0nkvFOLtddppyT

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\ACECache11.lst.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\ACECache11.lst (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\ACECache11.lst.fuck (Created File)
Mime Type	application/octet-stream
File Size	1.27 KB
MD5	f4ca81b26bc77cca0e8379e064cc7e7c
SHA1	582dffb25ee016f0ef493a68960808f22701e5e9
SHA256	cdec0787d2349db11ecfd24476b239cf22bf1bc25ee986a3c8052f71969a0d37
SSDeep	24:J/Qf5KVGnU/hSlUM1Q9iviwVLPkuOMRCyPBp0nKs:Jm5OGnUR0Q9itYMn3cF

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\el\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\el\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\el\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.41 KB
MD5	1072dd0c3b4bf63347635a119ce2c2d7
SHA1	17357fb738b911de1fd71ba500ac7b64ae81a110
SHA256	c6fafb7bb7b0ed2631355cbfd5702d9f7c00dd93a7a176fd66b8cd3d1a106e77
SSDeep	12:dZCdX/+T5gtCrCV9QR0nrJWyySW2YDcy63mml18ABV:dZCc5gtCsfVFW5Almml1vf

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lv\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lv\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lv\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	5a2ecb17844acbfd999a8fa16d3ec1ca
SHA1	1c9226347f36652e5b4e33bd92c40f8d71f6c17f
SHA256	3f2cf51de3d17e42ec60fe5540a35ab3fdb60b28ee5106acbdf46f572d6c7a4c
SSDeep	6:/yIBpDdp0IQOusXhGwpFOvSACRDmgmnIGpfsnBpFBgZXf2sOgYdmOhQGWhUm:6GJHQOph3pFOvrCV9QR0n9iO3OG8/

C:\\BOOTSECT.BAK.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\BOOTSECT.BAK (Modified File) C:\\BOOTSECT.BAK.fuck (Created File)
Mime Type	application/octet-stream
File Size	8.14 KB
MD5	ed90aee48fbf4234a3474f689e0ac11e
SHA1	074fb0a9af7e2c339224e6de83efad5073086385
SHA256	81f1774cd32429ef3fa934a3236019e225e88aeff12e25607e73776bc4992802
SSDeep	192:tUYGu7M+qdlqbjB6cDp8aH43tvnFOVMZBLk8nfB24uvtktG:Pv7t3B6ceR3tvnFRk8nZ2XB

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt17.lst.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt17.lst (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt17.lst.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.66 KB
MD5	bdf72f732fd71e806194afcf90c16559
SHA1	88bc2b1b773ef6e2067edf1265abab02b8f90666
SHA256	caa424d9a6a5586f93011e970ab50be84cd45f13ab07e3a6e9b9613eeaf99102
SSDeep	12:zFdSXUtctJE9lJNqh4P4KK8oxJnD+EtcKfWVzuKAvy2nnIdRFDUSY+En/c+V:xEXUtjNNqIK9xJD+8cKEuKKyAmhUSYWm

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.js.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.js (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.js.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.22 KB
MD5	00f311dbf24d020706a05af3b3fd4ff8
SHA1	90f775949f51e8ffa9e0870a497c87efda016718
SHA256	0d05eb78536899abbf19d4db789fda43d4e3f5de51ae9af6a3bb6394cb00843a
SSDeep	6:CYaLQVx8HjpBMS6gIj4jlv9IdZU/5487VM:CyIprlidZm5XVM

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\Temp\CalendarCache.dat.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\Temp\CalendarCache.dat (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\Temp\CalendarCache.dat.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.16 KB
MD5	bbcfb0dbfa988d7c4220c8b0dab59a98
SHA1	b388f3d5a98c9e30c4feb5b2e3bae5b464be53d5
SHA256	f689b4ae3c93d60f33fcde014407537a6d9f828076e52e2e710cdc766defda22
SSDeep	3:Wiz21UC3iTrR02JnaiXfJZJK4GoiGtc3hcxuxHD0iRtjUly0ppGa2KF:WaeZSnP9KLoDq3hSuxHD1RJ8nppNDF

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fil\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fil\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fil\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	d72ed312b8a79055ba26037958e0ab9a
SHA1	3ca10ae40e41e80121a6b3eff6eeda4cff92f005
SHA256	27c42ef545ca1eea64a623482f6dd32f6ad79cafba3b91258f571ce5a3a656fc
SSDeep	6:zjQKcj6qAKpTgTIc3UzuKgbi8LlZ8JSACRDmgmnIGpfsn5mfShASavkt2fIszgOK:nTqAKbSAgbzlZKrCV9QR0nphbavOSL7O

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\he\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\he\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\he\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	a7724cea60a86e13c2201e4893b728a4
SHA1	089426d387b8fd8a82c8df461711181f08a71542
SHA256	c5f609ab22631c802ecc678e267f1e328023741ef87daf09cc677dfdcaccf2ae
SSDeep	6:OtOFw9W8TANrLfgRxOZN/vlJRSACRDmgmnIGpfsnlYTLDtYnNbaSRyvuc1VQnx1g:Oth9W8Utk2ZBvTRrCV9QR0niTibVRyvJ

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\et\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\et\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\et\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	2326f81d019702e7bb04218a14d5d356
SHA1	469563418dc9f9e049d463b2faf811dcfb804148
SHA256	855cb6b7343932b8f91c29d2bcf2bed3ace80fb6187719d4ea0ecb9f7a6fcbc4
SSDeep	6:S3FF5BhOPd8Ben/oSACRDmgmnIGpfsnTWkh3ez1cUV6KANwvKqMxjScP5n:wFLBhO+BeArCV9QR0nThhulV6hNwvKqa

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\UserCache.bin.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\UserCache.bin (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\UserCache.bin.fuck (Created File)
Mime Type	application/octet-stream
File Size	62.06 KB
MD5	88d4e513c1371d60b5a421fea0400f60
SHA1	e3aef4545bda7d59686739d2307797184c8960f2
SHA256	345b3cc99a331868436501a9b6b7c0fbe1ff697dd1bbb7ffb4550d7ac4809554
SSDeep	768:9Skn2f0MmI96AIS9E/0MkWSvp6ecBMwwnD8amCEoe0RBX8oz/fHsInvPNhSVjW9L:9VQmgLdKMvp65wnPmcfMkmsNhnrmVB5u

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\da\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\da\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\da\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	b2ab7076bed94bce87bbb1c9ceaabab8
SHA1	c8045a97758fef0cdff263e4260263f0232cc6da
SHA256	f265c8a62d9524829dec68baf7a0a8ffd9ac74889d164f9a3dac3b8ac57d96a4
SSDeep	6:6NNSl1LY8zZSJrCqC21/QSSACRDmgmnIGpfsnrSl6MZz2CP4N49WJiK62HahiJHv:mQlBY1Ca/QSrCV9QR0nslPi/Jx6kVrd

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_16.png.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_16.png (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_16.png.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.30 KB
MD5	809f1927c9eb15e711e2426b4b67dd25
SHA1	4b202c09f2ad87577444b23509d771c0c78a6a3e
SHA256	a3fce29ff6655f875b41616165f0ad2cbde5e52a7493605308902d7f4eea6470
SSDeep	6:VKpSq576oc2lqDoqBArM2EpC9oK2DI36N2dgYFPJFwIa2:goVPoQ4BkI2YFPJG72

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.66 KB
MD5	64ec31635bc5ac6a74dbbc1d4bd556fa
SHA1	3f45398ad4279210a1cec65f127a1edd0507ee42
SHA256	805bb5248c87fecde0c70e28d14b56420a1214270decb31fd76207133871d863
SSDeep	12:/8Bvb5fpKPo7cY6o3Bc15hk9MuL1epCsbnuIP94oTnhodJITUqimUqT7IBo:/wb5xOo7f6o30ZbuC9lTnedSTUxhaIq

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db.fuck (Created File)
Mime Type	application/octet-stream
File Size	7.14 KB
MD5	9dd094dc2b8023ff691a6d1b7ddcc25f
SHA1	2c50f2c9dbdf97278fb0d072635c1369a6b4b3b8
SHA256	ddbf1c790b094cc7d9041edad46d35c4c6486ef8be110f448ea199a9cdec6337
SSDeep	192:v5gsq/wMHk+1E2uvq1CBMEZcG6uUz2v9F54bZ3zY2o+Wea:LwbEuf5uUqv9F5izsea

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr.dat.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr.dat (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr.dat.fuck (Created File)
Mime Type	application/octet-stream
File Size	52.45 KB
MD5	7ba3499ea7c4a5fcbb4b8f6ca0487c06
SHA1	2a4bf8267e9ac73b61584914dad4a3d2fe2f9f9c
SHA256	5c7c6f11bb48fc134f51e23c990c1c705f33e14849c550a0658478053704207c
SSDeep	1536:UMsXWHWlTn8KAmaNvkJ/doyBQxsOuC5VqBI5/IpzoNGep8B:Uwu8cgsJ/djAsW5VqBI5ezoNd6

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.45 KB
MD5	4722bbb73b57addc80dfe9547a85a15a
SHA1	5983a52a82b807637d47c6c6af4f7fb974e4af26
SHA256	a4dd17c9bc00cf073f653e51b2994e2ad957cc1a3e16ee379d3054bcf7a8d6a9
SSDeep	12:d+KDrEmxRMx0hcGUkMw50PGJcPI9AVCZgYVCdhF:zh+ShjFhG+KYsd

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ca\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ca\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ca\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.36 KB
MD5	f99286848434dd42bb128376a33f8cd2
SHA1	7ff08043f0d264416b1e6851f495ac2f7b2c8522
SHA256	75499a84880b935784b67b7a4f8a58cff87b97edcbc53df21b387bec6f83d57a
SSDeep	6:W6x24IK+PReCEB1vmY4vJ16geMfspm3jGETOlSACRDmgmnIGpfsnOQsk0Q2qNA/q:1x2VVEHTuYg1tEpGaEarCV9QR0nOQ/0u

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00002.jrs.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00002.jrs (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00002.jrs.fuck (Created File)
Mime Type	application/octet-stream
File Size	3.00 MB
MD5	cfa3e8449390d75766f864456be0ec9a
SHA1	08046a5d4c4830bc131a709f3b575a4a17e388c6
SHA256	d7cacf51114924d87c17bd447138253ea20bf6371e8716e4a7b5068b32f46c40
SSDeep	49152:lZZIMJkGYjuCshxkT5sYXnJ+16NHx/bPifreAb+8n1f8L8uYhfO+:pM9juC4x0WeJ+qRzOvn1f84b

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ar\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ar\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ar\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.39 KB
MD5	7e8515738480c7368e74d08885475126
SHA1	a0e66ba3d2bd1a4072c0e5bbc5f5781af4abe0a2
SHA256	f6f6178a644ba8053029b1f0774837f1b0c226f9eb3ae72790e5af0bd023aacd
SSDeep	12:gnWpC3/AdsKzIJofutVhKT/WhceK5NWYGU6:gWAYdsdoyV0+TKOYj6

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt17.lst.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt17.lst (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt17.lst.fuck (Created File)
Mime Type	application/octet-stream
File Size	146.97 KB
MD5	16847f6ee0b98287ffaed57f627d1b92
SHA1	91b087ae7cb7abb7bea21629c2f32a3af38708ec
SHA256	5e9617beddf70259573317758ce775648e0a1f99e8167c88ffc3fbb51cf46bde
SSDeep	3072:UMy3G8Nhmd5KZOCfOJfurue9UuzJR+6fwGRZuurhg36GUlC+j5Juu:U53G8XpOCYurj9Uuz7+gwGRAuVE6GJSJ

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt15.lst.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt15.lst (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt15.lst.fuck (Created File)
Mime Type	application/octet-stream
File Size	1.14 KB
MD5	269a3367418e8eae51ccdcb9f9fd4409
SHA1	7d56cf9166214ea548c0dc02dc8335601980f43d
SHA256	7e30d907992b4f8df5b0e07d7d47480e658eb15070ac353460fccf1a2de72ec1
SSDeep	24:X9kNNqIK9xJD+8cKEuKKyAmhUSYW+VN2PAyCTyDjO9m+VrN:X94NPK9xJqZw9wYWe2Iry/OQ+Vx

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\id\messages.json.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\id\messages.json (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\id\messages.json.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.34 KB
MD5	2dc0a1507c31bdf2df5f7799df05b27f
SHA1	2834fa927eb20db5de20359d55354a1a24d2c842
SHA256	7760fb45efddd4943b999335516e2d644648e5f7b2e384eab7a5069969ccacb6
SSDeep	6:vzGHwLnSeDdEN00lmt/LOvSACRDmgmnIGpfsnFF877QqNeV6hq3h0ZntJXw+BLhe:vzNHKJ8/6vrCV9QR0nTIQ6kh0ZtJgljL

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat.gsg

Created File

Stream

Not Queried

»

Also Known As	C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat (Modified File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat.fuck (Created File)
Mime Type	application/octet-stream
File Size	0.17 KB
MD5	0ec6dab42931ea237ef29c214a8c29ea
SHA1	a1096b553146c603408f23152d18962204f47204
SHA256	47a6c362eb6cc8cd805013abf1bf8169f4ee057ecab9e464fc218e8ad2792330
SSDeep	3:AgH5wpbmgf9gLBNL4kKUzCq4ZV52rZXOHc3edRyK9ofjXNqreC4A0c7:fyf9gLcD/q4ZqpOHGedRRej0yC4Vc7

C:\\Boot\Fonts\jpn_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	0f72786337a16eaa1c2c9225b686932a
SHA1	8f99d737c7b3bbe78677335108e7c3c2fe0c1a18
SHA256	f404458d6619bcb55b84bdd700a67fb00aad3e691b1fa8e6f1a228d64fa74d35
SSDeep	3:q0TqrwYyInj5b/rOyGsb9+uteU/jCXgiA9fF/BuN0jy4cNeFUmPn:q0m0f+tOoeU/gWFgmO4cMOmP

C:\\Boot\sk-SK\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9dc2e5cd5cc1b2ff6d680328d72ed196
SHA1	3b65c803b78fb7573d2aa2be55b6a36c077efbdf
SHA256	8b09ab3b98c78e21c3d094311283d70b829a96bfbf987a2a5d63140253fbc083
SSDeep	3:VsgBFSArKmQ0M/DCLWnwcUYTrm/xTgHpR7K7SJAymF5+dYIj8:WgBoOBynwcUYnm/ZCpR7WSJp8

C:\\Boot\Fonts\msjh_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b50bf3a187b6138bfe4acf584446af5a
SHA1	30bbab060e5a2b5ed5c9c471693edb55e898fb95
SHA256	ce8c573598b7089d7d3dc7cd84a55f3a7c12af1d64b2c427f5fb499d97398488
SSDeep	3:h/rijqDUcyTVuy1vaLMQX5wOeIy1Sz9bgABJuT5kpNaC0FmHLjz3JY7mPn:prHygLMsVy1S5pYkxCmHLj1omP

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.015.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b07c343f9aec47cff31fd15ad382e0d6
SHA1	3cfaa48e2cb22569e9427518d64241bafb11b869
SHA256	892a201bb835e1f3b39d5f61196dbdad87d5784d50d6e8c6cff475afa04c3585
SSDeep	3:6baEmyxZdjVKncecdanPyYiqnV51Wklm9qxZX6vXHJvilnpUor:6bFZTKnvconPyYtCsm9IcPCpUor

C:\\Boot\cs-CZ\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	be2ecdd02ac337362552e87aa445f364
SHA1	034bdf40d335984bcd4a2bfc4cc94d0ae17620bd
SHA256	6ea48ede74011dcef1115039bc175e3f8a41d914535d96742b99dffae8dc2eab
SSDeep	3:Qw3rriPKBGfMAn2tJxLFj/GCYX+oR1HrpzERqxV/H8Ua5ZQuVowIOn:Qw3rOTMhtJxLx+bXhd4qPktZQQow

C:\\Boot\hu-HU\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	c5c059a9e15c3c8a52501ae3f24a40b3
SHA1	70af3fa5bb6282b3727da68b899626966885993d
SHA256	882b5371cc9cd884e0ef88a851d88f918d1b55699d10a9e175fe87b10c8002a6
SSDeep	3:ij2/hJWNiqLVWAxBQNvyiUMn8TEO7MurgvdOP1W2bpX4WmPn:w7Au54qrMn8Tn7vrg1OPUsX4WmP

C:\\Boot\zh-HK\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f1e35c0572dfef2e71368d921debe769
SHA1	9ae39e7a4a24f468409da94ae6816dfb43248cb6
SHA256	fde64bbfafb0aba0f93687eaa851e52bfbb24d39ee769b94926c280d73af3b0b
SSDeep	3:J9cXECW9V6LYVHzrhnVjtbQl781Rzbt3Fjir3IYIj8:T066LYVhnVjtO781hbtVIi8

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.004.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	8d67fb0d9dfc5781ad990c718c3bd699
SHA1	f2e256399160b67521553ff281d4708e9c278d12
SHA256	dd517266f796966bbb37f5b62624ac49a461236a4bc6a799f14efd85fca386c1
SSDeep	3:RPe7g5SAN+CTB4Zl66+pGJfYIafmtKQpEUGCPevk2zvfsKtpUor:pXMAx94b6JGfcmtQfCW8XKtpUor

C:\\Boot\fi-FI\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	21a4432be27c1279fc484b4d318aa2aa
SHA1	edf4fde439db95e52da4fd25da970020bfb78af7
SHA256	4ff4d9eadf986f7ecf16142789566c1b8a5cef3c87e00d79082ce0bb94cd6855
SSDeep	3:kByDHLkijLrl9E2hVlVf6rMLuNRwLfpUu36EIczk9p3K7mPn:Xr9Lrl9E2hVH2RwLRaEIkmP

C:\\Boot\it-IT\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	c10848a0072420d18de459bbabef972f
SHA1	8de013364c3e521cee50f84cf078ceb4d365466b
SHA256	fd5c11e3d3b51bbdc0857921049f2bcbc2098bddb820c122ea4226f985075939
SSDeep	3:c575Sl1qCWmqSwLdZyRSkoSXcWUilPCihvpDkGlrXhCnRwpcrmPn:gIlPWO+HHkoAUvIvpIIO2gmP

C:\\Boot\sv-SE\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	d6bc9059250145c0299a59e53c5a00cc
SHA1	b1647f51a1241537efd3d89a24ff3e19c89803d6
SHA256	74f1268c3076bb539646aa7115a325122cc0c4e0ab85b3c3488c6dfc7cea6ce4
SSDeep	3:/t/bn4lfrE6uvPhM/pzHL8ZnCQ9jqrUB0VuSvUOE9Wkg7n/+aWYIj8:p4lfrekpzHL8ZnT9WrK0VLxEck0/Q8

C:\\Boot\et-EE\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	31a5f1cd18f3c7718c5a0a2cbbf5f539
SHA1	b49e6cddcbc4e68afa95e79a1f9a6083e34b0e60
SHA256	da45d349a8436fd9b23c2e6dbfc8a474f4180a5bc9a14281260608d0b2dc7432
SSDeep	3:kyQiYl0CgSAShiUTrMUS+EOf9OdqKQjdbHftwcUElGDuOxsGOK7mPn:A0j+hiIrNNnf9TKqdb/CcUDxPOK7mP

C:\\Boot\sr-Latn-RS\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	605acf524474b658ee30c7d367aca927
SHA1	2da0ad2ae2f98d9ddcb7ee1554bd68d18d6f086a
SHA256	b137e69ad2b537807f326f351c676833fc982cc6f5e10b80c57c9a9c6ce7542e
SSDeep	3:FQ3Hy6sl9PiB5rHQRIVgDjxNfuGVHu1dRfSOZylZOrcdIYIj8:IFsl9PiBdhYxNfr6dRfl8arSS8

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.012.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	ef4fbaa81fe4486e3869fffd770fb386
SHA1	e548ce00e5a1906054bd201304e1204091ba0524
SHA256	af179404b9d2a220599df7808a77effcaeccdffa467e899552d1096d1dabdd74
SSDeep	3:IxFU6dP6VaBydHo7pst81M5xxm1EqhwDGqwpeEWnMvi/DUor:IvU6dyFHo7ytDjMEEaGPpRx6/DUor

C:\\Boot\ro-RO\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3ec0e2e1f0abd70e4ab2a1091d6e23e1
SHA1	48b6b1dd33c8484fba5d013aadddcddbedc06ede
SHA256	b303fc28ea50ef1099551f4657f337cddc7d3c6611a1a9e0022e9f04e5318231
SSDeep	3:yPGTKYiZGqn0cr+BjV+XXyyv4mEVoqVIDIzhJhi5WYIj8:yebiZGDcr+BjV+XiZmyIM58

C:\\Boot\Fonts\msyh_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	170f4c1fdc5559979895c12aceeb5acb
SHA1	631650b95f7251b65ae662f57ba820b95fae6278
SHA256	eb51c8b1e48a890544e68d6144316e33241069bf485646cbcd39f83f1a993672
SSDeep	3:S0yksteuarxr1zw1A6It/uXyUXEkt6/BRk8VrOWmPn:SksteuaxtqA6IN2Rk/BRLrOWmP

C:\\ProgramData\Microsoft\User Account Pictures\guest.bmp.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	73932e4075a693695b640a15af3843ab
SHA1	5b11583e8498468994b554f6d2211b2516d3d741
SHA256	5ed1cc729f468926c19a8fcb5497664f843e068ae927754d462c61a4110b6e5c
SSDeep	3:abpHc8wdnaHljBH/XWO60NIaJLLHg6aJrmomShRMUor:abpHoa1B/Xv60NrJ3yCorkUor

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.017.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	08454cdb98a8902076ce29527425f0cd
SHA1	da97c732aecaa9920ee1b44966f880fad33c40d7
SHA256	3126ea555157370b6a8c2fd8e9e74fc28cacaa854116f33d16fe1fa027a92336
SSDeep	3:IcB8PK74Qds/elrhNDZPtrCqR/yNOwaVbMEQi7m7L2gqIGxDUor:Iwx4Qd2elbx8qRqcXbkpFGFUor

C:\\Boot\pt-PT\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	176a2afda54be1b51fa1ff401ea4528a
SHA1	b780d52f7b559ed2f33d0f52b44e8505b81419e4
SHA256	1751970a739ba77e44ab7f4e38767338081a76f74fc5cf22a10b07fd88567663
SSDeep	3:ovZx88fhtvH4pSGdobLRX1iaQ2MRRIflRC2iXWROdYIj8:oBVepSf/iDCN0eO/8

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.007.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f3adf7caddf60dda24751b7c32098967
SHA1	d32a59fdf176043274d8262b108d518d1dcdcade
SHA256	5ba1d48f11e0812b68f97340946afb8a0ac1070c94ac7def612fa16d541f8513
SSDeep	3:DknyYW5eC/w+xP936lcqOLdwjbajbpyILZxi6nlrI2qDRpUor:4BWAC/w+FV2c1uj2jFpFV4RpUor

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.004.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5585b7c55df0b40cb3ac4d09fb1d6724
SHA1	94725cabf4ae027fb9eeb57715c55f34f5f63027
SHA256	538009b4e7239af6a596ba9a1d5865a9234484850b111d928652129c3fac934e
SSDeep	3:F1XTA6aNwCNnIcLgXAuCkoT35xyFt0EG7RsysP1VUoyde9Sn:zTl6gXOX5IFet41Nyg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.014.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	765fbe854bc3f86cb7cef25b166a1285
SHA1	cfc6caf5920fb520820f85ac87ce4a7c53b8bb80
SHA256	29c2450cfc1e54a25d2954e61b9fc62104810863f320c69039ddadf00cc77574
SSDeep	3:XMOYC9pq2XgxbKTov/hfU/1BUlXrDlqaAiRfvQumiRXOe4YvTyde9Sn:XMApq2Xg4y/hfUNB9ijXOnIyg9Sn

C:\\ProgramData\Microsoft\User Account Pictures\guest.png.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	ac521859a4d706b3638adb97af5d88b9
SHA1	52419f46660ac4d893936b6644fe792b2bdc6b1f
SHA256	fd9d2fcbf44e872644f5177f42e792bac0cc0b0dad989f47c03edde451517e42
SSDeep	3:qLgf4lfmuPtXOWzHUpCbC6SY99QFn9R8GB4rTOTj7HNx0DYZMyM0O0jnpUor:qLkgmStXXjUDFn9eCTjpaBt0pUor

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.016.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	ceac08210168e249a1f2598529cecda1
SHA1	b995e96c7c85ffd4fad2f984b78fbc35f13f84c5
SHA256	61370138146c49df48448184194571e17560f651338e2dda2f1c81d79fe592f2
SSDeep	3:vY3OrEVBNksAMRDULv1lFBV9u+hUOws9hvZ4P6nSjq7HSyde9Sn:eNksAPvPd9uAVdhR4gSe7yyg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.011.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	4acc002d479d6502466c45355e26368a
SHA1	d81befeaa1a1e0ef923680daa901e74193d39a4a
SHA256	f06c5f8011366cc7527f635051c9ab6175ff7b2a18601ef2b71ad0c7a9074c51
SSDeep	3:6mMIlPNWXqc8f+5bhlM55fkhS0PZTRZiphgpwBbXNyde9Sn:5dNSqc8f445ArPZ6gI9yg9Sn

C:\\Boot\zh-TW\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	916e552d636a15c3dee5bf1f06a0d463
SHA1	c02156206ecf5dd8d30d7dd6bd85937b3013a443
SHA256	080151bf4897d65fadb570c7fec1ee4642d8f9ed995eb21fef0a5fd66788f85a
SSDeep	3:hLtnu2NP15htV3YKbI/19nBIUE/rKGxt0bTgodI7KzEh1an:h/1V3YKk7nTE/ptKsoW72rn

C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\no\messages.json.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.33 KB
MD5	aa1f4e559231ce99b0e9287cd83c5b1b
SHA1	c2ad2f51b6c0492f0eb21e050c9ce42b01d5d27e
SHA256	0c2f2dd643e72e029a0aa42594c2900353cff7411a6daec9592834fa8474e408
SSDeep	6:GpVKyFA3uYFr1oL1T8Czgj0RAIXGeDAhwdyNsre/4rjhzpC:8XcyTQj08eA0iCegrRpC

C:\\Boot\fi-FI\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	58d505a19d644ab9908217434477835b
SHA1	427751f8064b0cf3191f387188ddbc3e2213cc1e
SHA256	58f5f926279b861e021844e560605f5c662560f349947a0a5547954e21c214f8
SSDeep	3:oME66QBINKBtsIE+iqYNXWAyyoSvf6+U7ChpmFnk3eA067mPn:w66QBINAtsI1i4AXFfMChIdjmmP

C:\\ProgramData\USOPrivate\UpdateStore\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	cb87d30f01c0515787f0db9e7ac09f29
SHA1	b92ff1cdaa7654ec7a2899aa479b7aab512be46f
SHA256	e9ce61936bfbf053f15183cdd4567d880f0385048250f17e0b6f0b227ba8f43b
SSDeep	3:Y7H1ullUoHwnwIVARbcn0WRGt+gJvhzzFHz9RTHwiXi44Ov8DPTyde9Sn:YzZoHwnAcnJGVrzpjTHw0i44O6yg9Sn

C:\\ProgramData\Microsoft\User Account Pictures\user-48.png.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	dd53992829fc608ad9f95d9f76459309
SHA1	8382c253a630f33b3ba35dde2041f8fb78b59e73
SHA256	491ba43120a1003c7169d6c8043845f87658ab809bd3497e6cdd484a29363ec5
SSDeep	3:SWEqs0cwu4iBKoLgLiWZCVB37svKUp4pRbe/Gw8y8TnuDFnfLUor:SWw0DS8oKZHvKUW5wj8DuDdDUor

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.001.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e55508955e93b6f91e96ee7c5f3ccb7e
SHA1	909598d5a9c4ffca418473e3a5dc91b7a2934c10
SHA256	ac79ddb758e71d53045e1acfb854fdc0d454d95a0ef9e416b1c850ebc28a1b11
SSDeep	3:aWiMWMpJ3oxCdNNm7ci6DuoAIjmNSnmQ/2G/fp/DUor:aWiM/SsNeOudpAnmk2o5DUor

C:\\Boot\BCD.LOG.gsg

Created File

Unknown

Not Queried

»

Also Known As	C:\\Boot\bg-BG\bootmgr.exe.mui.gsg (Created File) C:\\Boot\BOOTSTAT.DAT.gsg (Created File) C:\\Boot\cs-CZ\bootmgr.exe.mui.gsg (Created File) C:\\Boot\cs-CZ\memtest.exe.mui.gsg (Created File) C:\\Boot\da-DK\bootmgr.exe.mui.gsg (Created File) C:\\Boot\da-DK\memtest.exe.mui.gsg (Created File) C:\\Boot\de-DE\bootmgr.exe.mui.gsg (Created File) C:\\Boot\de-DE\memtest.exe.mui.gsg (Created File) C:\\Boot\el-GR\bootmgr.exe.mui.gsg (Created File) C:\\Boot\el-GR\memtest.exe.mui.gsg (Created File) C:\\Boot\en-GB\bootmgr.exe.mui.gsg (Created File) C:\\Boot\en-US\bootmgr.exe.mui.gsg (Created File) C:\\Boot\en-US\memtest.exe.mui.gsg (Created File) C:\\Boot\es-ES\bootmgr.exe.mui.gsg (Created File) C:\\Boot\es-ES\memtest.exe.mui.gsg (Created File) C:\\Boot\es-MX\bootmgr.exe.mui.gsg (Created File) C:\\Boot\et-EE\bootmgr.exe.mui.gsg (Created File) C:\\Boot\fi-FI\bootmgr.exe.mui.gsg (Created File) C:\\Boot\fi-FI\memtest.exe.mui.gsg (Created File) C:\\Boot\Fonts\chs_boot.ttf.gsg (Created File) C:\\Boot\Fonts\cht_boot.ttf.gsg (Created File) C:\\Boot\Fonts\jpn_boot.ttf.gsg (Created File) C:\\Boot\Fonts\kor_boot.ttf.gsg (Created File) C:\\Boot\Fonts\malgunn_boot.ttf.gsg (Created File) C:\\Boot\Fonts\malgun_boot.ttf.gsg (Created File) C:\\Boot\Fonts\meiryon_boot.ttf.gsg (Created File) C:\\Boot\Fonts\meiryo_boot.ttf.gsg (Created File) C:\\Boot\Fonts\msjhn_boot.ttf.gsg (Created File) C:\\Boot\Fonts\msjh_boot.ttf.gsg (Created File) C:\\Boot\Fonts\msyhn_boot.ttf.gsg (Created File) C:\\Boot\Fonts\msyh_boot.ttf.gsg (Created File) C:\\Boot\Fonts\segmono_boot.ttf.gsg (Created File) C:\\Boot\Fonts\segoen_slboot.ttf.gsg (Created File) C:\\Boot\Fonts\segoe_slboot.ttf.gsg (Created File) C:\\Boot\Fonts\wgl4_boot.ttf.gsg (Created File) C:\\Boot\fr-CA\bootmgr.exe.mui.gsg (Created File) C:\\Boot\fr-FR\bootmgr.exe.mui.gsg (Created File) C:\\Boot\fr-FR\memtest.exe.mui.gsg (Created File) C:\\Boot\hr-HR\bootmgr.exe.mui.gsg (Created File) C:\\Boot\hu-HU\bootmgr.exe.mui.gsg (Created File) C:\\Boot\hu-HU\memtest.exe.mui.gsg (Created File) C:\\Boot\it-IT\bootmgr.exe.mui.gsg (Created File) C:\\Boot\it-IT\memtest.exe.mui.gsg (Created File) C:\\Boot\ja-JP\bootmgr.exe.mui.gsg (Created File) C:\\Boot\ja-JP\memtest.exe.mui.gsg (Created File) C:\\Boot\ko-KR\bootmgr.exe.mui.gsg (Created File) C:\\Boot\ko-KR\memtest.exe.mui.gsg (Created File) C:\\Boot\lt-LT\bootmgr.exe.mui.gsg (Created File) C:\\Boot\lv-LV\bootmgr.exe.mui.gsg (Created File) C:\\Boot\nb-NO\bootmgr.exe.mui.gsg (Created File) C:\\Boot\nb-NO\memtest.exe.mui.gsg (Created File) C:\\Boot\nl-NL\bootmgr.exe.mui.gsg (Created File) C:\\Boot\nl-NL\memtest.exe.mui.gsg (Created File) C:\\Boot\pl-PL\bootmgr.exe.mui.gsg (Created File) C:\\Boot\pl-PL\memtest.exe.mui.gsg (Created File) C:\\Boot\pt-BR\bootmgr.exe.mui.gsg (Created File) C:\\Boot\pt-BR\memtest.exe.mui.gsg (Created File) C:\\Boot\pt-PT\bootmgr.exe.mui.gsg (Created File) C:\\Boot\pt-PT\memtest.exe.mui.gsg (Created File) C:\\Boot\qps-ploc\bootmgr.exe.mui.gsg (Created File) C:\\Boot\qps-ploc\memtest.exe.mui.gsg (Created File) C:\\Boot\Resources\en-US\bootres.dll.mui.gsg (Created File) C:\\Boot\ro-RO\bootmgr.exe.mui.gsg (Created File) C:\\Boot\ru-RU\bootmgr.exe.mui.gsg (Created File) C:\\Boot\ru-RU\memtest.exe.mui.gsg (Created File) C:\\Boot\sk-SK\bootmgr.exe.mui.gsg (Created File) C:\\Boot\sl-SI\bootmgr.exe.mui.gsg (Created File) C:\\Boot\sr-Latn-CS\bootmgr.exe.mui.gsg (Created File) C:\\Boot\sr-Latn-CS\memtest.exe.mui.gsg (Created File) C:\\Boot\sr-Latn-RS\bootmgr.exe.mui.gsg (Created File) C:\\Boot\sv-SE\bootmgr.exe.mui.gsg (Created File) C:\\Boot\sv-SE\memtest.exe.mui.gsg (Created File) C:\\Boot\tr-TR\bootmgr.exe.mui.gsg (Created File) C:\\Boot\tr-TR\memtest.exe.mui.gsg (Created File) C:\\Boot\uk-UA\bootmgr.exe.mui.gsg (Created File) C:\\Boot\zh-CN\bootmgr.exe.mui.gsg (Created File) C:\\Boot\zh-CN\memtest.exe.mui.gsg (Created File) C:\\Boot\zh-HK\bootmgr.exe.mui.gsg (Created File) C:\\Boot\zh-HK\memtest.exe.mui.gsg (Created File) C:\\Boot\zh-TW\bootmgr.exe.mui.gsg (Created File) C:\\Boot\zh-TW\memtest.exe.mui.gsg (Created File) C:\\BOOTSECT.BAK.gsg (Created File) C:\\hiberfil.sys.gsg (Created File) C:\\pagefile.sys.gsg (Created File) C:\\ProgramData\Adobe\ARM\Reader_17.012.20098\AcroRdrDCUpd1800920044_incr.msp.gsg (Created File) C:\\ProgramData\Oracle\Java\.oracle_jre_usage\17dfc292991c7c24.timestamp.gsg (Created File) C:\\ProgramData\USOPrivate\UpdateStore\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.001.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.002.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.003.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.004.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.005.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.006.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.007.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.008.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.009.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.010.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.011.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.012.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.013.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.014.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.015.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.016.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.017.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.018.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.019.etl.gsg (Created File) C:\\ProgramData\USOShared\Logs\UpdateUx.001.etl.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt15.lst.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt17.lst.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt15.lst.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt17.lst.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt15.lst.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt17.lst.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr.dat.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\IconCacheRdr65536.dat.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Acrobat\DC\UserCache.bin.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\ACECache11.lst.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wscRGB.icc.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Adobe\Color\Profiles\wsRGB.icc.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\Temp\CalendarCache.dat.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\store.vol.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.chk.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USS.log.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00001.jrs.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USSres00002.jrs.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Comms\UnistoreDB\USStmp.log.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_16.png.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.html.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\main.js.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\manifest.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ar\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\bg\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ca\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\cs\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\da\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\de\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\el\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_GB\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_US\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es_419\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\et\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fi\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fil\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fr\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\he\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hi\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hu\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\id\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\it\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ja\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ko\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lt\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lv\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ms\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\nl\messages.json.gsg (Created File) C:\\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\no\messages.json.gsg (Created File)
Mime Type	application/x-empty
File Size	0.00 KB
MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SSDeep	3::

C:\\Boot\en-US\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	0fab9f6875f39eccce20c9ddeb97d85c
SHA1	34449550f89994c72d709fb61c2fd5c13bac619c
SHA256	bb7399ca15e9b506358e6d58b15dd4dcb6d1e76099a615c300631721a763ecc7
SSDeep	3:/pdF/TgfP1+q8o/z0H0xNtsLgCt/E34hDGBvXjyKywIOn:RdhAmVHYtsh/E3EDGBvXjZyw

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.011.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b49dba41a9eef3b16fc7cbe014b2d018
SHA1	4cb039c9ff4ad8879e60eb7a8b47fec5130a1886
SHA256	0ef8fe7b2305b1390b7e1a4cd503e1ca2605fcdfd035768c24b345bf517d0d17
SSDeep	3:EIOqEmsm9FAv/ZMRLWrgeTYvyLFN6dh9Kaxk3v1wvQHgqB6knpUor:hOqEEnqZYz7yLKdCaOf1wYAqMknpUor

C:\\Boot\es-MX\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e3774d1e2ef3415f96da75402c7fc5bb
SHA1	3779e8a006f057b6381a3c5485a5d73af22ad911
SHA256	aaa19aa85f75e0f72a9eb4d54580cfd6e1716a137dca61baa90eb3a36195aaae
SSDeep	3:04cYuLcXGjrPpZFeOOX9fSnDcrk9xp/DhRcwyeDtm5owIOn:0+u4XG5Z1OX9fAcrk9xhwoDwyw

C:\\Boot\qps-ploc\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3a7d54b403891b0c2823185f1e7221d3
SHA1	013a37bd25e0ccc8da773a06ed9bd3e6f7209230
SHA256	f1ddbcc4b74d19eede385057307c0c18163578e58dd69df3f70bbb7e9e7d0f37
SSDeep	3:tJ5H7JhTVhQk/oFPvSOpuCbnB8N7fQUJJWYIj8:tjNxVhQ9FPvrpuCbKpfVQ8

C:\\Boot\fr-FR\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	bd61c18227e8cca00435a290e1bf77ee
SHA1	1e05e79edaf740d87af66f628a1482eeebebfe8a
SHA256	5c494b1185e79ed93b50bce1e31d29ae56448bcce31e44fddbc25b0b2dd2fbac
SSDeep	3:xzOBuD0l2o23bYbPVbDueAjecNVzChDWC8gbmPn:1OBuK23bYbPVnurjeczuhDKgbmP

C:\\Boot\zh-TW\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5b578ec6e293cad6661dcb548e740e4f
SHA1	8c22e865554c91ee4b60142067ef2bdd72ba992e
SHA256	d4b12718921577e307eb67eceab1222e5afe5b38e7139c2b213c873512dbc4ce
SSDeep	3:i1phWk0OdXzYv/vX8HyXJ3bXdPJGZ6R13B6PLH1lOvU0NWDI82+/1an:uWMdjYvX7XJ7dLB6Pz1lOTWDXMn

C:\\$Recycle.Bin\S-1-5-18\README_BACK_FILES.htm

Created File

Text

Not Queried

»

Also Known As	C:\\$Recycle.Bin\S-1-5-21-1462094071-1423818996-289466292-1000\README_BACK_FILES.htm (Created File) C:\\$Recycle.Bin\README_BACK_FILES.htm (Created File) C:\\Boot\bg-BG\README_BACK_FILES.htm (Created File) C:\\Boot\cs-CZ\README_BACK_FILES.htm (Created File) C:\\Boot\da-DK\README_BACK_FILES.htm (Created File) C:\\Boot\de-DE\README_BACK_FILES.htm (Created File) C:\\Boot\el-GR\README_BACK_FILES.htm (Created File)
Mime Type	text/html
File Size	1.48 KB
MD5	56373bb54816fb925e7f19f9f84734b8
SHA1	a88734c21b9159bbf4c6a3adea476161c143e37d
SHA256	640f4bd8e66ff0183a86a5df3d765a3f848e73143a273a94d8d629ba54f1b9e0
SSDeep	24:kpblCZLunyZkghcmaq1k28+KFJGnTFpVvYycT31UnKqf1AXaeyYaT:CCD+gWmaqi22FJS0BUh14y

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.016.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	28f49673ac8f23322f2fa5adfc63d10f
SHA1	9e7ce9a44a126952b6c1df59204fa51134bcafb2
SHA256	ccdfefe96a832817b66e3295d55eae4fe0d3cac50a5cc297e3861078af01c82e
SSDeep	3:l3s/YaYIDuBhqGsZT+xrHLseJvbaFNT4Z3FNpi+rYcXtLUor:tE3LGk7Z8jLaUZLp5YitLUor

C:\\Boot\Fonts\segoe_slboot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	2e801cbc882ceaa34d2af90861ddadeb
SHA1	4ba7b4cc427ca7bc00557141f4db8ecc49073bb6
SHA256	4ddd5e87aede74225e9ffa0adea33babb1ec00df2b2e11386626e0679b42e612
SSDeep	3:+reUTUFd5a1kA/d+coMrGb4OI9Fw/idu5Moff9G/58iDNl7mPn:+rPU1kvWXMsqduMQ9G/ZDNl7mP

C:\\Boot\bg-BG\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	4d91a01fb597958cb6d9359e9b17bd12
SHA1	ce5caf192740da8b5321d009d3c5f10e50c1df19
SHA256	8498330765a27a3c5cc5650519b05718e75c74d5adc208f77793f9542a833f37
SSDeep	3:IplUjPtHHji+ZXCzYW8PcPCCLuQ//3hCiAlwIOn:IfUjVnJXQ9PCCLfxCiAlw

C:\\Boot\Fonts\segmono_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5ba46da5059c2947a649c589693025fc
SHA1	aad79489d6d72808fcd33400f38fd555ff90472c
SHA256	22494d8e411c3e432e43f777c7c149d4ec38f348e2f74ad6727dde1ad069a157
SSDeep	3:hWLpNYk/61B3Isr7TxPpVRX0nkCxX3Jl//pwiVeXMnNm0l7mPn:0LL0+K7TBpVl0kkP/NVe6Dl7mP

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.005.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5a9a9de26e9c8221f6ff1a6a2cb8bafb
SHA1	0b87e83e1e58f61533493d1967b167281662df2d
SHA256	7148deef6d5bbab2a3600c94c5f1401b31ff1548e199dc37ad1c6ab3b1a108c8
SSDeep	3:8E+et8ZG26IgGKa9Ny++nCQPOxGuRAoyXnVO20VV7u5r1Nt7yde9Sn:8Ev8Psda9NyOoOoeY+KNNyg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.007.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	fd1d0f491419d6e743c053312fb056e6
SHA1	9adaff56eeee73500ce265c5f316a079c7df8bf6
SHA256	93f3cfaf47458af1b752f9503661d8752a1ea80f0bc2d15dee9c6f5f650053cc
SSDeep	3:+MsSY1nQTZxBBnKdnoPqtw0DZuNN2VNu7If8CELv/QOeEyde9Sn:zsSY1nQ1hKlwSfuNN2VNuoI/bbyg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.019.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f56cf5a3f70f88e7a2a7408b3450602f
SHA1	ddca67b5309c475cd7e0e0b1a20a5011cf78ce06
SHA256	6f3d41b5761e840ea0069b90637cb420a52fb15c9edc38a72b94cc7b841c1299
SSDeep	3:6i3lQOakGbrWWeufuyv5t+bW+KtmNfxtvrUDQ5EXlnpUor:6UlQOaA2uQUW+KtoxtvrUM5EX9pUor

C:\\Boot\es-ES\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5729b959f213ccb50a8f812f82f84954
SHA1	1cbc0f4a28b966078237ba21208486e1c2bd61a8
SHA256	9c466fc1e4b54c8ef2df9792c972538b3226c11ad122e3acdde8841bfde03492
SSDeep	3:5KRMurdg5PNC9Ud/e98I39FbPHQuMw1mra7gLQGoFgXK5alwIOn:ERMurGoWw39FrQaJMEGYgXK5alw

C:\\Boot\zh-HK\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	d2d814ecb470bdcb74ff11b82f77108b
SHA1	552722a2fcd886800e2b8cb75e5b198f4e1e079b
SHA256	83e1f6de9d9a64404f559ebebabd6ce1e1d1707cfed9b03b52a448ef18d88f22
SSDeep	3:qqx2THKnV+Pqn3rR947WyvADQ2rzbYT49JHH3w3PDreLlmQFsOdYIj8:qqwTqUyn3r01vGrzMC3wfPeL0Qv/8

C:\\Boot\Fonts\chs_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3d69c55a1c77678b352e33071279976f
SHA1	9715fa552e4ba85dc29466150b9c82f8c5600ee1
SHA256	7cc66c59a54f4a6489daa773d03c2183e83fe629cf70b59b6c2778f552e27715
SSDeep	3:9sz9aj4o2kfMwsjEO2AkU1uloRV5ywu+FeGPjWFeY4h3pYK7mPn:QSr2W4EO2AkiRVru+FeGPaFeY4hpn7mP

C:\\Boot\el-GR\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	38d32ee9bdf6ed8aff49149d5eefb7b7
SHA1	f0ccf69043d54938f0c590a340e7be71ca3245d6
SHA256	931e9128cba996d91c2651b876f114a7637fd3750c4bd0278a23aa84f5bf62bd
SSDeep	3:h10C4cMuEh9Y5ntiA+z5kEihki079T3ggdsalwIOn:h10C4993Y5noA+z5Qutugdsalw

C:\\pagefile.sys.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5cd596e95ed9f3a4ba0f53a5d5df37fc
SHA1	180a0eb01ff6a96c78b5d015c79a2161fb74ea66
SHA256	f7437995cce2603c2ebeb9db4c668f6f5feae4ef2c67c0d327eed960d9e6bfac
SSDeep	3:lE9vY4uD1v8KnmQkAn0RQLqgTZZFvaOwYcVrp6YZvphazxkH1an:lEi9mKmxA0SLqgVeOXc5UYvhaznn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.014.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e1b47930a1d0bc39c452490d1c1af952
SHA1	3e0f80649086b34b94622953421d71e91838b7f8
SHA256	ab582be1eec99bceccedc593f284831ff269b268fedaaa081f141db521ac5af6
SSDeep	3:RtkOdfOCBq5n+61m45gOYpPc2CMbQMUJO0/Q8ZIwk/x/DUor:we2Cq5+K5tYPsVnZIwk/NUor

C:\\Boot\sv-SE\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b965ca0e9cf1f53d9259df342d586c0b
SHA1	579a932a480c29217239176de11d699fa1fde2d6
SHA256	1585d5c9601a548be154544b7e737b8585a4bfb003771f60868c978e79395202
SSDeep	3:zAiYNllJsxt+pwmO5zw13ScZDubChze74Z1TclJt6YIj8:8NJpwmO5zmSoDUCxk4LTUU8

C:\\ProgramData\Microsoft\User Account Pictures\user-192.png.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	288976f5c60dabd6d8ab206034bf9ec0
SHA1	9d186c75925d508f221932dea132d49546446863
SHA256	089dd30803bd4a8d76d2448d80149c1c20ca418955258839d44c3d2ecb890f7d
SSDeep	3:DDVDW1MY7YWCbOb/J/0d9K3AYO+ATWQNqoyPxDUor:DpDW1M7WhbB8d9LrfTXq9FUor

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.009.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	322ad85f8252e801215ef2567dbd6120
SHA1	c88309253760a0737605846478bdfbf80a206469
SHA256	88afd5675d528e419487cab3496ec51eb272ba3a6a87c19f8a85c1ded6abfd04
SSDeep	3:Fsb+qEtIFYszSpj3CSrO8my/lAM05/YlfAErBWdN0r6Ak9JFUor:ov7aLCWhAN/YlfAE8dnPrFUor

C:\\Boot\fr-FR\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	777bb33a1e5022db9398f058dc19d59e
SHA1	f4a1d99df964bad53b7c8a1d6661526b8dce5504
SHA256	3dad2ca37f64249cceb3382b5b2b2ef35165b19911a3900c8ccb22bf9a712935
SSDeep	3:70+h6QeGN7me8TZ1mWIJ6hryKmnHeqo/7Pi5hZbvUinbWp77mPn:70+h6dqSDh9IY7Pi5YigmP

C:\\Boot\lv-LV\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	ecf153979671715541c162b89575bc88
SHA1	1498721c71d2680987b732daa65184821dcc645f
SHA256	0f558cecba56d4f058cf5b2ebd37b9942add7cc0b91081cad0688b2968aaf42d
SSDeep	3:ppZ3drDV5c1upo4+VL9naW/XYcx0euKIA6S4EHu19uK0/o5AGrqE:p3ZV5HpPonrgiIxSQ9unkAGrqE

C:\\Boot\pl-PL\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	d753ff42b723a5b570abf1f9d38757ae
SHA1	99bc09fa69dd07dc0979bf8e2c84dbaaaea063cd
SHA256	d1c0ebeafb7d5d70721bfe50ebc3ffadc695775cb163d844edaf0d2eab9a8741
SSDeep	3:KDBDL0FM4xYJMxg/WEm1ZP4dPS+rAjnw6eFY1V5NIYIj8:KFL0iMW/5IP4dPTUzwQi8

C:\\Boot\ru-RU\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	6ee421653ec37c89e6566a0611290708
SHA1	8bc332386f7db4d96a907b263eeef06aa9312bc1
SHA256	5660ad2748c3a39778d98e1d55fda0bd0334a1a429280a7bbca05bbe74640be9
SSDeep	3:eYHJS3/qL+YgVLS3ZCwcNnzZmH4lWV56o9OD/A/pBgwvSWYIj8:eibL+YMuAwl9MDoBgw/8

C:\\Boot\es-ES\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	8e0bf91b0575614dc4da2c90b7f5ad6e
SHA1	76aa178d9396d234100c1f3a73c2cc14240608dd
SHA256	e4d87be7be12502c25fd38f9f7d7753aa596e24448920dbe0e420cb5204462e3
SSDeep	3:U8EhTGexE9Sbg8bzDF+OGM/WVXhuujCfFf/9A2huFywIOn:sTG8sog6R+OXWNhu+WFu5Fyw

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.010.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	421ea8200467a250bd05ec82037e7c2c
SHA1	beb5c88a17e93e2e62cf540fd6ac40ef656d0402
SHA256	aaf69f4e005d6465bf3f96b43855df52e9d90ccda2e4d98d1b18964cf9fba1ad
SSDeep	3:hKEDavaKrnRQyMEWYLYpqlsMdxDaZ2E6EWjyRyJj4S50p20PTyde9Sn:Eqi77RF7scAZKCykvPTyg9Sn

C:\\ProgramData\Microsoft\User Account Pictures\user-40.png.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	97eb3688fa697d55bf59e6f60f6cfc43
SHA1	bafed8db012b38971760dd11298155096c149e91
SHA256	4bd287175cc417292ec21b428fe952766ce8c3b105a2667e2b092eebf9be9712
SSDeep	3:prT0GOoKvLiZpcAeJvceF23T+YdTKzoWe2ucTDRmPrpUor:FT0GOoKvLipte0ndmRe2jcUor

C:\\Boot\zh-CN\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	565843df9afcd6e44f7588c3097a44e1
SHA1	175e3dabb4fb7328f009f8c54b91ba5b6291ee42
SHA256	5fa1a99b4e58cffbf2e1911c47a1d7a76d7afad6e04151d2e373d487bd82af81
SSDeep	3:eH+JbijaMu6qiKFRSSLSizsTod6SgGGfvUY4AvcOM1QIYIj8:eeVimMu6/ES4SiQoIKcUY4Tp1QS8

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.013.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	1e3358c93026eb97ed212d07e609f755
SHA1	56ace398b7d259fc3325ecdf948d6c3bf42423fc
SHA256	430951ea4e4353ed2a21fc7c4dd51c52046190057941b96d11078a14956d482f
SSDeep	3:RTa0OkTfBC4DyY35u/tnuE6to6dOee6gSDcDB1Jj0+Eyde9Sn:znQOyY3xvldOz6g3BDuyg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.002.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	064dbcf29dbd649dc97f7a77816fcd77
SHA1	db874ac414081100e2e2a8bd5044c972d4adfc0d
SHA256	8cf8b44fa26d2cdbeb8a26b2d4781adbab93dffcda269db616fb39af95f47c9a
SSDeep	3:BJcYc2LZxF5Z5h5hLC7i267CA3ZAsl9wrsrdRS0rPEyNM+n07yde9Sn:BiYc2LZxFzxh+UAs4n2NfSyg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.012.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	66c20a937ad3dbb47a7b9e8aad804e47
SHA1	6f37e89c1bd4ce0cc3e5d608c12d5ae982b13dd7
SHA256	9afb4bb846e141ea06921dda91a8245dd28cfd176a8be5fd714477451af39557
SSDeep	3:3Q3eIgyDiPXvjhFArNghGqzxfRxeUS1EYbms+fVhEyde9Sn:AuIgyWG6leU8E2mDVSyg9Sn

C:\\Boot\qps-ploc\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f578d429be2be425c1fa57006deac87e
SHA1	b5540578fcec3fde241813ebb00136d9f9160972
SHA256	65e04c7a6b0cbd54ab4d83598f9c4ca8c2a851d8f232d4fe4ddfc9f823823689
SSDeep	3:6fdh0BHlpg2knyB9l7uTNsuoiGa5UBF+LEjz4hQYX/gdqiv10YIj8:6fIBnMnyF7upP55UBMW4TX/gdqi9O8

C:\\Boot\it-IT\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e632c96b7f5c224c467266844d3d7493
SHA1	ffbe06f5e5f8430172e4e28ab7bda9655ccda38a
SHA256	3a59486b5469691eabc1d08953ef4997ab1e0d28b2e7ebfa9dcf46e8f84f2025
SSDeep	3:jpACsPCY4xntUk3+OpDNbagB+emzwVThunouVw3ZqY4EVx5rhAJAmPn:joCOk3xn+gB3LVThu2Z9J1CJAmP

C:\\Boot\Fonts\malgun_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9d47e81c07d08832198897540128cf08
SHA1	ae497c514660a39e6113a7ca4e07cf92abc62fdd
SHA256	4835f3db87b07fd0b306840239d0d4cc80e3c78019e5c173609d1f0bd25be985
SSDeep	3:7scEukRXx7JJ3N2fS3Yiy9gTr+Wtq7MXOvTSq6RfKLtnLQND1mPn:7ovJ3N2fS3YiagTr+WWMXO+9fKZn6D14

C:\\Boot\cs-CZ\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	a404079e49d8259456764fbfa1e753b3
SHA1	14817e63f36e03c967bdff9d241dee8b66a15d69
SHA256	bde46282ed9030009e9504f38f1631e3a64dba8038e6c386afba10be480a6eec
SSDeep	3:x9JI4YWK9WZuWHizNnT/LgYfFTGiUXOuAoUSu8b/7jSuWGh0XwIOn:HJI4YcKt/LgYD6b/nSrdw

C:\\Boot\de-DE\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b20f9761d89d6fac605dbfbb13e9370a
SHA1	94a8df0ed8d280916e1529a5fa29100ea798b5f5
SHA256	93e855028d645453956e8c1bd54f125d99ec0e3f60fc3f965a33b83cde05d9f9
SSDeep	3:VqMlCE1xheLSxUnFXuToLHBa6xyb8+XwQpMyVkSzH5/ouy5XwIOn:p9xAmxWFXJY5b8e3pMyVx50Xw

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.019.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3514ef6c6b4138827a0a7efcabde1c21
SHA1	44ac69ab29a63e441cf62e4f4bcb9a17f182fac2
SHA256	00090b3c89ae904476ede360a07811dcbc211caa52f9a18bf4c082b7222e0935
SSDeep	3:SddexSDGI0c+ep7ST9WagLWA7y/lI9nf9gkaA/Ym/A53igcJ1Tyde9Sn:SdcUDfrO0Ln7SlI0gc3i3yg9Sn

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.008.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	758ea2039b335c93eb0ff44f189a0a6a
SHA1	0849f288aa8a6d4bb3aaa4c6dc2e3fb1b7d8add2
SHA256	b7a243628a338e7914da417cfc549a55c688a49bb12de6f2623740d0922fc5e3
SSDeep	3:jEM6g4oXxTfglIoE1nR2QXTFTbK8XlVF/dIWaS3PGEyde9Sn:36GxDnwcTbKqlVFPaSryg9Sn

C:\\Boot\ko-KR\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	0094566d12936d98d034bf835a3f6d91
SHA1	9f4b24cd117d2dc22cedc575df6e527985701736
SHA256	c0c2c8b907188bb67818dfea796eccefce412b742a160a9b018773087a78a264
SSDeep	3:CUHyb1ZR2vcMiNdtq9DP3IKTMXW+SD8P192IichV8tvP7bi7B6teGrqE:CB1v2ZwsWW+36iVQDGAsGrqE

C:\\Boot\pt-PT\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f10abef0d99058f14ddc77e08a4158ad
SHA1	1e5544951773ceac13b90fd09968dd2867c5b2c5
SHA256	d83af44a6e800476bb8189b6ecb04648d78f2d84a01c97f8024069360f3a95bc
SSDeep	3:cnGm15ucE9DtYIoNIQAp5fj1khMHCEMqSvWbfVlk1Rb/eWYIj8:9m15TqJBoFISMNNrk1Rb/L8

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.017.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9fddff700e5ae5aa58bdabb830c2b53b
SHA1	0768a456b48c1e6a696a64b2b5336efbb516dc70
SHA256	d0925576bf9201732060dbab20e0dcbe8315e844cd4586ef701fd166f1685a64
SSDeep	3:zqgACQYOWl9q9BQ0yjaFEBmwxHGtbG9C2U+P3Ws8DP9EIhdLr/MW5+3qiD7yde9S:XBaeq00UHxHGteC2r3WfXd/MBaifyg9S

C:\\Boot\nl-NL\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f2e25a68c14367c8a698184446b54164
SHA1	289a1cb92cac8fa56c32e4f5c0dad8c4b6dab615
SHA256	878e1898c59e7772fec5e29ae0550206a2d873ac1c3411ccc1981098fccea57c
SSDeep	3:A2rYyEfBo5NbjLhPPxi+vKfRzBaypSkcK1+TmY5kC6YuHr/cHAGrqE:A+YyPTbfZPIQER1aypSk71+TmYd6BLUB

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.018.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e0274f5d379b7c1899d0d2cb6e7548be
SHA1	562dc7210d8b2061ac989d44cba6a2e76329419e
SHA256	0375a8bf232f26a72dafcce45c6c686596a514ca1b7cf4c9297f26ad140f1a02
SSDeep	3:egeK+vpFWn0bBXLG9y7/IN/JjfUqmMC7a+5x65Uq3OFUQ+yJZDa/w8z/DUor:egeK6hbD7/In8wqD5x65UqzmJZGpDUor

C:\\Boot\Fonts\msyhn_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e1cbcd41d99503d03bfe9501fa7a70fb
SHA1	eb6e2a7a6b0d5d57ca510e8ff44dbd6b3396d6ca
SHA256	b68c6fe5a87c1f8883e94cb1890b53db427ec18ecd362530a5ecd605f159258d
SSDeep	3:vg4jsmrc0gzIRzwvABqpPNL06UA/7apnr4TtTBYK/7mPn:I4jsmqzINwL7MrOt1YU7mP

C:\\Boot\ko-KR\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b20fd7994ee96ce1a881c66d2e4fad20
SHA1	ef1901893567a508fc84fe1b2d16273fee06f482
SHA256	3d1742974f726955d571b800b5d1f6f74ba85cfdd8b8e52b5e664fd42bb57b71
SSDeep	3:Y2LwjoPH9fYL5wnE2CfFJmKAVZtVoePZOXLBkkUcfdUkLAGrqE:bLwjof6NwhCfv9ooe4XuDuOuAGrqE

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.003.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	1e51ba854f045dcb8d59f9c43ac86f04
SHA1	fc4ef8281887bdab2d700ca726dd11e938b98f8e
SHA256	9c5224656f42353db4e3c4fef84f6c9f0d767ad8c65a8a11aa8a5da9fdb67e13
SSDeep	3:/7tRXyQdfmj4Vr2hERP8KbPkofhWVG3hC2L/Tyde9Sn:z1mjYrGERPjbPJ0G3U2L/Tyg9Sn

C:\\Boot\hu-HU\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3e21e64549d524c2105d43ac40146879
SHA1	e1b3a2121215067cc100b62db266ac9aa79ed4d0
SHA256	286360007bf99eeac487c2986e80345aec8337c01ecd4dc8920d10482db21958
SSDeep	3:1ddnPcofiq7oKlAawWm8fekNEY47JtuHH7Utk9ibft66lngEYl0mmPn:1ddnPNisoFeWY2Jtlt8w669BTmmP

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.010.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	990a8fa809fe049575ef1ec696e08689
SHA1	339a0e1d4afb2f06f079bceab76221c99b114205
SHA256	4e07e65cb0f41f7162f22ae66914b61ed46524657d2d04c492df459543d39d2f
SSDeep	3:rOR8AKBtU0Qb2NY0ClVHLvD/ksetg6nyKv7NF4GyqxtpUor:r+JbqY7lVLD/ksetbnjv7AqUor

C:\\Boot\zh-CN\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	c9087d772be210b11887e1b54b68c706
SHA1	ae2727bce94927c9e72c749235e745d4d81af3a6
SHA256	e7ccce2785de9c928b3727b6e349f29f65f3333384df1ce4fad34d2ff7631f9b
SSDeep	3:o1OwW3591hjreJCbe7MCZVA+Xuj5eVc/xQbGKBIqEPMxM7NDbg8DnNIYIj8:o65NeJCblMmouj5eVc/xIGKBXEPMx58l

C:\\Boot\Fonts\malgunn_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f360772fada694eb3c8f2de62537431c
SHA1	00ffd3319cabd644860e1f40816515f4ac534781
SHA256	f3d9390ea9540ef268316d010955ba13948eda5dbb8f4a4aefec35d45e13e620
SSDeep	3:roZSNH1Ipio1Aj2ZXtGnEwhV0r38axnkSK7mPn:E8N2fK2ZXo8rHOmP

C:\\Boot\pt-BR\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	d7242ee9283d272ea939d3e6c421985e
SHA1	ce50c37dc966c4ae2170888705f007f9543a0f0a
SHA256	192460af5617f7eb28bec2c4f00dbff6988151b868d1eb82512fed477ed619e5
SSDeep	3:H7G6st5ceCWyXWGxiCUm2qXDHhaUEaUnZL/0mIss565WYIj8:qdVCdJHhaUEaUnZL/0mQ8

C:\\Boot\Fonts\meiryo_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	cba27a4378a1638ce63a3451a0adf5d8
SHA1	ed57c423aeb1492d04d30e7558c77804a069c470
SHA256	5fa21aeb8ff9df559818337bc9204f85b018cd0ea939d9aa4df6b0fc6d80f733
SSDeep	3:AfPb2o08lnkZbMToQiJws1jVUPz8vMSAzxI0KNgtqpsp8CmPn:MPnQgtiO9PIvMzzoNoSsaCmP

C:\\Boot\da-DK\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9eac62a8e67be5e1fb6dd57d915e78ac
SHA1	22243ebd9a151c334947b80c2df63ed84764f211
SHA256	f6ce9567dabd7f5c1d2c37ab45d0600ed33c7f0ac7c2e4b322744407af79165a
SSDeep	3:v1QSHAdhEzQa/sMMsg78hhZLkOho8D3s1OOMTgfCD/zWwIOn:tQnE5UM/dYOho8rs1OOMT9jzWw

C:\\Boot\nl-NL\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	cdc5daf152828dbc0136b369f185fa15
SHA1	891dd87df1b745cd5d24c4b585c31a86137b4bc2
SHA256	1de25e64e52db6fa7e6de1f80cb2f1d10e0fb3a954818645b9025fa8ebcbb495
SSDeep	3:KgRaCwjiowDcsF89mzouq3SMmML0FqJFVYJRHhV/cZ5AGrqE:KgUJKAPUoza5RHno5AGrqE

C:\\Boot\lt-LT\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	bce18627aa09ff4f89193911289cb864
SHA1	7a6c6f94f8cafbbf715de063a13dc8534524fc14
SHA256	7392b62d55fdbc625d97c001b6a7e79606388bbdbbdf4a7cbd7e9196d11501f6
SSDeep	3:LeXnCpXdxDLmHaxfwqvQR4sZDdg1UgX3ULMZ5AGrqE:Le32DS6eRh61UgHaY5AGrqE

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.006.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	4b98bbcd1af6762cbbcfadc157172bb1
SHA1	820cf76bdc5b677bbe977095464638cfa72f603e
SHA256	e5fe78a5473f6569f4a4a5e705eab13983bbc88ce1a3c6fae9ee0bcfa4cb3c3b
SSDeep	3:yLOr3rlnxjbpEa83iMU+6tNtYrSZcCjJYBP7NxLUor:MUrnp/V+6tcrSWCj+B7LUor

C:\\Boot\sr-Latn-CS\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	8c10decfa2fd7d20620e593a99f7713a
SHA1	497a76028e1c8cd1b0835c136c9315c8bf520aa7
SHA256	4e4c44760fa129b45044a042ace4e867fda8a852fc640249bd3b384135e231da
SSDeep	3:RWEAVXEP49GFzAg9Her0J9Mek2xHBgldshZHFza3LThgrpcrTUJYYIj8:1P49A9H0w9f/4EHFu3LT29cX8

C:\\Boot\pt-BR\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9cf0560a93888664bad44c5dff6313f1
SHA1	e209ec4011cf57968a664e51504323fd6f08ef4e
SHA256	c938c76fb93412c9de412a4b177515945316b34ae2959abfdf2e2e53e02cd3ef
SSDeep	3:evzWr0D5M1p3thEt0wxVHkfDYt96JhgU/ZOi74Cz8U7WYIj8:eaQDuRhoxVHkf86JhRROS4Cz8UQ8

C:\\Boot\Fonts\meiryon_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f6f111f6ea320ea852cd1e2382af9c69
SHA1	61345bd8127eff3b78dbf3ef4ae752e07e76af70
SHA256	e74e2402f5fe6bc92953bcf4cd3ef6f665b14694eb08be891dfb5068c9bf7656
SSDeep	3:tPiq2LdU0Kr2YFtiJozpNPMCDecTjXszUnzz9DCmPn:t+Kr2YXiJo9NrTszUnzZDCmP

C:\\Boot\el-GR\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e57e972292dc894c8f5615758ebc42ae
SHA1	649ea298bb4b88792e6a4d0fae8065f37a9fab17
SHA256	72a9f9897422336cef58f2209dececce8ff55ba0ee5cc0dd448db65f057fb0d2
SSDeep	3:Qb3snt9EHe7I2zHZbsKuPKNkVvQKYVA3GwIOn:QgtiHecwIKuvVvnWw

C:\\Boot\da-DK\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b10816aa4f0fd60c8f4eabb50f3947fc
SHA1	ab1d0f2dd42692acbcae9e814a86fd0f2407540e
SHA256	20e2ad8b17ece9eb18912e9cc8b2671304703a066f361e6b8a2d7a0efa452217
SSDeep	3:ZAy9/LDuAqnwica07Ms/UoO6dW0u87yZRdXQjJElwIOn:dnusic5QToddMyyvxQjqlw

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.008.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	a37cebe3fb74cc043c0cd8b2e4fb0dcf
SHA1	f728de38f8b0a8376f49916cbca0a417b8e7c9c8
SHA256	72a099d1079261f23d850fb5fc3d750ec4859cd63c014d2704088971ccca6170
SSDeep	3:L3GoWlFjo74sze5ceJLP4ZnamI8ExZuyp0HkmenRNp/sRE5WEVpUor:KlF0Pe5ceFP4Zna/ZL9aHkpnRcE5WEV7

C:\\ProgramData\USOPrivate\UpdateStore\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	f67ad2e3b61ad27b2b827253d55681cd
SHA1	2cef10b82401fe9512823570aa481acddce58f46
SHA256	bbe8f57afe111b0b5bf75473140f8009b334f52fc834ce4c6467f4be3033d191
SSDeep	3:L2OiSs8VuLRRr/wiJ8uDYv6nGA7iA8YhxeJxvR+sZqrnpUor:Kycr/wgYv6rijMxAH+lzpUor

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.013.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	055dbe510328ea30ad04eaac2167f8e3
SHA1	084f6ecdee61aec18f282681d1c414b1b66c5faf
SHA256	a81bf507caed3eb124d92b29aa4e576980019ff32ef3c1c3d615351074dd879e
SSDeep	3:t54XdbOaPidsHKmRv84u4hTlhYzNK0W6648QYL3BVarOKrgPFUor:L4XZOaPidQv8j4FrYzj8Q83jaywGFUor

C:\\Boot\Fonts\kor_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5555b84966b89ebf867b16c0300ee4c3
SHA1	0f3c5ab3273ce884b094eb9fa64697f30dca66f9
SHA256	14c184cf3fee88126c5104d317d11ce3c58a9313bcd405b4dcffcc959ff0fcde
SSDeep	3:okt1YrFVXssZLdWrkDpGDkelznZvqKrpf6kZKFcnDbEvsoAsOaR6oCmPn:ok4RV9UrkojiY6QKmH/QOZoCmP

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.009.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	8a76a9aaeeda925712342f2b5b1bdc2c
SHA1	25f39d93c481890d610c941454f4bb4cfba6bdcd
SHA256	6e95a03da6e737b963dc740aa109e4233522ac7c733630af9795b13e05b45f66
SSDeep	3:vNh3vXszLOokVo5/IPotkY3kZKBNuIOmYgiYf+WN1l7NtPTyde9Sn:EzLHgPouPo5IGBNjJtPTyg9Sn

C:\\Boot\en-GB\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	61d8c37434c256e4c188b99688b8243a
SHA1	ca1c65d21ff9ae2dce06b50c0167b0770c1cd014
SHA256	2ea882362f1c292cbc0c40537dfcffae7767a763134cb62162e124b918d5c124
SSDeep	3:dT1FLimFKbcCRQfhyUB71+7XbKk9q+hQN2Me9RYYFUCsZL3GwIOn:RbimwbcCRkrd1eKk97ho273sZDGw

C:\\Boot\sl-SI\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	e1530e5968e87b68b7a65fef1a51ba63
SHA1	61fad6b69fc58b74d116c8eef9773dc9023d54f1
SHA256	3a0ce4f55c3211dde19ec462d3d0f3278db0391db74f8f17adff9c85671e528e
SSDeep	3:HTDaEyJXzYiRXFdDS3L5y6y5TJvjLG38mUnyYSmIYIj8:HiEyJkiLRS3SNZjLg8mOS78

C:\\Boot\nb-NO\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	37bcbfed32ae8c04ee37ef5efb069e28
SHA1	47879b712001ace554a3dd291b686b3d343c101f
SHA256	f1d78bb87c49800373f958c9375fb708b9be752f60d4eb4e804aaa50eceffa0b
SSDeep	3:HY7ImN64cdmO+G97lzlLMYNXKRB48bXryaZZ8QNYkAGrqE:4U66jmHElzRMYwRdb2SZ7NYkAGrqE

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.003.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	cd6e55ba2b4d8991d752290394447833
SHA1	5d14b238aef598a0be79b14edd1076cb8ab75165
SHA256	57bd2183f635e4c128dcb657ae406fd61e4d9eb8dd17cacf812f805be7b1f273
SSDeep	3:m4+ZYnziCzDWVaDrymOjgfCpaU98DeoMkjcClLfOuyNUor:P+anKOOuCp1986mLfByNUor

C:\\Boot\ja-JP\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	269df3c29827a569e69c12077c1b8255
SHA1	e61b1265569b3faaedae463d6b0d0fab85b1aae3
SHA256	93441fa9705cc8d79f745d1ff43cb44bb722744e1ddf0adc29e1775de8522718
SSDeep	3:QgtZZ2UAL1Nz160U1mU2ylksH+4Q6RAW0ed3BGY01TY6M2cgGrqE:zG11NZ6BQq+4RAa3rkYn2cgGrqE

C:\\Boot\de-DE\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	77d32fa41af7a516d5f88e5c4c2c94ff
SHA1	8ee0af0c2a6cbd95d95008cb83293645d71f88ac
SHA256	a81b952eccc02570da5ab3f4a11c1f188fb7b4bfe0b1c24f09b88ed589e6f12c
SSDeep	3:Vcz0o5/MlOQh6tLgvVNLOqxbYbDUPUOL4bNXIqd4ZXwIOn:Wd/ShgUvSKbIDUMOkbN4B9w

C:\\Boot\Fonts\msjhn_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	1dd26bc1e4327d9dbfca990738b8542f
SHA1	6350c595db74204629f6921cd087dd2bc2d8a3ec
SHA256	4cb0e23e742472f6873aab72cdd3b196119e05a43536625e3d84bdf8360fb5db
SSDeep	3:bITI5e9/Yfy4jajujDBWlGDUDI+akZGFBXgvOInmDCmPn:bITLiy4vRWlGDUDI+3GFmnmDCmP

C:\\Boot\fr-CA\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9d1f235a3af10ca3fb3839e3623de1e3
SHA1	8638fc0c69879f2c4d1e882a0fc80f91a70f5c04
SHA256	0c3ad7b50b465f5ab318571b83f476f94b7b10ab79e7e74a96d3497393cdab17
SSDeep	3:NLAAksaO28kHCcMbmjfQvhB733aMoz9cUMvPKcpIE2Y6xq+1tgd2I6m0yCmPn:Z5kskHlMCjov/33JKcpoY8jb7I62CmP

C:\\Boot\Fonts\cht_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3f8826705430001b773c93b885126292
SHA1	2fcff0ba1d1062920a377ea80d8a8745110436a8
SHA256	5a3997f8400aa03ca4d097393bc24b09bb328a0d78c9a213b6cee59f14836099
SSDeep	3:XvDTSLTI/qKaiMYl/6eHGkfhKg9/4p3crTsvdaCh7mmmPn:XvDCE5MjKKgd4cChFmP

C:\\Boot\ru-RU\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	572131c9fa366aee7391d9b9c4f5d9aa
SHA1	54a5f161a65f17e282371dd9fe5ec754aead3994
SHA256	e8aea0d6c53ad39e5d8679591f785e281ddb6c9be6ef10042797ed0487832044
SSDeep	3:XHQj07NEeiii1+WA7MApPacSEE6NW+tTVw+1txiI8uk1J5CYIj8:3Qj07ZXO+WQ+cSEE6NX7w+3EIg13A8

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.005.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	1009aac5e5fa851423028ed2d2a06799
SHA1	63b890db8cf800ad3bb797300f1a87cc0bf7aa0b
SHA256	f9a4e9f639515077acb8d584f713a4303fc4c84fa51c887441195c1d66a0d99b
SSDeep	3:gweeY4C3xpZyfxMjZDPYnOtIxK6qIZyFUy/oHXI8IyCR69pFUor:giY4opMZixKOCK6qSygHY8IyCRsUor

C:\\Boot\en-US\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	3cef9243d68bd77bd76d64ae9cf115b9
SHA1	e3595567bb9d7a16c2a2138813474aacf8edd048
SHA256	ebcfdc31b2c72af90a592c4268a6f9f0210ff1d0e6e6cb645bda22de4f869370
SSDeep	3:gFZS6cJ9iLI07xR+9WJgnJoQhdWLcy6iTrudFkLrezU96MHnm3EXwIOn:gjS6cPYRFuJXLWLcyv6ELKzU96Gnm3Eg

C:\\hiberfil.sys.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	5f51b3553277e17422bbadbe1528cc09
SHA1	b755af2f58370808a4cf96211aa973df09285ca2
SHA256	345b80a10c5b80d833d87b526d3a68f2e4efff0b31eb7412d78e5f9bb5fc3df7
SSDeep	3:cQg7mgVOiiO107w1tN+xPdCg8buU2k4GBaAkwd1an:c17XcWj/+9dibAkPBmwan

C:\\Boot\ja-JP\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	b2e4fa8b40df42c19a74e9fc35d9b0ef
SHA1	14ad7e13f245d0f5e200a848f0969daf360773da
SHA256	aca1bc5ada77922f97ea1b31355483200760f98b104353a9ae575b5e65ee0b1c
SSDeep	3:Ajhnbdy9f5FIaej87KQ5n/NR+F6teGrqE:AjhnJy9fnz5/NR+AsGrqE

C:\\Boot\uk-UA\bootmgr.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	4793e1ed74e56a752dce5003804cdfa9
SHA1	d43447a87c0f7b411fd9ed7c41d21da72e0c9809
SHA256	b725678e33eb8e387caecce191958557721a7266e3221580892b836ad7032dcb
SSDeep	3:rMzQSZ5Va35F3/tXpxrz3GQkEpKuUCP7FEuwVU7WYIj8:rXowL3/dpdeEBUw7FhaUQ8

C:\\Boot\sr-Latn-CS\memtest.exe.mui.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	928c8827e15a05c09dea9cef05abbb6a
SHA1	dd472516efea0c1c97104c5d2c89f350c5ce7b23
SHA256	6c6f5a9e492e3cda1b19eb7fe22e62f339420049a6a38617d08618dfde613d41
SSDeep	3:AeNMWREmTRgO1UEeY04/dAlAtF5Kbuf9tNlEQJoXpoyKYIj8:Ae8i1UoWABtfXM7X2x8

C:\\Boot\Fonts\segoen_slboot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	056624667d0155130d49a7218c3556c6
SHA1	468eeb38da916bce4b610c6ce71eb37caa0a527d
SHA256	de9fa6d831c4599238902283151a1772c2e2011f8ebc4c6978ad0f53e7aef3c3
SSDeep	3:Bgi1LdLxt9n9wa25zoqxrI33vWbjGjcjk+29QxNOWmPn:Bnrdth9wa2loqxcnvEjGjcjy9hWmP

C:\\ProgramData\Microsoft\User Account Pictures\user-32.png.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	9c832fac159647701f8ab1f6cd29ed1e
SHA1	5e2778c83ab59d298a85154b5d737529c26cac0c
SHA256	463bb338c2b3ee3f2f3457b54e92279e21a9c4be1dee857c31d04aabe5523b49
SSDeep	3:DdmubqFq4fEdLvv0cuTBm+s/6LMpVU0o+WaOlw6c/ieYynAxcyi/VpUor:VbAq40LvnqBMp+0ofaHiHyWi9pUor

C:\\Boot\Fonts\wgl4_boot.ttf.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	30e2ff05dd7913f7cde3295834b71fe0
SHA1	f1835965f88d4d0bc335b64ef4c7c9bcf7cdfefc
SHA256	084b34295f9c2dfb8962a6517188c72c7398e65734eb12ed8f3a0788431b99b1
SSDeep	3:kltyT8WzLkgdQJDIp7JSZijxGHv0aLceSZgSpmDCmPn:sS8StAZdP0qcT6ymDCmP

C:\\ProgramData\USOShared\Logs\UpdateSessionOrchestration.018.etl.gsg

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.14 KB
MD5	dd744160cd25b51e4a73c2a230155137
SHA1	31d2e49acc77bce81f8a84ed8af6cc0838585e67
SHA256	12ee512668f28c8e9997aa145b82a5d908a7f2ef9f9ce9ef2afb4c0646f180d9
SSDeep	3:HBmyDh+RbDJK7CkpZyiUPPZyqQkHoShHwZmTdMcXMGC37yde9Sn:hmyDmDEmk3yiqkqR/QZknMdyg9Sn

Notifications (2/4)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After