popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

VoiceAI_Full.exe

Gen1 Generic Malware Malicious Library UPX Malicious Packer Anti_VM ftp .NET DLL icon PE64 PNG Format dll PE File OS Processor Check PE32 ZIP Format DLL DllRegisterServer
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Oct. 12, 2023, 9:35 a.m. Oct. 12, 2023, 9:40 a.m.
Size 29.8MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 645dc5a09c9ad492b4740406029c7804
SHA256 a24fdd687c07dc6dcc1bef0b3e77bb4ddb8dd2b31c4480becbeb15d1a332a30d
CRC32 E2E92B6B
ssdeep 786432:zMLFY30bOWf9Pj2z5cfwkbFU+TfgevMKHWEZYCW8H8Z:cY30bO8Fj2Cw2FBTg6MKHWEOCW48Z
Yara
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
section _RDATA
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.ComponentModel.Primitives.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Transactions.Local.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Drawing.Primitives.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\System.Drawing.Common.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.ComponentModel.TypeConverter.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.ComponentModel.Composition.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\tr\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.IO.MemoryMappedFiles.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Security.Cryptography.Algorithms.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Runtime.Serialization.Primitives.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\pl\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\WindowsBase.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Net.NameResolution.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Net.Requests.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\PresentationFramework.Classic.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Text.RegularExpressions.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Runtime.Intrinsics.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Net.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\zh-Hant\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Xml.XPath.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Reflection.DispatchProxy.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Threading.Tasks.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\Microsoft.VisualBasic.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.IsolatedStorage.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\VoiceAi.exe
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Threading.Overlapped.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\PresentationFramework.Royale.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Core.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\fr\System.Text.Json.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Xml.Linq.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Net.Ping.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\PresentationFramework.AeroLite.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\ReachFramework.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Runtime.Handles.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.FileSystem.Watcher.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.ObjectModel.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Threading.Tasks.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\pl\System.Text.RegularExpressions.Generator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Runtime.Serialization.Json.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Reflection.DispatchProxy.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\tr\System.Text.RegularExpressions.Generator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\es\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Reflection.Metadata.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\cs\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Globalization.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.ObjectModel.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.ServiceModel.Web.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\mscorlib.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\UIAutomationClient.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Net.Primitives.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.FileSystem.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Resources.Reader.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\analyzers\dotnet\de\System.Windows.Forms.Analyzers.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\ja\Microsoft.Interop.LibraryImportGenerator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\pt-BR\System.Text.Json.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\mscorlib.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\analyzers\dotnet\tr\System.Windows.Forms.Analyzers.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Security.Cryptography.Encoding.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Threading.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Web.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\pt-BR\System.Text.RegularExpressions.Generator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Diagnostics.Contracts.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Reflection.Metadata.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Threading.Tasks.Extensions.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Reflection.Emit.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\cs\Microsoft.Interop.LibraryImportGenerator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Security.Cryptography.Algorithms.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.ValueTuple.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.IsolatedStorage.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Threading.Overlapped.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.ComponentModel.Primitives.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Core.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\tr\System.Text.Json.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\System.CodeDom.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Reflection.Emit.ILGeneration.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Runtime.Extensions.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Diagnostics.Tools.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.FileSystem.Primitives.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\ko\System.Text.Json.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Text.RegularExpressions.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.Compression.FileSystem.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\pl\System.Text.Json.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\UIAutomationClientSideProviders.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\zh-Hans\System.Text.RegularExpressions.Generator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\es\System.Text.Json.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Windows.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\zh-Hans\Microsoft.Interop.LibraryImportGenerator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.ComponentModel.DataAnnotations.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Diagnostics.TraceSource.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Net.Ping.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Net.Requests.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Threading.Timer.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\tr\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.IO.FileSystem.Watcher.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Diagnostics.Process.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Diagnostics.FileVersionInfo.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.ComponentModel.Composition.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Runtime.Serialization.Formatters.dll
MaxSecure Trojan.Malware.121218.susgen
DeepInstinct MALICIOUS
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Net.ServicePoint.xml
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\macUkraine.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\symbol.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\macRomania.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\koi8-u.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-11.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\macThai.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\jis0201.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp932.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\euc-jp.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\macGreek.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1250.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-1.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp865.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp852.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\koi8-r.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\ascii.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp850.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1251.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-2.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1255.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\macCroatian.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1254.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp855.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp437.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp949.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp737.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\euc-cn.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\gb1988.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp874.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\tis-620.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\macRoman.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso2022.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\macDingbats.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\big5.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp863.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-5.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp860.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp861.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1257.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp866.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-6.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\jis0212.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\shiftjis.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-10.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cns11643.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\gb12345.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1252.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-4.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp936.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\iso8859-3.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\System.Drawing.Common.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\America\Chihuahua
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\tr\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\Australia\LHI
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.IO.MemoryMappedFiles.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Security.Cryptography.Algorithms.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1255.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Runtime.Serialization.Primitives.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\msgs\ja.msg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Core.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\msgs\es_do.msg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\msgs\da.msg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tk\msgs\ru.msg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp861.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp1257.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Text.RegularExpressions.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\Asia\Chita
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Threading.Tasks.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\Microsoft.VisualBasic.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tk\images\README
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Resources.Reader.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tk\msgs\en_gb.msg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\Europe\San_Marino
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\America\Indiana\Petersburg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\msgs\el.msg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\America\Mexico_City
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\Africa\Asmara
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Xml.Linq.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\America\Fort_Nelson
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\msgs\sw.msg
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Net.Ping.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\PresentationFramework.AeroLite.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\ReachFramework.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tk\ttk\spinbox.tcl
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.FileSystem.Watcher.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\pl\System.Text.RegularExpressions.Generator.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Reflection.DispatchProxy.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\es\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\analyzers\dotnet\cs\cs\Microsoft.Interop.SourceGeneration.resources.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tk\images\logoMed.gif
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\data\PackageOverrides.txt
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.WindowsDesktop.App.Ref\7.0.9\ref\net7.0\UIAutomationClient.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\NZ
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\encoding\cp864.enc
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\America\Paramaribo
file C:\Users\test22\AppData\Local\Temp\_MEI26562\tcl\tzdata\Antarctica\Vostok
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Runtime.Loader.xml
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.Runtime.Loader.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\Microsoft.NETCore.App.Ref\7.0.9\ref\net7.0\System.IO.FileSystem.DriveInfo.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\packs\NETStandard.Library.Ref\2.1.0\ref\netstandard2.1\System.Windows.dll