cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
152
Views
0
Helpful
3
Replies

Windows Installer - Юникод

itguy1024
Level 1
Level 1

Why would I be seeing "Windows Installer - Юникод" under file properties

itguy1024_0-1726751121195.png

itguy1024_1-1726751294435.png

itguy1024_2-1726751314803.png

 

 

 

 

3 Replies 3

Matthew Franks
Cisco Employee
Cisco Employee

We should just be reading from the file properties to display that information. If you share a hash, maybe we can determine more about the file. The translation for that blurb is just "unicode".

Thanks,

Matt

aa2fa1000f9fea03339edf67295dd043806294ec1644e38b7dd08e7d670d5423

Matthew Franks
Cisco Employee
Cisco Employee

That is an msiexec.exe file that was manually reviewed by TALOS last year and marked as Clean. I can't see why it would be showing those characters. It could be a local language setting on the endpoint.

Thanks,

Matt