hxxps://github[.]com/fontforge/fontforge/releases/download/20230101/FontForge-2023-01-01-Windows[.]exe

Analysis

max time kernel
153s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
30/03/2023, 21:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/fontforge/fontforge/releases/download/20230101/FontForge-2023-01-01-Windows.exe

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	fontforge.exe

Executes dropped EXE 4 IoCs

pid	Process
5008	FontForge-2023-01-01-Windows.exe
4644	FontForge-2023-01-01-Windows.tmp
2884	run_fontforge.exe
4716	fontforge.exe

Loads dropped DLL 64 IoCs

pid	Process
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe
4716	fontforge.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\FontForgeBuilds\is-PD50S.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\unittest\is-DMTTR.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\encoding\is-7IM0G.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\Etc\is-PCSVV.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\rich\is-AOHDL.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\locale\pt\LC_MESSAGES\is-8P353.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_internal\locations\is-1MB34.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\Europe\is-9SUQJ.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-92CNF.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\__pycache__\platform.cpython-310.pyc.89859520	fontforge.exe
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\__pycache__\locale.cpython-310.pyc.91020608	fontforge.exe
File opened for modification	C:\Program Files (x86)\FontForgeBuilds\bin\libwoff2common.dll	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\is-5G6O1.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\email\is-TGNNA.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\tkinter\test\is-N2NIG.tmp	FontForge-2023-01-01-Windows.tmp
File opened for modification	C:\Program Files (x86)\FontForgeBuilds\bin\libgio-2.0-0.dll	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\Pacific\is-OORO7.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tk8.6\ttk\is-US064.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-2IM4L.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_distutils\is-R2CTK.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-6BPGH.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\is-E80I7.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\email\is-B8TIM.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\pygments\is-F69JS.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\pygments\formatters\is-6NIFP.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\msgs\is-HC2NM.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\America\Indiana\is-BSLMM.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-L8SO2.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\msgs\is-7G3BH.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\Europe\is-2100D.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\pygments\formatters\is-0TPSN.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\encoding\is-UT2HO.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\msgs\is-3SHBA.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\America\Argentina\is-RSOHA.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\Pacific\is-3V0FK.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\is-0HVGE.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\ctypes\test\is-7JH5B.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\json\is-FKK41.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pkg_resources\_vendor\jaraco\is-LFDLH.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\Tools\scripts\is-NJ9A8.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-HVRAR.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\asyncio\is-QT99O.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\is-45KS0.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_internal\utils\is-EO7NS.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\urllib3\packages\is-PK8NC.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\America\is-1QBOS.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tk8.6\demos\is-7D738.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tk8.6\demos\is-PGU0L.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-P1ADN.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\webencodings\is-TM1EF.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-S06AA.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\lib-dynload\is-AUG1V.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\Europe\is-UKG46.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-9OT93.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\is-RDS2I.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\rich\is-AU0E2.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\is-9L2Q1.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\America\is-PB0FI.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\Europe\is-S75MI.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\pip\_vendor\requests\is-1E3BF.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\importlib_metadata\is-P1THB.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\America\is-HKSBP.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_distutils\command\is-U33FM.tmp	FontForge-2023-01-01-Windows.tmp
File created	C:\Program Files (x86)\FontForgeBuilds\lib\tcl8.6\tzdata\is-M8CLM.tmp	FontForge-2023-01-01-Windows.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133246931284508966"	chrome.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.sfd\ = "FontForgeProject"	FontForge-2023-01-01-Windows.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject	FontForge-2023-01-01-Windows.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject\DefaultIcon	FontForge-2023-01-01-Windows.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject\shell\open\command	FontForge-2023-01-01-Windows.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject\shell\open	FontForge-2023-01-01-Windows.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.sfd	FontForge-2023-01-01-Windows.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject\DefaultIcon\ = "C:\\Program Files (x86)\\FontForgeBuilds\\share\\fontforge\\sfd-icon.ico"	FontForge-2023-01-01-Windows.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject\shell	FontForge-2023-01-01-Windows.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject\shell\open\command\ = "\"C:\\Program Files (x86)\\FontForgeBuilds\\run_fontforge.exe\" \"%1\""	FontForge-2023-01-01-Windows.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FontForgeProject\ = "FontForge Project"	FontForge-2023-01-01-Windows.tmp

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4508	chrome.exe
4508	chrome.exe
4644	FontForge-2023-01-01-Windows.tmp
4644	FontForge-2023-01-01-Windows.tmp
2236	chrome.exe
2236	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4508	chrome.exe
4508	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe
Token: SeShutdownPrivilege	4508	chrome.exe
Token: SeCreatePagefilePrivilege	4508	chrome.exe

Suspicious use of FindShellTrayWindow 39 IoCs

pid	Process
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4644	FontForge-2023-01-01-Windows.tmp
4716	fontforge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe
4508	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4508 wrote to memory of 4692	4508	chrome.exe	85
PID 4508 wrote to memory of 4692	4508	chrome.exe	85
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 2356	4508	chrome.exe	86
PID 4508 wrote to memory of 1896	4508	chrome.exe	87
PID 4508 wrote to memory of 1896	4508	chrome.exe	87
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88
PID 4508 wrote to memory of 2352	4508	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://github.com/fontforge/fontforge/releases/download/20230101/FontForge-2023-01-01-Windows.exe
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffeb17e9758,0x7ffeb17e9768,0x7ffeb17e9778
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1808 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:2
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2240 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3212 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3232 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5104 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5060 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5216 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5408 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:2844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5188 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:1268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5616 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:8
  2⤵
  PID:1636
- C:\Users\Admin\Downloads\FontForge-2023-01-01-Windows.exe
  "C:\Users\Admin\Downloads\FontForge-2023-01-01-Windows.exe"
  2⤵
  - Executes dropped EXE
  PID:5008
- - C:\Users\Admin\AppData\Local\Temp\is-6Q0N7.tmp\FontForge-2023-01-01-Windows.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-6Q0N7.tmp\FontForge-2023-01-01-Windows.tmp" /SL5="$7005C,22549890,851968,C:\Users\Admin\Downloads\FontForge-2023-01-01-Windows.exe"
    3⤵
    - Executes dropped EXE
    - Drops file in Program Files directory
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    PID:4644
  - - C:\Program Files (x86)\FontForgeBuilds\run_fontforge.exe
      "C:\Program Files (x86)\FontForgeBuilds\run_fontforge.exe"
      4⤵
      Executes dropped EXE
      PID:2884
    - - C:\Windows\SysWOW64\cmd.exe
        
        /c ""C:\Program Files (x86)\FontForgeBuilds\fontforge.bat" "
        5⤵
        
        PID:3112
      - C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c dir /b "C:\Program Files (x86)\FontForgeBuilds\lib\python*"
        6⤵
        
        PID:624
      - C:\Program Files (x86)\FontForgeBuilds\bin\fontforge.exe
        
        "C:\Program Files (x86)\FontForgeBuilds\\bin\fontforge.exe" -nosplash
        6⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Drops file in Program Files directory
        Suspicious use of FindShellTrayWindow
        
        PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5184 --field-trial-handle=1792,i,16252180442120028868,1592895562364686916,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2236

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3876

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\FontForgeBuilds\bin\fontforge.exe

Filesize
3.4MB

MD5
b23d086a4f4c54ebe590e4385cfa57e6

SHA1
9c7cf14e6ccfce47ab4384c689fbc65f90981c67

SHA256
69986f53046e3eff21be07fe1a6476e8a6a4818ce8e6cc0568ebd95f6c6f063e

SHA512
0a58c1324c4292edaf0aacb140a078757f6f9341251442586adaa8f7ad79a6eba4def17179facb0098fe2d3e30d64910eba9e0e979b8cad518dde7865a97f0e9

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libbrotlidec.dll

Filesize
52KB

MD5
eb21458e4f658bef81e3011bbe2eb943

SHA1
612965a06716ef0b7889b8c90f682bfb05b44705

SHA256
5c49a3bbb4e091c69a106973ae621857f29b4df8873a1791794c8c7a2e0a9b9b

SHA512
122957200ac8b3f2c1413bd03f7b75f82e60137cf8a1294d3367a437430bec11fb22163a3360fb4a58802d088433132831afea19a725f76673c3511a438a9061

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libbrotlidec.dll

Filesize
52KB

MD5
eb21458e4f658bef81e3011bbe2eb943

SHA1
612965a06716ef0b7889b8c90f682bfb05b44705

SHA256
5c49a3bbb4e091c69a106973ae621857f29b4df8873a1791794c8c7a2e0a9b9b

SHA512
122957200ac8b3f2c1413bd03f7b75f82e60137cf8a1294d3367a437430bec11fb22163a3360fb4a58802d088433132831afea19a725f76673c3511a438a9061

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libbz2-1.dll

Filesize
101KB

MD5
19d248ab5810240b48209dd5632a86d0

SHA1
6236c6c05d93dd1fb84ff535b24b2ac079715ca2

SHA256
543f58ddaeb1a2d6deaf6b68e229f97fe2ffd43287e3d7fb5ecb54d1e72db4d6

SHA512
7a537f8dc0ff26305d155b6cfcee3f8784748aa183071e646a59bb65c353b5c38811c6de782483c8a36dfa5ab0f60f1014138b0cb5b324570fa2f0ace40fbf61

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libbz2-1.dll

Filesize
101KB

MD5
19d248ab5810240b48209dd5632a86d0

SHA1
6236c6c05d93dd1fb84ff535b24b2ac079715ca2

SHA256
543f58ddaeb1a2d6deaf6b68e229f97fe2ffd43287e3d7fb5ecb54d1e72db4d6

SHA512
7a537f8dc0ff26305d155b6cfcee3f8784748aa183071e646a59bb65c353b5c38811c6de782483c8a36dfa5ab0f60f1014138b0cb5b324570fa2f0ace40fbf61

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libcairo-2.dll

Filesize
1.2MB

MD5
23cc46fbfd5801b070aa95985ffd7474

SHA1
927242e7bd7aaea726c19630679dcb01120883b9

SHA256
fdf16b7ced2969b2bce7fd0969ef058a04b1dfb39ef6b8887b3ddeb14d6910fd

SHA512
cb88fb4671a9aa769a50a60d5683aa30780e53141e07756c69b11e1ae84151ed8d6171a42a0b11ec480c32a3b79508ac9e37787af129c0328458c7597ac9215f

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libcairo-2.dll

Filesize
1.2MB

MD5
23cc46fbfd5801b070aa95985ffd7474

SHA1
927242e7bd7aaea726c19630679dcb01120883b9

SHA256
fdf16b7ced2969b2bce7fd0969ef058a04b1dfb39ef6b8887b3ddeb14d6910fd

SHA512
cb88fb4671a9aa769a50a60d5683aa30780e53141e07756c69b11e1ae84151ed8d6171a42a0b11ec480c32a3b79508ac9e37787af129c0328458c7597ac9215f

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libcairo-gobject-2.dll

Filesize
30KB

MD5
138a1f2dd2ea39a7fd4eae24c9205f9b

SHA1
617868a583863944b81786b563e7782ef58eea80

SHA256
1010c92e5d6b0a3b1175b0c75e34563f3b7ae1c8ca2cfcc3819e5b8220d5168b

SHA512
bd63030a5621fc41cb203994975b03a4eba8fab1e4e8256f3d661563ebf676fbceecb6365a18fb4a38b35e4d7cdbe9abc052bb22a717e38596c6c2a193f69c08

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libcairo-gobject-2.dll

Filesize
30KB

MD5
138a1f2dd2ea39a7fd4eae24c9205f9b

SHA1
617868a583863944b81786b563e7782ef58eea80

SHA256
1010c92e5d6b0a3b1175b0c75e34563f3b7ae1c8ca2cfcc3819e5b8220d5168b

SHA512
bd63030a5621fc41cb203994975b03a4eba8fab1e4e8256f3d661563ebf676fbceecb6365a18fb4a38b35e4d7cdbe9abc052bb22a717e38596c6c2a193f69c08

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libepoxy-0.dll

Filesize
2.0MB

MD5
e882dddeca5f88a73391621007ca8c89

SHA1
12683f256af742d7337a4d38ce9ba43b7aeb0d1c

SHA256
6c89ca62b0c2f9ff7dad0bda9524b749a19cedef96c90ed00f36cfd1c128ae25

SHA512
4d2aab44bcf171f39382bf208ad730e5546d501eed94df29209db263580c4d4a7bfc0950e430da131199c09363fe378ebf4c5572e83430a24bca447afa7276ff

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libffi-8.dll

Filesize
36KB

MD5
c94e8c039ad0fd690287390fc6a38110

SHA1
8785c723bc19e1f3bf5ceb538d1220271e8b7ca9

SHA256
da64bc599e502552affde4f5197a0aa22291793e7e902c97279136ae1e444193

SHA512
2e5e97ada9ca0897fcfb1180881f3a54c7b4c6986d3c1ce59ab115d450380a4240297f6ff7f16f9e76c52b320fa5eeee22bb1a500d96d97e2b726ceba4981a01

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libffi-8.dll

Filesize
36KB

MD5
c94e8c039ad0fd690287390fc6a38110

SHA1
8785c723bc19e1f3bf5ceb538d1220271e8b7ca9

SHA256
da64bc599e502552affde4f5197a0aa22291793e7e902c97279136ae1e444193

SHA512
2e5e97ada9ca0897fcfb1180881f3a54c7b4c6986d3c1ce59ab115d450380a4240297f6ff7f16f9e76c52b320fa5eeee22bb1a500d96d97e2b726ceba4981a01

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libfontconfig-1.dll

Filesize
325KB

MD5
bd123a072faa8337aa9b10a6a85587bc

SHA1
3f663ee4461a60262d011d3fe3b529eeb070a21e

SHA256
c3b074462ff7977feb081288123794b8c6c1f02b5c7897d61088078496a6eddf

SHA512
54e567a412d7c001c9c4090b7cc2a53d354f58e40991c0b41302fe2925d90a64f4357bad52c6ac888cddc15ab5148a1bc5abaadd8b5c5d1b393498d0df7a6101

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libfontconfig-1.dll

Filesize
325KB

MD5
bd123a072faa8337aa9b10a6a85587bc

SHA1
3f663ee4461a60262d011d3fe3b529eeb070a21e

SHA256
c3b074462ff7977feb081288123794b8c6c1f02b5c7897d61088078496a6eddf

SHA512
54e567a412d7c001c9c4090b7cc2a53d354f58e40991c0b41302fe2925d90a64f4357bad52c6ac888cddc15ab5148a1bc5abaadd8b5c5d1b393498d0df7a6101

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libfontforge.dll

Filesize
4.6MB

MD5
f660a5859e813dfec66798e37a434ec5

SHA1
a38bcea8f0e514163943e060b08005561eb1a428

SHA256
d0217fc17320f6b36866311a82d271fcfbd0fce034699eacf9e13d8eb33b4fc5

SHA512
232c8971d96f0a2ae129a54d6cfa7586a4119c122eade61681d75a9cb47596095e04349c94f7f7fb652c21e2b18894836715c5b8bede602782991aa60f7c82ca

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libfontforge.dll

Filesize
4.6MB

MD5
f660a5859e813dfec66798e37a434ec5

SHA1
a38bcea8f0e514163943e060b08005561eb1a428

SHA256
d0217fc17320f6b36866311a82d271fcfbd0fce034699eacf9e13d8eb33b4fc5

SHA512
232c8971d96f0a2ae129a54d6cfa7586a4119c122eade61681d75a9cb47596095e04349c94f7f7fb652c21e2b18894836715c5b8bede602782991aa60f7c82ca

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libfreetype-6.dll

Filesize
776KB

MD5
cd2a2238607faef2ead4c620b15bf42e

SHA1
ef19074a111f632666c7e15440bd7f685a09d590

SHA256
d22c9f836089b99f249ebdec81a96a560e213813038b0925fc8b9b0828809c92

SHA512
b9a309215c8540abda3850476e20e0ae23115d83f4dc9e3cf2e87e0eebcc8d9686ecc42c1c9d10cf7ac284e1764806b7ed03a4146eda52a82d530110e1564ea5

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libfreetype-6.dll

Filesize
776KB

MD5
cd2a2238607faef2ead4c620b15bf42e

SHA1
ef19074a111f632666c7e15440bd7f685a09d590

SHA256
d22c9f836089b99f249ebdec81a96a560e213813038b0925fc8b9b0828809c92

SHA512
b9a309215c8540abda3850476e20e0ae23115d83f4dc9e3cf2e87e0eebcc8d9686ecc42c1c9d10cf7ac284e1764806b7ed03a4146eda52a82d530110e1564ea5

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libgcc_s_dw2-1.dll

Filesize
140KB

MD5
c0546b279856cafc4cfec9f3d0a9b657

SHA1
f7311d86e9e62509b6c7713ab6b3b7af7dc51519

SHA256
985dec9f93fb3cbfb2a93108d09ea975385cccd45610180c5c9626ee3e515b78

SHA512
5ba25354486d30cb96eab6c3fd0e44a377dd176f332779a1a63ed3b91f2fb57cd0764b463b664f427ed1bc0c7a8b99ae1e9fd1191e0de6268702ed4ae7cfa63b

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libgcc_s_dw2-1.dll

Filesize
140KB

MD5
c0546b279856cafc4cfec9f3d0a9b657

SHA1
f7311d86e9e62509b6c7713ab6b3b7af7dc51519

SHA256
985dec9f93fb3cbfb2a93108d09ea975385cccd45610180c5c9626ee3e515b78

SHA512
5ba25354486d30cb96eab6c3fd0e44a377dd176f332779a1a63ed3b91f2fb57cd0764b463b664f427ed1bc0c7a8b99ae1e9fd1191e0de6268702ed4ae7cfa63b

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libgdk-3-0.dll

Filesize
1.3MB

MD5
274f5f5a23ce5c3b5f255905cdd03275

SHA1
266e0ce90ae8830628900ad55c69b2bb57d96a35

SHA256
87ec6b1af8f1629d0af4b5ffa96c396e7fe048c7f698641034b444ee6d6ce2a0

SHA512
c9ea5636ab9359483a86c09d69c64bc496ba31b249c2bcc5b39f115ac87a452d97f9f6a31c7d66e3e916d0028be7e0ecccdc18394650d2efd7f699d415c1b9ee

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libgdk-3-0.dll

Filesize
1.3MB

MD5
274f5f5a23ce5c3b5f255905cdd03275

SHA1
266e0ce90ae8830628900ad55c69b2bb57d96a35

SHA256
87ec6b1af8f1629d0af4b5ffa96c396e7fe048c7f698641034b444ee6d6ce2a0

SHA512
c9ea5636ab9359483a86c09d69c64bc496ba31b249c2bcc5b39f115ac87a452d97f9f6a31c7d66e3e916d0028be7e0ecccdc18394650d2efd7f699d415c1b9ee

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libglib-2.0-0.dll

Filesize
1.4MB

MD5
5c8513c69ae8d55d65b8d324aab739e2

SHA1
6afa01987324003b39d2130127aa4297243838e3

SHA256
4836cc1ebe38eced0e2614c1fafe9704225958543d7c8a6efbc543b15d928416

SHA512
ea5ca352a3f9f4bcffaa9158696076ee845d571aeb60dd755f6a28339ad817f24bcea2b4625a49ba078697ecf7757b87b5baba6b0f4dac4a97ba3001d07a2c8d

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libglib-2.0-0.dll

Filesize
1.4MB

MD5
5c8513c69ae8d55d65b8d324aab739e2

SHA1
6afa01987324003b39d2130127aa4297243838e3

SHA256
4836cc1ebe38eced0e2614c1fafe9704225958543d7c8a6efbc543b15d928416

SHA512
ea5ca352a3f9f4bcffaa9158696076ee845d571aeb60dd755f6a28339ad817f24bcea2b4625a49ba078697ecf7757b87b5baba6b0f4dac4a97ba3001d07a2c8d

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libgobject-2.0-0.dll

Filesize
361KB

MD5
bb46705dbe58d4194924a2ea2b1858b4

SHA1
ec1d75d5949b9b473e3ccf22a5e46f710a9876c7

SHA256
b34fea0a2875eab4acbda32b20f45b4ef2609f4113167df70c770c318ab3df93

SHA512
e17ba7ce91a64b0126c23efed4ff303452d74cd1607845b57c033b70db75d3bb93e59a27c335e8422bc1b95300ce1c141a1722efa7d59d0cec207dd04a03a0e3

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libgobject-2.0-0.dll

Filesize
361KB

MD5
bb46705dbe58d4194924a2ea2b1858b4

SHA1
ec1d75d5949b9b473e3ccf22a5e46f710a9876c7

SHA256
b34fea0a2875eab4acbda32b20f45b4ef2609f4113167df70c770c318ab3df93

SHA512
e17ba7ce91a64b0126c23efed4ff303452d74cd1607845b57c033b70db75d3bb93e59a27c335e8422bc1b95300ce1c141a1722efa7d59d0cec207dd04a03a0e3

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libharfbuzz-0.dll

Filesize
1.2MB

MD5
f46345cd875c39ed9b510309aa0c27a8

SHA1
f0962bdc39374bfb22e59e51541943374f8372d1

SHA256
a3beba6953bb387cc032b005358206c9f5aae41a4f188cedb1946217b980bd2b

SHA512
722dd91d561a0f5665c968813a11cfe807f4da928dcac083af0de9dfe4e337aa474c04a3d037aeb6fb220b882e95b57fa49206bb4a43a5f6f635fb629905223a

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libharfbuzz-0.dll

Filesize
1.2MB

MD5
f46345cd875c39ed9b510309aa0c27a8

SHA1
f0962bdc39374bfb22e59e51541943374f8372d1

SHA256
a3beba6953bb387cc032b005358206c9f5aae41a4f188cedb1946217b980bd2b

SHA512
722dd91d561a0f5665c968813a11cfe807f4da928dcac083af0de9dfe4e337aa474c04a3d037aeb6fb220b882e95b57fa49206bb4a43a5f6f635fb629905223a

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libintl-8.dll

Filesize
140KB

MD5
a8b0aa4e9ccfcc6a428f73467dae4e7a

SHA1
eec256445941f9952bfbb0d098374f4744ad25c9

SHA256
543b769dfbafe9293cad55f5f163f45e2fea526ba3cb8d380e54511d11e8b4ad

SHA512
fd65d6afa5f5e9cbc926920755c635c470f4a7f919693161d536f93c38ed3a7ed2964ff8188748990ee1c1167046a14d5d7d312d84e7946a04ac8a74f304121e

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libintl-8.dll

Filesize
140KB

MD5
a8b0aa4e9ccfcc6a428f73467dae4e7a

SHA1
eec256445941f9952bfbb0d098374f4744ad25c9

SHA256
543b769dfbafe9293cad55f5f163f45e2fea526ba3cb8d380e54511d11e8b4ad

SHA512
fd65d6afa5f5e9cbc926920755c635c470f4a7f919693161d536f93c38ed3a7ed2964ff8188748990ee1c1167046a14d5d7d312d84e7946a04ac8a74f304121e

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpango-1.0-0.dll

Filesize
385KB

MD5
6fc13c0fbbac5418ece9eee1830e2472

SHA1
b99cc5fe19eea851837db094257c68707e3eb4b0

SHA256
7829a05861ae1a2e3db8da922ed7b988d5c42ac280b3e22039a5c51d9908b7d0

SHA512
6fa856231c3add19d6e2cb349ef774669322fc5002805aa1a9d59e5a348e68d9d4f6b0d6a683bb8788f90d54fc88da97b1901cfffc76b9606ec0d29c5f8a0b78

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpango-1.0-0.dll

Filesize
385KB

MD5
6fc13c0fbbac5418ece9eee1830e2472

SHA1
b99cc5fe19eea851837db094257c68707e3eb4b0

SHA256
7829a05861ae1a2e3db8da922ed7b988d5c42ac280b3e22039a5c51d9908b7d0

SHA512
6fa856231c3add19d6e2cb349ef774669322fc5002805aa1a9d59e5a348e68d9d4f6b0d6a683bb8788f90d54fc88da97b1901cfffc76b9606ec0d29c5f8a0b78

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpangocairo-1.0-0.dll

Filesize
65KB

MD5
a436f48889ca6b9fa1404a4ca16d3162

SHA1
0089a509e5650e716429b98929bf495cc43eb725

SHA256
c96578b1c6cc4b25d099185d899cc520db07b4b47c3ac619f1a13d860337140d

SHA512
bcfeff785ffb7879012456213d33b6852402812237cd8e99204e900ca3f99b8168be594577f19d48d09805f499f1af9e951a04cefa308825b0e8f003e2c588be

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpangocairo-1.0-0.dll

Filesize
65KB

MD5
a436f48889ca6b9fa1404a4ca16d3162

SHA1
0089a509e5650e716429b98929bf495cc43eb725

SHA256
c96578b1c6cc4b25d099185d899cc520db07b4b47c3ac619f1a13d860337140d

SHA512
bcfeff785ffb7879012456213d33b6852402812237cd8e99204e900ca3f99b8168be594577f19d48d09805f499f1af9e951a04cefa308825b0e8f003e2c588be

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpcre2-8-0.dll

Filesize
387KB

MD5
f99ecd52d5caa3a091537d9fea68f5ed

SHA1
86e37ed22b83755f216fa402f869bb46c38079ab

SHA256
952459613717ea8c846450acd4457eac1f4b249f0fdf0338e1fc3277ba558e46

SHA512
b43cd1f08c1cd2d8c4e03d117872fd6a064babef9d0bb630e2f63dc7e0e353558aafc25096264453437af802a4bca635cb4ed93328d88a46155dc76ca672389c

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpcre2-8-0.dll

Filesize
387KB

MD5
f99ecd52d5caa3a091537d9fea68f5ed

SHA1
86e37ed22b83755f216fa402f869bb46c38079ab

SHA256
952459613717ea8c846450acd4457eac1f4b249f0fdf0338e1fc3277ba558e46

SHA512
b43cd1f08c1cd2d8c4e03d117872fd6a064babef9d0bb630e2f63dc7e0e353558aafc25096264453437af802a4bca635cb4ed93328d88a46155dc76ca672389c

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpixman-1-0.dll

Filesize
719KB

MD5
5e2a8ea334579509cea40d4df6a8d2f0

SHA1
3fd00d906591556fcff429aabef21a088823d15f

SHA256
3683a2404eb27834d4dcdbcb14c1566d6035078f6f72c434c59e40ba6a06ca53

SHA512
a80eddf97b42e63f5fe20ef24c06456c5f7875ed0a372723e037e1c77e196bef75f70beb527c3060953b49eea083186e651f8111275a752068df029a381ad978

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpixman-1-0.dll

Filesize
719KB

MD5
5e2a8ea334579509cea40d4df6a8d2f0

SHA1
3fd00d906591556fcff429aabef21a088823d15f

SHA256
3683a2404eb27834d4dcdbcb14c1566d6035078f6f72c434c59e40ba6a06ca53

SHA512
a80eddf97b42e63f5fe20ef24c06456c5f7875ed0a372723e037e1c77e196bef75f70beb527c3060953b49eea083186e651f8111275a752068df029a381ad978

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpng16-16.dll

Filesize
259KB

MD5
d9697897c74328fca5ff02eb188c3c93

SHA1
b1a09b8293d723c70f664834fe26523a8ff19e0d

SHA256
0698071737ab732e4b48dcd7985fcb0e9abb46e2a6bbef5de3b061849436754d

SHA512
ff7e51b9f1523e07df42dd00d66b122454896ed4dd77006534f6f739d43664b29bc235f575df7ca417f40341ddf72d3ad28f4ce87b1ad9ce8a736b63cb125bc7

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpng16-16.dll

Filesize
259KB

MD5
d9697897c74328fca5ff02eb188c3c93

SHA1
b1a09b8293d723c70f664834fe26523a8ff19e0d

SHA256
0698071737ab732e4b48dcd7985fcb0e9abb46e2a6bbef5de3b061849436754d

SHA512
ff7e51b9f1523e07df42dd00d66b122454896ed4dd77006534f6f739d43664b29bc235f575df7ca417f40341ddf72d3ad28f4ce87b1ad9ce8a736b63cb125bc7

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libpython3.10.dll

Filesize
3.1MB

MD5
d8bf5d67209730b709659119d496a3d7

SHA1
ebbc01552e0a2fd18cdc7361f97952652b4639a9

SHA256
facb599ea6bde5cb094f97689c3585f8228c9ecddee00072be851623a202cc56

SHA512
221440bbd319f236c2aa929681a2b058faef929fd3882f59345cd45a7f1b50b9f94cbbccb0d58c2df5629a61811980abd490af84899aea8305338ae07b8acf6a

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libstdc++-6.dll

Filesize
2.1MB

MD5
8ef9e10e837bc7b40eb854e34acfb5ba

SHA1
13a88499695f4dc3d8e903347a98478971e40cd2

SHA256
ee99aea1af36e45baeaa701b12215ce47dac10dd26d6f8e33fe4fd0d0bc61461

SHA512
1e130ba6951ba659fe419080852cc353044081f0e8a185346e9cf57d182a86c55e0d624ffeb9cb162d3040b2fade003652ae9e0e5b3f624259419c2cebcbc2be

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libstdc++-6.dll

Filesize
2.1MB

MD5
8ef9e10e837bc7b40eb854e34acfb5ba

SHA1
13a88499695f4dc3d8e903347a98478971e40cd2

SHA256
ee99aea1af36e45baeaa701b12215ce47dac10dd26d6f8e33fe4fd0d0bc61461

SHA512
1e130ba6951ba659fe419080852cc353044081f0e8a185346e9cf57d182a86c55e0d624ffeb9cb162d3040b2fade003652ae9e0e5b3f624259419c2cebcbc2be

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libwinpthread-1.dll

Filesize
66KB

MD5
eac96412931656d2b43864e5987c105e

SHA1
3774f1923e31772823abe2fb2d159c6889e0836c

SHA256
e64656c9a65dffe4dc05cf59896ec212285f6d570659d08852de02640f15c805

SHA512
2d7c59bfe92bc9d9b4e5f1d6a4e32392ecffd0b5977918d60424ef4dfcd1d2cd024234e94d31fa23b51288f8db8769b75c59ac5b6762a01796df82c3d5105435

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\libwinpthread-1.dll

Filesize
66KB

MD5
eac96412931656d2b43864e5987c105e

SHA1
3774f1923e31772823abe2fb2d159c6889e0836c

SHA256
e64656c9a65dffe4dc05cf59896ec212285f6d570659d08852de02640f15c805

SHA512
2d7c59bfe92bc9d9b4e5f1d6a4e32392ecffd0b5977918d60424ef4dfcd1d2cd024234e94d31fa23b51288f8db8769b75c59ac5b6762a01796df82c3d5105435

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\zlib1.dll

Filesize
122KB

MD5
de8ac155d5488de556e95d6cc63926d1

SHA1
c64e1409ab7412d199ab35f8033bbd8203e356d8

SHA256
a4421cca74d99f6d0fffdbc75dbab918776689907820557b9b968f1c230f2a65

SHA512
a06c4729f730a5414524259056ea17ed993e47dcd3055843509303b1c24717f81de7618f77d93d2e03a2ca63ff0251486f5b715a51cf3ad607af42dfc292676a

Download Submit
C:\Program Files (x86)\FontForgeBuilds\bin\zlib1.dll

Filesize
122KB

MD5
de8ac155d5488de556e95d6cc63926d1

SHA1
c64e1409ab7412d199ab35f8033bbd8203e356d8

SHA256
a4421cca74d99f6d0fffdbc75dbab918776689907820557b9b968f1c230f2a65

SHA512
a06c4729f730a5414524259056ea17ed993e47dcd3055843509303b1c24717f81de7618f77d93d2e03a2ca63ff0251486f5b715a51cf3ad607af42dfc292676a

Download Submit
C:\Program Files (x86)\FontForgeBuilds\fontforge.bat

Filesize
520B

MD5
00c266e7b22d66574b104d57a109bd9a

SHA1
30372d3ed73948d24fe55d29683d52fd4ff13daa

SHA256
ca0460fe8ca55937d7004c03881bcd06306dce8113242aa1972efe16fc5a31fb

SHA512
49049b27d5b30dc2a90213370aba930058e0886ec246244e5489fa22cf92fee17da050174c2152e5c6403444a0dc6f3e24673995eb7d46adda4c048f8c1ec033

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-0G0MA.tmp

Filesize
29KB

MD5
7acafe408d6d5dd64238fd689638b177

SHA1
04ffe4f1c2e6d8796ae64b8d3ccd1b9791f31445

SHA256
2d1434905b07ae5e6a7dc14d10426b20562c9c81d05095d8f5f22c6a44ebaea1

SHA512
b3cbe5fd1627f46f3bed6b5d12341d45f42070b5acb37266a6884d2d32e422672f656c00e99aa56894ddc12398e9f76d46c4089095df6c225e5a37f2e5d30f2f

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-42LVG.tmp

Filesize
14KB

MD5
8fb00e724a7af8d0b43fa3365fd3eff0

SHA1
161edb467745642554aff7ee33a3eb69ff9e7287

SHA256
fdf2d136b16bc5870755fca8f2f93d8fcb3a24cf0dff1b12c5516be91272728f

SHA512
cc785380e70f1f716079d789de11e4c6b1a5e20003beb9871efecb12c490d4ea64ba0f33d795c07d5de94c2ac66b5802474158bf71358a258b82837bbc1855d3

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-9H77D.tmp

Filesize
11KB

MD5
80df840e0ac823fa34bcfa543296ba35

SHA1
0ff6c9ceb0819aef9d68cee59d7942fa0544661f

SHA256
5dc6e25c1faa723bf76dca21a7a37df1332938fe3f8f79be88e03ca6d2b61966

SHA512
cd5bf95d0a51b0f6dac148f0706dc18298a4f3e5b8ed0271af0f54cda46078afe22831d29aa5ab65afa837c0e9f7dc26aaf655af9c2683714eeef0232a4a9848

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-F2A7K.tmp

Filesize
661B

MD5
68d5fc8a7ddb919bb241078b4e4db9cc

SHA1
65369f014ea304064474d47c719401803c999ed8

SHA256
ba001220edb0d685321fcfc23aa4365ffb34ac38636e1402df2268703d378767

SHA512
ba9e26df6282c298bc52f7b1f3b47648118dcb65eaff1cbf0fb17007a39f46787596295e54a097e674af2565c024fb49a1e39a6e44bdfceb20295060b96f2c1f

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-QV7N2.tmp

Filesize
497B

MD5
b85796f8d9d4e7556c6ad5ec9f0c5371

SHA1
9501323e7783213ab6c7c8e8fd05cd95d7a76ba1

SHA256
6fd2a4e4c17b2b18612e07039a2516ba437e2dab561713dd36e8348e83e11d29

SHA512
eb02053d616708ed5c51da204e1dae2072bb2263e1466024e3bc363a35ceffba509794aec153e6a36cf49474cd73e4f63f3e2daa34d6d18de83fbfb055321263

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-RG0MQ.tmp

Filesize
15KB

MD5
e38b04681f4e31b77b316c978f6749bd

SHA1
1a2cecedf2686b5de23beb435957d92894bc990e

SHA256
966b2718d889f02e03fcf7fd3db334aa06d9bc3f64981f65a590505196b747f6

SHA512
6eee7a6b90d1676b18eaa84fa010b348207bc88b7dc206696eba87f85b33cfced6e297e757a95891b609d7e9647b377001507853c8121d93739d20adaeef26a2

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-RJT7J.tmp

Filesize
1KB

MD5
de664fedc083927d3d084f416190d876

SHA1
fe0c3747cf14e696276cb6806c6775503de002b8

SHA256
ab77953666d62461bf4b40e2b7f4b7028f2a42acffe4f6135c500a0597b9cabe

SHA512
cff19a724fac387599d98c0a365849078dbcbea65efca1ee445f158268b9241e552212a99e7e0b34394d246e3a06c999a7f1a967f64b2724ca9b623d62996c6f

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-TJ6V7.tmp

Filesize
4KB

MD5
0210636ea49cabb88154105b88045e64

SHA1
d446d94e2b0fe0ec6286292877c3926268ecab4a

SHA256
fca1a063fa9ceef84c1a9a2ab2cdb99f68622c234a46dbf3f660ab4bb824ab27

SHA512
2ffc53a4c2b3600b20c8efe9c92d77ddac659c42c74dbc7abb2478017ac4050d7debc190b134369f4ad8e3d6c53ecf4e06c683938c5bde99dd7675739d6a1c73

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\packaging\is-VV1UI.tmp

Filesize
4KB

MD5
359296260a63d16f5149ccdd7ae70762

SHA1
5979c6b8353210e327b4689a66207c56a7c8e3d1

SHA256
7498de6addc14be4d89f546b505570b9f50c6ac6edccb7d8468cbf1d710d7854

SHA512
f91a368431fcf74f3214dac61427a3a81188eed8ecd2dd8f3036ec32bf149b0c34837ec965c4a4102b64e37f649df4e90fe4b4104cb46e68b17079b52c5c9401

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-1F8E2.tmp

Filesize
8KB

MD5
f1f31bb05d818ebbc7cad0eac3c6364c

SHA1
5cde38103af5472ed38061b38d1d2ac3f2637e85

SHA256
dcb6d269f0f7d8d61bd53cedf39187364844014d5e6644ed352936e1c3cc7a6a

SHA512
d5ac511201f01675f1bee9cb671841f884522a5242f24e52ecf94715f1105f9c7a977f55654c4dcf2ebc54eed42a7fb914eb60f3c75d67b71623b308b11add79

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-6I2OE.tmp

Filesize
13KB

MD5
5e9b66d292513af743fe21b61f00463d

SHA1
dc3596cfdc8504ab6e344acf512605b00cc412ac

SHA256
eedbb801ba78b9278957437fc843d19a6354869775f1940fdc2ad7e350ccf35e

SHA512
fdc0f7949c5570415981bc78d4ee672e05b651af44aecbe079b81e235b96a98a41ad2f68d2708ac0550790b260b262510e060b57e25bb86393701f8175905cbf

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-BFHGH.tmp

Filesize
6KB

MD5
146786b5a4aada43d8288351dc8ef13e

SHA1
1e77e225960e39fd3ef93455425542c211f0e18d

SHA256
c14f62df67b4cb5ca6c4a137394c121cef92148aedd61ff0bfa5acd06423a4d5

SHA512
9d91565bac5f66a1c3c434ba63e22d590083c55a7ffff5cf8cce9986e12efb559a16ed5b3b246d0c34ebb9dd1f5dfffc39acd4970972d142ae70cebfcd6de12f

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-DJQD2.tmp

Filesize
12KB

MD5
0120420547c1fcfef162005c34d72753

SHA1
de8dd9838210119b7befcd0946e7c9f379339d27

SHA256
9452fdee8a08791ef90a65b986351166ac0309382bbaa96d713099fae94b3b64

SHA512
60db163a69ea1e1336e94181710dea2d7fb50794453b60cdf2ea6ac4c490a009927363cd5f444eb641f00d6945f12cde20f4da2d0710f4f05349f19a594a18cd

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-FC6E1.tmp

Filesize
208KB

MD5
4d5ead9e8640267157f07cef2440eca0

SHA1
ee174885aad35e095388c229e02274be0371389a

SHA256
bbc1a9b5013f1fac0c925f0e661c5e2b56803c80d75cd83075284e441c01552e

SHA512
f29635cf1dea3acd8701e0ea91eebeae7ac39cee0ba912cf13b70eadf3e66667f7f643e359c8672393b20fec5e31e3004211cc3a2ab67249cdb1360d46565b5d

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-OO69O.tmp

Filesize
24KB

MD5
96e34a817b72247caed38833a8382a82

SHA1
a0b0f883175cc685dcb9781126bdebdfabd5b859

SHA256
1e036f5955c17503fe43a3ed25fa0211e3899369f012f1bed8a54a0b9b06037d

SHA512
52a1f19c1ffd8c397babe8ed502d19088dab53e7048f357a4740d84b65b1b65bf12af8705f2182eb9cfcdda8434e8782de4927bcbe23f1b5dccf14ccaa90e345

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-RP60P.tmp

Filesize
6KB

MD5
e2b2a33736ac783f177601797818720f

SHA1
001eab2eabbf7018d2f36596c5c304ecd51116af

SHA256
92aefbd8ee5849e5ce49d3fe337d445a96c7fdaca3ec1307226058a3dc4f0f93

SHA512
b18355a3a4f698929cc5b66fdd485239d1f8ff9eb10db69a965519aadee6788045c59e2b609e0e71e7232c0f770d7787e73c9d62c18811bf98b846aaf6f5647d

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-UNQ94.tmp

Filesize
10KB

MD5
c9b7c7bbc75393e592411b5f900b5372

SHA1
44ccfc1d65fbb06d19c94f0e229d8c72de251b04

SHA256
7f0ba1323df4490d7ae42bfb1c9a6efab4b119b466f7790df4be048bb5467356

SHA512
880660ef7e79e76b0aff96f3bee5407a6b863467e574eddaf389318c8de71fd8946c520a8aa9aad1e0efb29eafc139653f76c8d0d86dab18ee32bce42ce36c19

Download Submit
C:\Program Files (x86)\FontForgeBuilds\lib\python3.10\site-packages\setuptools\_vendor\pyparsing\is-VFNMF.tmp

Filesize
38KB

MD5
74ecbf6fbfa002c53e5aafc144b62c57

SHA1
2ea00bcb4e8e22b0688c3cb6c8b5d711e3e7397a

SHA256
42950e8d6d3ea6cbee78cc166fd6d0a54da7a2a282bfdf3fc27c35552cd2755a

SHA512
b153d90e13a1ac5c878ba9eb045f9933de7c831204cbd47e57e189b774c3bad531c21460c9934a6069eee82537ed2bb82826bd7fc77c8b93e2763301ea04fb2b

Download Submit
C:\Program Files (x86)\FontForgeBuilds\run_fontforge.exe

Filesize
120KB

MD5
2ab58af2be990bf2b44259d4a7b8c959

SHA1
ec25e05d18264e6e3ac8c332aaa5770270a21e08

SHA256
03f3ccbf1d5ceef8ded6e4822472bd4e2a6f2b8747ad9877eda58af80059009d

SHA512
bd932c322ea40a69f7394b0792e47eec9671a4e2e85086d1d16a8337a4153978acb48ab1a2b98fa57eee419b4e09edc9cb02fa09fc1d1c0aaa758209a58a6b19

Download Submit
C:\Program Files (x86)\FontForgeBuilds\run_fontforge.exe

Filesize
120KB

MD5
2ab58af2be990bf2b44259d4a7b8c959

SHA1
ec25e05d18264e6e3ac8c332aaa5770270a21e08

SHA256
03f3ccbf1d5ceef8ded6e4822472bd4e2a6f2b8747ad9877eda58af80059009d

SHA512
bd932c322ea40a69f7394b0792e47eec9671a4e2e85086d1d16a8337a4153978acb48ab1a2b98fa57eee419b4e09edc9cb02fa09fc1d1c0aaa758209a58a6b19

Download Submit
C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-2JTE3.tmp

Filesize
343B

MD5
a8ce13e4f3457b156ee4466b7e0fa25e

SHA1
35e1167407db3bc4f871f720021ae57393938ad6

SHA256
ec6f9cb447106afa1dc7e5950eac47024aac97cdaf1d10acaf2334e34cb093ea

SHA512
f2035a451b131191edde393b18ebdd0fa7841e0b45f114f003ee0891c9058ac51cf9a283ba70642f4cdf8746554544a5d81b97c714798e2499aa88c92e146bba

Download Submit
C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-FU03O.tmp

Filesize
544B

MD5
7e204e48b94ff7f7fda8cf0cdb5ad5c7

SHA1
37b8a2c2eca2664397c9699e8bc732cc21287368

SHA256
5825035f7e1e50f20d81410387a369874390b605ebd85ecd899e37ecd345c37b

SHA512
70bea1b299cdddcbc5d42962071b59e9fa607e435e2ec7d0a5d3a4f6c3da5bcc942e81ae99cdfced9cfa3045d4bc5c1602c15df3917c1fac5cdbf2b45e166d46

Download Submit
C:\Program Files (x86)\FontForgeBuilds\share\fontforge\pixmaps\is-MAKLR.tmp

Filesize
334B

MD5
de4e95a8e9a93a6272136f741e9b1efc

SHA1
06693597173bb28730f721221bf57e2692619e3c

SHA256
8d14a93bc09ed48a42a1001c329e6f1083f926d6b4687d3e2df9f3986950cc5f

SHA512
08a3d401b5676fb9bc168b039f0d7bdb80e3f00f0dee4c9a54e8220a82113c987ff0f069703d05a482976b8ea1bc51bbcd531f6023a8ef5159776a1cc736337d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
783B

MD5
db397f1f2f2f110678ab17f901ad2711

SHA1
e69da66ad2aa4656d4d85294a9cafc963e1557c7

SHA256
e36471dea7b210fffbaa41550ad2d309938bb376937270be6f6a01f2962dde51

SHA512
80361aefc3a750afbef7f6f88a75ec2167981b351fed2c73ecc0aaf30f0cf02ef54548b42d6d7ffb4269863cbfb13aa5d9a8319254509884150a08e01dd3a23a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
538B

MD5
c5b5f6517397ddb52f89cc0f75aeacf8

SHA1
eab24494c62f663e6cb03a5496911da4d3318b7b

SHA256
ce1d6d7219f4cbd0c32930e38bdf650bc73d50b8ee24c9ddb30b3e9e5ed1ce74

SHA512
52a90fcc5c7a3f6e80884e6e936be16f000defb60c04c147c309735f8cd35f30f318461d2c156f4264753d390a3b73863edd3e8f1c0236202bab747fe0d9e7bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
8b725a3f840adb48e0f47eb0d902ab9c

SHA1
88b3ff18e4b8b7e0c8b90246f0ccf4fe6a5fabf3

SHA256
cd0d7c71079653cef8e41f062a9caa0a739a46a342d383f93304d55ef72bfdbb

SHA512
259fc5b9a21308d800698642be5f79acda7a6e71521f7b2cf20e588ddf4167d57f825594a69d216db428aa7f5c16f6601f37e30921ddc86a702cd90d449018ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
ab0cd8c0bea7858e8ef6f1c61d88846d

SHA1
ac30aa043092ec74c938cdbb95321f42ae90b006

SHA256
e42bbc8805289ff676094edeaefad2a75df3973c8f54986e9232a87c336c3862

SHA512
e20ee6e11f2fd14140b7257268806134aea79db03e04dbdf423c39c73895a48b8edc0920542813da143f50706114e7708b2d066721e4e500f6d7407fb07c13c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
a2e743d8022a9267391fbc0c9bd2711c

SHA1
eacf1a8b8f72742813c205aa773ad417a23759f4

SHA256
a16702382f505dc830beef58ee44b3d9b42c4608663576b15d81aaffd075b6da

SHA512
ead7812d98859a6cbf2b8f5b55adda75f1def2ad5f18550e11790d1b0df178c10c54b9b51224bd2acf18afcbd13e496ac2611f7e8705bc32788be5ab9e4f12a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
173KB

MD5
b55cd2f3e0d1edf8b5de06d1f2c89fd8

SHA1
80bcbd09fdddab3a202b7f0bb5852c7cc304bd44

SHA256
a4827609c0beebcef2169126bb265dc418593ef41242a86fcd3d1872374efd5e

SHA512
76d0de4bf04b1aaf6721621ef2b7f15d9c14a657e331169db979e45615825e96cb85d6f25c77ee54ceeaea2c1e8412e33f6b94357cfc85cee1bd7a188e437b13

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6Q0N7.tmp\FontForge-2023-01-01-Windows.tmp

Filesize
3.0MB

MD5
921fc3a834de503dcf1336cdc39ab3e5

SHA1
7825079145dd16a77bf5a41579c500fc3ff555b6

SHA256
6092be6eb69f037ba889e490a0a250a643c9ecf170b9c2ac166300d449d069e5

SHA512
9dac5b18435c993e1888d5cfe7433cc135bf06d93452547653e2eff65e0b95a2395b28c7bd73fb81641e187960b7482bbea9474b95c2af72503ffc6a9c998393

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6Q0N7.tmp\FontForge-2023-01-01-Windows.tmp

Filesize
3.0MB

MD5
921fc3a834de503dcf1336cdc39ab3e5

SHA1
7825079145dd16a77bf5a41579c500fc3ff555b6

SHA256
6092be6eb69f037ba889e490a0a250a643c9ecf170b9c2ac166300d449d069e5

SHA512
9dac5b18435c993e1888d5cfe7433cc135bf06d93452547653e2eff65e0b95a2395b28c7bd73fb81641e187960b7482bbea9474b95c2af72503ffc6a9c998393

Download Submit
C:\Users\Admin\Downloads\FontForge-2023-01-01-Windows.exe

Filesize
22.5MB

MD5
4b028ac5ced67a3b8cb8c643b0e76115

SHA1
ff355d7ed5b674dbbb91c170540e3199c6243e7c

SHA256
fc6eb57495e737025efb37ad6f1effad7fef47f19a8a5f2656705687e4f43162

SHA512
17dc91a68cd4964993105914574c6945d24bf66d8443f3932fd1a3b7f916cdabb647d6a75fd29aafd5eadaf31963fdfd362dc6fee6a1481e40b990d2fa1b35dc

Download Submit
C:\Users\Admin\Downloads\FontForge-2023-01-01-Windows.exe

Filesize
22.5MB

MD5
4b028ac5ced67a3b8cb8c643b0e76115

SHA1
ff355d7ed5b674dbbb91c170540e3199c6243e7c

SHA256
fc6eb57495e737025efb37ad6f1effad7fef47f19a8a5f2656705687e4f43162

SHA512
17dc91a68cd4964993105914574c6945d24bf66d8443f3932fd1a3b7f916cdabb647d6a75fd29aafd5eadaf31963fdfd362dc6fee6a1481e40b990d2fa1b35dc

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 688251.crdownload

Filesize
22.5MB

MD5
4b028ac5ced67a3b8cb8c643b0e76115

SHA1
ff355d7ed5b674dbbb91c170540e3199c6243e7c

SHA256
fc6eb57495e737025efb37ad6f1effad7fef47f19a8a5f2656705687e4f43162

SHA512
17dc91a68cd4964993105914574c6945d24bf66d8443f3932fd1a3b7f916cdabb647d6a75fd29aafd5eadaf31963fdfd362dc6fee6a1481e40b990d2fa1b35dc

Download Submit
memory/2884-6896-0x0000000000590000-0x00000000005B5000-memory.dmp

Filesize
148KB

Download
memory/4644-218-0x0000000000D10000-0x0000000000D11000-memory.dmp

Filesize
4KB

Download
memory/4644-208-0x0000000000400000-0x0000000000718000-memory.dmp

Filesize
3.1MB

Download
memory/4644-6381-0x0000000000400000-0x0000000000718000-memory.dmp

Filesize
3.1MB

Download
memory/4644-203-0x0000000000D10000-0x0000000000D11000-memory.dmp

Filesize
4KB

Download
memory/4644-6624-0x0000000000400000-0x0000000000718000-memory.dmp

Filesize
3.1MB

Download
memory/4644-1231-0x0000000000400000-0x0000000000718000-memory.dmp

Filesize
3.1MB

Download
memory/4644-3686-0x0000000000400000-0x0000000000718000-memory.dmp

Filesize
3.1MB

Download
memory/4716-6910-0x0000000072E50000-0x0000000072EB7000-memory.dmp

Filesize
412KB

Download
memory/4716-6922-0x00000000720A0000-0x00000000720D3000-memory.dmp

Filesize
204KB

Download
memory/4716-6626-0x0000000071700000-0x00000000717D4000-memory.dmp

Filesize
848KB

Download
memory/4716-6897-0x0000000000660000-0x00000000009DF000-memory.dmp

Filesize
3.5MB

Download
memory/4716-6898-0x0000000073310000-0x000000007344A000-memory.dmp

Filesize
1.2MB

Download
memory/4716-6900-0x00000000730E0000-0x0000000073232000-memory.dmp

Filesize
1.3MB

Download
memory/4716-6899-0x0000000073240000-0x000000007330A000-memory.dmp

Filesize
808KB

Download
memory/4716-6901-0x0000000072F60000-0x00000000730D2000-memory.dmp

Filesize
1.4MB

Download
memory/4716-6902-0x0000000072EF0000-0x0000000072F52000-memory.dmp

Filesize
392KB

Download
memory/4716-6903-0x0000000072E30000-0x0000000072E48000-memory.dmp

Filesize
96KB

Download
memory/4716-6904-0x0000000072E10000-0x0000000072E29000-memory.dmp

Filesize
100KB

Download
memory/4716-6905-0x0000000072610000-0x0000000072AB0000-memory.dmp

Filesize
4.6MB

Download
memory/4716-6906-0x00000000725E0000-0x000000007260A000-memory.dmp

Filesize
168KB

Download
memory/4716-6907-0x0000000072EC0000-0x0000000072EEB000-memory.dmp

Filesize
172KB

Download
memory/4716-6908-0x0000000074030000-0x0000000074051000-memory.dmp

Filesize
132KB

Download
memory/4716-6909-0x0000000074010000-0x0000000074026000-memory.dmp

Filesize
88KB

Download
memory/4716-6940-0x000000006EE00000-0x000000006EE0C000-memory.dmp

Filesize
48KB

Download
memory/4716-6911-0x0000000073EE0000-0x000000007400E000-memory.dmp

Filesize
1.2MB

Download
memory/4716-6913-0x00000000723B0000-0x00000000725D5000-memory.dmp

Filesize
2.1MB

Download
memory/4716-6912-0x0000000074110000-0x0000000074136000-memory.dmp

Filesize
152KB

Download
memory/4716-6914-0x0000000073E80000-0x0000000073EDA000-memory.dmp

Filesize
360KB

Download
memory/4716-6915-0x0000000073DC0000-0x0000000073E7A000-memory.dmp

Filesize
744KB

Download
memory/4716-6916-0x0000000072340000-0x00000000723A8000-memory.dmp

Filesize
416KB

Download
memory/4716-6917-0x0000000072320000-0x0000000072331000-memory.dmp

Filesize
68KB

Download
memory/4716-6918-0x0000000073DB0000-0x0000000073DBF000-memory.dmp

Filesize
60KB

Download
memory/4716-6919-0x0000000072AB0000-0x0000000072E07000-memory.dmp

Filesize
3.3MB

Download
memory/4716-6920-0x0000000072110000-0x0000000072318000-memory.dmp

Filesize
2.0MB

Download
memory/4716-6627-0x0000000000660000-0x00000000009DF000-memory.dmp

Filesize
3.5MB

Download
memory/4716-6921-0x00000000720E0000-0x000000007210D000-memory.dmp

Filesize
180KB

Download
memory/4716-6923-0x0000000071EB0000-0x0000000072094000-memory.dmp

Filesize
1.9MB

Download
memory/4716-6925-0x0000000071E50000-0x0000000071E62000-memory.dmp

Filesize
72KB

Download
memory/4716-6924-0x0000000071E90000-0x0000000071EB0000-memory.dmp

Filesize
128KB

Download
memory/4716-6926-0x0000000071E70000-0x0000000071E8E000-memory.dmp

Filesize
120KB

Download
memory/4716-6927-0x0000000071D30000-0x0000000071E4A000-memory.dmp

Filesize
1.1MB

Download
memory/4716-6928-0x0000000071C70000-0x0000000071D30000-memory.dmp

Filesize
768KB

Download
memory/4716-6929-0x0000000071C60000-0x0000000071C70000-memory.dmp

Filesize
64KB

Download
memory/4716-6930-0x0000000067800000-0x0000000067819000-memory.dmp

Filesize
100KB

Download
memory/4716-6931-0x0000000065B80000-0x0000000065B9D000-memory.dmp

Filesize
116KB

Download
memory/4716-6932-0x0000000071A30000-0x0000000071B82000-memory.dmp

Filesize
1.3MB

Download
memory/4716-6933-0x0000000071A00000-0x0000000071A2B000-memory.dmp

Filesize
172KB

Download
memory/4716-6934-0x00000000719E0000-0x00000000719F9000-memory.dmp

Filesize
100KB

Download
memory/4716-6935-0x0000000071B90000-0x0000000071C28000-memory.dmp

Filesize
608KB

Download
memory/4716-6936-0x00000000719B0000-0x00000000719DE000-memory.dmp

Filesize
184KB

Download
memory/4716-6937-0x0000000071970000-0x00000000719A7000-memory.dmp

Filesize
220KB

Download
memory/4716-6938-0x0000000074140000-0x0000000074187000-memory.dmp

Filesize
284KB

Download
memory/4716-6939-0x0000000071900000-0x000000007190E000-memory.dmp

Filesize
56KB

Download
memory/4716-6941-0x0000000071850000-0x00000000718F1000-memory.dmp

Filesize
644KB

Download
memory/4716-6944-0x00000000717E0000-0x00000000717FB000-memory.dmp

Filesize
108KB

Download
memory/4716-6943-0x0000000071800000-0x0000000071810000-memory.dmp

Filesize
64KB

Download
memory/4716-6942-0x0000000071810000-0x0000000071842000-memory.dmp

Filesize
200KB

Download
memory/5008-6625-0x0000000000400000-0x00000000004DD000-memory.dmp

Filesize
884KB

Download
memory/5008-192-0x0000000000400000-0x00000000004DD000-memory.dmp

Filesize
884KB

Download
memory/5008-205-0x0000000000400000-0x00000000004DD000-memory.dmp

Filesize
884KB

Download