Analysis
-
max time kernel
56s -
max time network
36s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
17-04-2023 09:11
Behavioral task
behavioral1
Sample
coreldraw_graphics_suite_2020v22.0.0.412/CorelDRAW 2020 Portable.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
coreldraw_graphics_suite_2020v22.0.0.412/CorelDRAW 2020 Portable.exe
Resource
win10v2004-20230220-en
General
-
Target
coreldraw_graphics_suite_2020v22.0.0.412/CorelDRAW 2020 Portable.exe
-
Size
1230.3MB
-
MD5
d20fe6aedcdde559c0bb9ee47434bf2e
-
SHA1
38c6f84934a4b5aeb658475babdd0d8e2389ff67
-
SHA256
4eea1a4d3c8a4c846a5010bacdc85cfc1ddac4030b58d4c0190cc91e6537e1c0
-
SHA512
63f4e82043352c9af3efd8e987ad6b7583f5fb38263a0d0042b98620ad18e7275f01fe97997923e1bc6f4c91f5aec0dfa652230bb2a183f3f5b184d9f59a5f8c
-
SSDEEP
12582912:8Ltn0JtwBuJYqN49D8O0u7eWOEUGdj1C+EpH41PH:m0J6gJrN49D8QeWOLGdpZdP
Malware Config
Signatures
-
Executes dropped EXE 3 IoCs
Processes:
PsiService_2.exeCorelDRW.exepid process 560 PsiService_2.exe 632 CorelDRW.exe 1248 -
Loads dropped DLL 64 IoCs
Processes:
PsiService_2.exeCorelDRAW 2020 Portable.exeCorelDRW.exepid process 560 PsiService_2.exe 1376 CorelDRAW 2020 Portable.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe 632 CorelDRW.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
matchs PE files 64 IoCs
Portable executable.
Processes:
resource yara_rule behavioral1/memory/1376-61-0x0000000002DD0000-0x0000000002E8B000-memory.dmp is_a_pe behavioral1/memory/1376-67-0x0000000000CB0000-0x00000000012D8000-memory.dmp is_a_pe behavioral1/memory/1376-68-0x0000000002DD0000-0x0000000002E8B000-memory.dmp is_a_pe behavioral1/memory/1376-73-0x0000000002DD0000-0x0000000002E8B000-memory.dmp is_a_pe behavioral1/memory/1376-74-0x0000000002DD0000-0x0000000002E8B000-memory.dmp is_a_pe C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe is_a_pe C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x6CA77DC97AB615B7\PsiService_2.exe is_a_pe behavioral1/memory/560-377-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-378-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-380-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-379-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-381-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-382-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-384-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-385-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe behavioral1/memory/560-388-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe is_a_pe behavioral1/memory/560-394-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe is_a_pe behavioral1/memory/560-579-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-581-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-582-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-580-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-583-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-584-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-586-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-587-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-588-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-589-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-590-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-592-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-593-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-591-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-585-0x0000000075640000-0x0000000075691000-memory.dmp is_a_pe behavioral1/memory/560-594-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-595-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-597-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-598-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-601-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-602-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-604-0x0000000000400000-0x0000000000447000-memory.dmp is_a_pe behavioral1/memory/560-603-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-600-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-599-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-596-0x0000000075600000-0x000000007563C000-memory.dmp is_a_pe behavioral1/memory/560-605-0x0000000001C70000-0x0000000002210000-memory.dmp is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe is_a_pe C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CorelDRW.exe is_a_pe behavioral1/memory/632-623-0x0000000140000000-0x000000014005E000-memory.dmp is_a_pe behavioral1/memory/632-626-0x0000000000350000-0x0000000000352000-memory.dmp is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlConfig.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlPref.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlPlatform.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlUtf.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuin59.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuuc59.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icudt59.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\vcruntime140.dll is_a_pe behavioral1/memory/632-696-0x0000000000B70000-0x0000000001198000-memory.dmp is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuio59.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\msvcp140.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\vcruntime140_1.dll is_a_pe \Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\mfc140u.dll is_a_pe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
CorelDRW.exepid process 632 CorelDRW.exe 632 CorelDRW.exe -
Suspicious use of UnmapMainImage 4 IoCs
Processes:
PsiService_2.exeCorelDRW.exepid process 560 PsiService_2.exe 632 CorelDRW.exe 632 CorelDRW.exe 560 PsiService_2.exe -
Suspicious use of WriteProcessMemory 12 IoCs
Processes:
CorelDRAW 2020 Portable.exedescription pid process target process PID 1376 wrote to memory of 560 1376 CorelDRAW 2020 Portable.exe PsiService_2.exe PID 1376 wrote to memory of 560 1376 CorelDRAW 2020 Portable.exe PsiService_2.exe PID 1376 wrote to memory of 560 1376 CorelDRAW 2020 Portable.exe PsiService_2.exe PID 1376 wrote to memory of 560 1376 CorelDRAW 2020 Portable.exe PsiService_2.exe PID 1376 wrote to memory of 560 1376 CorelDRAW 2020 Portable.exe PsiService_2.exe PID 1376 wrote to memory of 560 1376 CorelDRAW 2020 Portable.exe PsiService_2.exe PID 1376 wrote to memory of 560 1376 CorelDRAW 2020 Portable.exe PsiService_2.exe PID 1376 wrote to memory of 632 1376 CorelDRAW 2020 Portable.exe CorelDRW.exe PID 1376 wrote to memory of 632 1376 CorelDRAW 2020 Portable.exe CorelDRW.exe PID 1376 wrote to memory of 632 1376 CorelDRAW 2020 Portable.exe CorelDRW.exe PID 1376 wrote to memory of 632 1376 CorelDRAW 2020 Portable.exe CorelDRW.exe PID 1376 wrote to memory of 632 1376 CorelDRAW 2020 Portable.exe CorelDRW.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\CorelDRAW 2020 Portable.exe"C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\CorelDRAW 2020 Portable.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1376 -
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x6CA77DC97AB615B7\PsiService_2.exe"C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x6CA77DC97AB615B7\PsiService_2.exe" /864A627C-C6B2-464A-AA13-25D62F282BD82⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of UnmapMainImage
PID:560
-
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe"C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe" /864A627C-C6B2-464A-AA13-25D62F282BD82⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
PID:632
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\Capture.exe\Capture.exe.manifest.__tmp__
Filesize1KB
MD5a42890c199533dfb776efb9c8b29490d
SHA1d1b4f9e34c4fbacb9e84b615c98dd566d683dc3a
SHA25695a84ffbc4cc8dad3800143c275226d219afe323f5dc4a674368fdd3a7f25087
SHA5120c96d03ef04e890488a4f9c7882d750d0d59fd4b1fb3b8aa85112b40606ff0a36a0e6a545135859463291a0197eb279788c6f4e1fdace98dbe15e06195b55049
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\Manifests\PSIKey-33001.dll_0xff533839c7a1f79c3c4922d911b75bb5.2.manifest.__tmp__
Filesize396B
MD5f93e0fb6283b5abbbb7335a0559b37e4
SHA1ead4c3eea9397488519c11743cb80fc252324d20
SHA2560d3c45d19e5e23832b3a633ccf8628dffe8a5dd9a7cd80bc9fbf4d8993f45374
SHA512fa235dcfdfe3968b7c1a15e3fab6d164ad10f232e6e628881a02ba4f580c7f94e0465ee271e72ec00212b13ccabfe7888ae10b4cc1e061f33aa8fa5fccb372c5
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\PropSchemaReg.exe\PropSchemaReg.exe.manifest.__tmp__
Filesize407B
MD5cd31072c8dcaac72719f9f6ab6e3a113
SHA1e8e792a7350fef3135f3da4c4caddf9a0f972dc6
SHA2569d55f3e57c4f1d1343ef0120fc7a083de97313dd54e59431189d93dbbd58962b
SHA512233af3fe5cd05e3c14576b905e82a6a8f8e148c63e8a58c383936d0a9bd8de4bb03b79339109b55d393fff810fea5898d132e0bbdbb7b59c67946b26ebbc4415
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\icuio59.dll\icuio59.dll.manifest.__tmp__
Filesize379B
MD573102579f0cc3777bdd0ba96bab8d6f4
SHA108512e731aed9cdfeebf2e8fdc24a35ea23e3477
SHA25603c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435
SHA512e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\CorelDRW.exe_0xF06B2813736F567B3B925B4CB3318AD0.1.manifest
Filesize1KB
MD5a42890c199533dfb776efb9c8b29490d
SHA1d1b4f9e34c4fbacb9e84b615c98dd566d683dc3a
SHA25695a84ffbc4cc8dad3800143c275226d219afe323f5dc4a674368fdd3a7f25087
SHA5120c96d03ef04e890488a4f9c7882d750d0d59fd4b1fb3b8aa85112b40606ff0a36a0e6a545135859463291a0197eb279788c6f4e1fdace98dbe15e06195b55049
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\PsiService_2.exe_0x16783D49B6931414BAD1B2368ADD9656.1.manifest
Filesize396B
MD5f93e0fb6283b5abbbb7335a0559b37e4
SHA1ead4c3eea9397488519c11743cb80fc252324d20
SHA2560d3c45d19e5e23832b3a633ccf8628dffe8a5dd9a7cd80bc9fbf4d8993f45374
SHA512fa235dcfdfe3968b7c1a15e3fab6d164ad10f232e6e628881a02ba4f580c7f94e0465ee271e72ec00212b13ccabfe7888ae10b4cc1e061f33aa8fa5fccb372c5
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\Qt5Core.dll_0xB969447CF5845A7E079A48942F78B419.2.manifest
Filesize379B
MD573102579f0cc3777bdd0ba96bab8d6f4
SHA108512e731aed9cdfeebf2e8fdc24a35ea23e3477
SHA25603c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435
SHA512e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\Qt5Gui.dll_0xB2998A759AE6400E917E5E875C4926A6.2.manifest
Filesize379B
MD573102579f0cc3777bdd0ba96bab8d6f4
SHA108512e731aed9cdfeebf2e8fdc24a35ea23e3477
SHA25603c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435
SHA512e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\Qt5Widgets.dll_0x0B2A79BC2D4EC25E58F849E001887728.2.manifest
Filesize379B
MD573102579f0cc3777bdd0ba96bab8d6f4
SHA108512e731aed9cdfeebf2e8fdc24a35ea23e3477
SHA25603c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435
SHA512e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\icuin59.dll_0x27DA9F9A5D85B81A2BD186ACCB170675.2.manifest
Filesize379B
MD573102579f0cc3777bdd0ba96bab8d6f4
SHA108512e731aed9cdfeebf2e8fdc24a35ea23e3477
SHA25603c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435
SHA512e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\icuio59.dll_0x2D80B9DC2301886483E236EF3CAE2D64.2.manifest
Filesize379B
MD573102579f0cc3777bdd0ba96bab8d6f4
SHA108512e731aed9cdfeebf2e8fdc24a35ea23e3477
SHA25603c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435
SHA512e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\manifests\icuuc59.dll_0x4C6E8602230C49A9BB2B6AA0DB866942.2.manifest
Filesize379B
MD573102579f0cc3777bdd0ba96bab8d6f4
SHA108512e731aed9cdfeebf2e8fdc24a35ea23e3477
SHA25603c937a5aba7fd7eab8ae959606ea4598e474da06b7ec63701255e7325a9e435
SHA512e3928e509d852ae8f62b6378f984013345ddff9f5073e77323703acf20ca44bebff1753f09e7343cd948559bcafe766edce38e767efc5e7e7a5fd42c37be2e13
-
C:\Users\Admin\AppData\Local\Temp\SPOON\CACHE\0xD87EE3D2F833C7C1\sxs\omnitracking.dll\omnitracking.dll.manifest.__tmp__
Filesize631B
MD5441c070b9ff2044c15dc36cc07200b9a
SHA1b7d85dff06380d788f2c6027b9278a2bd0707267
SHA256ce419f9c607ce24f86f531ea057d08439588b5b5a130837635665c2bcc71f941
SHA512333d05a640b5dcb3c138448dbbaef9d8015e4afc57493d0f27b77659262a85a9a444eadce9e24cc6b5ec7b72476644f03e1ef7173f7fe1a1a0c727f82a16aa3e
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\meta\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe.__meta__
Filesize32B
MD54be180f1128a17323724a4c1de9a1d22
SHA1ea603ab10deaf6f6869b0ed7d0a6ef5c094d7285
SHA256ba45879385ae3a3a7fa9aeeb74123d138ee259b9e94c6d93eff637089184ec7f
SHA51235f997c44ab19a8120794cbd9f06e809660a6fe8e8bfd0ce9e1ca256476365e01351b7d4ba5f8977a828ffcd2cf1ad8992e5b315c352ce338762627f93290b29
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\meta\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe.__meta__
Filesize32B
MD54be180f1128a17323724a4c1de9a1d22
SHA1ea603ab10deaf6f6869b0ed7d0a6ef5c094d7285
SHA256ba45879385ae3a3a7fa9aeeb74123d138ee259b9e94c6d93eff637089184ec7f
SHA51235f997c44ab19a8120794cbd9f06e809660a6fe8e8bfd0ce9e1ca256476365e01351b7d4ba5f8977a828ffcd2cf1ad8992e5b315c352ce338762627f93290b29
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe
Filesize270KB
MD516783d49b6931414bad1b2368add9656
SHA18f52ca93479a1c38ee0539393890548baeb2bbf2
SHA256596f28b0f1dbc8ac3a43fe00a890af088ca837da3bb227411fd76c4d27bf27e9
SHA5123dd8820623a5449c66639134f12ee63f46c94cda9ff655dcdb0354db4ab59c5bfbfc4c86cc6e6d28229deae31410458ea232efbc3697dd4b6b531d0dfd79909d
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe
Filesize270KB
MD516783d49b6931414bad1b2368add9656
SHA18f52ca93479a1c38ee0539393890548baeb2bbf2
SHA256596f28b0f1dbc8ac3a43fe00a890af088ca837da3bb227411fd76c4d27bf27e9
SHA5123dd8820623a5449c66639134f12ee63f46c94cda9ff655dcdb0354db4ab59c5bfbfc4c86cc6e6d28229deae31410458ea232efbc3697dd4b6b531d0dfd79909d
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe
Filesize31KB
MD5998ca8e37d51fb437dfe845ab3e80c8b
SHA1846fbc2367a4a446dc9978c9b92fd3c242e7bae6
SHA2563e4359ce1fefc1087992bca05e49e5ecd04296841b5bf6e6c242d087b4078baa
SHA51225cf76860b5cbc4edc51f87ee1727528a72ed7890cf006b82299caeccbc955ae0183d4e7b1e941bb4e9c54b2335e3ac0e97d5fde719c0eed2115e81f3e47f2ac
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x6CA77DC97AB615B7\PsiService_2.exe
Filesize28KB
MD58262714f213af221e99362c47439ff26
SHA13b80c450b27b7f52c7f0f10ba98b250285ce20a1
SHA25637c6320694610f194b5c7f16d8806ecfa7c50d724eab0ca304cea3358affe9e7
SHA51245fc4cb36797e95fc4d2bf79525d33a2d68241dc7b62b6fc78670e2f5cdada3b51b67acc792128c715f10290a6dba436fd3dc6ac326f74ce9a02188050a08506
-
C:\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\xsandbox.bin
Filesize16B
MD5ec3d19e8e9b05d025cb56c2a98ead8e7
SHA1748532edeb86496c8efe5e2327501d89ec1f13df
SHA256edb7be3ef6098a1e24d0c72bbc6f968dea773951a0dd07b63bad6d9009ae3bf4
SHA512175fb8432472b6795bb5db0eba61bc7b57331720825df5b048f3086815ba844df4f7e83e42ff9e8fe5ab01700675a774cb916677953d6e0088ffbf1fa2775349
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CDRCRV.dll
Filesize1.1MB
MD5c8310288e05a9477dc7e63e5e1fbbd01
SHA13be544336598e90476ba5f97944d270fb152ed3b
SHA256e6dcf4f6aaea99006e9788d7a461e00748a42d39b7f3c717d758635744d1ad78
SHA512a374c16229a3c83cceefd4ade006606d54cfc1e1989b7c8eca10f92f51207b03ccf6b2349347b645674395f5ab1de3bfa56ab611b715cd4a86f552e7cbcda311
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLCTL.dll
Filesize952KB
MD5c5b683997917869dd5d2a47d64a09de7
SHA10fe0a0b3402c45b18c2459237f873a52ade54551
SHA2566f7f57e320beb316dc10e353589c448a5d0dfaa91663e3f5301c5228ad97cf5b
SHA51240dfd340613f0724ac7022b7796d2426c054ab52bb1d980c42d2086af3eba2cf735901ffc5221afb00fd4ef2e200874b166c84e73e14220a878a5dfd188c53f9
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLFRMWK.dll
Filesize8.4MB
MD5f041a83aff38466f0fc059a414ebde42
SHA175abe8888a12a4040e3f430c59e370d1c5e96510
SHA25650500a61879bed04a4453abf2f6c67ce041b096ccf9240d672c24d1df99320dd
SHA512d1b9f4e89a1f7b02182cecc8db5e7662227c7d75cc24a4fe03451ba98de377e976f0c0a1fc41dfbde619cc6afa7beaee65dc8c7e77715bf9b9bdee2ea88ee9b9
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLUTL.dll
Filesize769KB
MD5f702f5a4c52d21af533e291406536d58
SHA193a3aa1fe828cfea2eac0cbae54a6be34cf4a0e1
SHA25649528e4dc534dc8af71fb62c32a66c0d58251fb91540ad318e83b28b67f115f8
SHA512f56c4486122e1dbda09e783839544efd164db04215c01c4d682ec063507536e3fba69b23bea3883d5825ea34a471421afbfa6845675b446ec541d6aca8c7cf14
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CRLWEB.dll
Filesize118KB
MD52da1bccd12209fa199952350ecc655c5
SHA19148e1bd50d4c127fe4f8bd05e3c63d50d5a2906
SHA2564c581ee4ea08efdba966b3f2427dd99ac955b6988e7dd34333d464aabb5361ce
SHA512fa96c65473369a4da27570a24e88853db6811cd3f378d90d5bffecd0f611806fada8ac9f2391f3201e984ebb1e3f173f30b780fb45593c81d9fabf489cb93695
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CdrContainer.dll
Filesize847KB
MD50a07601081f76c95fa36d52dac9e7f94
SHA1f6329549d0d4999aa9501405f27698ce3bc09a46
SHA256eb25aad1f624993aa651a183ba355eb560e52c6524333df8a169a45f2b343a2d
SHA512be78b3052a58630adaa00cec5285ced69c9ace8a40984cd2e97306997b537015bfeba935156fa7827f18060ae709749d22bc21451aa27f7f9a76dadf6af9ac70
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CdrCpr.dll
Filesize404KB
MD554c24bed6b6822ecc3899a6e7cc39e65
SHA15c3f3cb51e2a1b68dcc2764d22f90c61bb8743fd
SHA2566d586966540c6efea094caf007253993f902bf0f4d3181aa99dd3769a0378abd
SHA51212a920638f89f133458ef4a5ba561d2b79be477917e595df42da98cb4ec5c2f79650dda6c73d3d55ceadaf9991356d3e8b34c575fdb339f62a5f67854b78dcd3
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CorelDRW.exe
Filesize360KB
MD5f06b2813736f567b3b925b4cb3318ad0
SHA1283f921935ebc6e17161b2b2fe4add6e3214bc1b
SHA25643e414415f3e13dc866c48f8db66f0a4fd296eded59de4a66d4d4959490f6406
SHA5125e174d2059da5d179aafbba159c08e4bf62fd6cab5fd3812b9cd6c495334ce3ad683b3dadc5dc8e0080b0b753eb17d3a13ba2d1f80c6f0fd8e2d2c75e5619860
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Crl2D.dll
Filesize3.9MB
MD5a2868e4522f5b37c426e9fcd7b104695
SHA15afe3eaa489301c916a77ee2dcf95bca9b4df077
SHA256a84c03761be530119b4a064dfe11d862c2b8e66fa36a4fddc65ed52c5e28d4a4
SHA5124219d1b961eac21fd682b9917c6bffefa8b61ea79a26f6fe9d67f802e6c59603dad3aa092a9dce114971e519a79bce71bb3bf76c6a8113f03140bab99300ec67
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlBoxInfo.dll
Filesize18KB
MD5c216cffadab01ca505186408e17dfb52
SHA19dee44031f7c6b77653bfc097a30fc06a282c955
SHA256a1c4b963b6427bc75230a7e710aaa056ab18ef458432094096207be7c4c97234
SHA51298830e83957223244ea92c98425bf5afc96357ee6fa98ea7125b9861d0dec59a116d1795d89f684c97d8156857a0b6997906b9f454728780bfb6e068d61ce3dd
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlCQL.dll
Filesize296KB
MD519ac50b139edf79b10e8f190efb36003
SHA18a16a417992949b785607e8603d460747eb2aac9
SHA256e77dad4b231545c6ea78c74eb46db51c2d13aa2d78d4213fcc233635761f9470
SHA512c7d32f1980f86748e1b31d907fe797e3f3aa47d97d0cb112579299663642b3494be8f40a4259051344beb6bfd3a2f02175a09431a4a4c6fa6ba7af81430ce8a2
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlCharacter.dll
Filesize2.7MB
MD5d2a7b56529de4ade86a3b906188d5ba1
SHA121fb987fc07a8d1c0738e21f4ce5753bce5f672f
SHA2563ae1e618b27ed6aed07d4af545777a87b91d97ab5f76412bf1cb6d73e11862c1
SHA512fd5637a5bdfcde214db4558016efd52812f5785a689ee83a4ed935838f214ed4b37c9d4745433ade9b91dc4960bf786a2979806ed7b4254afbaf09db5768f97f
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlClip.dll
Filesize98KB
MD5182b5385b3521df7a79799d4878c4f16
SHA15966eb083b14e4f51de11065e98927240ae3f27e
SHA2561883b815179b22012d5a0880dd54ade1fac5e389c51b7ecd69290f5be1627778
SHA512ed628f723687aa4aefe42269c64a90622f81ccc7e694e25ce64c64d18376e6f52d2b9d6dbba6ed3e08acf551cf327c790cb66881a4c3b40261dacef9aead7fa5
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlComments.dll
Filesize178KB
MD58c4a3fe5a33c8b84c81e53a7e8b9a419
SHA1ff41e4642f9e3cbe98de110cca5d74339ee48fe2
SHA256262bfbcf437ac94a31658cc8418db8c283cc1b0e4cf831e53e2960c968241ace
SHA512adef76018556d974dc939915a98c67e56f000307ff437bb59ba6ee96222aff1b29e90a6afa2dcca0f6a80e0c290475e84f9863b7deb07c305cb7134d1b9b2da8
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlComponent.dll
Filesize76KB
MD568957cf90600646ebaf2ef4e3885d236
SHA1a243e6a0c29b7ec896217571da7cd02b4a71525d
SHA256ef55bccdbbbaa488f08ae926bb401a3b999697b1c3ca449f198f64d5b942607a
SHA5126734f366c8246bf545b5cff39c43dd3ee105e1560709aaf8cdcb1748451c3d4dcf5fb570e265b4ea6d21378ca6b9e583cfcf8219821d540da89a7fe1a261cf96
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlConfig.dll
Filesize254KB
MD53af1c4c0aae64db29231823bb5e72af2
SHA134a404ce44370f73926ec4c6127161517864ebf1
SHA2563519fe96044820e2143c92fd2bf27ebe5601bd16c9f06eec592ad75787617f1b
SHA5121793f4bec150c4594ab2c4bb8dc4786bc0e3078c4614de9b633823c8e23e318bd684427c4484d3f3ef554522ee3cd2b07c7f43d8f212de872bf7b287f634042d
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlFeatureManagement.dll
Filesize359KB
MD5da1b0e51c775c3e29a26cb2dca738158
SHA1bb7ca89b7aa0a4a71e16b3761331bd2f901fdccd
SHA256de1c08a0863f3f64f7e6c9b3d8ec1792fe42c0d64b828f195b9c79aa980d1c9c
SHA512793c16112221752cee6c4495d45128b5ba0932cf901786aec253705bff7cb5c939a3bb5d44bef12fb548693a6a3a97db2bd0a7813c7293e6948258050c341e88
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlFrmCommon.dll
Filesize3.9MB
MD5a11d8d9ed55a10b45f6b7231c8ff6ff0
SHA15658dda4086ddcfb20aeeeea7a761c56a5a9df98
SHA25624932d38bc3a26fa73c450b595265dc0164efd74aa7dbdfe5ea1030089e1a107
SHA512d8decc20ec0a8eb0bc015000b8aff850a743f82c6dc0dfe22987488296a281c8a0c55f718035669dca8c6fce1e005ac21bd39fdb41842c525243697e3af10e5f
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlIcons.dll
Filesize161.4MB
MD504344eb74beb49aa26bf9e4270616cc2
SHA144a30f66f4e420d5edd2d14c52ba0feb647ae34c
SHA256d65d60c7f15642eb083478b807048971e6f1a12239fa0bc85a75b26a42a2dfef
SHA51236ae801752de620fa285da762bac90eb43943d217176118399b0a80aa0097740c63710757db22009da83452176f34a0038ac150e8ecc924938f383455a783572
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlInternationalization.dll
Filesize44KB
MD5ba0f5e8421fd2cc109e0474d2d18e9ff
SHA187ff01f89b85b8154b7ed87c59dd1cf42a6a8451
SHA2560fb376853808907b1832925823cc0ff7baaf036ec8416b6a29720189d5573b99
SHA5122ca0c7cb32aef247f4a364a382e02d71bce8e489f37785ea7760ac1e4fe8db9d608e85a18845369bf0e894cf31cee27576b27644f136dde0c8c8e00aa8178424
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlMath.dll
Filesize253KB
MD5863872cc80d11c2aae7327f6dad9a9fa
SHA1ad3468ed627004911c81ee232e1bc931ab8f49db
SHA2564b4de6b4e0b005a1ace2ed557936a5a6a062f714f266c1443fa08dd6cdd90dfe
SHA512dd3ec8b8f190eda82b14ced66e5bd86a625b0ac1784a5aacb303a308c424b314dc182472ea47c3ff5615eed657e36dc1c9d1268d7af5c7ed2121b6513865f18a
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlPlatform.dll
Filesize178KB
MD5acb4f49f017a2386133d263f5614fab4
SHA1546b48794d8912607387d45ce83a9b6b9b6d7c36
SHA2562dd46cce790c0f48cc46925190c1bcf7b7bc31e43d4ba5f11df5c8d5c9fe6ad6
SHA51284a135659683cbf093bced88cd70e92311bc964589f9b92985a31259604f241bee37c26c6d02cdcdc204e7ecc3ce42036f9d9e529b7047aa2ab5f06fe9d1f242
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlPref.dll
Filesize111KB
MD56aca6895ded8e3edc3ba9f011a8e2859
SHA1be1d77613054f1a94fdb151a6432fd8d7e4cdd97
SHA256f6c94aa698a6c5be8dc0332b704ba3aa984297c289fc58b6447f4c0422411a57
SHA512c37bca9cdeed5e3194ed57fc978627d428276a708d9ebda33f910698b21756755842652fb9c4221f8a336c3f6d1bccbc9fb4d7097a4b7a846e681c0087c55302
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlQt.dll
Filesize4.5MB
MD5c0e74f5eb3d482d0d2c89232bc06989b
SHA152f1836273590dbb1b1e72ae38e40aef2686c0e9
SHA25676a1027cca8615e8c8fd1ebc3a1decba358db4d96dd4a05fd04647374cbe1357
SHA512a8baac83822fada66ce5435f50bf83c222d0140345bbb2e83516b451ccc014c013cd1bbe70994ec14e894c8522979848dcb7d3cfe3107d6dd331f4962b08c579
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlResources.dll
Filesize1.5MB
MD5178e9512b1defbc234535d48f0f352af
SHA174ae898885f49b01682e347cac4cb0fc48f37040
SHA256a364f61648d68ed5c8aed5ffce29d286de2a122520eace4577b69537ea6f4d51
SHA5120f2e3ee7f566afa467001ef36e0a19202e5dc01d0f6014c935cef1b9ebee2ea23d058ee2a510b687953ab350ff70050297577a9decf78f3e4afaad1472e3af25
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlSCI.dll
Filesize51KB
MD5b62be39d03f6c40c5d9ab1da6efab800
SHA16b65445147140ac24a75205ac2f2190130a6f139
SHA256b68952f88f070522ba6979b675718c05189caa1d7e0e87c6682b3c0d4546bb55
SHA5120bf2b67b686c8d0f5e5116e2833c54639c9ca2e47abfadf22d5d292cc37c8048c780c2ed87928141288a7a47c18eb28422ca338e64f70b6b9329c062cc594eea
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlUtf.dll
Filesize64KB
MD536b5feb982aca8a727d7b4d13c57cb21
SHA10f417fdc6bb1ec4c283f45583ca4c8844cc7e193
SHA25684ffcf65f9af8d1a028874f6f560334d7cf00de4f531646754ff0b3facf9fdb1
SHA512b81fe43333521dfb88aa5cc5d106e98ce852e8c3501ce7ba3fc57c3dd5b26b9c376007f21dd02d16c4c9042107822b479f0278ffce5e46783625d8e7806348be
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlUtils.dll
Filesize1.7MB
MD5c1a83baf2142696a7227156e2920235c
SHA18df6b91a48a8d81a57a53359cebcb8d6f793107a
SHA256c2f058c0b466373e25ca45d038cb8b8639667a9280d98f62e39c3133ef60cec0
SHA512a524a2b79298c366405f26bcc47b5a0eb33e0851581f335a2b7560dc355e6211289e9141a414d9973dbfd3457272d934b111e37566df60d48c43cbc9f2712ec1
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlUtlUI.dll
Filesize238KB
MD5cee16eaaf1d55134885a5b776f472520
SHA1a5611ebafce75114345092a5a75fc03459fb64a5
SHA256473e4d35d9e556169ac74956b74b4300ca44ff0111ef7f762977b64ff63bd8ca
SHA512f066b1e9d40e119c0f12cc89d6b7feabd7a45e71cea12631d7cb01cb482aa71bb3d3c1c97c4f46a307dce6cdea5f072b13e9f6c22174239cbac68b8d22d2cf88
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlWin.dll
Filesize4.1MB
MD5ac3306084c49c7e73fcb138e636ac647
SHA1d0ecdda76cfeba197ab9493c8fd401f75989c11f
SHA256aabfa14e1edbce80f8e3ed78cef29a1e08fd6a82a58d226c6b9e6235b71e199d
SHA51243a8120e400aa375d9e950736efb74e110f74b8c611a4a309c0de274c18f21e489724b7d70039869551de7ae61db44806b5e793c6ddf4fc94e22f68f1c2aa0ef
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\CrlXml.dll
Filesize143KB
MD53d9e6cc98be33856ac60a5cf5ba2225f
SHA16077c450a92e565ebfeaaeabeffd539d4b30a515
SHA256d8baa16b9ff0ae95ca6fe8cd376231916880b215982714b8aa87c9dbe1d192a7
SHA512c6ee5bdc83a69c33a57aea54821615ba596e8769b75fe7949f09455aaa1f00fbeb6667f96b8ffcaf427080f86af71cff7b249d91de3f3dbd4185a0fea3c52665
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\DataBinding.dll
Filesize106KB
MD5759584fbe788eae7e52bb5843011d1cb
SHA15a98d05584fa71a346ab217f4ad39483287da806
SHA25632fdd0d5183d1cdc5009f8cf6ac55c9a4294cb56a8b928f7f11751a9d6ec9862
SHA512d22464323c458d1df155d5a1a5d15aa8069b6800db7d467a0db71c934a88f85e445f4e50fe3de7cf288f8292da9e2568b54675c1c2561fb3af3c9a4a828cf0d9
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\LocalizedStrings.dll
Filesize28KB
MD549c3e16f8d4e9e7c9281a69cdc763bd9
SHA1485da9f2b956dfb899b730a2e27419ca0d1cb3c2
SHA256237ccd671bd9cfff4c858bd38986f573fa4104a6d9066e6280aec231d085e85b
SHA512d03cf0a7422764c1fe0057887b15e3f49583b72e26b39f2d12a016dfc12cbd20fe557a0549dee2973d451f64cb554f875e8477ab86d87a92fb281b054fc4a610
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Qt5Core.dll
Filesize5.9MB
MD5b969447cf5845a7e079a48942f78b419
SHA12d2e8dcb4f34b0451e56f7d197e258e35dc9c1e1
SHA256805c67dcb25cfd5afbfe8689c7869dffe00b70d8bc95b6f8b827da514999ded8
SHA512d7911dc755708ae346cbf4d8c36f45b666a55cf7deb6401402a4cbfd789d16891d118b134a58167dad1530dcbdfffc094932005fb062a55b93856945edc9fc3a
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Qt5Gui.dll
Filesize6.2MB
MD5b2998a759ae6400e917e5e875c4926a6
SHA1d8df42e8649e22e05bc27eaf6afb3627e50faff4
SHA256679ea86bad32bf452112cdf6e0a1e0e85c8cb2cb1b6367c497656e9ea12ab3cc
SHA51228ce2870d07ed3ee7e9ff04c6e9fd95a4460e74193d69c82d86f2993989070f0b2b9095b9c0d2ced44b5d61707b8dcd906d211a87b3c9afdf833a269ae01d0ad
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\Qt5Widgets.dll
Filesize5.3MB
MD50b2a79bc2d4ec25e58f849e001887728
SHA14c2272310dd3a225ba74aa62a49da92cca61a713
SHA2567159bbf1f8878cddadbd0c115b6833542e023766c362d189cefae1c9ca19d46b
SHA51235537eaa454963187be75aabf6735c1b98b8d662d0256feb12383ea00dc529bda6b73ec4586428b4eeb08320643b7ffae1b441cc35bd4166c0cb4b7cb5d3985f
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\VGCore.dll
Filesize13.7MB
MD5da041cb0ca07eef5a686cf811aad1f92
SHA1b61c412aba768c497ccd0fc155d3959bbcc34a45
SHA256d9953b2703ab2bd990461dd11e4ccf8b08a543860e2b75572f779a0e75344eb5
SHA51240a0c103d3b84376c14f3259e2ebaf3bc55efca56db8eb2c37f01ef9bf38a1e03bb65963a139c8914803eee8888bff08c94e6f9483a11283a1b585f6668f1d50
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\WindowPainter.dll
Filesize6.0MB
MD520cbf2d59665b99578613fe3faa976b6
SHA1d1c8c96a572ec110aae138cfffc85c8372b521c7
SHA256ee2d8f3249326554b3d66244fa31537a2552d86adbb69b796e999c2a8455b07a
SHA5128994f3bb4d1905174829809fdaec9bdf22206c57e7bc7dbf061025da05dea4d2db185b8062277b6cd5427460853786157c5ba25cf1f08eb1ac25d982fac57334
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icudt59.dll
Filesize25.1MB
MD5771b3dc897351d0d212b0d07c4d89a67
SHA1fa2217d2b98c272b6b8323682e54cef81177d16b
SHA2568667fdcb6c53ec2573c8f77d4828bdbf74cf2c1566916fa9564f45ce06e5a1f2
SHA512e525fce640a40d21e93aa36a033116867a12e1ce953cba23ebbf7897c022a600716daf7629d44e54fc776c80dbbc7bfe7a2f032d66214365da41ba2f06b7b21c
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuin59.dll
Filesize2.0MB
MD527da9f9a5d85b81a2bd186accb170675
SHA119658dfcf8c3d0a872fc52e2305da010fdc84356
SHA2569d7c67e27490ee3d77bd06e602a6c1fba34cfff28ac7464190674d2bc662c3b9
SHA51277cbb3e5d6a9c6e1e7dac252b2eadbb2ba9de9c7d391b2d2241affc16a7d2b85bc49236112b761dbec8b35a5f60a6e3a11909621b6a8c5c1cd3400a57d69d721
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuio59.dll
Filesize58KB
MD52d80b9dc2301886483e236ef3cae2d64
SHA1be67e8f1b7e03c921dd3e24713c38fa5525b1452
SHA2561c69c9e687f5c50ff7ddbe1a8f4731eec3a44c56f9c5046b9c4f38e4d39fcfbb
SHA51242226fcffbe7b530761322bd2b1002a74812e80d5ee4cde49331afbd0317f0e21654d7eb6103c643aa153c1b3e2f8e03f522f56a9efb6c96c06ac58309adc826
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILES@\Corel\CorelDRAW Graphics Suite 2020\Programs64\icuuc59.dll
Filesize1.4MB
MD54c6e8602230c49a9bb2b6aa0db866942
SHA1bc2e987e1a7a2d82141f57a73dd51db81b58fd41
SHA2561b8568fda337328512b04f831ecbc61d12bf07e05d8095d2ccafc33df61f9190
SHA512d1300f2940bd52c46081f53cb3dd8cc100d47e44fb9c4bec885b245eaba1a544a7f524302adbc3eac41847f4dd346e4546774a314247e59a890ad47b51223c86
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@PROGRAMFILESCOMMONX86@\Protexis\License Service\PsiService_2.exe
Filesize270KB
MD516783d49b6931414bad1b2368add9656
SHA18f52ca93479a1c38ee0539393890548baeb2bbf2
SHA256596f28b0f1dbc8ac3a43fe00a890af088ca837da3bb227411fd76c4d27bf27e9
SHA5123dd8820623a5449c66639134f12ee63f46c94cda9ff655dcdb0354db4ab59c5bfbfc4c86cc6e6d28229deae31410458ea232efbc3697dd4b6b531d0dfd79909d
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\concrt140.dll
Filesize325KB
MD5efb4a3f8ffaa4f5b01838bfbc0860aef
SHA148112b71a07395c3cac6b457acf0a5c1a06062f2
SHA2568864e0b73408cc267a1a23b758ba36740a9a65e7ae0d75c86e3eda4f0730c799
SHA5123a1c17a1afd23ad3313e340e8adee81909a8750f2fd6fd1e7252ef96bd87fdbb9d6839a8939242af21cc040583385458b5fa1d59f3b1e1b0d4ef13cc6f751883
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\mfc140enu.dll
Filesize64KB
MD5ec2edf46c2f78ecd76f4488c0bd40ee2
SHA136fa90ef6ba38108f0063a1742837d1b5b2fca21
SHA256a6f8269af2d47fcf16f9e1f98d773db0a45d726675767fbffeb533d4def085c1
SHA5126a0623e1f23cc5c60b33c6ac1ccdcadca9d355885126a0fddeba1f2c019f9436421b8f6c34f5e3ce8fea922d993e6f8df22b56d27c61696d70e8a1112528321c
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\mfc140u.dll
Filesize5.5MB
MD5e4530e2c6cd94b26f7d1ae95436fcf12
SHA1785d243da35c1d9d22943e0f1f3c80a44dd24d38
SHA25672c2c667ae5c2f1c3cffec544265174f528b1e2617567430da04b1840c783389
SHA51283277c8199ab1318332f1cae75df85161e4d7e52e0f2d9a69a268182665e59e4ed3a951c057382c97fe3c490e99cb19eb14426f638b1da9e7d48f3f5e4d4655a
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\msvcp140.dll
Filesize604KB
MD55d2728bede4841dc65ab364987fdebe7
SHA1c2999c99db5ce3fbc7bdeca7abf5175bbc9e2b08
SHA2566b1184d2226366c1504fdd7c307066a6c72c606fc3007d8591119b9211f93984
SHA512157e64e62cc08ca7eb60fc9194758d97a2ff52ffb82d8b4924353df453186da2e13225964d24181e82f6698fc6e2c2e09c139c0cdaad5633becb3526b69174af
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\vcruntime140.dll
Filesize83KB
MD5d5d9432a97cf932a0cddd707d4ee2698
SHA159ff5524bd5924261ca5c3502e12b3d04b073bd8
SHA25658e437ff49e77bffdb2ceca6c375160e779b0f43d9ffca4c2b1dbb8d4937451a
SHA51229a5b5487506b2c452558b7a02c699b26f3907307f23d7364f4c6adc49190f0f817f5ac49e7e2221733257ac736d30468f1a1c3aaf0ff873e6fc22f94809126a
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\modified\@SYSTEM@\vcruntime140_1.dll
Filesize42KB
MD5e4a89845a9467079ec110a6fd042f9bd
SHA1283cf58655bd2c2d337505193cff4c183e80e451
SHA256a9f474b63a1ca360fe6a7b70073087db8c653b4d18bea5da8f0da77efe088f5a
SHA512dac7a2baee9f211c95c8ca818e885665a9d824cb3e5e69b4152836401145e50cc1a75a71bddd01c8101d6df2b1f381820d85a2d1dc3748bda836628901098df4
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe
Filesize31KB
MD5998ca8e37d51fb437dfe845ab3e80c8b
SHA1846fbc2367a4a446dc9978c9b92fd3c242e7bae6
SHA2563e4359ce1fefc1087992bca05e49e5ecd04296841b5bf6e6c242d087b4078baa
SHA51225cf76860b5cbc4edc51f87ee1727528a72ed7890cf006b82299caeccbc955ae0183d4e7b1e941bb4e9c54b2335e3ac0e97d5fde719c0eed2115e81f3e47f2ac
-
\Users\Admin\AppData\Local\Temp\coreldraw_graphics_suite_2020v22.0.0.412\Sandbox\CorelDRAW 2020\local\stubexe\0x5A6C9B8D9B3ECC55\CorelDRW.exe
Filesize31KB
MD5998ca8e37d51fb437dfe845ab3e80c8b
SHA1846fbc2367a4a446dc9978c9b92fd3c242e7bae6
SHA2563e4359ce1fefc1087992bca05e49e5ecd04296841b5bf6e6c242d087b4078baa
SHA51225cf76860b5cbc4edc51f87ee1727528a72ed7890cf006b82299caeccbc955ae0183d4e7b1e941bb4e9c54b2335e3ac0e97d5fde719c0eed2115e81f3e47f2ac